19AQMM26F1457 - Corelight FE.pdf

Document Number: 19AQMM26F1457 Contract Number: NNG15SC61B Page 1 of 29

ORDER FOR SUPPLIES OR SERVICES

PAGE OF PAGES

1 29

IMPORTANT: Mark all packages and papers with contract and/or order numbers.

1. DATE OF ORDER

09/21/2026

2. CONTRACT NO. (If any)

NNG15SC61B

6. SHIP TO:

a. NAME OF CONSIGNEE

TECHNOLOGY AND INNOVATION OFFICE (INR/TIO)

b. STREET ADDRESS

2201 C STREET, NW, ATTN: INR/TIO

c. CITY Washington

d. STATE

DC

e. ZIP CODE 20010

f. SHIP VIA

3. ORDER NO.

19AQMM26F1457

4. REQUISITION/REFERENCE NO.

1006260009

BUREAU OF GLOBAL ACQUISITIONS (GA)

1200 Wilson Blvd., SA-6B

ATTN: GA

ARLINGTON, VA 22209

5. ISSUING OFFICE (Address correspondence to)

CONTACT NAME:

Annie L. Harlow

PHONE: 703-875-6059

EMAIL: harlowal@state.gov

7. TO:

a. NAME OF CONTRACTOR jwhite@fedresources.com UEI:FZK7KZZJYNQ9

b. COMPANY NAME

FEDERAL RESOURCES CORPORATION

DBA: FRC

c. STREET ADDRESS

PO BOX 1028

d. CITY

ERIE

e. STATE

PA

f. ZIP CODE 16512

8. TYPE OF ORDER

a. PURCHASE

REFERENCE YOUR: ____________

Please furnish the following on the terms and conditions specified on both sides of this order and on the attached sheet, if any, including delivery as indicated.

X b. DELIVERY -- Except for billing instructions on the reverse, this delivery order is subject to instructions contained on this side only of this form and is issued subject to the terms and conditions of the above-numbered contract.

9. ACCOUNTING AND APPROPRIATION DATA

See Lines

$127,782.45

TECHNOLOGY AND INNOVATION OFFICE (INR/TIO), 2201 C

STREET, NW, ATTN: INR/TIO, Washington, DC 20010

10. REQUISITIONING OFFICE

X a. SMALL b. OTHER THAN SMALL c. DISADVANTAGED d. WOMEN-OWNED e. HUBZone

f. SERVICE-DISABLED

VETERAN-OWNED

g. WOMEN-OWNED SMALL BUSINESS (WOSB)

ELIGIBLE UNDER THE WOMEN-OWNED

SMALL BUSINESS PROGRAM h. EDWOSB

11. BUSINESS CLASSIFICATION (Check appropriate box(es)) 12. F.O.B. POINT

14. GOVERNMENT B/L NO. 15. DELIVER TO F.O.B. POINT ON

OR BEFORE (Date)

09/20/2026

0 Days: 0.00 % 0 Days: 0.00 % 0 Days: 0.00 % 0 Days: 0.00 %

16. DISCOUNT TERMS13. PLACE OF

a. INSPECTION b. ACCEPTANCE

17. SCHEDULE (See reverse for Rejections)

Item No.

(a)

SUPPLIES OR SERVICES

(b)

QUANTITY

ORDERED

(c)

UNIT

(d)

UNIT PRICE

(e)

AMOUNT

(f)

QUANTITY

ACCEPTED

(g)

See Lines

SEE BILLING

INSTRUCTIONS

ON

REVERSE

18. SHIPPING POINT 19. GROSS SHIPPING WEIGHT 20. INVOICE NO.

$127,782.45 17(h) TOT.

(Cont.

pages)

21. MAIL INVOICE TO:

a. NAME

IPP

b. STREET ADDRESS(or P.O. Box) Invoices to be uploaded to Invoice Processing Platform, at http://www.ipp.gov

c. CITY

CHARLESTON

d. STATE

SC

e. ZIP CODE 29415

$127,782.45

17(i)

GRAND

TOTAL

22. UNITED STATES OF AMERICA BY (Signature) 23. NAME (Typed) Crystal Johnson

TITLE: CONTRACTING/ORDERING OFFICER

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION NOT USABLE

OPTIONAL FORM 347 (REV. 02/2012)

Prescribed by GSA/FAR 48 CFR 53.213(f)

CGFS // CGFS

Document Number: 19AQMM26F1457 Contract Number: NNG15SC61B Page 2 of 29

Section A - Solicitation/Contract Form

Line Item Summary

Contract Number:

NNG15SC61B

Order Number:

19AQMM26F1457

Title: AWARD: INR TIO ITCF CDS Defensive Cyber Operations

Total Funding:

$127,782.45

Date of Order:

09/21/2026

In accordance with quote 125453009 dated 9/4/2026 and NASA SEWP contract NNG15SC61B - RFQ #390344

Number Supplies or Services Qty Unit Unit Price Total (Inc. disc., tax, and fees)

PSC: 7B22

PSC Description: IT AND TELECOM - COMPUTE:

SERVERS (HARDWARE AND PERPETUAL LICENSE

SOFTWARE)

Type of Contract Pricing: FFP

0.0 EA $0.00 $0.00

Delivery Schedule:

Delivery Number Quantity FOB Point 1 As Required 1.000000 Destination

Period of Performance: 09/21/2026 - 09/20/2027

Description: P/N: VAPPL-VW Corelight HyperV virtual appliance sensor

Quantity: 1

Reference Line: 1006260009 - 001

Number Supplies or Services Qty Unit Unit Price Total (Inc. disc., tax, and fees)

PSC: 7B22

PSC Description: IT AND TELECOM - COMPUTE:

SERVERS (HARDWARE AND PERPETUAL LICENSE

SOFTWARE)

Type of Contract Pricing: FFP

1.0 EA $6,905.00 $6,905.00

Delivery Schedule:

Delivery Number Quantity FOB Point 1 As Required 1.000000 Destination

Period of Performance: 09/21/2026 - 09/20/2027

Description: P/N: SBSS-VAPPL-HV-1G-1Y Corelight Standard Zeek subscription license for 1 Gbps of Corelight HyperV Virtual sensor capacity - 1 year

Reference Line: 1006260009 - 002

CLIN Funding:

1. 1006260009 (1900 - 2026 - 19___X01200000 - INR - 1006 - 100608 - 060110 - 2660 - 2598 - 2026): $6,905.00

Number Supplies or Services Qty Unit Unit Price Total (Inc. disc., tax, and fees)

PSC: 7B22

PSC Description: IT AND TELECOM - COMPUTE:

SERVERS (HARDWARE AND PERPETUAL LICENSE

SOFTWARE)

Type of Contract Pricing: FFP

1.0 EA $1,540.00 $1,540.00

Delivery Schedule:

Delivery Number Quantity FOB Point 1 As Required 1.000000 Destination

Period of Performance: 09/21/2026 - 09/20/2027

Description: P/N: SBSS-XAPPLSURI-1G-1Y Corelight Standard Subscription License for 1 Gbps of Corelight Cloud/Virtual/ Software Sensor Suricata Feature Capacity - 1 year

Reference Line: 1006260009 - 003

CLIN Funding:

1. 1006260009 (1900 - 2026 - 19___X01200000 - INR - 1006 - 100608 - 060110 - 2660 - 2598 - 2026): $1,540.00

Document Number: 19AQMM26F1457 Contract Number: NNG15SC61B Page 3 of 29

Number Supplies or Services Qty Unit Unit Price Total (Inc. disc., tax, and fees)

PSC: 7B22

PSC Description: IT AND TELECOM - COMPUTE:

SERVERS (HARDWARE AND PERPETUAL LICENSE

SOFTWARE)

Type of Contract Pricing: FFP

1.0 EA $46.95 $46.95

Delivery Schedule:

Delivery Number Quantity FOB Point 1 As Required 1.000000 Destination

Period of Performance: 09/21/2026 - 09/20/2027

Description: P/N: SBSS-FEED-ETP-1G-1Y Corelight Subscription license for 1Gbps of Proofpoint ET Pro Ruleset for Suricata. Requires Suricata Subscription - 1 year

Reference Line: 1006260009 - 004

CLIN Funding:

1. 1006260009 (1900 - 2026 - 19___X01200000 - INR - 1006 - 100608 - 060110 - 2660 - 2598 - 2026): $46.95

Number Supplies or Services Qty Unit Unit Price Total (Inc. disc., tax, and fees)

PSC: 7B22

PSC Description: IT AND TELECOM - COMPUTE:

SERVERS (HARDWARE AND PERPETUAL LICENSE

SOFTWARE)

Type of Contract Pricing: FFP

1.0 EA $5,156.00 $5,156.00

Delivery Schedule:

Delivery Number Quantity FOB Point 1 As Required 1.000000 Destination

Period of Performance: 09/21/2026 - 09/20/2027

Description: P/N: SBSS-XAPPLSPCAP-1G-1Y Corelight Standard Subscription License for 1 Gbps of Corelight (Virtual/Cloud/Software) Sensor PCAP Feature Capacity - 1 year

Reference Line: 1006260009 - 005

CLIN Funding:

1. 1006260009 (1900 - 2026 - 19___X01200000 - INR - 1006 - 100608 - 060110 - 2660 - 2598 - 2026): $5,156.00

Number Supplies or Services Qty Unit Unit Price Total (Inc. disc., tax, and fees)

PSC: 7B22

PSC Description: IT AND TELECOM - COMPUTE:

SERVERS (HARDWARE AND PERPETUAL LICENSE

SOFTWARE)

Type of Contract Pricing: FFP

1.0 EA $2,122.50 $2,122.50

Delivery Schedule:

Delivery Number Quantity FOB Point 1 As Required 1.000000 Destination

Period of Performance: 09/21/2026 - 09/20/2027

Description: P/N: ES-US-APPLSPCAP-1G-1Y Corelight US Based Enterprise support: 24 x 7 availability 1hour response SLA for P1 issues; Requires purchase of SBSS-

APPLSPCAP-1G-1Y;

This item can only be sold as part of a configuration and is not available for individual purchase; annual billing

Reference Line: 1006260009 - 006

CLIN Funding:

1. 1006260009 (1900 - 2026 - 19___X01200000 - INR - 1006 - 100608 - 060110 - 2660 - 2598 - 2026): $2,122.50

Number Supplies or Services Qty Unit Unit Price Total (Inc. disc., tax, and fees)

PSC: 7B22

PSC Description: IT AND TELECOM - COMPUTE:

SERVERS (HARDWARE AND PERPETUAL LICENSE

SOFTWARE)

Type of Contract Pricing: FFP

1.0 EA $2,907.00 $2,907.00

Document Number: 19AQMM26F1457 Contract Number: NNG15SC61B Page 4 of 29 tax, and fees)

Delivery Schedule:

Delivery Number Quantity FOB Point 1 As Required 1.000000 Destination

Period of Performance: 09/21/2026 - 09/20/2027

Description: P/N: ES-US-XAPPL-1G-1Y Corelight US Based Enterprise support: 24 x 7 availability 1 hour response SLA for P1 issues. For 1 Gbps of Corelight Sensor (Virtual/Cloud/ Software Sensor) Capacity - 1 Year

Reference Line: 1006260009 - 007

CLIN Funding:

1. 1006260009 (1900 - 2026 - 19___X01200000 - INR - 1006 - 100608 - 060110 - 2660 - 2598 - 2026): $2,907.00

Number Supplies or Services Qty Unit Unit Price Total (Inc. disc., tax, and fees)

PSC: 7B22

PSC Description: IT AND TELECOM - COMPUTE:

SERVERS (HARDWARE AND PERPETUAL LICENSE

SOFTWARE)

Type of Contract Pricing: FFP

1.0 EA $629.00 $629.00

Delivery Schedule:

Delivery Number Quantity FOB Point 1 As Required 1.000000 Destination

Period of Performance: 09/21/2026 - 09/20/2027

Description: P/N: ES-US-APPLSURI-1G-1Y Corelight US Based Enterprise support: 24 x 7 availability 1 hour response SLA for P1 issues; Requires purchase of SBSS-

APPLSURI-1G-1Y;

This item can only be sold as part of a configuration and is not available for individual purchase; Annual Billing.

Reference Line: 1006260009 - 008

CLIN Funding:

1. 1006260009 (1900 - 2026 - 19___X01200000 - INR - 1006 - 100608 - 060110 - 2660 - 2598 - 2026): $629.00

Number Supplies or Services Qty Unit Unit Price Total (Inc. disc., tax, and fees)

PSC: 7B22

PSC Description: IT AND TELECOM - COMPUTE:

SERVERS (HARDWARE AND PERPETUAL LICENSE

SOFTWARE)

Type of Contract Pricing: FFP

1.0 EA $512.00 $512.00

Delivery Schedule:

Delivery Number Quantity FOB Point 1 As Required 1.000000 Destination

Period of Performance: 09/21/2026 - 09/20/2027

Description: P/N: FLMGMT-1G-1Y Corelight Fleet Management subscription for 1Gbps increments - 1 Year. Universal across sensor platforms

Reference Line: 1006260009 - 009

CLIN Funding:

1. 1006260009 (1900 - 2026 - 19___X01200000 - INR - 1006 - 100608 - 060110 - 2660 - 2598 - 2026): $512.00

Number Supplies or Services Qty Unit Unit Price Total (Inc. disc., tax, and fees)

PSC: 7B22

PSC Description: IT AND TELECOM - COMPUTE:

SERVERS (HARDWARE AND PERPETUAL LICENSE

SOFTWARE)

Type of Contract Pricing: FFP

400.0 HR $269.91 $107,964.00

Delivery Schedule:

Delivery Number Quantity FOB Point 1 As Required 400.000000 Destination

Document Number: 19AQMM26F1457 Contract Number: NNG15SC61B Page 5 of 29 tax, and fees)

Period of Performance: 09/21/2026 - 09/20/2027

Description: P/N: PS-1H-CLEARED One (1) Services Hour (Cleared)

Reference Line: 1006260009 - 009

CLIN Funding:

1. 1006260009 (1900 - 2026 - 19___X01200000 - INR - 1006 - 100608 - 060110 - 2660 - 2598 - 2026): $107,964.00

CLIN Funding: Cost:

Base Totals: $127,782.45 $127,782.45

Exercised Options Totals: $0.00 $0.00

Unexercised Options Totals: $0.00 $0.00

Base and Options Totals: $127,782.45 $127,782.45

52.246-4 - Inspection of Services-Fixed-Price (Aug 1996)

(a) Definition. "Services," as used in this clause, includes services performed, workmanship, and material furnished or utilized in the performance of services.

(b) The Contractor shall provide and maintain an inspection system acceptable to the Government covering the services under this contract. Complete records of all inspection work performed by the Contractor shall be maintained and made available to the Government during contract performance and for as long afterwards as the contract requires.

(c) The Government has the right to inspect and test all services called for by the contract, to the extent practicable at all times and places during the term of the contract. The Government shall perform inspections and tests in a manner that will not unduly delay the work.

(d) If the Government performs inspections or tests on the premises of the Contractor or a subcontractor, the Contractor shall furnish, and shall require subcontractors to furnish, at no increase in contract price, all reasonable facilities and assistance for the safe and convenient performance of these duties.

(e) If any of the services do not conform with contract requirements, the Government may require the Contractor to perform the services again in conformity with contract requirements, at no increase in contract amount. When the defects in services cannot be corrected by reperformance, the Government may--

(1) Require the Contractor to take necessary action to ensure that future performance conforms to contract requirements; and

(2) Reduce the contract price to reflect the reduced value of the services performed.

(f) If the Contractor fails to promptly perform the services again or to take the necessary action to ensure future performance in conformity with contract requirements, the Government may--

(1) By contract or otherwise, perform the services and charge to the Contractor any cost incurred by the Government that is directly related to the performance of such service; or

(2) Terminate the contract for default.

(End of clause)

652.237-800 - Contractor Registration in Safety and Accountability for Everyone (SAFE)

CONTRACTOR REGISTRATION IN SAFETY AND

ACCOUNTABILITY FOR EVERYONE (SAFE) (MAR 2023)

All contractor employees, including subcontractor employees, that are required to possess a PIV badge and support the activities of a Department of State bureau or office on a regular basis (i.e., daily or weekly), whether onsite or remotely, shall participate in the “Safety and Accountability for Everyone” (SAFE) system. Such contractor employees shall provide their work and personal contact information in the SAFE system within 30 calendar days after the contract start date or the effective date of incorporation of this requirement into the

Document Number: 19AQMM26F1457 Contract Number: NNG15SC61B Page 6 of 29 contract, whichever is applicable, and maintain its accuracy at all times. The contractor shall include SAFE enrollment/removal as an essential task in its onboarding and out-processing procedures as employees arrive/ depart and promptly submit a SAFE service request via the IT Service Center or email AskSAFE@state.gov to request SAFE profile creation/removal. Contractors shall confirm their personnel acknowledge/respond to all notifications. The contractor shall provide a semi-annual statement that affected contractor and/or subcontractor employees have registered or been removed from SAFE and are responsive to notifications. The statement may be made via email to the Contracting Officer’s Representative (COR), or to the contracting officer if a COR is not assigned. The statement is due within 30 days of the effective date of this award, and every 6 months thereafter.

(End of clause)

652.237-802 - Contractor identification

CONTRACTOR IDENTIFICATION (JUL 2008)

Contract performance may require contractor personnel to attend meetings with government personnel and the public, work within government offices, and/or utilize government email.

Contractor personnel must take the following actions to identify themselves as non-federal employees:

1) Use an email signature block that shows name, the office being supported and company affiliation (e.g., “John Smith, Office of Human Resources, ACME Corporation Support Contractor”);

2) Clearly identify themselves and their contractor affiliation in meetings;

3) Identify their contractor affiliation in Departmental e-mail and phone listings whenever contractor personnel are included in those listings; and

4) Contractor personnel may not utilize Department of State logos or indicia on business cards.

(End of clause)

652.239-800 - Cybersecurity Supply Chain Risk Management Requirements (AUG 2026)

(a) Definitions. As used in this clause:

Covered article - The term "covered article" includes-

(1) "Information and Communications Technology" which is an industry term for information technology that is involved in integrating telecommunications (e.g., telephone lines and wireless signals) and computers to enable users to access, store, manipulate, transmit, and receive digital information. This includes software, software as a service, digital and data services, and hardware components that support information creation, storage, transfer, and management, like computers and smartphones.

(2) “Operational Technology” (OT) is defined as programmable systems or devices that interact with the physical environment (or manage devices that interact with the physical environment). These systems/devices detect or cause a direct change through the monitoring and/or control of devices, processes, and events.

Examples of OT include industrial control systems, building management systems, fire control systems, physical access control mechanisms, and internet of things devices.

Document Number: 19AQMM26F1457 Contract Number: NNG15SC61B Page 7 of 29

(3) “Critical software” refers to any software, firmware, or cloud-based application—including its direct dependencies—that performs functions vital to the organization’s security posture and operational integrity. This includes any tool that manages elevated privileges, possesses direct access to networking and computing resources, or controls access to data and operational technology. Furthermore, any software that performs essential trust functions or operates across security boundaries is classified as critical, as its compromise would grant an attacker significant control or visibility into the broader environment.

(4) "Telecommunications Equipment", which means equipment, other than customer premises equipment, used by a carrier to provide telecommunications services, and includes software integral to such equipment (including upgrades).

(5) "Telecommunications Service", which means the offering of telecommunications for a fee directly to the public, or to such classes of users as to be effectively available directly to the public, regardless of the facilities used.

(6) Cybersecurity Supply Chain Risk: The term cybersecurity supply chain risk means the risk that a person may sabotage, maliciously introduce unwanted function, extract data, or otherwise manipulate the design, integrity, manufacturing, production, distribution, installation, operation, maintenance, disposition, or retirement of covered articles to surveil, deny, disrupt, or otherwise manipulate the function, use, or operation of the covered articles or information stored or transmitted on the covered articles.

(7) Incident: The term incident means per the Federal Information Security Modernization Act of 2014, “an occurrence that (A) actually or imminently jeopardizes, without lawful authority, the integrity, confidentiality, or availability of information or an information system; or (B) constitutes a violation or imminent threat of violation of law, security policies, security procedures, or acceptable use policies.”

(8) Vulnerability: The term vulnerability which means any weakness in an information system, system security procedures, internal controls, or implementation that could be exploited or triggered by a threat source.

(b) Contractor Cybersecurity Supply Chain Risk Management Responsibilities.

The Contractor must regularly identify, assess, monitor, and mitigate cybersecurity supply chain risks when providing covered articles or services to the Government. The Contractor shall maintain artifacts (i.e., any byproduct of hardware or software development that helps describe the architecture, design, and function of that hardware or software) that document its compliance with this paragraph and shall provide these artifacts to the Government within 48 hours of request, which may be redacted to remove sensitive proprietary information.

Document Number: 19AQMM26F1457 Contract Number: NNG15SC61B Page 8 of 29

(c) Supporting Government Cybersecurity Supply Chain Risk Assessments. No more than an estimated once per year, the Contractor must provide any requested information related to its supply chain within 10 business days except information that is protected by a non-disclosure agreement with its customers (e.g., another federal agency).

(d) Novation Agreement Notice. FAR 42.1203 requires Government approval of novation agreements. For proposed novation agreements for this contract, the Contractor shall provide any information requested by the Government regarding the proposed successor’s identity and information regarding its supply chain.

(e) Notification procedures for cybersecurity supply chain incidents. When an incident occurs, the Contractor must contact the CO or their designee within 72 hours of the incident.

(f) Subcontracts. The Contractor shall insert the substance of this clause in all subcontracts and other contractual instruments in support of this contract.

(g) Attestation following Major Version Change. For critical software, as defined by NIST Guidance, provided under the contract that required an approved Secure Software Development Attestation Form, the responses on this form apply to the software’s major version changes (e.g., using a semantic versioning schema of Major.Minor.Patch, the software version number goes from 2.5 to 3.0) unless the Contractor otherwise notifies the Contacting Officer that the form is no longer valid. This notification to the Contracting Officer must be submitted within 15 days of the major version change and must include a new completed and signed Secure Software Development Attestation Form.

(End of clause)

INV-IPP - ELECTRONIC INVOICING AND PAYMENT REQUIREMENTS AND INSTRUCTIONS TO IMPLEMENT

USAGE OF THE INVOICE PROCESSING PLATFORM (IPP).

(a) Definitions. As used in these instructions

(1)”Payment request” means a bill, voucher, invoice, or request for contract financing payment with associated supporting documentation. The payment request must comply with the requirements identified in FAR 32.905(b), “Payment documentation and process” and the applicable Payment clause included in this contract.

(b) Except as provided in paragraph (c) of these instructions, the Contractor shall submit payment requests electronically using the Invoice Processing Platform (IPP) at www.ipp.gov. Information regarding IPP is available on the Internet at www.ipp.gov. Assistance with the IPP application can be obtained by contacting the IPP Production Helpdesk via email IPPCustomerSupport@fiscal.treasury.gov or phone (866)973-3131. The Contractor shall ensure that its supporting documentation conforms to IPP requirements. IPP accommodates up to 25 supporting attachments per invoice, individual attachment file size may not exceed ten megabytes (10mb). If the Contractor assesses that their supporting documentation will not reasonably conform to IPP requirements, the Contractor shall contact the Contracting Officer to explore possible alternatives. In addition, the IPP only allows certain characters to be used as the invoice number. The invoice number shall conform to the IPP convention and the

Document Number: 19AQMM26F1457 Contract Number: NNG15SC61B Page 9 of 29 attachments (if used) shall match exactly the invoice number allowed. The allowed characters in the IPP are “abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789-_”

(c) If the Contractor wishes to be paid via a foreign bank account, the contractor must properly fill out form GFS-FO-CLM-089 and attach it to each invoice in the IPP where payment to a foreign bank account is requested. The form can obtained by e-mailing CGFSIPPITSForm@state.gov.

(d) The Contractor may submit payment requests using other than IPP only when the Contracting Officer authorizes alternate procedures in writing.

(e) If alternate payment procedures are authorized, the Contractor shall include a copy of the Contracting Officer’s written authorization with each payment request.

[End of instructions]

H-031 - SECURITY REQUIREMENTS

H-031 - SECURITY REQUIREMENTS

(a) A facility security clearance at the Top Secret (indicate one) is required for contract performance in accordance with the DD Form 254, Department of Defense Contract Security Classification Specification, attached to this contract.

(b) Since it will be necessary for some Contractor Personnel to have access to classified material and/or enter into areas requiring security clearances, each Contractor employee requiring such access must have a Top Secret (indicate one) personnel security clearance issued by the Defense Counterintelligence and Security Agency (DCSA) prior to contract performance.

(c) The Contractor shall obtain a Department of State building pass for all employees performing under this contract who require frequent and continuing access to Department of State facilities in accordance with Bureau of Diplomatic Security Instructions.

(d) Performance of this contract shall be in accordance with the attached DD Form 254, Department of Defense Contract Security Classification Specification and FAR 52.240-92 "SECURITY REQUIREMENTS."

(e) Classified material received or generated in the performance of this contract shall be safeguarded and disposed of in accordance with the National Industrial Security Program Operating Manual (NISPOM) (32 CFR Part 117)

H-042 - Safety and Accountability for Everyone (SAFE) (MAR 2023)

All contractor employees, including subcontractor employees, that are required to possess a PIV badge and support the activities of a Department of State bureau or office on a regular basis (i.e., daily or weekly), whether onsite or remotely, shall participate in the “Safety and Accountability for Everyone” (SAFE) system. Such contractor employees shall provide their work and personal contact information in the SAFE system within

30 calendar days after the contract start date or the effective date of incorporation of this requirement into the contract, whichever is applicable, and maintain its accuracy at all times. The contractor shall include SAFE enrollment/removal as an essential task in its onboarding and out-processing procedures as employees arrive/

Document Number: 19AQMM26F1457 Contract Number: NNG15SC61B Page 10 of 29 depart and promptly submit a SAFE service request via the IT Service Center or email AskSAFE@state.gov to request SAFE profile creation/removal. Contractors shall confirm their personnel acknowledge/respond to all notifications. The contractor shall provide a semi-annual statement that affected contractor and/or subcontractor employees have registered or been removed from SAFE and are responsive to notifications. The statement may be made via email to the Contracting Officer’s Representative (COR), or to the contracting officer if a COR is not assigned. The statement is due within 30 days of the effective date of this award, and every 6 months thereafter.

(End of clause)

H-050 - COMPLIANCE WITH FEDERAL ANTI-DISCRIMINATION LAWS - CERTIFICATION (EO 14173, January 2025)

(a) Definition. As used in this provision - Program promoting diversity, equity, and inclusion means a program whose purpose is to promote preferences based on race, color, religion, sex, or national origins, such as in training or hiring.

(b) Certification. By submission of its offer, the Offeror certifies that it does not operate any programs promoting diversity, equity, and inclusion that violate any applicable Federal anti-discrimination laws.

(End of provision)

H-051 - COMPLIANCE WITH FEDERAL ANTI-DISCRIMINATION LAWS (EO 14173, January 2025)

(a) The contractor shall comply with all applicable Federal anti-discrimination laws.

(b) Compliance with applicable Federal anti-discrimination laws is material to eligibility for and payment under this contract for purposes of 31 U.S.C 3729(b)(4).

(End of clause)

52.203-17 - Contractor Employee Whistleblower Rights (Nov 2023)

(a) This contract and employees working on this contract will be subject to the whistleblower rights and remedies established at 41 U.S.C. 4712 and Federal Acquisition Regulation (FAR) 3.900 through 3.905.

(b) The Contractor shall inform its employees in writing, in the predominant language of the workforce, of employee whistleblower rights and protections under 41 U.S.C. 4712, as described in FAR 3.900 through 3.905.

(c) The Contractor shall insert the substance of this clause, including this paragraph (c), in all subcontracts.

(End of clause)

52.204-13 - System for Award Management-Maintenance (DEVIATION JAN 2026)

(a) Definitions. As used in this clause— Commercial and Government Entity code means—

Document Number: 19AQMM26F1457 Contract Number: NNG15SC61B Page 11 of 29

(1) An identifier assigned to entities located in the United States or its outlying areas by the Defense Logistics Agency (DLA) Commercial and Government Entity (CAGE) Branch to identify a commercial or government entity by unique location (referred to as “CAGE code”); or

(2) An identifier assigned by a member of the North Atlantic Treaty Organization (NATO) or by the NATO Support and Procurement Agency to entities located outside the United States and its outlying areas that the DLA CAGE Branch records and maintains in the CAGE master file (referred to as “NCAGE code”).

Unique Entity Identifier (UEI) means an identifier used to identify a specific commercial, nonprofit, or Government entity.

(b) Active registration.

(1) The Contractor shall maintain an active Federal Government contracts registration in the System for Award Management (SAM) at https://www.sam.gov during contract performance and through final payment under this contract. To maintain an active registration in SAM, the Contractor shall review at least annually its registration in SAM and validate that the information is current, accurate, and complete.

(2) The Contractor is responsible for the currency, accuracy, and completeness of the information provided within SAM, and for any liability resulting from the Government’s reliance on inaccurate or incomplete information.

Updating SAM does not alter the terms and conditions of this contract and is not a substitute for a properly executed contractual document.

(c) Novation and change-of-name agreements.

(1) If the Contractor has legally changed its business name or “doing business as” name (whichever is shown on the contract), or has transferred the assets used to perform the contract, but has not completed the necessary requirements regarding novation and change-of-name agreements in part 42 of the Federal Acquisition Regulation (FAR), the Contractor shall provide the responsible Contracting Officer a minimum of one business day’s written notification of its intention to —

(i) Change the legal business name in SAM;

(ii) Comply with the requirements of FAR part 42; and

(iii) Agree in writing to the timeline and procedures specified by the responsible Contracting Officer.

The Contractor shall provide with its written notification sufficient documentation to support the legally changed name.

(2) If the Contractor fails to comply with the requirements of paragraph (c)(1) of this clause, or fails to perform the agreement at paragraph (c)(1)(iii) of this clause, and, in the absence of a properly executed novation or change-of-name agreement, the SAM information that shows the Contractor to be other than the Contractor indicated in the contract will be considered to be incorrect information within the meaning of the “Suspension of Payment” paragraph of the electronic funds transfer (EFT) clause of this contract.

(d) Assignees.

(1) The Contractor shall not change the legal business name or address for EFT payments or manual payments, as appropriate, in the SAM record to reflect an assignee for the purpose of assignment of claims (see FAR part 32).

Assignees shall be separately registered in SAM.

(2) Information provided to the Contractor’s SAM record that indicates payments, including those made by EFT, to an ultimate recipient other than that Contractor will be incorrect information within the meaning of the “Suspension of Payment” paragraph of the EFT clause of this contract.

(e) Unique entity identifier (UEI). The Contractor shall ensure that its UEI is maintained throughout the life of the contract.

(f) Commercial and Government Entity (CAGE) code. The Contractor shall ensure that the CAGE code is maintained throughout the life of the contract. To update a CAGE code, the Contractor shall initiate the change by updating its SAM registration.

(g) Communicating changes. The Contractor shall communicate any change to its UEI or CAGE code to the Contracting Officer within 30 days after the change, so a modification can be issued to update the UEI or CAGE code on this contract. A change in the UEI does not necessarily require a novation.

52.204-91 - Contractor Identification (DEVIATION JAN 2026)

(a) Definitions. As used in this clause— Commercial and Government Entity code means—

(1) An identifier assigned to entities located in the United States or its outlying areas by the Defense Logistics Agency (DLA) Commercial and Government Entity (CAGE) Branch to identify a commercial or government entity by unique location (referred to as “CAGE code”); or

Document Number: 19AQMM26F1457 Contract Number: NNG15SC61B Page 12 of 29

(2) An identifier assigned by a member of the North Atlantic Treaty Organization (NATO) or by the NATO Support and Procurement Agency (NSPA) to entities located outside the United States and its outlying areas that the DLA CAGE Branch records and maintains in the CAGE master file (referred to as “NCAGE code”).

Unique entity identifier means an identifier used to identify a specific commercial, nonprofit, or Government entity.

(b) Unique entity identifier (UEI). The Contractor shall ensure that its UEI is maintained throughout the life of the contract.

(c) Commercial and Government Entity (CAGE) code. The Contractor shall ensure that the CAGE code is maintained throughout the life of the contract. The Contractor shall request changes to a CAGE code as indicated in the following table.

If the Contractor is… Then… Registered in the System for Award Management (SAM) Initiate the change by updating its SAM registration Located in the United States or its outlying areas and is not registered in SAM

Submit a change request to the DLA CAGE Branch via https:// cage.dla.mil

Located outside the United States and its outlying areas and is not registered in SAM

Request a change by contacting the appropriate National Codification Bureau (https://www.nato.int/structur/ac/135/ about/ contacts) or NSPA (https://eportal.nspa.nato.int/ AC135Public/ scage/CageList.aspx)

(d) Communicating changes. The Contractor shall communicate any change to its UEI or CAGE code to the Contracting Officer within 30 days after the change, so a modification can be issued to update the UEI or CAGE code on this contract. A change in the UEI does not necessarily require a novation.

52.212-4 - Terms and Conditions-Commercial Products and Commercial Services (DEVIATION JAN 2026)

(a) Definitions. The clause at Federal Acquisition Regulation (FAR) 52.202-1, Definitions, is incorporated by reference.

(b) Inspection/Acceptance. The Contractor shall only tender for acceptance those items that conform to the requirements of this contract. The Government reserves the right to inspect or test any supplies or services that have been tendered for acceptance. The Government may require repair or replacement of nonconforming supplies or reperformance of nonconforming services at no increase in contract price. If repair/replacement or reperformance will not correct the defects or is not possible, the Government may seek an equitable price reduction or adequate consideration for acceptance of nonconforming supplies or services. The Government must exercise its post acceptance rights—

(1) Within a reasonable time after the defect was discovered or should have been discovered; and

(2) Before any substantial change occurs in the condition of the item, unless the change is due to the defect in the item.

(c) Assignment. The Contractor or its assignee may assign its rights to receive payment due as a result of performance of this contract to a bank, trust company, or other financing institution, including any Federal lending agency in accordance with the Assignment of Claims Act (31 U.S.C. 3727). However, when a third party makes payment (e.g., use of the Governmentwide commercial purchase card), the Contractor may not assign its rights to receive payment under this contract.

(d) Changes. Changes in the terms and conditions of this contract may be made only by written agreement of the parties.

(e) Disputes. This contract is subject to 41 U.S.C. chapter 71, Contract Disputes. Failure of the parties to this contract to reach agreement on any request for equitable adjustment, claim, appeal, or action arising under or relating to this contract shall be a dispute to be resolved in accordance with the clause FAR 52.233-1, Disputes, which is incorporated in this contract by reference. The Contractor shall proceed diligently with performance of this contract, pending final resolution of any dispute arising under the contract.

(f) Excusable delays. The Contractor shall be liable for default unless nonperformance is caused by an occurrence beyond the reasonable control of the Contractor and without its fault or negligence. Examples of occurrences include acts of God or the public enemy, acts of the Government in either its sovereign or contractual capacity, fires, floods, epidemics, quarantine restrictions, strikes, unusually severe weather, and delays of common carriers. When an excusable delay occurs, the Contractor shall—

(1) Notify the Contracting Officer in writing as soon as possible;

(2) Remedy the delay as quickly as possible; and

(3) Notify the Contracting Officer when the occurrence is over.

(g) Invoice. The Government will handle invoices according to the Prompt Payment Act (31 U.S.C. 3903) and 5 CFR part 1315. The Contractor shall submit invoices to the address designated in the contract to receive invoices. An invoice must include the information required by 5 CFR part 1315.9(b).

Document Number: 19AQMM26F1457 Contract Number: NNG15SC61B Page 13 of 29

(h) Patent indemnity. The Contractor shall indemnify the Government and its officers, employees, and agents against liability, including costs, for actual or alleged direct or contributory infringement of, or inducement to infringe, any United States or foreign patent, trademark, or copyright, arising out of the performance of this contract, provided the Contractor is reasonably notified of such claims and proceedings.

(i) Payment—

(1) Items accepted. Payment shall be made for items accepted by the Government that have been delivered to the delivery destinations set forth in this contract.

(2) Prompt payment. The Government will make payment in accordance with the Prompt Payment Act (31 U.S.C. 3903) and prompt payment regulations at 5 CFR part 1315.

(3) Discount. In connection with any discount offered for early payment, time shall be computed from the date of the invoice. For the purpose of computing the discount earned, payment shall be considered to have been made on the date that appears on the payment check or the specified payment date if an electronic funds transfer payment is made.

(4) Overpayments. If the Contractor becomes aware of a duplicate contract financing or invoice payment or that the Government has otherwise overpaid on a contract financing or invoice payment, the Contractor shall—

(i) Remit the overpayment amount to the payment office cited in the contract along with a description of the overpayment including the—

(A) Circumstances of the overpayment (e.g., duplicate payment, erroneous payment, liquidation errors, date(s) of overpayment);

(B) Affected contract number and delivery order number, if applicable;

(C) Affected line item or subline item, if applicable;

(D) Contractor point of contact; and

(ii) Provide a copy of the remittance and supporting documentation to the Contracting Officer.

(5) Interest. (i) All amounts that become payable by the Contractor to the Government under this contract shall bear simple interest from the date due until paid unless paid within 30 days of becoming due. The interest rate shall be the interest rate established by the Secretary of the Treasury as provided in 41 U.S.C. 7109, which is applicable to the period in which the amount becomes due, as provided in (i)(6)(v) of this clause, and then at the rate applicable for each six-month period as fixed by the Secretary until the amount is paid.

(ii) The Government may issue a demand for payment to the Contractor upon finding a debt is due under the contract.

(iii) Final decisions. The Contracting Officer will issue a final decision as required by FAR part 33 if–

(A) The Contracting Officer and the Contractor are unable to reach agreement on the existence or amount of a debt within 30 days;

(B) The Contractor fails to liquidate a debt previously demanded by the Contracting Officer within the timeline specified in the demand for payment unless the amounts were not repaid because the Contractor has requested an installment payment agreement; or

(C) The Contractor requests a deferment of collection on a debt previously demanded by the Contracting Officer (see FAR part 32).

(iv) If a demand for payment was previously issued for the debt, the demand for payment included in the final decision shall identify the same due date as the original demand for payment.

(v) Amounts shall be due at the earliest of the following dates:

(A) The date fixed under this contract.

(B) The date of the first written demand for payment, including any demand for payment resulting from a termination for cause.

(vi) The interest charge shall be computed for the actual number of calendar days involved beginning on the due date and ending on-

(A) The date on which the designated office receives payment from the Contractor;

(B) The date of issuance of a Government check to the Contractor from which an amount otherwise payable has been withheld as a credit against the contract debt; or

(C) The date on which an amount withheld and applied to the contract debt would otherwise have become payable to the Contractor.

(vii) The interest charge made under this clause may be reduced under the procedures for interest credits prescribed in FAR part 32 in effect on the date of this contract.

(j) Risk of loss. Unless the contract specifically provides otherwise, risk of loss or damage to the supplies provided under this contract shall remain with the Contractor until, and shall pass to the Government upon—

(1) Delivery of the supplies to a carrier, if transportation is f.o.b. origin; or

(2) Delivery of the supplies to the Government at the destination specified in the contract, if transportation is f.o.b.

destination.

(k) Taxes. The contract price includes all applicable Federal, State, and local taxes and duties.

(i) Termination for the Government’s convenience. The Government reserves the right to terminate this contract, or any part hereof, for its sole convenience. In the event of such termination, the Contractor shall immediately stop all work and shall immediately cause any and all of its suppliers and subcontractors to cease work. Subject to the terms of this contract, Document Number: 19AQMM26F1457 Contract Number: NNG15SC61B Page 14 of 29 the Contractor shall be paid a percentage of the contract price reflecting the percentage of the work performed prior to the notice of termination, plus reasonable charges the Contractor can demonstrate to the satisfaction of the Government using its standard record keeping system, have resulted from the termination. The Contractor shall not be required to comply with the cost accounting standards or contract cost principles for this purpose. This paragraph does not give the Government any right to audit the Contractor’s records. The Contractor shall not be paid for any work performed or costs incurred which reasonably could have been avoided.

(m) Termination for cause. The Government may terminate this contract, or any part hereof, for cause in the event of any default by the Contractor, or if the Contractor fails to comply with any contract terms and conditions, or fails to provide the Government, upon request, with adequate assurances of future performance. The Government will send a cure notice to the Contractor, unless the reason for the termination is late delivery. In the event of termination for cause, the Government shall not be liable to the Contractor for any amount for supplies or services not accepted, and the Contractor shall be liable to the Government for any and all rights and remedies provided by law. If it is determined that the Government improperly terminated this contract for default, such termination shall be deemed a termination for convenience.

(n) Title. Unless specified elsewhere in this contract, title to items furnished under this contract shall pass to the Government upon acceptance, regardless of when or where the Government takes physical possession.

(o) Warranty. The Contractor warrants and implies that the items delivered under this contract are merchantable and fit for use for the particular purpose described in this contract.

(p) Limitation of liability. Except as otherwise provided by an express warranty, the Contractor will not be liable to the Government for consequential damages resulting from any defect or deficiencies in accepted items.

(q) Compliance with laws unique to Government contracts. The Contractor agrees to comply with 31 U.S.C. 1352 relating to limitations on the use of appropriated funds to influence certain Federal contracts; 40 U.S.C. chapter 37, Contract Work Hours and Safety Standards; 41 U.S.C. chapter 87, Kickbacks; 49 U.S.C. 40118, Government-financed air transportation;

and 41 U.S.C. chapter 21 relating to procurement integrity.

(r) Order of precedence. Any inconsistencies in this solicitation or contract shall be resolved by giving precedence in the following order:

(1) The schedule of supplies/services;

(2) The Disputes, Payments, Invoice, Compliance with Laws Unique to Government Contracts, and Unauthorized Obligations paragraphs of this clause;

(3) Other contract clauses incorporated in the solicitation or contract;

(4) Addenda to this solicitation or contract;

(5) Solicitation provisions incorporated in the solicitation;

(6) Other paragraphs of this clause;

(7) Other documents, exhibits, and attachments; and

(8) The specification.

(s) Unauthorized obligations.

(1) Except as stated in paragraph (s)(2) of this clause, when any supply or service acquired under this contract is subject to any End User License Agreement (EULA), Terms of Service (TOS), or similar legal instrument or agreement, that includes any clause requiring the Government to indemnify the Contractor or any person or entity for damages, costs, fees, or any other loss or liability that would create an Anti-Deficiency Act violation (31 U.S.C. 1341), the following shall govern:

(i) Any such clause is unenforceable against the Government.

(ii) Neither the Government nor any Government-authorized end user shall be deemed to have agreed to such clause by virtue of it appearing in the EULA, TOS, or similar legal instrument or agreement. If the EULA, TOS, or similar legal instrument or agreement is invoked through an “I agree” click box or other comparable mechanism (e.g., “click-wrap” or “browse-wrap” agreements), execution does not bind the Government or any Government authorized end user to such clause.

(iii) Any such clause is deemed to be stricken from the EULA, TOS, or similar legal instrument or agreement.

(2) Paragraph (s)(1) of this clause does not apply to indemnification by the Government that is expressly authorized by statute and specifically authorized under applicable agency regulations and procedures.

(t) Comptroller General examination of record. This paragraph applies if this contract was awarded using other than sealed bid procedures and is in excess of the simplified acquisition threshold on the date of award of this contract.

(1) The Comptroller General of the United States, or an authorized representative of the Comptroller General, shall have access to and right to examine any of the Contractor’s directly pertinent records involving transactions related to this contract.

(2) The Contractor shall make available at its offices, at all reasonable times, the records, materials, and other evidence for examination, audit, or reproduction, until 3 years after final payment under this contract or for any shorter period specified in FAR part 4, longer period required by statute, or periods specified in other clauses of this contract. If this contract is completely or partially terminated, the records relating to the work terminated shall

Document Number: 19AQMM26F1457 Contract Number: NNG15SC61B Page 15 of 29 be made available for 3 years after any resulting final termination settlement. Records relating to appeals under the disputes clause or to litigation or the settlement of claims arising under or relating to this contract shall be made available until such appeals, litigation, or claims are finally resolved.

(3) As used in this clause, records include books, documents, accounting procedures and practices, and other data, regardless of type and regardless of form. This clause does not require the Contractor to create or maintain any record that the Contractor does not maintain in the ordinary course of business or pursuant to a provision of law.

(u) Incorporation by reference. The Contractor’s representations and certifications, including those completed electronically via the System for Award Management (SAM), are incorporated by reference into the contract.

52.222-50 - Combating Trafficking in Persons (DEVIATION FEB 2026)

(a) Definitions. As used in this clause- Agent means any individual, including a director, an officer, an employee, or an independent contractor, authorized to act on behalf of the organization.

Coercion means-

(1) Threats of serious harm to or physical restraint against any person;

(2) Any scheme, plan, or pattern intended to cause a person to believe that failure to perform an act would result in serious harm to or physical restraint against any person; or

(3) The abuse or threatened abuse of the legal process.

Commercial sex act means any sex act on account of which anything of value is given to or received by any person.

Commercially available off-the-shelf (COTS) item —

(1) Means any item of supply (including construction material) that is—

(i) A commercial product (as defined in paragraph (1) of the definition of “commercial product” at Federal Acquisition Regulation (FAR) 2.101;

(ii) Sold in substantial quantities in the commercial marketplace; and

(iii) Offered to the Government, under a contract or subcontract at any tier, without modification, in…