2_2_9594CS25Q0050.pdf

WOMEN-OWNED SMALL

BUSINESS (WOSB)

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL PRODUCTS AND COMMERCIAL SERVICES

1. REQUISITION NUMBER PAGE 1 OF

2. CONTRACT NUMBER 3. AWARD/EFFECTIVE

DATE

4. ORDER NUMBER 5. SOLICITATION NUMBER 6. SOLICITATION ISSUE

DATE

7. FOR SOLICITATION

INFORMATION CALL:

a. NAME b. TELEPHONE NUMBER (No collect calls)

8. OFFER DUE DATE/

LOCAL TIME

9. ISSUED BY

13b. RATING

14. METHOD OF SOLICITATION

CODE

15. DELIVER TO 16. ADMINISTERED BY CODE

18a. PAYMENT WILL BE MADE BY CODE17a. CONTRACTOR/

OFFEROR

CODE

FACILITY

CODE

CODE

TELEPHONE NUMBER

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT SUCH ADDRESS IN

OFFER

18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a UNLESS BLOCK

BELOW IS CHECKED

REQUEST

FOR QUOTE

(RFQ)

INVITATION

FOR BID

(IFB)

REQUEST

FOR

PROPOSAL

(RFP)

SEE ADDENDUM

19.

ITEM NUMBER

20.

SCHEDULE OF SUPPLIES/SERVICES

21.

QUANTITY

22.

UNIT

23.

UNIT PRICE

24.

AMOUNT

(Use Reverse and/or Attach Additional Sheets as Necessary)

25. ACCOUNTING AND APPROPRIATION DATA 26. TOTAL AWARD AMOUNT (For Government Use Only)

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN

COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH

AND DELIVER ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND

ON ANY ADDITIONAL SHEETS SUBJECT TO THE TERMS AND CONDITIONS

SPECIFIED

29. AWARD OF CONTRACT: REFERENCE OFFER

DATED . . YOUR OFFER ON SOLICITATION

(BLOCK 5), INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE

SET FORTH HEREIN, IS ACCEPTED AS TO ITEMS:

30a. SIGNATURE OF OFFEROR/CONTRACTOR

30b. NAME AND TITLE OF SIGNER (Type or print) 30c. DATE SIGNED

31a. UNITED STATES OF AMERICA (SIGNATURE OF CONTRACTING OFFICER)

31b. NAME OF CONTRACTING OFFICER (Type or print) 31c. DATE SIGNED

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

STANDARD FORM 1449 (REV. 11/2021)

Prescribed by GSA - FAR (48 CFR) 53.212

10. THIS ACQUISITION IS UNRESTRICTED OR

NORTH AMERICAN

INDUSTRY CLASSIFICATION

STANDARD (NAICS):

SIZE STANDARD:

13a. THIS CONTRACT IS A

RATED ORDER UNDER

THE DEFENSE PRIORITIES

AND ALLOCATIONS

SYSTEM - DPAS (15 CFR 700)

SET ASIDE: % FOR:

11. DELIVERY FOR FREE ON

BOARD (FOB) DESTINATION

UNLESS BLOCK IS MARKED

SEE SCHEDULE

12. DISCOUNT TERMS

ARE ARE NOT ATTACHED

ARE ARE NOT ATTACHED

27a. SOLICITATION INCORPORATES BY REFERENCE (FEDERAL ACQUISITION REGULATION) FAR 52.212-1, 52.212-4. FAR 52.212-3

AND 52.212-5 ARE ATTACHED. ADDENDA

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA

8(A)

ECONOMICALLY

DISADVANTAGED

WOMEN-OWNED SMALL

BUSINESS (EDWOSB)

SERVICE-DISABLED

VETERAN-OWNED

SMALL BUSINESS

(SDVOSB)

HUBZONE SMALL

BUSINESS

SMALL BUSINESS

NOTE: OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, AND 30.

11:00 AM EDT

STOCK RECORD (S/R)

STANDARD FORM 1449 (REV. 11/2021) BACK

19.

ITEM NUMBER

20.

SCHEDULE OF SUPPLIES/SERVICES

21.

QUANTITY

22.

UNIT

23.

UNIT PRICE

24.

AMOUNT

32a. QUANTITY IN COLUMN 21 HAS BEEN

RECEIVED INSPECTED ACCEPTED, AND CONFORMS TO THE CONTRACT, EXCEPT AS NOTED:

41a. I CERTIFY THIS ACCOUNT IS CORRECT AND PROPER FOR PAYMENT

32b. SIGNATURE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32c. DATE

41b. SIGNATURE AND TITLE OF CERTIFYING OFFICER 41c. DATE

42a. RECEIVED BY (Print)

42b. RECEIVED AT (Location)

42c. DATE RECEIVED (MM/DD/YYYY) 42d. TOTAL CONTAINERS

40. PAID BY

32d. PRINTED NAME AND TITLE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32e. MAILING ADDRESS OF AUTHORIZED GOVERNMENT REPRESENTATIVE 32f. TELPHONE NUMBER OF AUTHORZED GOVERNMENT REPRESENTATIVE

32g. EMAIL OF AUTHORIZED GOVERNMENT REPRESENTATIVE

33. SHIP NUMBER 34. VOUCHER NUMBER 35. AMOUNT VERIFIED

CORRECT FOR

PARTIAL FINAL

37. CHECK NUMBER

38. S/R ACCOUNT NUMBER 39. S/R VOUCHER NUMBER

36. PAYMENT

COMPLETE PARTIAL FINAL

9594CS25Q0050

TABLE OF CONTENTS:

Listing of Incorporated Purchase Requisitions Section B - Supplies or Services and Prices/Costs Section C - Description/Specifications/Work Statement Section D - Packaging and Marking Section E - Inspection and Acceptance Terms Section F - Delivery or Performance Section G - Contract Administration Data Section H - Special Contract Requirements Section I - Contract Clauses Section J - List of Documents, Exhibits, and other Attachments Section K - Representations, Certifications, and Other Statements of Offerors Section L - Instructions, Conditions and Notices to Offerors Section M - Evaluation Factors for Award

Listing of Incorporated Purchase Requisitions

Incorporated Purchase Requisition Numbers:

OIT250045

Section B - Supplies or Services and Prices/Costs

Item Number Base Item Number

Supplies/Services Quantity Unit

0001 Base Period - Panic Button Device 250 EA Contract Type:Firm Fixed Price

Unit Price Extended Price

Description:

Minimum purchase of 150 and not to exceed 250 Panic Button Devices.

Purchase Requisitions

IDC Type: Not Applicable

Item Number Base Item Number

Supplies/Services Quantity Unit

0002 Base Period - Subscription (Panicbutton, Field Check-in App, Mobile)

250 EA

Contract Type:Firm Fixed Price Unit Price

Extended Price

Description:

Minimum of 150 and not to exceed 250 subscription accounts for 12 months.

Purchase Requisitions

IDC Type: Not Applicable

Item Number Base Item Number

Supplies/Services Quantity Unit

1001 Option Period 1 - Panic Button Device

12 EA

Contract Type:Firm Fixed Price Unit Price

Extended Price

Description:

Not to exceed 12 Panic Button Devices.

Purchase Requisitions

Option: 1 Option Time Date: 8/1/26 Option Time Duration: 364 Option Time Units: Days IDC Type: Not Applicable

Item Number Base Item Number

Supplies/Services Quantity Unit

1002 Option Period 1 - Subscription (Panic button, Field Check-in App, Mobile)

Contract Type:Firm Fixed Price Unit Price

Extended Price

Description:

Minimum of 150 and not to exceed 250 subscription accounts for 12 months.

Purchase Requisitions

Option: 1 Option Time Date: 8/1/26 Option Time Duration: 364 Option Time Units: Days IDC Type: Not Applicable

Item Number Base Item Number

Supplies/Services Quantity Unit

2001 Option Period 2 - Panic Button Device

12 EA

Contract Type:Firm Fixed Price Unit Price

Extended Price

Description:

Not to exceed 12 Panic Button Devices.

Purchase Requisitions

Option: 2 Option Time Date: 8/1/27 Option Time Duration: 365 Option Time Units: Days IDC Type: Not Applicable

Item Number Base Item Number

Supplies/Services Quantity Unit

2002 Option Period 2 - Subscription (Panic button, Field Check-in App, Mobile)

250 EA

Contract Type:Firm Fixed Price Unit Price

Extended Price

Description:

Minimum of 150 and not to exceed 250 subscription accounts for 12 months.

Purchase Requisitions

Option: 2 Option Time Date: 8/1/27 Option Time Duration: 365 Option Time Units: Days IDC Type: Not Applicable

Item Number Base Item Number

Supplies/Services Quantity Unit

3001 Option Period 3 - Panic Button Device

12 EA

Contract Type:Firm Fixed Price Unit Price

Extended Price

Description:

Not to exceed 12 Panic Button Devices.

Purchase Requisitions

Option: 3 Option Time Date: 8/1/28 Option Time Duration: 364 Option Time Units: Days IDC Type: Not Applicable

Item Number Base Item Number

Supplies/Services Quantity Unit

3002 Option Period 3 - Subscription (Panic button, Field Check-in App, Mobile)

250 EA

Contract Type:Firm Fixed Price Unit Price

Extended Price

Description:

Minimum of 150 and not to exceed 250 subscription accounts for 12 months.

Purchase Requisitions

Option: 3 Option Time Date: 8/1/28 Option Time Duration: 364 Option Time Units: Days IDC Type: Not Applicable

Item Number Base Item Number

Supplies/Services Quantity Unit

4001 Option Period 4 - Panic Button Device

12 EA

Contract Type:Firm Fixed Price Unit Price

Extended Price

Description:

Not to exceed 12 Panic Button Devices.

Purchase Requisitions

Option: 4 Option Time Date: 8/1/29 Option Time Duration: 364 Option Time Units: Days IDC Type: Not Applicable

Item Number Base Item Number

Supplies/Services Quantity Unit

4002 Option Period 4 - Subscription (Panic button, Field Check-in App, Mobile)

250 EA

Contract Type:Firm Fixed Price Unit Price

Extended Price

Description:

Minimum of 150 and not to exceed 250 subscription accounts for 12 months.

Purchase Requisitions

Option: 4 Option Time Date: 8/1/29 Option Time Duration: 364 Option Time Units: Days IDC Type: Not Applicable

Item Number Base Item Number

Supplies/Services Quantity Unit

5001 Six Months Extension Option Period - Panic Button Device

6 EA

Contract Type:Firm Fixed Price Unit Price

Extended Price

Description:

Not to exceed 6 Panic Button Devices.

Purchase Requisitions

Option: 5 Option Time Date: 8/1/30 Option Time Duration: 183 Option Time Units: Days IDC Type: Not Applicable

Item Number Base Item Number

Supplies/Services Quantity Unit

5002 Six Months Extension Option Period - Subscription (Panic button, Field Check-in App, Mobile

250 EA

Contract Type:Firm Fixed Price Unit Price

Extended Price

Description:

Minimum of 150 and not to exceed 250 subscription accounts for 6 months only.

Purchase Requisitions

Option: 5 Option Time Date: 8/1/30 Option Time Duration: 183 Option Time Units: Days IDC Type: Not Applicable

B.1 Type of Contract. Panic Button Device and Subscription is a Firm Fixed price Purchase Order with; quantities are based on anticipated estimates and are Not-to-Exceed the allotted quantities and cost associated with each Contract Line Item Number (CLIN). The Contractor shall provide all services required for the above contract line items (CLINs). In accordance with Section C Statement of Work.

B.2 Contract Funding. The Contractor is not authorized to exceed the obligated value on this Purchase Order. Per Section F.1, this Purchase order has period of Performance from August 1, 2025 to January 31, 2031.

B.3 North American Industry Classification System (NAICS) and Small Business SizeStandard. The NAICS Code for this Purchase Order is 334220, Radio and Television Broadcasting and Wireless Communications Equipment Manufacturing.

The Small Business Size Standard is 1250 Employees.

Section C - Description/Specifications/Work Statement

C.1 Agency Background

The Court Services and Offender Supervision Agency (CSOSA) for the District of Columbia is a Federal Executive Branch Agency, created by Congress in 1997 to perform the offender supervision function for D.C. Code offenders. It does so in coordination with the Superior Court of the District of Columbia and the U.S. Parole Commission. CSOSA's mission is effectively supervise adults under our jurisdiction to enhance public safety, reduce recidivism, support the fair administration of justice, and promote accountability, and inclusion and success through the implementation of evidence-based practices in close collaboration with our criminal justice and the community. CSOSA is committed to achieving our strategic goals and enhancing public safety. CSOSA continues to develop, implement, and analyze effective evidence-based offender supervision programs and techniques to reduce recidivism among our offender population. In addition, up to 12 replacement devices will be purchased in subsequent option years.

C.2 Panic Button Device and Subscription

C.2.1 Objective

The Government shall purchase a minimum of 150 and up to a maximum of 250 wearable panic buttons (on a key fob or similar device) with an integrated lone worker safety application capable of operating on agency-issued iPhones. The panic buttons and integrated app shall allow workers to check-in for scheduled events confirming personal safety, initiate a safety alert, notifying team members or 911 for emergency assistance, and facilitate communication through alerts, text, or voice among team members.

C.2.2 Requirements

C.2.2.1 The panic button and its integrated app should utilize Global Positioning System (GPS) and may use additional technologies to provide accurate location information.

C.2.2.2 The integrated application shall be functional on agency-issued iPhones.

C.2.2.3 The wearable panic button and integrated iPhone application will be assigned to individual Community Supervision Officers (CSO's) to be used when conducting home visits or other field activities to meet with supervised offenders or collateral contacts. CSO's may conduct this work individually or in pairs.

C.2.2.4 The wearable panic buttons should have management tools which enable management to monitor their team's location or communicate with all team members at any given time. The wearable panic button should have the capability to broadcast to a specific team, if possible.

C.2.2.5 Alert notifications shall be scalable to discreet teams or a combination of teams across the agency.

C.2.2.6 Wearable panic button specifications and features:

a. Small, lightweight, able to fit in a pocket.

b. Attachable to a belt, lanyard or protective vest.

c. A pressable button, that when first pushed sends an alert message to team members, including the CSO's location, Supervisor CSOs (SCSOs), and fellow team members.

d. The pressable button should have resistance sufficient to avoid false alerts if the button is bumped or brushed.

e. The alert and integrated application should have backup features:

i. Alerts resulting from a pressed panic button or from a non-response to a scheduled checkin shall issue an alert on the team's and SCSO's phone applications indicating the CSO's location (via GPS)

Valerie Wallace Highlight

ii. The phone application shall allow the supervisor or other team members to text, email, or call the CSO

iii. If no one responds to the alert within a fixed interval (such as 30 seconds) the system shall alert 911, providing the CSO's name and location.

C.2.2.7 Check-ins, Notifications & Alarms:

a. The application shall allow a CSO to schedule an itinerary of check-ins recording the intended date, time, and location.

b. The application shall notify workers when they should check-in:

i. When a CSO arrives at an address on the itinerary, the application automatically starts the check-in, or the CSO can manually start it on the application.

ii. A manual confirmation by the CSO on the application will notify the SCSO that the CSO has "checked in," confirming his or her safety at that moment on the visit.

iii. The application shall automatically alert the SCSO (or other manually added contacts) if a CSO does not check-in within a fixed amount of time upon starting a visit and at scheduled intervals during the visit.

iv. The application shall allow users to manually increase or decrease the interval for check-ins.

v. The application shall allow check-in alerts to occur by SMS, email or phone call.

vi. Location tracking and data storage shall only be active while a CSO is in an active check-in event, or when he/she hits a panic button on the wearable device or in the application.

C.2.2.8 Dashboard(s): The system should have an interface that provides users and supervisors with key data and features that are easy to access and to understand.

C.2.2.9 Report capabilities: the applications computer management system shall have:

a. A broad range of readily available reports useful on the team, branch, division or enterprise levels.

b. Customizable report capability.

C.2.2.10 Application Programming Interface (API). The Contractor shall provide a Representational State Transfer (REST) Application Programming Interface (API) affording CSOSA the opportunity to fetch records relevant to its use of the Contractor's Case Management System (CMS) on demand over a secured Hypertext Transport Protocol (HTTPS) connection.

The API shall:

a. Support changes (i.e., insert/update/delete operations) performed against the Contractor's CMS.

b. Be accessible to authorized CSOSA staff within thirty days of task order award.

c. Accept JavaScript Object Notation (JSON) blocks as requests.

d. Return JSON blocks as responses.

e. Include endpoints for retrieving system user records identifying and characterizing CSOSA users and vendor agents who have inserted/updated/deleted records related to CSOSA personnel, team configurations, event check-ins or alerts, and event locations.

C.2.2.11 Cloud storage requirements (See Section H.1-H.4).

Section D - Packaging and Marking

Section E - Inspection and Acceptance Terms

E.1 Inspection will be in accordance with FAR 52.212-4(a) and E.2 below.

E.2 Inspection and acceptance of services to be furnished will be performed by the Contracting Officer's Representative (COR). The Government will conduct any inspection and tests deemed reasonably necessary to ensure all services provided conform will all requirements identified in Section C. Services and/or deliverables, which upon inspection, are found not to be in conformance with Section C, shall be promptly rejected by the COR. A written notice of such rejection will be provided to the Contractor. Any notice of rejection requires the Contractor to re-perform any rejected services within the timeframe established by the COR.

Section F - Delivery or Performance

Line Item: 0001 Period Of Performance Start Date Period Of Performance End Date Period Of Performance Address

8/1/25 7/31/26

Line Item: 0002 Period Of Performance Start Date Period Of Performance End Date Period Of Performance Address

8/1/25 7/31/26

Line Item: 1001 Period Of Performance Start Date Period Of Performance End Date Period Of Performance Address

8/1/26 7/31/27

Line Item: 1002 Period Of Performance Start Date Period Of Performance End Date Period Of Performance Address

8/1/26 7/31/27

Line Item: 2001 Period Of Performance Start Date Period Of Performance End Date Period Of Performance Address

8/1/27 7/31/28

Line Item: 2002 Period Of Performance Start Date Period Of Performance End Date Period Of Performance Address

8/1/27 7/31/28

Line Item: 3001 Period Of Performance Start Date Period Of Performance End Date Period Of Performance Address

8/1/28 7/31/29

Line Item: 3002 Period Of Performance Start Date Period Of Performance End Date Period Of Performance Address

8/1/28 7/31/29

Line Item: 4001 Period Of Performance Start Date Period Of Performance End Date Period Of Performance Address

8/1/29 7/31/30

Line Item: 4002 Period Of Performance Start Date Period Of Performance End Date Period Of Performance Address

8/1/29 7/31/30

Line Item: 5001 Period Of Performance Start Date Period Of Performance End Date Period Of Performance Address

8/1/30 1/31/31

Line Item: 5002 Period Of Performance Start Date Period Of Performance End Date Period Of Performance Address

8/1/30 1/31/31

F.1 Period of Performance. The period of performance for this Purchase Order is as follows:

Base Period - August 1, 2025 through July 31, 2026;

Option Period 1 - August 1, 2026 through July 31, 2027;

Option Period 2 - August 1, 2027 through July 31, 2028;

Option Period 3 - August 1, 2028 through July 31, 2029;

Option Period 4 - August 1, 2029 through July 31, 2030; and

Six Month Extension Option Period - August 1, 2030 through January 31, 2031;

F.2 Place of Performance.The work shall be performed at the Contractor's location.

F.3 Hours of Operation. CSOSA normal hours of operation are five days per week. From 7:00 AM ET to 5:00 PM ET.

F.4 Observance of Legal Holidays.

F.4.1 CSOSA personnel observe the following holidays:

New Year's Day

Martin Luther King's Birthday

President's Day

Memorial Day

Juneteenth Day

Independence Day

Labor Day

Columbus Day

Veterans Day

Thanksgiving Day

Christmas Day

F.4.2 If a holiday falls on Sunday, the following Monday will be observed as the legal holiday.

F.4.3 When a holiday falls on a Saturday, the preceding Friday is observed as a legal holiday by U.S. Government agencies.

F.4.4 In addition to the days designated as holidays, the Government observes the following days:

(1) Any other day designated by Federal Statute

(2) Any other day designated by Executive Order

(3) Any other day designated by the President's Proclamation

F.4.5 It is understood and agreed between the Government and the Contractor that observance of such days by Government personnel shall not otherwise be a reason for an additional period of performance, or entitlement of compensation except as set forth within this Purchase Order.

F.5 Deviations. An advance written agreement from the Contracting Officer must be received by the Contractor for deviations to delivery or performance requirements under this Purchase Order.

F.6 Travel. No travel reimbursement is allowed under this Purchase Order.

F.7 Deliverables. The deliverables under this Purchase Order shall be provided in accordance with all the requirements identified in Section C and Section D (if applicable).

F.8 Notice of Contractor Delays. In the event the Contractor encounters, or anticipates encountering, difficulty in meeting performance requirements, or in complying with the Purchase Order delivery schedule or completion date, or whether the Contractor has knowledge that any actual or potential situation is delaying, or threatens to delay, timely performance, the Contractor shall immediately, within one (1) business day, notify the Contracting Officer and the COR, in writing, giving pertinent details; provided, however, that this notification shall be informational only in character, and that this provision shall not be construed as a waiver by CSOSA of any delivery schedule or date, or any rights or remedies provided by law or under this Purchase Order.

F.9 FAR 52.242-14 Suspension of Work (Apr 1984)

(a) The Contracting Officer may order the Contractor, in writing, to suspend, delay, or interrupt all or any part of the work of this contract for the period of time that the Contracting Officer determines appropriate for the convenience of the Government.

(b) If the performance of all or any part of the work is, for an unreasonable period of time, suspended, delayed, or interrupted

(1) by an act of the Contracting Officer in the administration of this contract, or (2) by the Contracting Officer's failure to act within the time specified in this contract (or within a reasonable time if not specified), an adjustment shall be made for any increase in the cost of performance of this contract (excluding profit) necessarily caused by the unreasonable suspension, delay, or interruption, and the contract modified in writing accordingly. However, no adjustment shall be made under this clause for any suspension, delay, or interruption to the extent that performance would have been so suspended, delayed, or interrupted by any other cause, including the fault or negligence of the Contractor, or for which an equitable adjustment is provided for or excluded under any other term or condition of this contract.

(c) A claim under this clause shall not be allowed- (1) For any costs incurred more than 20 days before the Contractor shall have notified the Contracting Officer in writing of the act or failure to act involved (but this requirement shall not apply as to a claim resulting from a suspension order); And (2) Unless the claim, in an amount stated, is asserted in writing as soon as practicable after the termination of the suspension, delay, or interruption, but not later than the date of final payment under the contract.

(End of clause)

Section G - Contract Administration Data

Requesting Office Address

CSP 800 N CAP

800 N. CAPITOL STREET, NW

Washington DC 20002 Phone: Fax:

Contact Details:

COR Office Address

CSP 800 N CAP

800 N. CAPITOL STREET, NW

Washington DC 20002 Phone: Fax:

Contact Details:

Issuing Office Address

CSP 800 N CAP

800 N. CAPITOL STREET, NW

Washington DC 20002

Fax:Phone: (202) 220-5621 Contact Details:

Lee, Colin Colin.Lee@csosa.gov

Payment Office Address CSOSA OFM Payment 800 N. Capitol Street, NW Washington DC 20002 Phone: Fax:

Contact Details:

WHITE, ROLANDA

Rolanda.White@csosa.gov

G.1 Contracting Officer's Representative

G.1.1 The Contracting Officer's Representative (COR) for this Purchase Order is: TBD at award

Court Services and Offender Supervision Agency (CSOSA)

800 N Capitol St, NW

Washington, DC 20002

Telephone Number: TBD at award

Email Address: TBD at award

G.1.2 The COR is responsible for the technical aspects of the Purchase Orderand serves as the liaison with the Contractor.

The COR is responsible for the final inspection and acceptance of all work performed and such other responsibilities as may be specified in this Purchase Order.

G.1.3 The COR is not authorized to make any commitments or otherwise obligate the Government or authorize any changes which affect the Purchase Order price, terms, or conditions. Any Contractor request for changes shall be referred to the Contracting Officer directly or through the COR. No such changes shall be made without the express written prior authorization of the Contacting Officer.

G.2 Contracting Officer

G.2.1 The Contracting Officer (CO) is the only person authorized to approve changes to any of the terms and conditions of this purchase order. In the event the Contractor effects any changes at the direction of any person other than the CO, the changes will be considered to have been made without authority and no adjustment will be made in the purchase order price to cover any increase in costs incurred as a result thereof. The CO shall be the only individual authorized to accept nonconforming work, waive any requirement of the purchase order, or to modify any term or condition of this purchase order. The CO is the only individual who can legally obligate Government funds. No cost chargeable to the proposed purchase order can be incurred before receipt of a fully executed contract, which includes any subsequent purchase order modifications or other specific written authorization from the CO.

G.2.2 The Contractor shall not comply with any order, direction, or request of Government personnel unless it is issued in writing and signed by the CO, or is pursuant to specific authority otherwise included as a part of this purchase order. No order, statement, or conduct of Government personnel, other than the CO, who visit the Contractor's facilities or in any other manner communicate with Contractor personnel during the performance of this purchase order, shall constitute a change under the terms for changes included in FAR 52.212-4 of this purchase order.

G.2.3 The procuring and administering Contracting Officer for this Purchase Order is:

Valerie Wallace

Office of Procurement

Court Services and Offender Supervision Agency (CSOSA)

800 North Capitol Street, NW

Washington, DC 20002-4260

Phone: (202) 585-7448

Email Address: Valerie.Wallace@csosa.gov

G.3 Electronic Invoicing and Payment Requirements – Invoice Processing Platform

G.3.1 Payment requests must be submitted electronically through the U.S. Department of Treasury's Invoice Processing Platform (IPP) system using the "Bill to Agency" of Interior Business Center – FMD.

G.3.2 Definitions.

G.3.2.1 "Contract" as used throughout this clause means the type of contract identified in Section B.1 above.

G.3.2.2 "Payment request" means a bill, voucher, invoice or request for contract financing payment with associated supporting documentation.

G.3.3 To constitute a proper invoice, the payment request must comply with the requirements identified in the applicable Prompt Payment clause included in the contract or the clause GSAR 552.212-4, Contract Terms and Conditions – Commercial Items, included in commercial item contracts.

G.3.4 IPP Registration. The IPP website address is: https://www.ipp.gov.The Contractor must use the IPP website to register, access, and use IPP for submitting requests for payment. The Contractor Government Business Point of Contact (as listed in SAM) will receive enrollment instructions via email from the Federal Reserve normally within 3-5 business days of the contract award date. Assistance with enrollment may be obtained by contacting the IPP Production Helpdesk via email at IPPCustomerSupport@fiscal.treasury.gov or by phone at (866) 973-3131.

G.3.5 Payment Request/Invoice Submission

G.3.5.1 Invoices shall be submitted in IPP with a unique invoice number and on a timely basis upon acceptance and delivery of items delivered under any awarded delivery order. Invoices shall not include items delivered from more than one awarded delivery order. Subscription services are authorized to be invoiced at the beginning of each period of performance.

G.3.5.2 The payment request/invoice submission must identify the specific Contract Line Item Number (CLIN) for which the Contractor is seeking payment under the contract.

G.3.5.3 In addition to providing the information required by IPP, the Contractor shall include in IPP as an attachment(s) to the specific payment request the following:

1. Contractor Tax Identification Number;

2. Contractor Mailing Address;

3. Contractor Phone Number;

4. Date of Invoice;

5. Contractor Invoice Number (unique);

6. CSOSA Contract / Purchase Order Number;

7. CSOSA Contract Line Item Number (CLIN) or item number;

8. Description, price, quantity, deliverables.

G.3.6 CSOSA is bound by the Prompt Payment Act (5 CFR Part 1315) to reimburse Contractors on the 30th calendar day after a proper and valid invoice is officially received by the Agency.

G.3.6.1 Invoices submitted in IPP to incorrect CLINs and/or without required or valid attachment information are not considered proper.

G.3.6.2 Improper or invalid IPP invoices shall be disputed / rejected by CSOSA in their entirety. If the invoice is disputed / rejected by CSOSA, the Contracting Officer or COR appointed to the contract will notify the Contractor in writing of the dispute within seven (7) days of the CSOSA invoice official receipt date (the received date stamped on the invoice by OFM). CSOSA's written dispute / rejection notification will identify the specific invoice items and amounts being disputed, reason the items or amounts are disputed, a reference to the specific terms of the contract which supports the government's dispute and a request for an immediate explanation and / or corrected invoice. In addition, the invoice will be rejected by CSOSA in IPP. The Contractor shall re-submit corrected invoices in IPP, with required attachments, using a new, unique invoice number.

mailto:Valerie.Wallace@csosa.gov mailto:IPPCustomerSupport@fiscal.treasury.gov

G.3.6.3 Properly disputed invoice amounts are not subject to late payment interest computations during the period of dispute.

Per FAR Part 32 the Contracting Officer has the final authority to approve payment of an invoice.

G.3.7 The Contractor should review IPP to determine the current status of a submitted invoice. Contractor inquiries concerning an invoice payment may be made to the CSOSA Office of Financial Management (OFM) thirty (30) calendar days after a proper invoice has been submitted. The Contractor may make payment inquires to by calling OFM, Ms. Rolanda White, at 202-220-5464 or emailing OFM at Rolanda.White@csosa.gov.

Section H - Special Contract Requirements

H.1 CSOSA Contractor Information Security Requirements

H.1.1 The Contractor shall meet and comply with Federal laws, Executive Orders, directives, policies, regulations, standards, and guidance, as amended and extended, for the protection of the information system and information during processing, while in storage, and during transmission. The Contractor shall be required to comply with, at a minimum:

a. Federal Information Security Modernization Act of 2014 (FISMA)

b. Office of Management and Budget (OMB) Circular and Memoranda (e.g. Circular A-130)

c. U.S. Department of Homeland Security Directives (e.g. US-CERT and HSPD-12)

d. National Institute of Standards and Technology (NIST) Federal Information Processing Standards (FIPS) and Special

Publication (SP) 800 Series (e.g. FIPS 200, FIPS 199, FIPS 140-2, SP 800-18, SP 800-37, SP 800-53A, SP 800-60) H.1.2 The Federal Information Security Modernization Act of 2014 (FISMA), requires the head of each agency to provide information security protections commensurate with the risk and magnitude of the harm resulting from unauthorized access, use, disclosure, disruption, modification, or destruction of information. It requires those measures to be in place for information collected or maintained by or on behalf of the agency; and information systems used or operated by an agency or by a contractor of an agency or other organization on behalf of an agency.

H.1.2.1 The law defines the term "information security" to mean protecting information and information systems from unauthorized access, use, disclosure, disruption, modification, or destruction in order to provide:

a. Integrity, which means guarding against improper information modification or destruction, and includes ensuring information nonrepudiation and authenticity;

b. Confidentiality, which means preserving authorized restrictions on access and disclosure, including means for protecting personal privacy and proprietary information; and

c. Availability, which means ensuring timely and reliable access to and use of information.

H.1.2.2 The Contractor shall provide and implement security controls, as selected by CSOSA, to meet the security requirements for a Moderate impact level system as defined in NIST SP 800-53 (as amended), Security and Privacy Controls for Federal Information Systems and Organizations.

H.1.2.3 Executive departments and agencies procuring commercial and non-commercial cloud services, or systems provided or managed by other departments or agencies, contractors, or other sources shall comply with FISMA requirements. The Federal Risk and Authorization Management Program (Fed RAMP) is a government-wide program that provides a standardized approach to FISMA compliance as it applies to cloud-based computing services. It oversees and standardizes how to do security assessments, authorizations, and continuous monitoring for cloud products and services. Fed RAMP requirements apply to all cloud deployment models (e.g., Public Clouds, Community Clouds, Private Clouds, Hybrid Clouds);

and all cloud service models (e.g., Infrastructure as a Service, Platform as a Service, Software as a Service) as defined by the National Institute of Standards and Technology (NIST).

H.2 Security Assessment and Authorization, and Continuous Monitoring.The Contractor shall apply the appropriate set of baseline security controls as required in the National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53 (as amended), Security and Privacy Controls for Federal Information Systems and Organizations.

mailto:Rolanda.White@csosa.gov

H.2.1 The Contractor shall be responsible for the cost of preparing the Security Authorization Package using NIST SP 800-37 (as amended) Guide for Applying the Risk Management Framework to Federal Information Systems (using Fed RAMP templates, where available) and maintainingcompliance.

H.2.2 The Contractor shall be able to maintain a security management continuous monitoring environment thatmeets or exceeds the Continuous Monitoring requirements in SP 800-37, AppendixG.

H.3 Requirements for Externally Hosted Services and Applications. Since the Contractor's CMS is external to CSOSA the following requirements also apply:

H.3.1 CSOSA reserves the right to perform Penetration Testing. If CSOSA exercises this right, the Contractor shall allow Government employees (or designated third parties) to conduct Security Assessment activities to include control reviews in accordance with Fed RAMP requirements. Review activities include but are not limited to scanning operating systems , web applications, wireless scanning; network device scanning to include routers, switches, and firewall, and IDS/IPS; databases and other applicable systems, including general support structure, that support the processing, transportation, storage, or security of Government information for vulnerabilities.

H.3.2 Identified gaps between required Security Controls and the Contractor's implementation as documented in the System Security Plan (SSP) shall be tracked by the Contractor for mitigation in a Plan of Action and Milestones (POA&M) document.

H.3.3 The Contractor is responsible for mitigating all security risks found during security assessment and accreditation and continuous monitoring activities. All high-risk vulnerabilities shall be mitigated within 30 days and all moderate risk vulnerabilities shall be mitigated within 90 days from the date vulnerabilities are formally identified.

H.3.4 The Contractor shall provide access to the Federal Government, or their designee acting as their agent, when requested, in order to verify compliance. CSOSA reserves the right to conduct onsite inspections. The Contractor shall make appropriate personnel available for interviews and provide all necessary documentation during this review.

H.3.5 CSOSA has the right to perform manual or automated audits, scans, reviews, or other inspections of the Contractor's Information Technology (IT) environment being used to provide or facilitate services for CSOSA. In accordance with the Federal Acquisitions Regulations (FAR) clause 52.239-1, the Contractor shall be responsible for the following security safeguards:

H.3.6 The Contractor shall not publish or disclose in any manner, without the CO's written consent, the details of any safeguards either designed or developed by the Contractor under this purchase order or otherwise provided by CSOSA.

H.3.7 To the extent required to carry out a program of inspection to safeguard against threats and hazards to the security, integrity, and confidentiality of Government data, the Contractor shall afford CSOSA access to the Contractor's facilities, installations, technical capabilities, operations, documentation, records, and databases within 72 hours. The program of inspection shall include, but is not limited to:

a. Authenticated and unauthenticated operating system/network vulnerability scans;

b. Authenticated and unauthenticated web application vulnerability scans;

c. Authenticated and unauthenticated database application vulnerability scans; and

d. Automated scans can be performed by Government personnel, or agents acting on behalf of CSOSA, using Government operated equipment, and Government specifiedtools.

H.3.8 If new or unanticipated threats or hazards are discovered by either CSOSA or the Contractor, or if existing safeguards have ceased to function, the discoverer shall immediately bring the situation to the attention of the other party.

H.3.9 If the Contractor chooses to run its own automated scans or audits, results from these scans may, at CSOSA's discretion, be accepted in lieu of Government performed vulnerability scans. In these cases, scanning tools and their configuration shall be approved by CSOSA. In addition, the results of Contractor-conducted scans shall be provided, in full, to

CSOSA.

H.3.10 CSOSA may choose to cancel for convenience the (Contract/Award) if the Contractor has its authorization revoked and the deficiencies are greater than agency risk tolerance thresholds.

H.3.11 The Contractor shall comply with CSOSA security and privacy requirements (subject to change by the CSOSA Information Security Office) and as mandated by Federal laws and policies, including making available any documentation, physical access, and logical access needed to support this requirement.

H.3.12 The Contractor shall be responsible for properly protecting all information used, gathered, or developed as a result of work under this purchase order.

H.3.13 The Contractor shall also protect all Government data, equipment, etc. by treating the information as sensitive. All information about the systems gathered or created under this purchase order should be considered as Controlled Unclassified Information (CUI). It is anticipated that this information will be gathered, created, and stored within the primary work location. If

Contractor personnel shall remove any information from the primary work area they should protect it to the same extent they would their proprietary data and/or company trade secrets.

H.3.14 CSOSA shall retain unrestricted rights to government data. The ordering activity retains ownership of any user created/loaded data and applications hosted on Contractor's infrastructure, as well as maintains the right to request full copies of these at any time.

H.3.15 The Contractor shall ensure that the facilities that house the network infrastructure are physically secure. The data shall be available to CSOSA upon request within one business day or within the timeframe specified otherwise, and shall not be used for any other purpose other than that specified herein.

H.3.16 The Contractor shall provide requested data at no additional cost to CSOSA. No data shall be released by the Contractor without the consent of CSOSA in writing. All requests for release shall be submitted in writing to the CO.

H.3.17 The Contractor shall provide full access and cooperation for all activities determined by CSOSA to be required to ensure an effective incident response, including providing all requested images, log files, and event information to facilitate rapid resolution of cyber incidents.

H.3.18 The Contractor shall be responsible for all costs and related resource allocations required for all subsequent incident response activities determined to be required by CSOSA, whether incurred by Government, agents under purchase order or on assignment to CSOSA, or by third party firms.

H.4 Additional Requirements for CSP hosted Services and Applications.If the Contractor's CMS is hosted in a commercial cloud service provider (CSP) environment like MS Azure, Amazon Web Services (AWS), IBM Cloud, Google Cloud, or similar the following requirements apply. The preferred level of Fed RAMP compliance status is moderate.

H.4.1 The Contractor shall implement the controls contained within the Fed RAMP Security Controls Baseline, and Fed RAMP Continuous Monitoring Strategy Guide available at the Fed RAMP website https://www.fedramp.gov/documents. These documents define requirements for compliance to meet minimum Federal information security requirements.

H.4.2 The Contractor shall follow Fed RAMP guidelines and security guidance. In situations where there are no procedural guides, the Contractor shall use generally accepted industry best practices for information security.

H.4.3 The Contractor shall be responsible for the cost of preparing the Security Authorization Package using the Fed RAMP Security Assessment Framework (SAF) process (using Fed RAMP templates, where available) and maintaining compliance.

H.4.4 The Contractor shall be responsible for preparing the Security Authorization Package using the Fed RAMP SAF Process and Fed RAMP Security Control BaselineWorkbook.

H.4.5 The Contractor shall comply with Fed RAMP requirements as mandated by Federal laws and policies, including making available any documentation, physical access, and logical access needed to support this requirement.

H.4.6 The Contractor shall create, maintain and update the documentation using Fed RAMP requirements and templates, which are available at https://www.fedramp.gov/templates/.

H.4.7 The Contractor shall use an accredited Third-Party Assessment Organization (3PAO) whenever there is a significant change to the system's security posture in accordance with the Fed RAMP Continuous Monitoring StrategyGuide.

H.4.8 To the extent required to carry out the Fed RAMP Security Assessment and Authorization (SA&A) Process (also known as the Federal Risk and Authorization Management Program) and Fed RAMP Continuous Monitoring, to safeguard against threats and hazards to the security, integrity, and confidentiality of any non-public Government data collected and stored by the Contractor, the Contractor shall afford CSOSA access to the Contractor's facilities, installations, technical capabilities, operations, documentation, records, and databases.

H.4.9 If new or unanticipated threats or hazards are discovered by either CSOSA or the Contractor, or if existing safeguards have ceased to function, the discoverer shall immediately bring the situation to the attention of the other party.

Section I - Contract Clauses

Clauses incorporated by reference

Article Number Reference Text 52.204-19 52.204-19 Incorporation by Reference of Representations and Certifications (DEC 2014) https://www.fedramp.gov/documents

52.212-4 52.212-4 Contract Terms and Conditions—Commercial Products and Commercial Services (Nov 2023)

52.224-1 52.224-1 Privacy Act Notification (APR 1984)

52.224-2 52.224-2 Privacy Act (APR 1984)

52.232-40 52.232-40 Providing Accelerated Payments to Small Business Subcontractors (Mar 2023)

52.242-15 52.242-15 Stop-Work Order (AUG 1989)

Clauses incorporated by full text

52.252-2 Clauses Incorporated by Reference (FEB 1998) This contract incorporates one or more clauses by reference, with the same force and effect as if they were given in full text.

Upon request, the Contracting Officer will make their full text available. Also, the full text of a clause may be accessed electronically at this/these address(es):

www.acquisition.gov

(End of clause)

52.212.5 Contract Terms and Conditions Required To Implement Statutes or Executive orders— Commercial Products and Commercial Services (Jan 2025)

(a) The Contractor shall comply with the following Federal Acquisition Regulation (FAR) clauses, which are incorporated in this contract by reference, to implement provisions of law or Executive orders applicable to acquisitions of commercial products and commercial services:

(1) 52.203-19, Prohibition on Requiring Certain Internal Confidentiality Agreements or Statements (Jan 2017) (section 743 of Division E, Title VII, of the Consolidated and Further Continuing Appropriations Act, 2015 (Pub. L. 113-235) and its successor provisions in subsequent appropriations acts (and as extended in continuing resolutions)).

(2) 52.204-23, Prohibition on Contracting for Hardware, Software, and Services Developed or Provided by Kaspersky Lab Covered Entities (Dec 2023) (Section 1634 of Pub. L. 115-91).

52.204-25, Prohibition on Contracting for Certain Telecommunications and Video Surveillance Services or Equipment. (Nov 2021) (Section 889(a)(1)(A) of Pub. L. 115-232).

(4) 52.209-10, Prohibition on Contracting with Inverted Domestic Corporations (Nov 2015).

(5) 52.232-40, Providing Accelerated Payments to Small Business Subcontractors (Mar 2023) (31 U.S.C. 3903 and 10 U.S.C.

3801).

(6) 52.233-3, Protest After Award (Aug 1996) (31 U.S.C. 3553).

(7) 52.233-4, Applicable Law for Breach of Contract Claim (Oct 2004) (Public Laws 108-77 and 108-78 ( 19 U.S.C. 3805 note)).

(b) The Contractor shall comply with the FAR clauses in this paragraph (b) that the Contracting Officer has indicated as being incorporated in this contract by reference to implement provisions of law or Executive orders applicable to acquisitions of commercial products and commercial services:

[Contracting Officer check as appropriate.]

__ (1) 52.203-6, Restrictions on Subcontractor Sales to the Government (Jun 2020), with Alternate I (Nov 2021) (41 U.S.C. 4704 and 10 U.S.C. 4655).

__ (2) 52.203-13, Contractor Code of Business Ethics and Conduct (Nov 2021) (41 U.S.C. 3509)).

__ (3) 52.203-15, Whistleblower Protections under the American Recovery and Reinvestment Act of 2009 (Jun 2010) (Section 1553 of Pub. L. 111-5). (Applies to contracts funded by the American Recovery and Reinvestment Act of 2009.)

__ (4) 52.203-17, Contractor Employee Whistleblower Rights (Nov 2023) (41 U.S.C. 4712); this clause does not apply to contracts of DoD, NASA, the Coast Guard, or applicable elements of the intelligence community—see FAR 3.900(a).

_X_ (5) 52.204-10, Reporting Executive Compensation and First-Tier Subcontract Awards (Jun 2020) (Pub. L. 109-282) ( 31 U.S.C. 6101 note).

https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title31-section3903&num=0&edition=prelim https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title10-section3801&num=0&edition=prelim https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title10-section3801&num=0&edition=prelim https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title10-section4655&num=0&edition=prelim https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title41-section4712&num=0&edition=prelim http://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title31-section6101&num=0&edition=prelim

__ (6) [Reserved].

__ (7) 52.204-14, Service Contract Reporting Requirements (Oct 2016) (Pub. L. 111-117, section 743 of Div. C).

__ (8) 52.204-15, Service Contract Reporting Requirements for Indefinite-Delivery Contracts (Oct 2016) (Pub. L. 111-117, section 743 of Div. C).

_X_ (9) 52.204-27, Prohibition on a ByteDance Covered Application (Jun 2023) (Section 102 of Division R of Pub. L. 117- 328).

__ (10) 52.204-28, Federal Acquisition Supply Chain Security Act Orders—Federal Supply Schedules, Governmentwide Acquisition Contracts, and Multi-Agency Contracts. (Dec 2023) (Pub. L. 115–390, title II).

__ (11)

(i) 52.204-30, Federal Acquisition Supply Chain Security Act Orders—Prohibition. (Dec 2023) (Pub. L. 115–390, title II).

__ (ii) Alternate I (Dec 2023) of 52.204-30.

__ (12) 52.209-6, Protecting the Government's Interest When Subcontracting With Contractors Debarred, Suspended, Proposed for Debarment, or Voluntarily Excluded. (Jan 2025) (31 U.S.C. 6101 note).

__ (13) 52.209-9, Updates of Publicly Available Information Regarding Responsibility Matters (Oct 2018) ( 41 U.S.C. 2313).

__ (14) [Reserved].

__ (15) 52.219-3, Notice of HUBZone Set-Aside or Sole-Source Award (Oct 2022) (15 U.S.C. 657a).

__ (16) 52.219-4, Notice of Price Evaluation Preference for HUBZone Small Business Concerns (Oct 2022) (if the offeror elects to waive the preference, it shall so indicate in its offer) (15 U.S.C. 657a).

__ (17) [Reserved]

__ (18)

(i) 52.219-6, Notice of Total Small Business Set-Aside (Nov 2020) (15 U.S.C. 644).

__ (ii) Alternate I (Mar 2020) of 52.219-6.

__ (19)

(i) 52.219-7, Notice of Partial Small Business Set-Aside (Nov 2020) (15 U.S.C. 644).

__ (ii) Alternate I (Mar 2020) of 52.219-7.

__ (20) 52.219-8, Utilization of Small Business Concerns (Jan 2025)(15 U.S.C. 637(d)(2) and (3)).

__ (21)

(i) 52.219-9, Small Business Subcontracting Plan (Jan 2025) (15 U.S.C. 637(d)(4)).

__ (ii) Alternate I (Nov 2016) of 52.219-9.

__ (iii) Alternate II (Nov 2016) of 52.219-9.

__ (iv) Alternate III (Jun 2020) of 52.219-9.

__ (v) Alternate IV (Jan 2025) of 52.219-9.

__ (22)

(i) 52.219-13, Notice of Set-Aside of Orders (Mar 2020) (15 U.S.C. 644(r)).

__ (ii) Alternate I (Mar 2020) of 52.219-13.

__ (23) 52.219-14, Limitations on Subcontracting (Oct 2022) (15 U.S.C. 657s).

__ (24)…