2031JW19Q00077.docx

Request for Quote (RFQ)

CC17HQQ0072

Request for Quotation (RFQ)

2031JW19Q00077

PART I - SUPPLIES OR SERVICES AND PRICES/COSTS

1.0 GENERAL

The Contractor shall furnish all technical, management, supervision, labor, materials, and any other support necessary to provide the services as described in the Purchase Order. The NAICS code for this requirement is 541519 Other Computer Related Services. This is a Small Businesses Set-Aside consistent with FAR 52.219-6.

2.0 PRICING

This Purchase Order is Firm Fixed Price (FFP).

Base Period

TOTAL:

PART II – STATEMENT OF WORK (SOW)

1.0 BACKGROUND

The Office of the Comptroller of the Currency (OCC) is an independent bureau, within the United States Department of the Treasury and serves to charter, regulate, and supervise all national banks and thrift institutions and the federal branches and agencies of foreign banks in the United States.

2.0 OBJECTIVE

The OCC requires the Contractor to provide necessary support in configuration, installation, and replacement of audio visual (AV) technology equipment for the Northeastern District Office (NEDO). This request includes diagnostics, replacement of end of life audio and video technology equipment along with the integration of the full system into the Crestron operating platform.

3.0 SCOPE

OCC currently has two (2) conference rooms identified as 900 and 901 in NEDO which require the services stated in the objective above. This will consist of:

· Replacing equipment as stated in the SOW.

· Upgrading touch panels to Crestron operating system which integrates with the Skype hardware.

· Optimal placement of Skype cameras.

· Testing the interoperability of the networked devices.

· Documenting the connectivity process.

4.0 TASKS

The tasks are as follows:

· Purchase and delivery of hardware and software for configuration and installation.

· Provide engineering services to configure Crestron network controls.

· Train and provide knowledge transfer to local staff on installed systems.

· Supplying documentation on operating the installed systems (hard and soft copy of instructions) including existing equipment.

The following work shall occur In Conference Room 900 (see Attachment 1 for list of equipment):

· The Contractor shall utilize the two (2) existing video monitors, projection screen, equipment rack. Current equipment in the rack that includes a DirecTV set-top-box, Vbrick streamer, Blu-Ray Player, DVD/VHS deck, Intel NUC, existing wireless and wired microphone systems, audio power amplifier and ceiling speakers shall be integrated into the system upgrade.

· The Contractor shall remove the existing control, Epson ceiling mounted projector, video switcher, an audio signal processor, and disposed at the client’s discretion.

· The Contractor shall upgrade the current analog video switcher by providing a Creston digital media switcher with a Crestron control processor and wall-mounted touch panel for control. This system shall be installed in the equipment rack.

· The system shall provide video outputs the video monitors, projectors (via video scalers), and to the Intel NUC (via an industry standard AV Bridge).

· The Contractor shall provide and install five video transmitters at designated floor locations that integrate with the Creston digital media switcher.

· Existing rack equipment shall connect via HDMI connections.

· The Contractor shall provide and install a video conferencing camera that meets current AV standards for a large conference room system between the monitors. The camera shall be an input to the video switcher.

· The Contractor shall update the audio system with a current digital signal processor (DSP) that provides VOIP and POTS connectivity.

· The audio outputs shall be wired to the AV Bridge for audio within a video conferencing transmission and to a power amplifier for the existing ceiling speakers. POTS and VOIP may be set up at the customer’s direction. The customer must provide proper IT information for VOIP setup. The DSP shall be housed in the AV rack.

· The Contractor shall provide control for the system via a Crestron touch panel. The system shall provide the following controls: video source and output switching, audio switching and volume control, monitor/ projector control (on/off), powered projector screen control, and camera movement and zoom. Some equipment communications shall occur via The Contractor supplied network switch. The network switch shall be mounted in the AV rack. The Contractor shall provide control programming to meet these customer requirements.

· The Contractor shall provide training for room operation once integration and program testing are completed.

The following work shall occur In Conference Room 901 (see Attachment 1 for list of equipment):

· The Contractor shall utilize the two (2) ceiling mounted Epson video projectors, projection screens, equipment rack. Current equipment in the rack that includes a DirecTV set-top-box, Vbrick Streamer, Blu-Ray Player, DVD/VHS deck, Intel NUC, existing wireless and wired microphone systems, audio power amplifier and ceiling speakers shall be integrated into the system upgrade.

· The Contractor shall remove the existing control, video switcher, and audio signal processor and dispose at the client’s discretion.

· The Contractor shall upgrade the current analog video switcher by providing a Creston digital media switcher with a Crestron control processor and wall-mounted touch panel for control. This shall be installed in the equipment rack.

· The system shall provide video outputs the video monitors, projectors (via provided video scalers), and to the Intel NUC (via provided industry standard AV Bridge).

· The Contractor shall provide and install seven Video transmitters at designated floor locations that integrate with the Creston digital media switcher.

· Existing rack equipment shall connect via HDMI connections.

· The Contractor shall provide and install two video conferencing cameras that meet current AV standards for a large conference room system between the monitors. The camera shall be an input to the video switcher. One shall be primarily for speakers with the second for audience video.

· The Contractor shall update the audio system with two current digital signal processors (DSP). One shall provide VOIP and POTS connectivity and the second shall accommodate additional audio inputs from floor box microphone inputs.

· The audio outputs shall be wired to the AV Bridge for audio within a video conferencing transmission and to a power amplifier for the existing ceiling speakers. POTS and VOIP may be set up at the customer’s direction. The customer must provide proper IT information for VOIP setup. The DSP shall be housed in the AV rack.

· The Contractor shall provide control for the system via a Crestron touch panel. The system shall provide video source and output switching, audio switching and volume control, monitor/projector control (on/off), powered projector screen control, and camera movement and zoom. Some equipment communications shall occur via the Contractor supplied network switch. The network switch shall be mounted in the AV rack. The Contractor shall provide control programming to meet these customer requirements.

· The Contractor shall provide training for room operation once integration and program testing are completed.

5.0 PLACE OF PERFORMANCE

Comptroller of the Currency New York Field Office and Large Banks Supervision 340 Madison Avenue New York, NY 10022

6.0 PERIOD OF PERFORMANCE

The period of performance shall be sixty (60) calendar days from the date of award.

7.0 508 COMPLIANCE AND ACCEPTANCE

The Contractor shall provide and maintain Information Communications Technology (ICT) that meets applicable standards of Section 508 of the Rehabilitation Act of 1973, as amended. This applies to all software user-interfaces, web-based user-interfaces, and documents such as reports, job aids, guides, and plans. Resources for further details on these standards can be found at:

· Section 508: https://www.access-board.gov/guidelines-and-standards/communications-and-it/about-the-ict-refresh/final-rule/text-of-the-standards-and-guidelines

· Web Content Accessibility Guidelines (WCAG): http://www.w3.org/TR/WCAG20/

Conformance to all 508 standards shall be met unless exception is authorized by the OCC Information Technology Accessibility Program Office. Electronic Content delivered under this requirement shall meet the following standards:

· 502 – Interoperable with Assistive Technology

· 503 – Applications

· 602 – Support Documentation

· 603 – Support Services

· WCAG 2.0 Level A and AA Success Criteria and Conformance Requirements – applies to all software, Internet/Web interfaces and software with Web-based interfaces.

· Exception authorized: Non-Web software that resides on a PC or Server are not required to meet the following WCAG 2.0 success criteria: 2.4.1 Bypass Blocks, 2.4.5 Multiple Ways, 3.2.3 Consistent Navigation, and 3.2.4 Consistent Identification.

Note: All integration activities of offices described within this SOW do not apply to this requirement, only submitted documents and reports.

8.0 SECURITY AND PRIVACY REQUIREMENTS

A. Compliance with Applicable Laws, Regulations, and Standards

1. Federal Laws. The Contractor and all of its respective subcontractors shall follow and remain compliant at all times with the Federal Acquisition Regulation (FAR), Privacy Act of 1974 (5 U.S.C. 552a - the Act), Federal Information Security Modernization Act of 2014 (Public Law 107-347) (FISMA) as applicable.

2. FIPS. The Contractor and all of its respective subcontractors shall follow Federal Information Processing Standards (FIPS), National Institute of Standards and Technology (NIST) standards and guidelines, and other laws, mandates, or executive orders pertaining to the development, operations, and protection of information systems and sensitive information and data.

3. Office of the Comptroller of the Currency (OCC) Policies and Procedures. The Contractor and all of its respective subcontractors shall comply with all Office of the Comptroller of the Currency (OCC) security and privacy policies and standards in effect at the time of the award of the contract, as well as those requirements that may be added during the contract.

The Contractor shall conform to OCC administrative regulations, policies, and procedures in accordance with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance. The Contractor shall work with OCC internal organizations as needed to ensure that policies, procedures, configuration control, and product life-cycle requirements are fulfilled to the satisfaction of OCC ITS.

The Contractor shall support agency’s operational models and specific security rules throughout the duration of the contract. The Contractor shall support adjustments based on threats identified by the Trusted Internet Connection (TIC) Portal Security Operations Center (SOC). For example, adjustments to the security policy could be made by the OCC's authorities after the SOC identifies changing trends in intrusion behavior.

4. Privacy Act. As prescribed in the FAR 24.104, if the contract involves the design, development, or operation of a system of records on individuals, the Contractor must implement requirements in FAR clause 52.224-1, “Privacy Act Notification” and FAR clause 52.224-2, “Privacy Act.” In addition, the Contractor is responsible for ensuring individuals supporting the OCC are trained in accordance with FAR clause 24.301, “Privacy Training.”

B. General Requirements

1. Authorization to Use, Store, or Share Sensitive Information. The Contractor shall be responsible for properly protecting all information used, gathered, or developed as a result of work under this contract. The Contractor shall also protect all government data, equipment, etc. by treating the information as sensitive. All information about the systems, gathered or created under this contract shall be considered as Controlled but Unclassified (CUI) information. It is anticipated that this information will be gathered, created, and stored within the primary work location. If Contractor personnel must remove any information from the primary work area, they shall protect it to the same extent they would their proprietary data and/or company trade secrets. The use of any information that is subject to the Privacy Act will be utilized in full accordance with all rules of conduct as applicable to Privacy Act Information.

2. Deliverables. The deliverables in this contract will be considered sensitive and shall not be shared with any other organization without prior approval from the OCC CO.

3. Confidentiality. The Contractor agrees to assume responsibility for protecting the confidentiality of government records and data associated with this contract, which are not public information. Each Contractor or employee of the Contractor to whom information may be made available or disclosed shall be notified in writing by the Contractor that such information may be disclosed only for a purpose and to the extent authorized herein.

4. Non-Disclosure Agreement. Each individual who has access to OCC facilities under this contract shall execute a Non-Disclosure Agreement before being allowed access to OCC facilities under this contract.

C. Configuration Management

1. Secure Configuration Settings. Information technology acquisitions must use OCC established configuration settings or utilize common security configurations available from the National Institute of Standards and Technology’s website at http://checklists.nist.gov where OCC standards do not exist. (FAR part 39.1)

2. Configuration Management. Hardware or software configuration changes shall be in accordance with the OCC standards and the OCC Continuous Diagnostics and Mitigation (CDM) Program to include dashboard reporting requirements and OCC’s Configuration Management policy. The OCC Cyber Security Office (CSO) shall be informed of and involved in all configuration changes to the OCC IT environment including systems, software, infrastructure architecture, infrastructure assets, and end user assets. The OCC CSO shall approve any request for change prior to any development activity occurring for that change and shall define the security requirements for the requested change.

3. Secure Configuration Baselines. The Contractor shall apply OCC-approved secure baseline configurations to its solution.

D. Data Protection

1. Data Encryption. Where encryption is required, as specified by the OCC, the Contractor shall ensure that encryption is established and maintained for data at rest and in transit for the duration of the contract. The encryption employed shall be equivalent to those approved in Federal Information Processing Standards (FIPS) Publication 140.

2. Need to Know. Sensitive information, data, and/or equipment will only be disclosed to authorized personnel on a Need-To-Know basis. The Contractor shall ensure that appropriate administrative, technical, and physical safeguards are established to ensure the security and confidentiality of this information, data, and/or equipment is properly protected.

3. Use of PII. The Contractor shall not use any Personally Identifiable Information (PII), E-mail Groups, Lists, or contract information for any purpose other than those activities necessary to the performance of this contract.

E. Incident Response

1. Notification. All Information Security Incidents, including those that potentially or actually cause the compromise of OCC information, must be reported in accordance with the requirements below, even if it is believed the incident may be limited, small, or insignificant. OCC will determine when an incident requires additional focus and attention.

Contractor employees must report all information security incidents to the OCC Cyber Defense Center (CDC) immediately (within 1 hour) after becoming aware of the incident, at: Computer.Security@occ.treas.gov, (202) 649-7930, regardless of day or time.

Contractor employees must provide any supplementary information or reports related to a previously reported incident directly to the OCC CDC; with the following text in the subject line of the email: “Supplementary Information/Report related to previously reported incident ## [insert number].”

Do NOT include any Sensitive Information in the subject or body of any e-mail. To transmit Sensitive Information, use FIPS 140-2 compliant encryption methods to protect Sensitive Information in attachments to email. Passwords must not be communicated in the same email as the attachment.

When notifying the OCC CDC, copy the Contracting Officer if possible or, if reporting by phone or Contracting Officer’s email is not immediately available, contact the Contracting Officer immediately after reporting the incident to the OCC CDC.

F. Information Ownership

1. Government Access. The government will retain unrestricted rights to government data. The OCC retains ownership of any user created/loaded data and applications hosted on Contractor’s infrastructure, as well as maintains the right to request full copies of these at any time.

2. Removal of OCC Data. The Contractor acknowledges the OCC’s exclusive right of ownership of the information and is required to transfer or return (or delete) all agency data collected, processed, stored or maintained by Contractor on behalf of the OCC upon termination of services, and shall provide written certification and supporting documentation attesting to the return or deletion of agency data collected, processed, maintained, or stored by the Contractor.

3. Documents and Deliverables. The preliminary and final deliverables and all associated working papers and other material deemed relevant by the agency that have been generated in the performance of this contract, are the property of the U.S. Government. The Contractor shall not release any information without the written consent of the Contracting Officer. All work papers, preliminary and final deliverables and must be submitted to the COR at the conclusion of the contract in an acceptable and usable format, which may include the original format.

G. System Access

1. Government Right to Terminate Access. The OCC, at its discretion, may suspend or terminate the access to any systems and/or facilities when an information security incident or other electronic access violation, use or misuse issue gives cause for such action. The suspension or termination may last until such time as the OCC determines that the situation has been corrected or no longer exists.

2. PIV Requirement. The Contractor shall support multi-factor authentication through the use of Personal Identity Verification (PIV) cards. The PIV cards must be compliant with FIPS 201, “Personal Identity Verification (PIV) requirements” and NIST SP 800-78, “Cryptographic Algorithms and Key Sizes for PIV” to ensure secure and reliable forms of identification standards are met. All access to OCC IT systems will be accomplished using PIV. Accounts with passwords will only be used where a PIV exception has been granted by the OCC CIO or designate. System-interconnection access and/or authentication across multiple cloud solutions must meet OCC Cloud Access Security Brokers (CASB), SSO, Federated, SAML architecture standards and requirements.

H. Training Requirements

1. Security Awareness Training. All Contractor personnel with access to OCC facilities and/or systems must complete OCC-provided mandatory security and privacy training prior to gaining access to OCC information systems. Non-compliance may result in revocation of system access.

I. Security and Privacy Deliverables

The Contractor shall provide the following security and privacy deliverables. The specific contents and template for each deliverable will be agreed upon with the COR after contract award.

PART III - OTHER CONTRACTUAL TERMS AND CONDITIONS

1.0 TYPE OF PURCHASE ORDER

This is a FFP Purchase Order.

2.0 INVOICING

The Contractor shall invoice for services performed. Refer to DTAR 1052.232-7003 ELECTRONIC SUBMISSION OF PAYMENT REQUESTS (APR 2015) for information on the submission of invoices.

3.0 FEDERAL ACQUISITION REGULATION (FAR) CLAUSES

FAR 52.252-2 CLAUSES INCORPORATED BY REFERENCE (FEB 1998)

This contract incorporates one or more clauses by reference, with the same force and effect as if they were given in full text. Upon request, the Contracting Officer will make their full text available. Also, the full text of a clause may be accessed electronically at this/these address(es): www.acquisition.gov

(End of Clause)

FAR Clause

(End of Table)

FAR 52.204 -21 BASIC SAFEGUARDING OF COVERED CONTRACTOR INFORMATION SYSTEMS (JUN 2016)

(a) Definitions. As used in this clause-- “Covered contractor information system” means an information system that is owned or operated by a contractor that processes, stores, or transmits Federal contract information.

“Federal contract information” means information, not intended for public release, that is provided by or generated for the Government under a contract to develop or deliver a product or service to the Government, but not including information provided by the Government to the public (such as on public Web sites) or simple transactional information, such as necessary to process payments.

“Information” means any communication or representation of knowledge such as facts, data, or opinions, in any medium or form, including textual, numerical, graphic, cartographic, narrative, or audiovisual (Committee on National Security Systems Instruction (CNSSI) 4009).

“Information system” means a discrete set of information resources organized for the collection, processing, maintenance, use, sharing, dissemination, or disposition of information (44 U.S.C. 3502).

“Safeguarding” means measures or controls that are prescribed to protect information systems.

(b) Safeguarding requirements and procedures.

(1) The Contractor shall apply the following basic safeguarding requirements and procedures to protect covered contractor information systems. Requirements and procedures for basic safeguarding of covered contractor information systems shall include, at a minimum, the following security controls:

(i) Limit information system access to authorized users, processes acting on behalf of authorized users, or devices (including other information systems).

(ii) Limit information system access to the types of transactions and functions that authorized users are permitted to execute.

(iii) Verify and control/limit connections to and use of external information systems.

(iv) Control information posted or processed on publicly accessible information systems.

(v) Identify information system users, processes acting on behalf of users, or devices.

(vi) Authenticate (or verify) the identities of those users, processes, or devices, as a prerequisite to allowing access to organizational information systems.

(vii) Sanitize or destroy information system media containing Federal Contract Information before disposal or release for reuse.

(viii) Limit physical access to organizational information systems, equipment, and the respective operating environments to authorized individuals.

(ix) Escort visitors and monitor visitor activity; maintain audit logs of physical access; and control and manage physical access devices.

(x) Monitor, control, and protect organizational communications (i.e., information transmitted or received by organizational information systems) at the external boundaries and key internal boundaries of the information systems.

(xi) Implement subnetworks for publicly accessible system components that are physically or logically separated from internal networks.

(xii) Identify, report, and correct information and information system flaws in a timely manner.

(xiii) Provide protection from malicious code at appropriate locations within organizational information systems.

(xiv) Update malicious code protection mechanisms when new releases are available.

(xv) Perform periodic scans of the information system and real-time scans of files from external sources as files are downloaded, opened, or executed.

(2) Other requirements. This clause does not relieve the Contractor of any other specific safeguarding requirements specified by Federal agencies and departments relating to covered contractor information systems generally or other Federal safeguarding requirements for controlled unclassified information (CUI) as established by Executive Order 13556.

(c) Subcontracts. The Contractor shall include the substance of this clause, including this paragraph (c), in subcontracts under this contract (including subcontracts for the acquisition of commercial items, other than commercially available off-the-shelf items), in which the subcontractor may have Federal contract information residing in or transiting through its information system.

(End of Clause)

FAR 52.212-5 CONTRACT TERMS AND CONDITIONS REQUIRED TO IMPLEMENT STATUTES OR EXECUTIVE ORDERS -- COMMERCIAL ITEMS (AUG 2019)

(a) The Contractor shall comply with the following Federal Acquisition Regulation (FAR) clauses, which are incorporated in this contract by reference, to implement provisions of law or Executive orders applicable to acquisitions of commercial items:

(1) 52.203-19, Prohibition on Requiring Certain Internal Confidentiality Agreements or Statements (Jan 2017) (section 743 of Division E, Title VII, of the Consolidated and Further Continuing Appropriations Act 2015 (Pub. L. 113-235) and its successor provisions in subsequent appropriations acts (and as extended in continuing resolutions)).

(2) 52.204-23, Prohibition on Contracting for Hardware, Software, and Services Developed or Provided by Kaspersky Lab and Other Covered Entities (Jul 2018) (Section 1634 of Pub. L. 115-91).

(3) 52.204-25, Prohibition on Contracting for Certain Telecommunications and Video Surveillance Services or Equipment. (AUG 2019) (Section 89(a)(1)(A) of Pub. L. 115-232).

(4) 52.209-10, Prohibition on Contracting with Inverted Domestic Corporations (Nov 2015)

(5) 52.233-3, Protest After Award (AUG 1996) (31 U.S.C. 3553).

(6) 52.233-4, Applicable Law for Breach of Contract Claim (OCT 2004) (Public Laws 108-77, 108-78 (19 U.S.C. 3805 note)).

(b) The Contractor shall comply with the FAR clauses in this paragraph (b) that the contracting officer has indicated as being incorporated in this contract by reference to implement provisions of law or Executive orders applicable to acquisitions of commercial items:

[Contracting Officer check as appropriate.] ___ (1) 52.203-6, Restrictions on Subcontractor Sales to the Government (Sept 2006), with Alternate I (Oct 1995) (41 U.S.C. 4704 and 10 U.S.C. 2402).

___ (2) 52.203-13, Contractor Code of Business Ethics and Conduct (Oct 2015) (41 U.S.C. 3509).

___ (3) 52.203-15, Whistleblower Protections under the American Recovery and Reinvestment Act of 2009 (Jun 2010) (Section 1553 of Pub L. 111-5) (Applies to contracts funded by the American Recovery and Reinvestment Act of 2009).

XXX (4) 52.204-10, Reporting Executive Compensation and First-Tier Subcontract Awards (Oct 2018) (Pub. L. 109-282) (31 U.S.C. 6101 note).

___ (5) [Reserved] ___ (6) 52.204-14, Service Contract Reporting Requirements (Oct 2016) (Pub. L. 111-117, section 743 of Div. C).

___ (7) 52.204-15, Service Contract Reporting Requirements for Indefinite-Delivery Contracts (Oct 2016) (Pub. L. 111-117, section 743 of Div. C).

XXX (8) 52.209-6, Protecting the Government’s Interest When Subcontracting with Contractors Debarred, Suspended, or Proposed for Debarment (Oct 2015) (31 U.S.C. 6101 note).

___ (9) 52.209-9, Updates of Publicly Available Information Regarding Responsibility Matters (Oct 2018) (41 U.S.C. 2313).

___ (10) [Reserved] ___ (11) (i) 52.219-3, Notice of HUBZone Set-Aside or Sole-Source Award (Nov 2011) (15 U.S.C. 657a).

___ (ii) Alternate I (Nov 2011) of 52.219-3.

___ (12) (i) 52.219-4, Notice of Price Evaluation Preference for HUBZone Small Business Concerns (Oct 2014) (if the offeror elects to waive the preference, it shall so indicate in its offer)(15 U.S.C. 657a).

___ (ii) Alternate I (Jan 2011) of 52.219-4.

___ (13) [Reserved] XXX (14) (i) 52.219-6, Notice of Total Small Business Aside (Nov 2011) (15 U.S.C. 644).

___ (ii) Alternate I (Nov 2011).

___ (iii) Alternate II (Nov 2011).

___ (15) (i) 52.219-7, Notice of Partial Small Business Set-Aside (June 2003) (15 U.S.C. 644).

___ (ii) Alternate I (Oct 1995) of 52.219-7.

___ (iii) Alternate II (Mar 2004) of 52.219-7.

___ (16) 52.219-8, Utilization of Small Business Concerns (Oct 2018) (15 U.S.C. 637(d)(2) and (3)).

___ (17) (i) 52.219-9, Small Business Subcontracting Plan (Aug 2018) (15 U.S.C. 637 (d)(4)).

___ (ii) Alternate I (Nov 2016) of 52.219-9.

___ (iii) Alternate II (Nov 2016) of 52.219-9.

___ (iv) Alternate III (Nov 2016) of 52.219-9.

___ (v) Alternate IV (Aug 2018) of 52.219-9.

___ (18) 52.219-13, Notice of Set-Aside of Orders (Nov 2011) (15 U.S.C. 644(r)).

___ (19) 52.219-14, Limitations on Subcontracting (Jan 2017) (15 U.S.C. 637(a)(14)).

___ (20) 52.219-16, Liquidated Damages—Subcontracting Plan (Jan 1999) (15 U.S.C. 637(d)(4)(F)(i)).

___ (21) 52.219-27, Notice of Service-Disabled Veteran-Owned Small Business Set-Aside (Nov 2011) (15 U.S.C. 657f).

XXX (22) 52.219-28, Post Award Small Business Program Rerepresentation (Jul 2013) (15 U.S.C. 632(a)(2)).

___ (23) 52.219-29, Notice of Set-Aside for, or Sole Source Award to, Economically Disadvantaged Women-Owned Small Business Concerns (Dec 2015) (15 U.S.C. 637(m)).

___ (24) 52.219-30, Notice of Set-Aside for, or Sole Source Award to, Women-Owned Small Business Concerns Eligible Under the Women-Owned Small Business Program (Dec 2015) (15 U.S.C. 637(m)).

XXX (25) 52.222-3, Convict Labor (June 2003) (E.O. 11755).

XXX (26) 52.222-19, Child Labor—Cooperation with Authorities and Remedies (Jan 2018) (E.O. 13126).

XXX (27) 52.222-21, Prohibition of Segregated Facilities (Apr 2015).

XXX (28) (i) 52.222-26, Equal Opportunity (Sep 2016) (E.O. 11246).

___ (ii) Alternate I (Feb 1999) of 52.222-26.

___ (29) (i) 52.222-35, Equal Opportunity for Veterans (Oct 2015) (38 U.S.C. 4212).

___ (ii) Alternate I (July 2014) of 52.222-35.

___ (30) (i) 52.222-36, Equal Opportunity for Workers with Disabilities (Jul 2014) (29 U.S.C. 793).

___ (ii) Alternate I (July 2014) of 52.222-36.

___ (31) 52.222-37, Employment Reports on Veterans (Feb 2016) (38 U.S.C. 4212).

___ (32) 52.222-40, Notification of Employee Rights Under the National Labor Relations Act (Dec 2010) (E.O. 13496).

XXX (33) (i) 52.222-50, Combating Trafficking in Persons (JAN 2019) (22 U.S.C. chapter 78 and E.O. 13627).

___ (ii) Alternate I (Mar 2015) of 52.222-50, (22 U.S.C. chapter 78 and E.O. 13627).

___ (34) 52.222-54, Employment Eligibility Verification (Oct 2015). (E. O. 12989). (Not applicable to the acquisition of commercially available off-the-shelf items or certain other types of commercial items as prescribed in 22.1803.)

___ (35) (i) 52.223-9, Estimate of Percentage of Recovered Material Content for EPA-Designated Items (May 2008) (42 U.S.C. 6962(c)(3)(A)(ii)). (Not applicable to the acquisition of commercially available off-the-shelf items.)

___ (ii) Alternate I (May 2008) of 52.223-9 (42 U.S.C. 6962(i)(2)(C)). (Not applicable to the acquisition of commercially available off-the-shelf items.)

___ (36) 52.223-11, Ozone-Depleting Substances and High Global Warming Potential Hydrofluorocarbons (Jun 2016) (E.O.13693).

___ (37) 52.223-12, Maintenance, Service, Repair, or Disposal of Refrigeration Equipment and Air Conditioners (Jun 2016) (E.O. 13693).

___ (38) (i) 52.223-13, Acquisition of EPEAT® -Registered Imaging Equipment (Jun 2014) (E.O.s 13423 and 13514 ___ (ii) Alternate I (Oct 2015) of 52.223-13.

___ (39) (i) 52.223-14, Acquisition of EPEAT® -Registered Television (Jun 2014) (E.O.s 13423 and 13514).

___ (ii) Alternate I (Jun 2014) of 52.223-14.

XXX (40) 52.223-15, Energy Efficiency in Energy-Consuming Products (Dec 2007) (42 U.S.C. 8259b).

___ (41) (i) 52.223-16, Acquisition of EPEAT® -Registered Personal Computer Products (Oct 2015) (E.O.s 13423 and 13514).

___ (ii) Alternate I (Jun 2014) of 52.223-16.

XXX (42) 52.223-18, Encouraging Contractor Policies to Ban Text Messaging while Driving (Aug 2011) (E.O. 13513).

___ (43) 52.223-20, Aerosols (Jun 2016) (E.O. 13693).

___ (44) 52.223-21, Foams (Jun 2016) (E.O. 13696).

___ (45) (i) 52.224-3, Privacy Training (Jan 2017) (5 U.S.C. 552a).

___ (ii) Alternate I (Jan 2017) of 52.224-3.

___ (46) 52.225-1, Buy American--Supplies (May 2014) (41 U.S.C. chapter 83).

___ (47) (i) 52.225-3, Buy American--Free Trade Agreements--Israeli Trade Act (May 2014) (41 U.S.C. chapter 83, 19 U.S.C. 3301 note, 19 U.S.C. 2112 note, 19 U.S.C. 3805 note, 19 U.S.C. 4001 note, Pub. L. 103-182, 108-77, 108-78, 108-286, 108-302, 109-53, 109-169, 109-283, 110-138, 112-41, 112-42, and 112-43).

___ (ii) Alternate I (May 2014) of 52.225-3.

___ (iii) Alternate II (May 2014) of 52.225-3.

___ (iv) Alternate III (May 2014) of 52.225-3.

___ (48) 52.225-5, Trade Agreements (Aug 2018) (19 U.S.C. 2501, et seq., 19 U.S.C. 3301 note).

XXX (49) 52.225-13, Restrictions on Certain Foreign Purchases (June 2008) (E.O.’s, proclamations, and statutes administered by the Office of Foreign Assets Control of the Department of the Treasury).

___ (50) 52.225-26, Contractors Performing Private Security Functions Outside the United States (Oct 2016) (Section 862, as amended, of the National Defense Authorization Act for Fiscal Year 2008; 10 U.S.C. 2302 Note).

___ (51) 52.226-4, Notice of Disaster or Emergency Area Set-Aside (Nov 2007) (42 U.S.C. 5150).

___ (52) 52.226-5, Restrictions on Subcontracting Outside Disaster or Emergency Area (Nov 2007) (42 U.S.C. 5150).

___ (53) 52.232-29, Terms for Financing of Purchases of Commercial Items (Feb 2002) (41 U.S.C. 4505), 10 U.S.C. 2307(f)).

___ (54) 52.232-30, Installment Payments for Commercial Items (Jan 2017) (41 U.S.C. 4505, 10 U.S.C. 2307(f)).

XXX (55) 52.232-33, Payment by Electronic Funds Transfer--System for Award Management (Oct 2018) (31 U.S.C. 3332).

___ (56) 52.232-34, Payment by Electronic Funds Transfer—Other Than System for Award Management (Jul 2013) (31 U.S.C. 3332).

___ (57) 52.232-36, Payment by Third Party (May 2014) (31 U.S.C. 3332).

XXX (58) 52.239-1, Privacy or Security Safeguards (Aug 1996) (5 U.S.C. 552a).

___ (59) 52.242-5, Payments to Small Business Subcontractors (Jan 2017) (15 U.S.C. 637(d)(13)).

___ (60) (i) 52.247-64, Preference for Privately Owned U.S.-Flag Commercial Vessels (Feb 2006) (46 U.S.C. Appx 1241(b) and 10 U.S.C. 2631).

___ (ii) Alternate I (Apr 2003) of 52.247-64.

___ (iii) Alternate II (Feb 2006) of 52.247-64.

(c) The Contractor shall comply with the FAR clauses in this paragraph (c), applicable to commercial services, that the Contracting Officer has indicated as being incorporated in this contract by reference to implement provisions of law or executive orders applicable to acquisitions of commercial items:

[Contracting Officer check as appropriate.] ___ (1) 52.222-17, Nondisplacement of Qualified Workers (May 2014) (E.O. 13495) ___ (2) 52.222-41, Service Contract Labor Standards (Aug 2018) (41 U.S.C. chapter 67.).

___ (3) 52.222-42, Statement of Equivalent Rates for Federal Hires (May 2014) (29 U.S.C. 206 and 41 U.S.C. chapter 67).

___ (4) 52.222-43, Fair Labor Standards Act and Service Contract Labor Standards -- Price Adjustment (Multiple Year and Option Contracts) (Aug 2018) (29 U.S.C.206 and 41 U.S.C. chapter 67).

___ (5) 52.222-44, Fair Labor Standards Act and Service Contract Labor Standards -- Price Adjustment (May 2014) (29 U.S.C. 206 and 41 U.S.C. chapter 67).

___ (6) 52.222-51, Exemption from Application of the Service Contract Labor Standards to Contracts for Maintenance, Calibration, or Repair of Certain Equipment--Requirements (May 2014) (41 U.S.C. chapter 67).

___ (7) 52.222-53, Exemption from Application of the Service Contract Labor Standards to Contracts for Certain Services--Requirements (May 2014) (41 U.S.C. chapter 67).

___ (8) 52.222-55, Minimum Wages Under Executive Order 13658 (Dec 2015) (E.O. 13658).

___ (9) 52.222-62, Paid Sick Leave Under Executive Order 13706 (JAN 2017) (E.O. 13706).

___ (10) 52.226-6, Promoting Excess Food Donation to Nonprofit Organizations. (May 2014) (42 U.S.C. 1792).

(d) Comptroller General Examination of Record The Contractor shall comply with the provisions of this paragraph (d) if this contract was awarded using other than sealed bid, is in excess of the simplified acquisition threshold, and does not contain the clause at 52.215-2, Audit and Records -- Negotiation.

(1) The Comptroller General of the United States, or an authorized representative of the Comptroller General, shall have access to and right to examine any of the Contractor’s directly pertinent records involving transactions related to this contract.

(2) The Contractor shall make available at its offices at all reasonable times the records, materials, and other evidence for examination, audit, or reproduction, until 3 years after final payment under this contract or for any shorter period specified in FAR Subpart 4.7, Contractor Records Retention, of the other clauses of this contract. If this contract is completely or partially terminated, the records relating to the work terminated shall be made available for 3 years after any resulting final termination settlement. Records relating to appeals under the disputes clause or to litigation or the settlement of claims arising under or relating to this contract shall be made available until such appeals, litigation, or claims are finally resolved.

(3) As used in this clause, records include books, documents, accounting procedures and practices, and other data, regardless of type and regardless of form. This does not require the Contractor to create or maintain any record that the Contractor does not maintain in the ordinary course of business or pursuant to a provision of law.

(e)

(1) Notwithstanding the requirements of the clauses in paragraphs (a), (b), (c) and (d) of this clause, the Contractor is not required to flow down any FAR clause, other than those in this paragraph (e)(1) in a subcontract for commercial items. Unless otherwise indicated below, the extent of the flow down shall be as required by the clause—

(i) 52.203-13, Contractor Code of Business Ethics and Conduct (Jan 2019) (41 U.S.C. 3509).

(ii) 52.203-19, Prohibition on Requiring Certain Internal Confidentiality Agreements or Statements (Jan 2017) (section 743 of Division E, Title VII, of the Consolidated and Further Continuing Appropriations Act, 2015 (Pub. L. 113-235) and its successor provisions in subsequent appropriations acts (and as extended in continuing resolutions)).

(iii) 52.204-23, Prohibition on Contracting for Hardware, Software, and Services Developed or Provided by Kaspersky Lab and Other Covered Entities (Jul 2018) (Section 1634 of Pub. L. 115-91).

(iv) 52.204-25, Prohibition on Contracting for Certain Telecommunications and Video Surveillance Services or Equipment. (AUG 2019) (Section 889(a)(1)(A) of Pub. L. 115-232).

(v) 52.219-8, Utilization of Small Business Concerns (Oct 2018) (15 U.S.C. 637(d)(2) and (3)), in all subcontracts that offer further subcontracting opportunities. If the subcontract (except subcontracts to small business concerns) exceeds $700,000 ($1.5 million for construction of any public facility), the subcontractor must include 52.219-8 in lower tier subcontracts that offer subcontracting opportunities.

(vi) 52.222-17, Nondisplacement of Qualified Workers (May 2014) (E.O. 13495). Flow down required in accordance with paragraph (1) of FAR clause 52.222-17.

(vii) 52.222-21, Prohibition of Segregated Facilities (Apr 2015).

(viii) 52.222-26, Equal Opportunity (Sep 2016) (E.O. 11246).

(ix) 52.222-35, Equal Opportunity for Veterans (Oct 2019) (38 U.S.C. 4212).

(x) 52.222-36, Equal Opportunity for Workers with Disabilities (Jul 2014) (29 U.S.C. 793).

(xi) 52.222-37, Employment Reports on Veterans (Feb 2016) (38 U.S.C. 4212).

(xii) 52.222-40, Notification of Employee Rights Under the National Labor Relations Act (Dec 2010) (E.O. 13496). Flow down required in accordance with paragraph (f) of FAR clause 52.222-40.

(xiii) 52.222-41, Service Contract Labor Standards (Aug 2018), (41 U.S.C. chapter 67).

(xiv) (A) 52.222-50, Combating Trafficking in Persons (Jan 2019) (22 U.S.C. chapter 78 and E.O. 13627).

(B) Alternate I (Mar 2015) of 52.222-50 (22 U.S.C. chapter 78 E.O. 13627).

(xv) 52.222-51, Exemption from Application of the Service Contract Labor Standards to Contracts for Maintenance, Calibration, or Repair of Certain Equipment--Requirements (May 2014) (41 U.S.C. chapter 67.)

(xvi) 52.222-53, Exemption from Application of the Service Contract Labor Standards to Contracts for Certain Services--Requirements (May 2014) (41 U.S.C. chapter 67)

(xvii) 52.222-54, Employment Eligibility Verification (Oct 2015) (E. O. 12989).

(xviii) 52.222-55, Minimum Wages Under Executive Order 13658 (Dec 2015).

(xix) 52.222-62, Paid sick Leave Under Executive Order 13706 (JAN 2017) (E.O. 13706).

(xx) (A) 52.224-3, Privacy Training (Jan 2017) (5 U.S.C. 552a).

(B) Alternate I (Jan 2017) of 52.224-3.

(xxi) 52.225-26, Contractors Performing Private Security Functions Outside the United States (Oct 2016) (Section 862, as amended, of the National Defense Authorization Act for Fiscal Year 2008; 10 U.S.C. 2302 Note).

(xxii) 52.226-6, Promoting Excess Food Donation to Nonprofit Organizations. (May 2014) (42 U.S.C. 1792). Flow down required in accordance with paragraph (e) of FAR clause 52.226-6.

(xxiii)52.247-64, Preference for Privately-Owned U.S. Flag Commercial Vessels (Feb 2006) (46 U.S.C. Appx 1241(b) and 10 U.S.C. 2631). Flow down required in accordance with paragraph (d) of FAR clause 52.247-64.

(2) While not required, the Contractor may include in its subcontracts for commercial items a minimal number of additional clauses necessary to satisfy its contractual obligations.

(End of Clause)

4.0 DEPARTMENT OF THE TREASURY ACQUISITION REGULATION (DTAR) CLAUSES

DTAR 1052.210-70 CONTRACTOR PUBLICITY (APR 2015)

The Contractor, or any entity or representative acting on behalf of the Contractor, shall not refer to the supplies or services furnished pursuant to the provisions of this contract in any news release or commercial advertising, or in connection with any news release or commercial advertising, without first obtaining explicit written consent to do so from the Contracting Officer. Should any reference to such supplies or services appear in any news release or commercial advertising issued by or on behalf of the Contractor without the required consent, the Government shall consider institution of all remedies available under applicable law, including 31 U.S.C. 333, and this contract. Further, any violation of this clause may be considered as part of the evaluation of past performance.

(End of Clause)

DTAR 1052.232-7003 ELECTRONIC SUBMISSION OF PAYMENT REQUESTS (APR 2015)

(a) Definitions. As used in this clause—

(1) “Payment request” means a bill, voucher, invoice, or request for contract financing payment with associated supporting documentation. The payment request must comply with the requirements identified in FAR 32.905(b), “Content of Invoices” and the applicable Payment clause included in this contract.

(b) Except as provided in paragraph (c) of this clause, the Contractor shall submit payment requests electronically using the Invoice Processing Platform (IPP). Information regarding IPP, including IPP Customer Support contact information, is available at www.ipp.gov or any successor site.

(c) The Contractor may submit payment requests using other than IPP only when the Contracting Officer authorizes alternate procedures in writing in accordance with Treasury procedures.

(d) If alternate payment procedures are authorized, the Contractor shall include a copy of the Contracting Officer's written authorization with each payment request.

(End of Clause)

5.0 OFFICE OF THE COMPTROLLER OF THE CURRENCY (OCC) CLAUSES

OCC 1052.239-8000 ELECTRONIC AND INFORMATION TECHNOLOGY ACCESSIBILITY (JULY 2018)

1. Pursuant to Section 508 of the Rehabilitation Act of 1973 (29 U.S.C. 794d), as amended by the Workforce Investment Act of 1998, all Information Communication Technology (ICT) products and services developed, acquired, maintained, or used under this contract/order must comply with the “Information Communication Technology Accessibility Provisions” set forth by the Architectural and Transportation Barriers Compliance Board (also referred to as the “Access Board”) in 36 CFR Part 1194. Further information can be accessed at:

0. Section 508 - https://www.access-board.gov/guidelines-and-standards/communications-and-it/about-the-ict-refresh/final-rule/single-file-version

0. Web Content Accessibility Guidelines (WCAG) - http://www.w3.org/TR/WCAG20/

1. The Section 508 accessibility standards applicable to this contract/order are identified in the Statement of Work/Performance Work Statement. If it is determined by the Government that ICT products and services provided by the Contractor do not conform to the described accessibility standards in the Accessibility Conformance Report (ACR), remediation of the products or services to the level of conformance specified in the Contractor’s Voluntary Product Assessment Template (VPAT) will be the responsibility of the Contractor at its own expense.

1. In the event of a modification(s) to this contract/order, which adds new ICT products or services or revises the type of, or specifications for, products or services the Contractor is to provide, including ICT deliverables such as electronic documents and reports, the Contracting Officer may require that the contractor submit a completed VPAT found at https://www.itic.org/policy/accessibility/vpat, to assist the Government in determining that the ICT products or services support Section 508 accessibility standards.

(End of Clause)

OCC 1052.242-8001 POINT OF CONTACT (JUNE 2014)

(a) The Point of Contact (POC) for this award is responsible for inspection and invoice approval, and where required, acceptance of deliverables or services rendered.

(b) The POC does not have authority to take any action, either directly or indirectly, that would change pricing, quantity, place of performance, delivery schedule, or any terms and conditions of this award or to direct the contractor in the accomplishment of effort which goes beyond the scope.

(c) If the contractor believes the POC has changed the scope of this contract, order or blanket purchase agreement, the contractor shall promptly notify the Contracting Officer (CO) verbally or in writing. In the event the contractor effects any change at the direction of any person other than the CO, the change will be considered to have been made without authority and no adjustment will be made in the award price to cover any increase incurred as a result thereof.

(d) The POC for this award is:

(End of Clause)

OCC 1052.243-8001 AUTHORIZED CHANGES ONLY BY THE CONTRACTING OFFICER (SEP 2016)

(a) Except as specified in paragraph (b) below, no order, statement, or conduct of Government personnel who provide technical direction or in any other manner communicates with contractor personnel during the performance of this contract shall constitute a change under the “Changes” clause of this contract.

(b) The Contractor shall not comply with any order, direction or request of Government personnel unless it is issued in writing and signed by the Contracting Officer (CO), or is pursuant to specific authority otherwise included as a part of this contract.

(c) The CO is the only person authorized to approve changes in any of the requirements of this contract and notwithstanding provisions contained elsewhere in this contract, the said authority remains solely the CO’s. In the event the Contractor effects any change at the direction of any person other than the CO, the change will be considered to have been made without authority and no adjustment will be made in the contract price to cover any increase in charges incurred as a result thereof. The primary CO will be identified via separate letter to the contractor. Any CO with appropriate warrant authority may direct changes through a modification to the contract.

(End of Clause)

OCC 1052.245.8001 INFORMATION TECHNOLOGY SECURITY AWARENESS TRAINING (JAN 2014)

(a) As used in this clause—“Network (or Logical) Access” means network access to the Office of the Comptroller of the Currency’s (Government) information resources regardless of location, and “contractor personnel” includes advisors, consultants, or agents to the contractor, subcontractors or their personnel, or any other persons under the auspices of the contractor.

(b) The Contractor understands that work to be performed under this contract may require network (logical) access to the Government’s information resources.