MAS - Mantech Advanced Systems International, Inc. - 47QTCA21D0031

General Services Administration Federal Acquisition Service

Authorized Federal Supply Schedule FSS Price List

Multiple Award Schedule (MAS)

Contract Number:

47QTCA21D0031

Contract Period of Performance:

December 14, 2020 through December 13, 2030

Pricelist current through Modification PS-0027, effective October 14, 2025

ManTech Advanced Systems International, Inc.

2251 Corporate Park Drive Herndon, VA 20171-4839

Attn: Jeromy Block Tel: 703-218-6440 Fax: 703-814-4201

Large Business http://www.mantech.com

On-line access to contract ordering information, terms and conditions, up-to-date pricing, and the option to create an electronic delivery order are available through GSA Advantage! ®, a menu-driven database system. For more information on ordering go to the following website:

https://www.gsa.gov/schedules.

Authorized Federal Supply Schedule Price List 47QTCA21D0031 Page i

TABLE OF CONTENTS

Information for Ordering Agencies Terms and Conditions Applicable to Software Licenses (Special Item Number 511210) and Software Maintenance Services (Special Item Number 54151) of General Purpose Commercial Information Technology Software Terms and Conditions Applicable to Highly Adaptive Cybersecurity Services (HACS) (Special Item Number 54151HACS) Terms and Conditions Applicable to Purchase of Information Technology Training for General Purpose Commercial Information Technology Equipment and Software (Special Item Number 611420) Terms and Conditions Applicable to Information Technology (IT) Professional Services (Special Item Number 54151S) Terms and Conditions Applicable to Electronic Commerce and Subscription Services (Special Item Number 54151ECOM) Terms and Conditions Applicable to Cloud-Related IT Professional Services (Special Item Number 518210C) Terms and Conditions Applicable to Health Information Technology (IT) Services (Special Item Number 54151HEAL) BAA Information Delivery System (BIDS) Product Description and Pricing DecisionPoint General Description DecisionPoint Pricing Labor Category Descriptions applicable to SIN 518210C Labor Category Descriptions applicable to SIN 54151HACS Labor Category Descriptions applicable to SIN 54151S Labor Category Descriptions applicable to SIN 54151HEAL Labor Category Descriptions applicable to SINs 541330ENG, 541380, 541420, 541611, 541614, 541614SVC, 541715, and 611430 Labor Category Descriptions applicable to SIN 541620

47QTCA21D0031 Page 1

Information for Ordering Agencies

1a. AWARDED SPECIAL ITEM NUMBERS (SINs):

SIN Title

511210 Software Licenses 54151 Software Maintenance Services

54151HACS Highly Adaptive Cybersecurity Services (HACS) 611420 Information Technology Training 54151S Information Technology Professional Services

54151ECOM Electronic Commerce and Subscription Services 518210C Cloud and Cloud-Related IT Professional Services

54151HEAL Health Information Technology Services 541330ENG Engineering Services

541380 Testing Laboratory Services 541420 Engineering System Design and Integration Services 541611 Management and Financial Consulting, Acquisition and Grants

Management Support, and Business Program and Project Management Services

541614 Deployment, Distribution and Transportation Logistics Services

541614SVC Supply and Value Chain Management 541715 Engineering Research and Development and Strategic Planning 611430 Professional and Management Development Training 541620 Environmental Consulting Services OLM Order Level Materials (OLMs)

1b. APPROVED PRODUCTS: See Pages 46-49

1c. APPROVED LABOR CATEGORY DESCRIPTIONS: See Pages 50 - 339

2. MAXIMUM ORDER: $250,000 per order for SINs 541380 and 611420, $500,000 per order for

SINs 511210, 54151, 54151HACS, 54151S, 54151ECOM, 518210C, and 54151HEAL;

$1,000,000 for SINs 541330ENG, 541420, 541611, 541614, 541614SVC, 541620, 541715, and 611430; and $100,000 per order for SIN OLM Notwithstanding this limit, agencies may place and ManTech may honor orders exceeding this limit in accordance with FAR 8.404. This maximum order value is a dollar amount at which it is suggested that the ordering agency request greater discounts from the contractor before issuing the order. The contractor may 1) offer a new lower price, 2) offer the lowest price available under the contract, or 3) decline the order within five (5) days. In accordance with the Maximum Order provisions contained in the Schedule, a delivery order may be placed against the schedule even though it exceeds the maximum order threshold. There is no maximum ceiling for any task order.

47QTCA21D0031 Page 2

3. MINIMUM ORDER: $100.00 unless ManTech agrees to accept a smaller order amount. When the Government requires supplies or services covered by this contract in an amount less than $100, the Government is not obligated to purchase, nor is ManTech obligated to furnish those supplies or services under the contract. However, if the Government places such orders, they shall be deemed to be accepted by ManTech, unless returned to the ordering office within 5 workdays after receipt by ManTech.

4. GEOGRAPHIC COVERAGE: Services offered Locally, Nationally and/or Worldwide. The geographic scope of this contract is the 48 contiguous states and the District of Columbia, Alaska, Hawaii, and the Commonwealth of Puerto Rico, and, on a worldwide basis, all U.S. Government installations and/or agencies abroad and any foreign country in which the U.S. Government does not prohibit trade.

5. POINT OF PRODUCTION: Not Applicable

6. DISCOUNTS FROM LIST PRICES: Reference Net Pricing included herein. Discounts may be offered on specific orders depending upon the Statement of Work, staffing, geographic location, and other factors.

7. QUANTITY DISCOUNTS: None

8. PROMPT PAYMENT TERMS: None

9. FOREIGN ITEMS: None

10a. TIME OF DELIVERY: As negotiated between Contractor and Ordering Office

10b. EXPEDITED DELIVERY: Contact ManTech Advanced Systems International, Inc.

10c. OVERNIGHT AND 2-DAY-DELIVERY: Contact ManTech Advanced Systems International, Inc.

10d. URGENT REQUIREMENTS: Contact ManTech Advanced Systems International, Inc.

11. FOB POINT: Destination

12a. ORDERING ADDRESS: ManTech Advanced Systems International, Inc.

2251 Corporate Park Drive

Herndon, VA 20171-4839

12b. ORDERING PROCEDURES: See Federal Acquisition Regulation (FAR) 8.405-3.

13. PAYMENT ADDRESS: ManTech Advanced Systems International, Inc.

c/o ManTech International Corporation

P.O. Box 822895 Philadelphia PA 19182-2895

47QTCA21D0031 Page 3

14. WARRANTY PROVISIONS: Reference Ordering Procedures for Services; Standard Commercial Warranty for Products

15. EXPORT PACKING CHARGES: Actual costs plus applicable G&A

16. TERMS AND CONDITIONS OF RENTAL, MAINTENANCE, AND REPAIR: Not Applicable

17. TERMS AND CONDITIONS OF INSTALLATION: Not Applicable

18. TERMS AND CONDITIONS OF REPAIR PARTS: Not Applicable

19. TERMS AND CONDITIONS FOR ANY OTHER SERVICES: Not Applicable

20. LIST OF SERVICE AND DISTRIBUTION POINTS: Not Applicable

21. LIST OF PARTICIPATING DEALERS:

ManTech Advanced Systems International, Inc.

c/o ManTech SRS Technologies, Inc.

2251 Corporate Park Drive Herndon, VA 20171-4839

DUNS: 066183039

CAGE: 4L958

22. PREVENTATIVE MAINTENANCE: Not Applicable

23a. SPECIAL ATTRIBUTES: Not Applicable

23b. SECTION 508: Not Applicable

24. UNIQUE ENTITY ID (UEI): JY2BDT2K58Z6

25. REGISTERED IN THE SYSTEM FOR AWARD MANAGEMENT (SAM) DATABASE:

Yes

26. TYPES OF ORDERS: Both firm fixed-price and time and materials task orders are acceptable under this contract.

27. SECURITY REQUIREMENTS: In the event security requirements are necessary, the ordering activities may incorporate in their delivery order(s), a security clause in accordance with current laws, regulations, and individual agency policy; however, the burden of administering the security requirements shall be with the ordering agency. If any costs are incurred as a result of the inclusion of security requirements, such costs will not exceed ten percent (10%) or $100,000, of the total dollar value of the order, whichever is less.

47QTCA21D0031 Page 4

28. CONTRACT ADMINISTRATION FOR ORDERING OFFICES: Any ordering office, with respect to any one or more delivery orders placed by it under this contract, may exercise the same rights of termination as might the GSA Contracting Officer under provisions of FAR 52.212-4, paragraphs (1) Termination for the Government’s convenience, and (m) Termination for Cause (See C.1.).

29. PURCHASE OF INCIDENTAL, NON-SCHEDULE ITEMS: For administrative convenience, open market (non-contract) items may be added to a Federal Supply Schedule Blanket Purchase Agreement (BPA) or an individual order, provided that the items are clearly labeled as such on the order, all applicable regulations have been followed, and the price reasonableness has been determined by the ordering activity for the open market (non-contract) items.

30. SUBCONTRACTORS: Subcontractors are to be included on task orders under the schedule price list labor categories and rates when possible. Upon the approval of the ordering agency, subcontractors may be included as off-schedule costs if their services are not suitable under the contract labor categories as listed herein (per the Schedule 70 solicitation).

31. TRAVEL & OTHER DIRECT COSTS (ODCS): For travel and ODCs costs, ManTech will follow the Federal Travel Regulations or Joint Travel Regulations, as applicable. As documented within ManTech’s disclosure statement for each Business Unit, ManTech will apply applicable indirect rates to travel and/or ODC costs per our disclosure statements.

32. DIFFERENTIALS/ALLOWANCES: The rates included herein do not include Cost of Living Allowances or Site Differentials, nor do they include Housing or Relocation Costs. These costs, to include overtime pay and shift differentials shall be negotiated separately on a case-by-case basis with the ordering agencies. Additionally, the rates do not include Hazardous Duty Pay or Sea Duty/Isolated Duty. These costs shall also be negotiated separately on a case-by case- basis with the ordering agencies.

33. OVERTIME: ManTech observes all overtime pay requirements of the Fair Labor Standards Act of 1938, as amended. Thus all employees who are subject to the law’s wage and hour provisions (that is “non-exempt” employees, such as administrative personnel and certain technicians) will receive compensation for approved overtime in accordance with those provisions. In states that have established other overtime standards, applicable legal requirements will be observed.

34. DEFENSE PRIORITIES AND ALLOCATIONS SYSTEM REQUIREMENTS: For task orders issued under this schedule, ManTech recognizes the Defense Priorities and Allocations System Requirements regulation, reference DFAR 252.211-15.

35. LIABILITY FOR INJURY OR DAMAGE: The Contractor shall not be liable for any injury to Government personnel or damage to Government property arising from the use of equipment maintained by the Contractor, unless such injury or damage is due to the fault or negligence of the Contractor.

36. INDUSTRIAL FUNDING FEE: The Industrial Funding Fee is included in the labor rates and the products awarded under this Schedule. The IFF does not apply to off-schedule items such as travel, materials, and other direct costs.

47QTCA21D0031 Page 5

37. SERVICE CONTRACT ACT AND MATRIX: The Service Contract Labor Standards (SCLS) are applicable to this contract and it includes SCLS applicable labor categories. The prices for the cited SCLS labor categories are based on the U.S. Department of Labor Wage Determination Number(s) identified in the SCLS matrix. The prices offered are in line with the geographic scope of the contract (i.e. nationwide).

SCLS Eligible Contract Labor Category SCLS Equivalent Code - Title

WD

Number Computer Services - Professional Staff V* 14045 Computer Operator V 2015-4282 Computer Services - Professional Staff IV* 14044 Computer Operator IV 2015-4282 Computer Services - Professional Staff III* 14043 Computer Operator III 2015-4282 Computer Services - Professional Staff II* 14042 Computer Operator II 2015-4282 Computer Services - Professional Staff I* 14041 Computer Operator I 2015-4282 Logistics Supply Specialist II* 21400 Warehouse Specialist 2015-4282 Logistics Supply Specialist I* 21400 Warehouse Specialist 2015-4282

Supply Technician II* 01113 General Clerk III (formerly General Clerk IV) 2015-4282

Supply Technician I* 21150 Stock Clerk 2015-4282 Facilities Specialist IV* 23530 Machinery Maintenance Mechanic 2015-4282 Facilities Specialist III* 23530 Machinery Maintenance Mechanic 2015-4282 Facilities Specialist II* 23530 Machinery Maintenance Mechanic 2015-4282 Facilities Specialist I* 23370 General Maintenance Worker 2015-4282 Vehicle/Automotive Electrician II* 05010 Electrician, Automotive 2015-4282 Vehicle/Automotive Electrician I* 05010 Electrician, Automotive 2015-4282 Vehicle Maintenance Technician III* 05190 Motor Vehicle Mechanic 2015-4282 Vehicle Maintenance Technician II* 05190 Motor Vehicle Mechanic 2015-4282 Vehicle Maintenance Technician I* 05190 Motor Vehicle Mechanic 2015-4282 Vehicle Service Technician III* 05110 Mobile Equipment Servicer 2015-4282 Vehicle Service Technician II* 05110 Mobile Equipment Servicer 2015-4282 Vehicle Service Technician I* 05110 Mobile Equipment Servicer 2015-4282 UXO Tech III* 30493 Unexploded Ordinance (UXO)

Technician III 2015-4282 UXO Tech II* 30492 Unexploded Ordinance (UXO)

Technician II 2015-4282 UXO Tech I* 30491 Unexploded Ordinance (UXO)

Technician I 2015-4282 Technical Editor/Report Writer* 30463 Technical Writer III 2015-4282 Typist/Clerical* 01311 Secretary I 2015-4282 Office Administrator* 01113 General Clerk III 2015-4282 Office Assistant* 01111 General Clerk I 2015-4282 Habitat Management Technician* 11210 Laborer Grounds Maintenance 2015-4282 Graphics/Mapping Specialist* Drafter/CAD Operator III 2015-4282

47QTCA21D0031 Page 6

SCLS Eligible Contract Labor Category SCLS Equivalent Code - Title

WD

Number

The Service Contract Labor Standards (SCLS) is applicable to this contract and it includes SCLS applicable labor categories. The prices for the cited SCLS labor categories are based on the U.S. Department of Labor Wage Determination Number(s) identified in the SCLS matrix. The prices offered are in line with the geographic scope of the contract (i.e. nationwide).

47QTCA21D0031 Page 7

Terms and Conditions Applicable to Software Licenses (Special Item Number 511210) and Software

Maintenance Services (Special Item Number 54151) of General Purpose Commercial Information Technology Software

NOTE: All non-professional labor categories must be incidental to, and used solely to support professional services, and cannot be purchased separately.

1. INSPECTION/ACCEPTANCE

The Contractor shall only tender for acceptance those items that conform to the requirements of this contract. The ordering activity reserves the right to inspect or test any software that has been tendered for acceptance. The ordering activity may require repair or replacement of nonconforming software at no increase in contract price. The ordering activity must exercise its post acceptance rights (1) within a reasonable time after the defect was discovered or should have been discovered; and (2) before any substantial change occurs in the condition of the software, unless the change is due to the defect in the software.

2. END USER LICENSE AGREEMENTS REQUIREMENTS (EULA)

The Contractor shall provide all End User License Agreements in an editable Microsoft Office (Word) format.

3. GUARANTEE/WARRANTY

a. Unless specified otherwise in this contract, the Contractor’s standard commercial guarantee/warranty as stated in the contract’s commercial pricelist will apply to this contract.

BIDS and DecisionPoint Warranty:

ManTech WARRANTS that the BIDS and DecisionPoint applications and service provided by its AcqCenter Division shall conform to applicable specifications as detailed in the attached BIDS and DecisionPoint General Descriptions and shall remain free from defects for the duration of the service period agreement. ManTech warrants that the BIDS and DecisionPoint application designs will not contain any computer viruses, worms, trap doors, time bombs, undocumented passwords, disabling code, Trojan horses, or similar malicious mechanism or device. However, ManTech does not warrant data entered, attached, or otherwise provided by clients or other third parties for inclusion in the BIDS or DecisionPoint system.

ManTech’s obligation under this Warranty shall be limited to repair at the Headquarters (ManTech, 14280 Park Meadow Drive, Suite 400, Chantilly, VA 20151, Phone (703) 674- 2861), or at its option, replacement of defective product. In no event shall ManTech be responsible for incidental or consequential damages whatsoever (including without limitation, special, or indirect damages for personal injury, loss of business profits, compromise of protected information, business interruption, loss of business information, or any other pecuniary loss) to system hardware configuration, or data contained thereon. ManTech shall make good faith efforts, where applicable, to inform customers of potential incidental or consequential damages that could occur by use of BIDS or DecisionPoint, if said potential damages are reasonably foreseeable by ManTech prior to installation and use of the software. This Warranty shall not apply to Products that have been damaged through negligence, accident, any misuse to include software code tampering, or acts or nature such as floods, fires, earthquakes, lightning strikes, etc.

47QTCA21D0031 Page 8

ManTech’s liability, whether in contract or in tort, arising out of warranties or representations, instructions or defects from any cause, shall be limited exclusively to application replacement and service restoration to include data archival restoration to the extent practicable under the aforementioned conditions. ManTech requires notification of system interruption within seven calendar days of discovery of the interruption to establish a claim under this warranty. To obtain warranty service for BIDS application service, you must first call the AcqCenter.com help desk at

(703) 674-2973 or for DecisionPoint application service you must first call (703) 674-9108. The telephone representative will provide further information, including scheduling of service at Warrantees facility if appropriate. During the period of this limited Warranty, ManTech will provide Technical Support at no additional charge to you. Technical Support is limited to application support installed by ManTech. Technical Support may be obtained by calling the BIDS Technical Help Desk, Monday Friday, 8 a.m. to 6 p.m. E.S.T., at (703) 674-2973 or DecisionPoint Technical Help Desk, Monday through Friday, 8 a.m. to 6 p.m. E.S.T at (703) 674-2861.

The above Warranty applies to services and applications provided by ManTech. ManTech may, at the warrantee’s request, provide hardware, software, firmware or other information technology from Original Equipment Manufacturers or other third parties. Equipment and services provided, but not manufactured by ManTech, are warranted and will be repaired to the extent of and according to the current terms and conditions of the respective manufacturers. In no event shall ManTech be liable for consequential, incidental, special, indirect or punitive damages or attorney fees or court costs, in relation to any failure of the hardware, software, firmware or information technology provided by ManTech to perform as specified in this warranty. Monetary damages relating to this warranty, whether arising in contract or in tort, or otherwise, shall be limited to the contract price for the specific hardware, software, firmware or information technology subject to a warranty claim.

Disputes regarding this warranty shall be resolved in accordance with FAR clause 52.233-1, Disputes.

b. The Contractor warrants and implies that the items delivered hereunder are merchantable and fit for use for the particular purpose described in this contract. If no implied warranties are given, an express warranty of at least 60 days must be given in accordance with FAR 12.404(b) (2)

c. Limitation of Liability. Except as otherwise provided by an express or implied warranty, the Contractor will not be liable to the ordering activity for consequential damages resulting from any defect or deficiencies in accepted items.

4. TECHNICAL SERVICES

The Contractor, without additional charge to the ordering activity, shall provide a hot line technical support number BIDS (703) 674-2973 or Decision Point (703) 674-2861 for the purpose of providing user assistance and guidance in the implementation of the software. The technical support number is available from 8 a.m. to 6 p.m. EST.

5. SOFTWARE MAINTENANCE

a. Software maintenance as it is defined: (select software maintenance type):

____X______ 2. Software Maintenance Services (SIN 54151)

47QTCA21D0031 Page 9

Software Maintenance Services creates, designs, implements, and/or integrates customized changes to software that solve one or more problems and is not included with the price of the software. Software Maintenance Services includes person-to-person communications regardless of the medium used to communicate: telephone support, on-line technical support, customized support, and/or technical expertise which are charged commercially. Software Maintenance Services is billed arrears in accordance with 31 U.S.C. 3324.

Software Maintenance Services is billed in arrears in accordance with 31 U.S.C.

3324.

b. Invoices for maintenance service shall be submitted by the Contractor on a quarterly or monthly basis, after the completion of such period. Maintenance charges must be paid in arrears (31 U.S.C. 3324). PROMPT PAYMENT DISCOUNT, IF APPLICABLE, SHALL BE SHOWN ON THE INVOICE.

6. PERIODS OF TERM LICENSES (SIN 511210) AND MAINTENANCE (SIN 54151)

a. The Contractor shall honor orders for periods for the duration of the contract period or a lessor period of time.

b. Term licenses and/or maintenance may be discontinued by the ordering activity on thirty

(30) calendar day’s written notice to the Contractor.

c. Annual Funding. When annually appropriated funds are cited on an order for term licenses and/or maintenance, the period of the term licenses and/or maintenance shall automatically expire on September 30 of the contract period, or at the end of the contract period, whichever occurs first. Renewal of the term licenses and/or maintenance orders citing the new appropriation shall be required, if the term licenses and/or maintenance is to be continued during any remainder of the contract period.

d. Cross-Year Funding Within Contract Period. Where an ordering activity’s specific appropriation authority provides for funds in excess of a 12 month (fiscal year) period, the ordering activity may place an order under this schedule contract for a period up to the expiration of the contract period, notwithstanding the intervening fiscal years.

e. Ordering activities should notify the Contractor in writing thirty (30) calendar days prior to the expiration of an order, if the term licenses and/or maintenance is to be terminated at that time. Orders for the continuation of term licenses and/or maintenance will be required if the term licenses and/or maintenance is to be continued during the subsequent period.

7. UTILIZATION LIMITATIONS - (SIN 511210 AND SIN 54151)

a. Software acquisition is limited to commercial computer software defined in FAR Part

2.101.

b. When acquired by the ordering activity, commercial computer software and related documentation so legend shall be subject to the following:

(1) Title to and ownership of the software and documentation shall remain with the Contractor, unless otherwise specified.

(2) Software licenses are by site and by ordering activity. An ordering activity is defined as a cabinet level or independent ordering activity. The software may be used by any subdivision of the ordering activity (service, bureau, division, command, etc.) that has access to the site the software is placed at, even if the

47QTCA21D0031 Page 10 subdivision did not participate in the acquisition of the software. Further, the software may be used on a sharing basis where multiple agencies have joint projects that can be satisfied by the use of the software placed at one ordering activity's site. This would allow other agencies access to one ordering activity's database. For ordering activity public domain databases, user agencies and third parties may use the computer program to enter, retrieve, analyze and present data. The user ordering activity will take appropriate action by instruction, agreement, or otherwise, to protect the Contractor's proprietary property with any third parties that are permitted access to the computer programs and documentation in connection with the user ordering activity's permitted use of the computer programs and documentation. For purposes of this section, all such permitted third parties shall be deemed agents of the user ordering activity.

(3) Except as is provided above, the ordering activity shall not provide or otherwise make available the software or documentation, or any portion thereof, in any form, to any third party without the prior written approval of the Contractor.

Third parties do not include prime Contractors, subcontractors and agents of the ordering activity who have the ordering activity's permission to use the licensed software and documentation at the facility, and who have agreed to use the licensed software and documentation only in accordance with these restrictions.

This provision does not limit the right of the ordering activity to use software, documentation, or information therein, which the ordering activity may already have or obtains without restrictions.

(4) The ordering activity shall have the right to use the computer software and documentation with the computer for which it is acquired at any other facility to which that computer may be transferred, or in cases of Disaster Recovery, the ordering activity has the right to transfer the software to another site if the ordering activity site for which it is acquired is deemed to be unsafe for ordering activity personnel; to use the computer software and documentation with a backup computer when the primary computer is inoperative; to copy computer programs for safekeeping (archives) or backup purposes; to transfer a copy of the software to another site for purposes of benchmarking new hardware and/or software; and to modify the software and documentation or combine it with other software, provided that the unmodified portions shall remain subject to these restrictions.

(5) "Commercial Computer Software" may be marked with the Contractor’s standard commercial restricted rights legend, but the schedule contract and schedule pricelist, including this clause, "Utilization Limitations" are the only governing terms and conditions, and shall take precedence and supersede any different or additional terms and conditions included in the standard commercial legend.

8. SOFTWARE CONVERSIONS - (SIN 511210)

Full monetary credit will be allowed to the ordering activity when conversion from one version of the software to another is made as the result of a change in operating system, or from one computer system to another. Under a term license (511210), conversion credits which accrued while the earlier version was under a term license shall carry forward and remain available as conversion credits which may be applied towards the perpetual license price of the new version.

47QTCA21D0031 Page 11

9. DESCRIPTIONS AND EQUIPMENT COMPATIBILITY

The Contractor shall include, in the schedule pricelist, a complete description of each software product and a list of equipment on which the software can be used. Also, included shall be a brief, introductory explanation of the modules and documentation which are offered.

47QTCA21D0031 Page 12

Terms and Conditions Applicable to Highly Adaptive Cybersecurity Services (HACS) (Special Item Number 54151HACS)

****NOTE: Non-professional labor categories must be incidental to, and used solely to support Highly Adaptive Cybersecurity Services, and cannot be purchased separately. Further, non-professional labor categories shall be offered under SIN ANCILLARY only.

****NOTE: Labor categories under the Special Item Number 54151S Information Technology Professional Services may remain under SIN 54151S unless the labor categories are specific to the Highly Adaptive Cybersecurity Services SINs.

Vendor suitability for offering services through the Highly Adaptive Cybersecurity Services (HACS) SINs must be in accordance with the following laws and standards when applicable to the specific task orders, including but not limited to:

• Federal Acquisition Regulation (FAR) Part 52.204-21

• OMB Memorandum M-06-19 - Reporting Incidents Involving Personally Identifiable Information and Incorporating the Cost for Security in Agency Information Technology Investments

• OMB Memorandum M -07-16 - Safeguarding Against and Responding to the Breach of

Personally Identifiable Information

• OMB Memorandum M-16-03 - Fiscal Year 2015-2016 Guidance on Federal Information Security and Privacy Management Requirements

• OMB Memorandum M-16-04 – Cybersecurity Implementation Plan (CSIP) for Federal Civilian

Government

• The Cybersecurity National Action Plan (CNAP)

• NIST SP 800-14 - Generally Accepted Principles and Practices for Securing Information

Technology Systems

• NIST SP 800-27A - Engineering Principles for Information Technology Security (A Baseline for

Achieving Security)

• NIST SP 800-30 - Guide for Conducting Risk Assessments

• NIST SP 800-35 - Guide to Information Technology Security Services

• NIST SP 800-37 - Guide for Applying the Risk Management Framework to Federal Information

Systems: A Security Life Cycle Approach

• NIST SP 800-39 - Managing Information Security Risk: Organization, Mission, and Information

System View

• NIST SP 800-44 - Guidelines on Securing Public Web Servers

• NIST SP 800-48 - Guide to Securing Legacy IEEE 802.11 Wireless Networks

• NIST SP 800-53 – Security and Privacy Controls for Federal Information Systems and

Organizations

• NIST SP 800-61 - Computer Security Incident Handling Guide

• NIST SP 800-64 - Security Considerations in the System Development Life Cycle

• NIST SP 800-82 - Guide to Industrial Control Systems (ICS) Security

• NIST SP 800-86 - Guide to Integrating Forensic Techniques into Incident Response

• NIST SP 800-115 - Technical Guide to Information Security Testing and Assessment

• NIST SP 800-128 - Guide for Security-Focused Configuration Management of Information

Systems

• NIST SP 800-137 - Information Security Continuous Monitoring (ISCM) for Federal Information

Systems and Organizations

47QTCA21D0031 Page 13

• NIST SP 800-153 - Guidelines for Securing Wireless Local Area Networks (WLANs)

• NIST SP 800-171 - Protecting Controlled Unclassified Information in non-federal Information

Systems and Organizations

1. SCOPE

a. The labor categories, prices, terms and conditions stated under Special Item Number

54151HACS High Adaptive Cybersecurity Services apply exclusively to High Adaptive Cybersecurity Services within the scope of this Information Technology Schedule.

b. Services under these SINs are limited to Highly Adaptive Cybersecurity Services only.

Software and hardware products are under different Special Item Numbers on the MAS (e.g. 511210, 511210, 33411), and may be quoted along with services to provide a total solution.

c. These SINs provide ordering activities with access to Highly Adaptive Cybersecurity services only.

d. Highly Adaptive Cybersecurity Services provided under these SINs shall comply with all Cybersecurity certifications and industry standards as applicable pertaining to the type of services as specified by ordering agency.

e. The Contractor shall provide services at the Contractor’s facility and/or at the ordering activity location, as agreed to by the Contractor and the ordering activity.

2. ORDER

a. Agencies may use written orders, Electronic Data Interchange (EDI) orders, Blanket Purchase Agreements, individual purchase orders, or task orders for ordering services under this contract. Blanket Purchase Agreements shall not extend beyond the end of the contract period; all services and delivery shall be made and the contract terms and conditions shall continue in effect until the completion of the order. Orders for tasks which extend beyond the fiscal year for which funds are available shall include FAR 52.232-19 (Deviation – May 2003) Availability of Funds for the Next Fiscal Year. The purchase order shall specify the availability of funds and the period for which funds are available.

b. All task orders are subject to the terms and conditions of the contract. In the event of conflict between a task order and the contract, the contract will take precedence.

3. PERFORMANCE OF SERVICES

a. The Contractor shall commence performance of services on the date agreed to by the Contractor and the ordering activity. All Contracts will be fully funded.

b. The Contractor agrees to render services during normal working hours, unless otherwise agreed to by the Contractor and the ordering activity.

c. The ordering activity should include the criteria for satisfactory completion for each task in the Statement of Work or Delivery Order. Services shall be completed in a good and workmanlike manner.

d. Any Contractor travel required in the performance of Highly Adaptive Cybersecurity Services must comply with the Federal Travel Regulation or Joint Travel Regulations, as applicable, in effect on the date(s) the travel is performed. Established Federal Government per diem rates will apply to all Contractor travel. Contractors cannot use GSA city pair contracts. All travel will be agreed upon with the client prior to the Contractor’s travel.

47QTCA21D0031 Page 14

4. INSPECTION OF SERVICES

Inspection of services is in accordance with 552.212-4 - CONTRACT TERMS AND

CONDITIONS – COMMERCIAL ITEMS (MAY 2015) (ALTERNATE II – JUL 2009) (FAR

DEVIATION – JUL 2015) (TAILORED) for Firm-Fixed Price and Time-and-Materials and Labor-Hour Contracts orders placed under this contract.

5. RESPONSIBILITIES OF THE CONTRACTOR

The Contractor shall comply with all laws, ordinances, and regulations (Federal, State, City, or otherwise) covering work of this character. If the end product of a task order is software, then FAR 52.227-14 (MAY 2014) Rights in Data – General, may apply.

The Contractor shall comply with contract clause (52.204-21) to the Federal Acquisition Regulation (FAR) for the basic safeguarding of contractor information systems that process, store, or transmit Federal data received by the contract in performance of the contract. This includes contract documents and all information generated in the performance of the contract.

6. RESPONSIBILITIES OF THE ORDERING ACTIVITY

Subject to the ordering activity’s security regulations, the ordering activity shall permit Contractor access to all facilities necessary to perform the requisite Highly Adaptive Cybersecurity Services.

7. INDEPENDENT CONTRACTOR

All Highly Adaptive Cybersecurity Services performed by the Contractor under the terms of this contract shall be as an independent Contractor, and not as an agent or employee of the ordering activity.

8. ORGANIZATIONAL CONFLICTS OF INTEREST

a. Definitions.

“Contractor” means the person, firm, unincorporated association, joint venture, partnership, or corporation that is a party to this contract.

“Contractor and its affiliates” and “Contractor or its affiliates” refers to the Contractor, its chief executives, directors, officers, subsidiaries, affiliates, subcontractors at any tier, and consultants and any joint venture involving the Contractor, any entity into or with which the Contractor subsequently merges or affiliates, or any other successor or assignee of the Contractor.

An “Organizational conflict of interest” exists when the nature of the work to be performed under a proposed ordering activity contract, without some restriction on ordering activities by the Contractor and its affiliates, may either (i) result in an unfair competitive advantage to the Contractor or its affiliates or (ii) impair the Contractor’s or its affiliates’ objectivity in performing contract work.

b. To avoid an organizational or financial conflict of interest and to avoid prejudicing the best interests of the ordering activity, ordering activities may place restrictions on the Contractors, its affiliates, chief executives, directors, subsidiaries and subcontractors at any tier when placing orders against schedule contracts. Such restrictions shall be consistent with FAR 9.505 and shall be designed to avoid, neutralize, or mitigate organizational conflicts of interest that might otherwise exist in situations related to

47QTCA21D0031 Page 15 individual orders placed against the schedule contract. Examples of situations, which may require restrictions, are provided at FAR 9.508.

9. INVOICES

The Contractor, upon completion of the work ordered, shall submit invoices for Highly Adaptive Cybersecurity Services. Progress payments may be authorized by the ordering activity on individual orders if appropriate. Progress payments shall be based upon completion of defined milestones or interim products. Invoices shall be submitted monthly for recurring services performed during the preceding month.

10. RESUMES

Resumes shall be provided to the GSA Contracting Officer or the user ordering activity upon request.

11. APPROVAL OF SUBCONTRACTS

The ordering activity may require that the Contractor receive, from the ordering activity's Contracting Officer, written consent before placing any subcontract for furnishing any of the work called for in a task order.

12. DESCRIPTION OF HIGHLY ADAPTIVE CYBERSECURITY LABOR CATEGORIES

The labor category descriptions start on page 91.

47QTCA21D0031 Page 16

Terms and Conditions Applicable to Purchase of Information Technology Training for General Purpose Commercial Information Technology Equipment and Software (Special Item Number

611420)

1. SCOPE

a. The Contractor shall provide Information Technology Training normally available to commercial customers, which will permit ordering activity users to make full, efficient use of general purpose commercial IT products. Training is restricted to Information Technology Training for those products within the scope of this solicitation.

b. The Contractor shall provide training at the Contractor's facility and/or at the ordering activity's location, as agreed to by the Contractor and the ordering activity.

Written orders, EDI orders (GSA Advantage! and FACNET), credit card orders, and orders placed under blanket purchase agreements (BPAs) shall be the basis for the purchase of Information Technology Training in accordance with the terms of this contract. Orders shall include the student's name, course title, course date and time, and contracted dollar amount of the course.

3. TIME OF DELIVERY

The Contractor shall conduct training on the date (time, day, month, and year) agreed to by the Contractor and the ordering activity.

4. CANCELLATION AND RESCHEDULING

a. The ordering activity will notify the Contractor at least seventy-two (72) hours before the scheduled training date, if a student will be unable to attend. The Contractor will then permit the ordering activity to either cancel the order or reschedule the training at no additional charge. In the event the training class is rescheduled, the ordering activity will modify its original training order to specify the time and date of the rescheduled training class.

b. In the event the ordering activity fails to cancel or reschedule a training course within the time frame specified in paragraph a, above, the ordering activity will be liable for the contracted dollar amount of the training course. The Contractor agrees to permit the ordering activity to reschedule a student who fails to attend a training class within ninety

(90) days from the original course date, at no additional charge.

c. The ordering activity reserves the right to substitute one student for another up to the first day of class.

d. In the event the Contractor is unable to conduct training on the date agreed to by the Contractor and the ordering activity, the Contractor must notify the ordering activity at least seventy-two (72) hours before the scheduled training date.

5. FOLLOW-UP SUPPORT

The Contractor agrees to provide each student with unlimited telephone support or online support for a period of one (1) year from the completion of the training course. During this period, the student may contact the Contractor's instructors for refresher assistance and answers to related course curriculum questions.

47QTCA21D0031 Page 17

6. PRICE FOR TRAINING

The price that the ordering activity will be charged will be the ordering activity training price in effect at the time of order placement, or the ordering activity price in effect at the time the training course is conducted, whichever is less.

7. INVOICES AND PAYMENT

Invoices for training shall be submitted by the Contractor after ordering activity completion of the training course. Charges for training must be paid in arrears (31 U.S.C. 3324). PROMPT

PAYMENT DISCOUNT, IF APPLICABLE, SHALL BE SHOWN ON THE INVOICE.

8. FORMAT AND CONTENT OF TRAINING

a. The Contractor shall provide written materials (i.e., manuals, handbooks, texts, etc.)

normally provided with course offerings, printed and copied two-sided on paper containing 30% postconsumer materials (fiber). Such documentation will become the property of the student upon completion of the training class.

b. **If applicable** For hands-on Information Technology Training, there must be a one-to-one assignment of IT equipment to students.

c. The Contractor shall provide each student with a Certificate of Training at the completion of each training course.

d. The Contractor shall provide the following information for each training course offered:

(1) The course title and a brief description of the course content, to include the course format (e.g., lecture, discussion, hands-on training);

(2) The length of the course;

(3) Mandatory and desirable prerequisites for student enrollment;

(4) The minimum and maximum number of students per class;

(5) The locations where the course is offered;

(6) Class schedules; and

(7) Price (per student, per class (if applicable)).

e. For those courses conducted at the ordering activity’s location, instructor travel charges (if applicable), including mileage and daily living expenses (e.g., per diem charges) are governed by Pub. L. 99-234 and FAR Part 31.205-46, and are reimbursable by the ordering activity on orders placed under the Multiple Award Schedule, as applicable, in effect on the date(s) the travel is performed. Contractors cannot use GSA city pair contracts. The Industrial Funding Fee does NOT apply to travel and per diem charges.

f. For Online Information Technology Training, the Contractor shall make every effort to provide a copy of the training material for electronic download, however, due to the fact that the training material contains Contractor proprietary data, not all training material will be available for electronic download. The Contractor will provide access to the course materials electronically for all online training.

9. TRAINING MATERIALS

a. The training materials constitute Contractor Proprietary Information and content. The materials are copyright © 2008 Windows CNO training; copyright © 2019 Linux CNO training; copyright © 2015 ARM Assembly; copyright © 2018 Android Programing; and copyright © 2019 Android Internals. ManTech International Corporation. All Rights Reserved. Copyright law prohibits unauthorized copying of copyrighted materials. The ordering agency acknowledges that students that take the training shall not make or use any unauthorized copies of software or copyrighted material or other materials (whether electronic or hard copy) in violation of license and copyright restrictions.

47QTCA21D0031 Page 18

b. Title to all documents and materials furnished to the ordering agency students for use in connection with the training shall remain with the Contractor. Ordering agency students shall not disclose such documents or materials to any person, firm, or corporation.

c. The training material constitute Contractor trade secrets which shall not be disclosed to anyone outside the Contractor without Contractor's prior written consent. Nor will any students make use of any Contractor trade secrets for their own purposes or the benefit of anyone other than the Contractor without the Contractor’s prior written consent.

d. The training materials are Contractor Proprietary Information and ordering agency students shall: (a) protect the confidentiality of the Proprietary Information from disclosure; (b) not use or disclose the Proprietary Information, or any part thereof; and (c) not distribute or disclose the Proprietary Information to any third party, including but not limited to colleagues, employers, family, and friends, without obtaining Contractor’s prior written consent. Ordering agency students agrees not to copy, reproduce, and/or reduce to writing any part of the Proprietary Information, except only as necessary for the training course, and all such copies, reproductions and/or reductions to writing shall be and remain the property of Contractor. Ordering agency students shall not reverse engineer or decompile any prototypes, software or other intangible objects that embody or reflect the Proprietary Information.

10. TRAINING COURSE DESCRIPTION AND PRICING

47QTCA21D0031 Page 19

WINDOWS CNO PROGRAMMER SYLLABUS

The Windows Computer Network Operations Programmer course is an intensive, hands-on course focused on providing a programmer with the skills and knowledge needed to become an advanced CNO programmer, with emphasis in the Windows environment. The class format combines both lecture and labs for practical application of knowledge, including two labs that function as culminating exercises.

LEARNING OUTCOME

After the completion of the three modules, the student will be capable of assisting in the CNO tool development lifecycle. The student will understand the tool objectives, environments, obstacles and pitfalls associated with development, as well as strategies to meet objectives effectively and efficiently.

COURSE OUTLINE

The course contains the following modules:

Core Module

• Python (3 Days)

• Networks (5 Days)

• Assembly (3 Days)

• Software Reverse Engineering (5 Days)

• Core Crucible (1 Day)

User Mode Development Module

• Windows System Programming (4 Days)

• Windows Internals (4 Days)

• CNO User Mode Development (5 Days)

• Vulnerability Research and Exploitation (5 Days)

• User Mode Crucible (2 Days)

Kernel Mode Development Module

• Kernel Internals (5 Days)

• CNO Kernel Mode Development (3 Days)

PREREQUISITE(S)

Students should have a Bachelor’s degree in Computer Science or Computer Engineering, or equivalent experience. Students should also possess high academic achievement or operational/technical experience and an intense desire to learn. This course requires previous programming experience in C. Student should possess experience in Windows Programming and IA-32 assembly.

ENROLLMENT

Submit student enrollment requests to ACTP@ManTech.com. The training administrator will expedite your request and payment requirements. Please contact ACTP@ManTech.com with any questions.

TUITION

Modular and weekly enrollments are offered based on seat availability. Online and remote enrollments are also available upon request.

GSA Tuition Price for the course, which includes all course material is:

mailto:ACTP@ManTech.com

47QTCA21D0031 Page 20

• 1-4 Students: $25,390.43/per student

• 5-8 Students: $25,125.94/per student

• 9-11 Students: $24,861.46/per student

• More than 12 Students: $24,596.98/per student

COURSE LENGTH

The entire course is approximately 45 days in length.

We also offer modular enrollment, based on seat availability (please see pricing below).

WINDOWS CNO CORE (17 DAYS)

Python 3 Days

The Python class is an introduction to the Python programming language with an emphasis on tools and techniques that are useful for CNO tasks such as test development and vulnerability research.

Networks 5 Days

The Networks class is a practical exploration of IPv4 and IPv6 networks and sockets programming.

Assembly 3 Days The Assembly class covers the x86 (IA-32) and x86-64 (AMD64) assembly languages.

Software Reverse Engineering 5 Days

The Software Reverse Engineering class introduces tools and techniques for analyzing x86 and x86-64 executable files.

Core Crucible 1 Day In the Core Crucible, students work in teams to analyze and exploit a botnet.

• 1-4 Students: $10,852.59/per student

• 5-8 Students: $10,739.55/per student

• 9-11 Students: $10,626.50/per student

• More than 12 Students: $10,513.45/per student

WINDOWS USER MODE DEVELOPMENT (20 DAYS)

Windows Systems Programming 4 Days

The Windows Systems Programming class introduces Windows development tools and the Win32 API.

Windows Internals 4 Days Windows Internals moves beyond the Win32 API introduced in the previous class

47QTCA21D0031 Page 21 to describe the advanced Windows operating system concepts used to implement it.

Windows CNO User Mode Development 5 Days

Building on the material from the preceding classes, the CNO User Mode Development class provides instruction on fundamental techniques and best practices for CNO tool development.

Windows Vulnerability Research and Exploitation 5 Days

Students in the Vulnerability Research and Exploitation class learn how to analyze and exploit vulnerabilities in software.

Windows User Mode Crucible 2 Days

In the User Mode Crucible, students work in teams to analyze and exploit a vulnerable network service.

• 1-4 Students: $12,767.76/per student

• 5-8 Students: $12,634.76/per student

• 9-11 Students: $12,501.76/per student

• More than 12 Students: $12,368.77/per student

WINDOWS KERNEL MODE DEVELOPMENT (8 DAYS)

Windows Kernel Internals 5 Days

The Kernel Internals class expands on the…