6.02 N0018926P0040.pdf

SEE ADDENDUM

(No Collect Calls)

X

b. TELEPHONE NUMBER 8. OFFER DUE DATE/LOCAL TIME

5. SOLICITATION NUMBER 6. SOLICITATION ISSUE DATE

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

STANDARD FORM 1449 (REV. 2/2012)

Prescribed by GSA – FAR (48 CFR) 53.212

(TYPE OR PRINT)

(SIGNATURE OF CONTRACTING OFFICER)

ADDENDA ARE

X

26. TOTAL AWARD AMOUNT (For Gov t. Use Only )

23.

CODE 10. THIS ACQUISITION IS

SUCH ADDRESS IN OFFER

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT

BELOW IS CHECKED

TELEPHONE NO.3018551190

N001899. ISSUED BY

18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a. UNLESS BLOCK

N0018926P0040 15-Jan-2026

7. FOR SOLICITATION

INFORMATION CALL:

a. NAME

2. CONTRACT NO. 3. AWARD/EFFECTIVE DATE 4. ORDER NUMBER

(TYPE OR PRINT)

30b. NAME AND TITLE OF SIGNER 30c. DATE SIGNED 31b. NAME OF CONTRACTING OFFICER

30a. SIGNATURE OF OFFEROR/CONTRACTOR 31a.UNITED STATES OF AMERICA

27a. SOLICITATION INCORPORATES BY REFERENCE FAR 52.212-1. 52.212-4. FAR 52.212-3. 52.212-5 ARE ATTACHED.

X

25. ACCOUNTING AND APPROPRIATION DATA

1. REQUISITION NUMBER

20.

ADDITIONAL SHEETS SUBJECT TO THE TERMS AND CONDITIONS SPECIFIED.

OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, AND 30

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS

1301320833

ARE NOT ATTACHED

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA ARE ARE NOT ATTACHED

Christopher D. Whiteside / Contract Specialist

See Schedule $166,744.77

(BLOCK 5), INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE

SET FORTH HEREIN, IS ACCEPTED AS TO ITEMS: SEE SCHEDULE

. YOUR OFFER ON SOLICITATION

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN

% FOR:SET ASIDE:UNRESTRICTED ORX

SMALL BUSINESS

17a.CONTRACTOR/ CODE 9G5Z9 FACILITY

OFFEROR CODE

NAVSUP FLC NORFOLK CONTRACTING

NORFOLK OFFICE

ATTN: I CUFFEE

1968 GILBERT STREET STE 600

NORFOLK VA 23511-3392

CHRIS WASHBURNS BOAT YARD, INC.

WILLIAM BRANDON

14250 DOWELL RD

SOLOMONS MD 20688

DEFENSE FINANCE AND ACCOUNTING SERV

NAVY ERP-NAVSUP HQ

P.O. BOX 998022

CLEVELAND OH 44199-8022

18a. PAYMENT WILL BE MADE BY CODE N50082

RATED ORDER UNDER

DPAS (15 CFR 700)

13a. THIS CONTRACT IS A

13b. RATING

CODE

SEE ITEM 9

15. DELIVER TO CODE N00060 16. ADMINISTERED BY

Net 30

12. DISCOUNT TERMS11. DELIVERY FOR FOB DESTINA-

TION UNLESS BLOCK IS

MARKED

SEE SCHEDULE

14. METHOD OF SOLICITATION

RFQ IFB RFP

US FLEET FORCES COMMAND (N00060)

LT HANNAH M. GODFREY

9672 MASSEY HUGHES DR

NORFOLK VA 23511

FAX:

TEL: 757-443-1628 SERVICE-DISABLED

VETERAN-OWNED

SMALL BUSINESS

8(A)

HUBZONE SMALL

BUSINESS

SIZE STANDARD:

1,300

NAICS:

336611

OFFER DATED

29. AWARD OF CONTRACT: REF.

DELIVER ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND ON ANY

COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND

X

EMAIL: christopher.d.white1@navy.mil

757-443-0780TEL:

31c. DATE SIGNED

14-Jan-2026

SEE SCHEDULE

SCHEDULE OF SUPPLIES/ SERVICESITEM NO. QUANTITY UNIT UNIT PRICE AMOUNT

24.22.21.19.

WOMEN-OWNED SMALL BUSINESS (WOSB)

ELIGIBLE UNDER THE WOMEN-OWNED

SMALL BUSINESS PROGRAM

EDWOSB

32g. E-MAIL OF AUTHORIZED GOVERNMENT REPRESENTATIVE

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS

(CONTINUED)

PAGE 2 OF24

ACCEPTED, AND CONFORMS TO THE CONTRACT, EXCEPT AS NOTED: ______________________________________________________

32a. QUANTITY IN COLUMN 21 HAS BEEN

RECEIVED INSPECTED

32b. SIGNATURE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32c. DATE 32d. PRINTED NAME AND TITLE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32e. MAILING ADDRESS OF AUTHORIZED GOVERNMENT REPRESENTATIVE 32f . TELEPHONE NUMBER OF AUTHORIZED GOVERNMENT REPRESENTATIVE

37. CHECK NUMBER

FINALPARTIALCOMPLETE

36. PAYMENT35. AMOUNT VERIFIED

CORRECT FOR

34. VOUCHER NUMBER

FINAL

33. SHIP NUMBER

PARTIAL

38. S/R ACCOUNT NUMBER 39. S/R VOUCHER NUMBER 40. PAID BY

41a. I CERTIFY THIS ACCOUNT IS CORRECT AND PROPER FOR PAYMENT

41b. SIGNATURE AND TITLE OF CERTIFYING OFFICER 41c. DATE

42a. RECEIVED BY (Print)

42b. RECEIVED AT (Location)

42c. DATE REC'D (YY/MM/DD) 42d. TOTAL CONTAINERS

STANDARD FORM 1449 (REV. 2/2012) BACK

Prescribed by GSA – FAR (48 CFR) 53.212

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

SEE SCHEDULE

20.

SCHEDULE OF SUPPLIES/ SERVICES

21.

QUANTITY UNIT

22. 23.

UNIT PRICE

24.

AMOUNT

19.

ITEM NO.

N0018926P0040

Section SF 1449 - CONTINUATION SHEET

PWS

PERFORMANCE-BASED WORK STATEMENT

United States Fleet Forces Command (USFF) Barge Overhaul

1. INTRODUCTION / DESCRIPTION OF SERVICES

The USFF Barge 70PE9301, henceforth referred to as “USFF Barge,” Barge, or “Boat,” Fleet and Foundry requires routine repairs to address material condition discrepancies. Repairs and modernizations are proposed to be accomplished during the planned off-season barge stand-down between _15 January 2026 and 30 April, 2026.

2. SCOPE

The Contractor shall perform essential equipment repairs and modernizations, detailed in 3. Tasks of this PWS, onboard the USFF Barge. The work to be performed is intended to prepare the barge for the official functions in support of senior Navy leadership.

3. TASKS

3.1. Dock the boat upon arrival.

3.2. Pressure wash the entire boat and inspect the interior for leaks originating from the exterior.

3.3. Running Gear

3.3.1. Inspect and provide Condition Found Report (CFR).

3.4. Flooring

3.4.1. Replace the corkline flooring on the fly bridge and the back area by the swim platform with the Governments preferred product: PlasDeck.

https://www.plasdeck.com/

3.5. Fuel Supply and Return Lines

3.5.1. Replace all fuel supply and return lines.

3.6. GENSET fuel system

3.6.1. Repair/Replace the GENSET fuel system. Clean elex end, timing, governor, and valve lash.

3.7. Main Propulsion Diesel Engine (MPDE)

3.7.1. Lubrication System for both PORT and STBD MPDE.

3.7.1.1. Inspect and provide CFR.

3.7.2. STBD Marine Gear oil pressure alarm indicated a system fault.

3.7.2.1. Repair/Replace faulty STBD marine gear oil pressure alarm.

3.7.3. Oil pressure alarms/sensors for both PORT and STBD MPDE.

3.7.3.1. Repair/Replace faulty oil pressure alarms/sensors.

3.7.4. Engine mounts for both PORT and STBD MPDE.

3.7.4.1. Repair/Replace degraded engine mounts.

3.7.5. Cooling piping for both PORT and STBD MPDE.

3.7.5.1. Repair/Replace degraded cooling piping.

3.7.5.2. Remove MPDE fluid coolers, clean, and replace

3.7.5.3. Conduct full power run

3.7.6. STBD MPDE Block Heater

3.7.6.1. Replace failed heater

3.7.7. STBD MPDE Turbo

3.7.7.1. Repair oil leak

3.7.8. STBD Heat Exchanger/Oil Cooler

3.7.8.1. Replace damaged heat exchanger/oil cooler

3.8. Hydraulic Steering

3.8.1. Repair hydraulic steering system.

3.9. Heating, Ventilation, Air Conditioning (HVAC) System

3.9.1. Clean the HVAC system.

3.9.2. Test the HVAC system.

3.9.3. Complete a CFR on the HVAC system after testing.

3.10. Engine and Coolant System

3.10.1. Fabricate, test, flush, ID tag, and install PORT and STBD MPDE engine and coolant system hose assembly.

3.10.2. No leakage of the engine and coolant systems is acceptable.

3.10.3. Reset 10 year cycle.

3.11. Mast Wind Instrument

3.11.1. Replace wind instrument with existing type.

3.12. Collection and Holding Heads

3.12.1. Modernize heads/replace head pumps.

3.12.2. Replace all collection and holding hoses from heads to tank.

3.13. Alarm Panel

3.13.1. Troubleshoot and provide CFR.

3.14. Label Plates

3.14.1. Replace missing BOATALT and capacity plates. See reference NSTM

583-4.1.1.

3.15. Fly Bridge Indications

3.15.1. Repair faulty low idle light

3.15.2. Replace Detroit Diesel display units

3.16. Canvas Zippers

3.16.1. Replace canvas zippers

3.17. VHF Antennas

3.17.1. Inspect antennas and provide CFR.

3.18. Overboard Discharge Through-Hull

3.18.1. Replace degraded overboard discharge through-hull

3.19. Air Compressor

3.19.1. Replace degraded air compressor with equal or better air compressor.

4. OTHER PERTINENT INFORMATION

4.1. Other Requirements:

4.1.1. All work performed shall comply with The American Boat & Yacht Council (ABYC) as well as United States Coast Guard (USCG) Standards.

4.1.2. The Contractor shall be responsible for craning the USFF Barge out of the designated water area at the Contractor site.

4.1.3. Upon completion of work, the contractor shall crane the USFF Barge back into the same designated water area in the contractor site.

4.1.4. All parts/equipment utilized to complete repairs and modernization of the USFF Barge referenced shall be in new condition and purchased from an authorized dealer.

4.1.5. Each Condition Found Report (CFR) should provide the condition found (not covered in original specification), the contractor’s recommended action, estimates for labor and material, and the response date necessary from the customer to ensure the schedule is not impacted.

4.2. Period of Performance (PoP):

All repairs and modernizations will be completed by 30 April 2026.

All operational testing will be completed in the presence of a Craft master by 1 May 2026.

4.3. Place of Performance:

All required services under 3. Tasks will be performed entirely at the contractor’s site.

4.4. Government Furnished Equipment / Property / Information:

The Contractor will not be provided a designated workspace or associated support equipment.

4.5. Personnel Security Requirements:

All Contractor personnel performing under this task order shall be U.S. Citizens and are not required to obtain / retain a security clearance.

5. LIST OF DELIVERABLES:

The contractor is required to provide the following deliverables under this task order:

PWS

Section

Description Performance Threshold Recipient Due Date

3. Tasks Condition Found

Reports Detail the condition of each task item as the task item is found on prior to work being performed.

Delivery

POC

TBD

6. DELIVERY / SHIPPING TERMS

6.1. Required Date of Delivery: 30 April 2026

6.2. Shipping Terms: Boat will be delivered to and picked up from the contractor’s facility.

7. REFERENCES

7.1. OM-DP70-230-256, 70 Cockpit Motor Yacht Owner's Manual Section 3

7.2. ABYC, TH-29 Sewage Systems

7.3. ABYC, H-33 Diesel Fuel Systems

7.4. Detroit Diesel 12V-92TA 6SE379 Vol 1, 2 & 3

7.5. Installation, Operation, and Service Manual NAIAD Hydraulic Sip Roll Stabilizers

7.6. ABYC, P-6, Propeller Shafting Systems

7.7. Condition Found Report (CFR) Sample

8. POINTS OF CONTACT (POC)

Delivery POC LT. Hannah M. Godfrey/ LT Melanie Miller Protocol Aide / Division Officer, U.S. Fleet Forces Command Office Phone: (757) 836-4779 Cell Phone: (757) 647-5329 Contracting Officer’s Representative

TBD

Office Phone: Email:

Assistant Contracting Officer’s Representative If necessary

Office Phone: Email:

Technical Assistant If necessary

Office Phone: Email:

Contracting Office POC Samantha Miller

Office Phone: Email:

ITEM NO SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

0001 1 Lot $166,744.77 $166,744.77 Maintenance and Repair

FFP

see PWS FOB: Destination

MILSTRIP: 1301320833

PURCHASE REQUEST NUMBER: 1301320833

PSC CD: J019

NET AMT $166,744.77

ACRN AA

CIN: 130132083300001

$166,744.77

INSPECTION AND ACCEPTANCE TERMS

Supplies/services will be inspected/accepted at:

CLIN INSPECT AT INSPECT BY ACCEPT AT ACCEPT BY

0001 Destination N/A Destination Government

DELIVERY INFORMATION

CLIN DELIVERY DATE QUANTITY SHIP TO ADDRESS DODAAC /

CAGE

0001 POP 15-JAN-2026 TO

30-APR-2026

N/A US FLEET FORCES COMMAND (N00060)

LT HANNAH M. GODFREY

9672 MASSEY HUGHES DR

NORFOLK VA 23511

7578364779 FOB: Destination

N00060

ACCOUNTING AND APPROPRIATION DATA

AA: 1761804 6B5B 257 50054 0 050120 2D 000000

COST CODE: A00009704811

AMOUNT: $166,744.77

ACRN CLIN/SLIN CIN AMOUNT

AA 0001 130132083300001 $166,744.77

CLAUSES INCORPORATED BY REFERENCE

52.204-13 System for Award Management Maintenance OCT 2018 52.204-18 Commercial and Government Entity Code Maintenance AUG 2020 52.209-10 Prohibition on Contracting With Inverted Domestic

Corporations

NOV 2015

52.212-4 Contract Terms and Conditions--Commercial Products and Commercial Services

NOV 2023

52.222-41 Service Contract Labor Standards AUG 2018 52.232-39 Unenforceability of Unauthorized Obligations JUN 2013 52.247-34 F.O.B. Destination JAN 1991 252.203-7000 Requirements Relating to Compensation of Former DoD

Officials

SEP 2011

252.203-7002 Requirement to Inform Employees of Whistleblower Rights DEC 2022 252.204-7003 Control Of Government Personnel Work Product APR 1992 252.204-7004 Antiterrorism Awareness Training for Contractors JAN 2023 252.204-7012 (Dev) Safeguarding Covered Defense Information and Cyber

Incident Reporting (DEVIATION 2024-O0013 REVISION 1)

MAY 2024

252.204-7015 Notice of Authorized Disclosure of Information for Litigation Support

JAN 2023

252.204-7018 Prohibition on the Acquisition of Covered Defense Telecommunications Equipment or Services

JAN 2023

252.223-7008 Prohibition of Hexavalent Chromium JAN 2023 252.225-7001 Buy American and Balance of Payments Program FEB 2024 252.225-7002 Qualifying Country Sources As Subcontractors MAR 2022 252.225-7048 Export-Controlled Items JUN 2013 252.225-7972 (Dev) Prohibition on the Procurement of Foreign-Made Unmanned

Aircraft Systems (DEVIATION 2024-O0014)

AUG 2024

252.232-7003 Electronic Submission of Payment Requests and Receiving Reports

DEC 2018

252.232-7010 Levies on Contract Payments DEC 2006 252.237-7010 Prohibition on Interrogation of Detainees by Contractor

Personnel

JAN 2023

252.244-7000 Subcontracts for Commercial Products or Commercial Services

NOV 2023

252.247-7023 Transportation of Supplies by Sea OCT 2024

CLAUSES INCORPORATED BY FULL TEXT

52.212-5 CONTRACT TERMS AND CONDITIONS REQUIRED TO IMPLEMENT STATUTES OR

EXECUTIVE ORDERS--COMMERCIAL PRODUCTS AND COMMERCIAL SERVICES (DEVIATION 2025-

O0003/ DEVIATION 2025-O0004) (OCT 2025)

(a) The Contractor shall comply with the following Federal Acquisition Regulation (FAR) clauses, which are incorporated in this contract by reference, to implement provisions of law or Executive orders applicable to acquisitions of commercial products and commercial services:

(1) 52.203-19, Prohibition on Requiring Certain Internal Confidentiality Agreements or Statements (JAN 2017) (section 743 of Division E, Title VII, of the Consolidated and Further Continuing Appropriations Act, 2015 (Pub. L.

113-235) and its successor provisions in subsequent appropriations acts (and as extended in continuing resolutions)).

(2) 52.204-23, Prohibition on Contracting for Hardware, Software, and Services Developed or Provided by Kaspersky Lab Covered Entities (DEC 2023) (Section 1634 of Pub. L. 115-91).

(3) 52.204-25, Prohibition on Contracting for Certain Telecommunications and Video Surveillance Services or Equipment. (NOV 2021) (Section 889(a)(1)(A) of Pub. L. 115-232).

(4) 52.209-10, Prohibition on Contracting with Inverted Domestic Corporations (NOV 2015).

(5) 52.232-40, Providing Accelerated Payments to Small Business Subcontractors (MAR 2023) (31 U.S.C. 3903 and 10 U.S.C. 3801).

(6) 52.233-3, Protest After Award (AUG 1996) (31 U.S.C. 3553).

(7) 52.233-4, Applicable Law for Breach of Contract Claim (OCT 2004) (Public Laws 108-77 and 108-78 (19 U.S.C. 3805 note)).

(b) The Contractor shall comply with the FAR clauses in this paragraph (b) that the Contracting Officer has indicated as being incorporated in this contract by reference to implement provisions of law or Executive orders applicable to acquisitions of commercial products and commercial services: [Contracting Officer check as appropriate.]

___ (1) 52.203-6, Restrictions on Subcontractor Sales to the Government (JUN 2020), with Alternate I (NOV 2021) (41 U.S.C. 4704 and 10 U.S.C. 4655).

___ (2) 52.203-13, Contractor Code of Business Ethics and Conduct (NOV 2021) (41 U.S.C. 3509).

___ (3) 52.203-15, Whistleblower Protections under the American Recovery and Reinvestment Act of 2009 (JUN 2010) (Section 1553 of Pub. L. 111-5). (Applies to contracts funded by the American Recovery and Reinvestment Act of 2009.)

___ (4) 52.203-17, Contractor Employee Whistleblower Rights (NOV 2023) (41 U.S.C. 4712); this clause does not apply to contracts of DoD, NASA, the Coast Guard, or applicable elements of the intelligence community--see FAR 3.900(a).

___ (5) 52.204-10, Reporting Executive Compensation and First-Tier Subcontract Awards (JUN 2020) (Pub. L.

109-282) (31 U.S.C. 6101 note).

___ (6) [Reserved]

___ (7) 52.204-14, Service Contract Reporting Requirements (OCT 2016) (Pub. L. 111-117, section 743 of Div.

C).

___ (8) 52.204-15, Service Contract Reporting Requirements for Indefinite-Delivery Contracts (OCT 2016) (Pub.

L. 111-117, section 743 of Div. C).

___ (9) 52.204-27, Prohibition on a ByteDance Covered Application (JUN 2023) (Section 102 of Division R of Pub. L. 117-328).

___ (10) 52.204-28, Federal Acquisition Supply Chain Security Act Orders--Federal Supply Schedules, Governmentwide Acquisition Contracts, and Multi-Agency Contracts. (DEC 2023) (Pub. L. 115-390, title II).

___ (11)(i) 52.204-30, Federal Acquisition Supply Chain Security Act Orders--Prohibition. (DEC 2023) (Pub. L.

115-390, title II).

___ (ii) Alternate I (DEC 2023) of 52.204-30.

XX (12) 52.209-6, Protecting the Government's Interest When Subcontracting With Contractors Debarred, Suspended, Proposed for Debarment, or Voluntarily Excluded. (JAN 2025) (31 U.S.C. 6101 note).

___ (13) 52.209-9, Updates of Publicly Available Information Regarding Responsibility Matters (OCT 2018) (41 U.S.C. 2313).

____ (14) [Reserved]

____ (15) 52.219-3, Notice of HUBZone Set-Aside or Sole-Source Award (OCT 2022) (15 U.S.C. 657a).

____ (16) 52.219-4, Notice of Price Evaluation Preference for HUBZone Small Business Concerns (OCT 2022) (if the offeror elects to waive the preference, it shall so indicate in its offer) (15 U.S.C. 657a).

____ (17) [Reserved]

____ (18)(i) 52.219-6, Notice of Total Small Business Set-Aside (NOV 2020) (15 U.S.C. 644).

____ (ii) Alternate I (MAR 2020) of 52.219-6.

____ (19)(i) 52.219-7, Notice of Partial Small Business Set-Aside (NOV 2020) (15 U.S.C. 644).

____ (ii) Alternate I (MAR 2020) of 52.219-7.

____ (20) 52.219-8, Utilization of Small Business Concerns (JAN 2025) (15 U.S.C. 637(d)(2) and (3)).

____ (21)(i) 52.219-9, Small Business Subcontracting Plan (JAN 2025) (15 U.S.C. 637(d)(4)).

____ (ii) Alternate I (NOV 2016) of 52.219-9.

____ (iii) Alternate II (NOV 2016) of 52.219-9.

____ (iv) Alternate III (JUN 2020) of 52.219-9.

____ (v) Alternate IV (JAN 2025) of 52.219-9.

____ (22) (i) 52.219-13, Notice of Set-Aside of Orders (MAR 2020) (15 U.S.C. 644(r)).

____ (ii) Alternate I (MAR 2020) of 52.219-13.

____ (23) 52.219-14, Limitations on Subcontracting (OCT 2022) (15 U.S.C. 657s).

____ (24) 52.219-16, Liquidated Damages—Subcontracting Plan (SEP 2021) (15 U.S.C. 637(d)(4)(F)(i)).

____ (25) 52.219-27, Notice of Set-Aside for, or Sole-Source Award to, Service-Disabled Veteran-Owned Small Business (SDVOSB) Concerns Eligible Under the SDVOSB Program (FEB 2024) (15 U.S.C. 657f).

XX (26) (i) 52.219-28, Postaward Small Business Program Rerepresentation (JAN 2025) (15 U.S.C. 632(a)(2)).

____ (ii) Alternate I (MAR 2020) of 52.219-28.

____ (27) 52.219-29, Notice of Set-Aside for, or Sole-Source Award to, Economically Disadvantaged Women- Owned Small Business Concerns (OCT 2022) (15 U.S.C. 637(m)).

____ (28) 52.219-30, Notice of Set-Aside for, or Sole-Source Award to, Women-Owned Small Business Concerns Eligible Under the Women-Owned Small Business Program (OCT 2022) (15 U.S.C. 637(m)).

____ (29) 52.219-32, Orders Issued Directly Under Small Business Reserves (MAR 2020) (15 U.S.C. 644(r)).

____ (30) 52.219-33, Nonmanufacturer Rule (SEP 2021) (15 U.S.C. 637(a)(17)).

XX (31) 52.222-3, Convict Labor (JUN 2003) (E.O. 11755).

XX (32) 52.222-19, Child Labor--Cooperation with Authorities and Remedies (JAN 2025) (E.O. 13126).

____ (33) [Reserved]

____ (34) [Reserved]

XX (35)(i) 52.222-35, Equal Opportunity for Veterans (JUN 2020) (38 U.S.C. 4212).

____ (ii) Alternate I (JUL 2014) of 52.222-35.

XX (36)(i) 52.222-36, Equal Opportunity for Workers with Disabilities (JUN 2020) (29 U.S.C. 793).

____ (ii) Alternate I (JUL 2014) of 52.222-36.

XX (37) 52.222-37, Employment Reports on Veterans (JUN 2020) (38 U.S.C. 4212).

XX (38) 52.222-40, Notification of Employee Rights Under the National Labor Relations Act (DEC 2010) (E.O.

13496).

XX (39)(i) 52.222-50, Combating Trafficking in Persons (OCT 2025) (22 U.S.C. chapter 78 and E.O. 13627).

____ (ii) Alternate I (MAR 2015) of 52.222-50 (22 U.S.C. chapter 78 and E.O. 13627).

XX (40) 52.222-54, Employment Eligibility Verification (JAN 2025) (Executive Order 12989). (Not applicable to the acquisition of commercially available off-the-shelf items or certain other types of commercial products or commercial services as prescribed in FAR 22.1803.)

____ (41)(i) 52.223-9, Estimate of Percentage of Recovered Material Content for EPA–Designated Items (MAY 2008) (42 U.S.C. 6962(c)(3)(A)(ii)). (Not applicable to the acquisition of commercially available off-the-shelf items.)

____ (ii) Alternate I (MAY 2008) of 52.223-9 (42 U.S.C. 6962(i)(2)(C)). (Not applicable to the acquisition of commercially available off-the-shelf items.)

____ (42) 52.223-11, Ozone-Depleting Substances and High Global Warming Potential Hydrofluorocarbons (MAY 2024) (42 U.S.C. 7671, et seq.).

____ (43) 52.223-12, Maintenance, Service, Repair, or Disposal of Refrigeration Equipment and Air Conditioners (MAY 2024) (42 U.S.C. 7671, et seq.).

____ (44) 52.223-20, Aerosols (MAY 2024) (42 U.S.C. 7671, et seq.).

____ (45) 52.223-21, Foams (MAY 2024) (42 U.S.C. 7671, et seq.).

____ (46) 52.223-23, Sustainable Products and Services (MAR 2025) (DEVIATION 2025-O0004)) (7 U.S.C. 8102, 42 U.S.C. 6962, 42 U.S.C. 8259b, and 42 U.S.C. 7671l).

____ (47) (i) 52.224-3, Privacy Training (JAN 2017) (5 U.S.C. 552a).

____ (ii) Alternate I (JAN 2017) of 52.224-3.

____ (48) (i) 52.225-1, Buy American--Supplies (OCT 2022)) (41 U.S.C. chapter 83).

____ (ii) Alternate I (OCT 2022) of 52.225-1.

____ (49) (i) 52.225-3, Buy American--Free Trade Agreements--Israeli Trade Act (NOV 2023) (19 U.S.C. 3301 note, 19 U.S.C. 2112 note, 19 U.S.C. 3805 note, 19 U.S.C. 4001 note, 19 U.S.C. chapter 29 (sections 4501-4732), Public Law 103-182, 108-77, 108-78, 108-286, 108-302, 109-53, 109-169, 109-283, 110-138, 112-41, 112-42, and 112-43.

____ (ii) Alternate I [Reserved].

____ (iii) Alternate II (JAN 2025) of 52.225-3.

____ (iv) Alternate III (FEB 2024) of 52.225-3.

____ (v) Alternate IV (OCT 2022) of 52.225-3.

XX (50) 52.225-5, Trade Agreements (NOV 2023) (19 U.S.C. 2501, et seq., 19 U.S.C. 3301 note).

XX (51) 52.225-13, Restrictions on Certain Foreign Purchases (FEB 2021) (E.O.'s, proclamations, and statutes administered by the Office of Foreign Assets Control of the Department of the Treasury).

____ (52) 52.225-26, Contractors Performing Private Security Functions Outside the United States (OCT 2016) (Section 862, as amended, of the National Defense Authorization Act for Fiscal Year 2008; 10 U.S.C. Subtitle A, Part V, Subpart G Note).

____ (53) 52.226-4, Notice of Disaster or Emergency Area Set-Aside (NOV 2007) (42 U.S.C. 5150).

XX (54) 52.226-5, Restrictions on Subcontracting Outside Disaster or Emergency Area (NOV 2007) (42 U.S.C.

5150).

XX (55) 52.226-8, Encouraging Contractor Policies to Ban Text Messaging While Driving (MAY 2024) (E.O.

13513).

____ (56) 52.229-12, Tax on Certain Foreign Procurements (FEB 2021).

____ (57) 52.232-29, Terms for Financing of Purchases of Commercial Products and Commercial Services (NOV 2021) (41 U.S.C.4505, 10 U.S.C. 3805).

____ (58) 52.232-30, Installment Payments for Commercial Products and Commercial Services (NOV 2021) (41 U.S.C. 4505, 10 U.S.C. 3805).

XX (59) 52.232-33, Payment by Electronic Funds Transfer--System for Award Management (OCT 2018) (31 U.S.C.

3332).

____ (60) 52.232-34, Payment by Electronic Funds Transfer--Other than System for Award Management (JUL 2013) (31 U.S.C. 3332).

XX (61) 52.232-36, Payment by Third Party (MAY 2014) (31 U.S.C. 3332).

____ (62) 52.239-1, Privacy or Security Safeguards (AUG 1996) (5 U.S.C. 552a).

XX (63) 52.240-1, Prohibition on Unmanned Aircraft Systems Manufactured or Assembled by American Security Drone Act--Covered Foreign Entities (Nov 2024) (Sections 1821-1826, Pub. L. 118-31, 41 U.S.C. 3901 note prec.).

____ (64) 52.242-5, Payments to Small Business Subcontractors (JAN 2017)(15 U.S.C. 637(d)(13)).

____ (65) (i) 52.247-64, Preference for Privately Owned U.S.-Flag Commercial Vessels (NOV 2021) (46 U.S.C.

55305 and 10 U.S.C. 2631).

____ (ii) Alternate I (APR 2003) of 52.247-64.

____ (iii) Alternate II (NOV 2021) of 52.247-64.

(c) The Contractor shall comply with the FAR clauses in this paragraph (c), applicable to commercial services, that the Contracting Officer has indicated as being incorporated in this contract by reference to implement provisions of law or Executive orders applicable to acquisitions of commercial products and commercial services: [Contracting Officer check as appropriate.]

XX (1) 52.222-41, Service Contract Labor Standards (AUG 2018) (41 U.S.C. chapter 67).

XX (2) 52.222-42, Statement of Equivalent Rates for Federal Hires (MAY 2014) (29 U.S.C. 206 and 41 U.S.C.

chapter 67).

_____ (3) 52.222-43, Fair Labor Standards Act and Service Contract Labor Standards--Price Adjustment (Multiple Year and Option Contracts) (AUG 2018) (29 U.S.C. 206 and 41 U.S.C. chapter 67).

XX (4) 52.222-44, Fair Labor Standards Act and Service Contract Labor Standards--Price Adjustment (MAY 2014) (29 U.S.C 206 and 41 U.S.C. chapter 67).

_____ (5) 52.222-51, Exemption from Application of the Service Contract Labor Standards to Contracts for Maintenance, Calibration, or Repair of Certain Equipment--Requirements (MAY 2014) (41 U.S.C. chapter 67).

_____ (6) 52.222-53, Exemption from Application of the Service Contract Labor Standards to Contracts for Certain Services--Requirements (MAY 2014) (41 U.S.C. chapter 67).

_____ (7) 52.222-55, Minimum Wages for Contractor Workers Under Executive Order 14026 (JAN 2022) (E.O.

13658).

_____ (8) 52.222-62, Paid Sick Leave Under Executive Order 13706 (JAN 2022) (E.O. 13706).

_____ (9) 52.226-6, Promoting Excess Food Donation to Nonprofit Organizations (JUN 2020) (42 U.S.C. 1792).

_____ (10) 52.247-69, Reporting Requirement for U.S.-Flag Air Carriers Regarding Training to Prevent Human Trafficking (JAN 2025) (49 U.S.C. 40118(g)).

(d) Comptroller General Examination of Record. The Contractor shall comply with the provisions of this paragraph

(d) if this contract was awarded using other than sealed bid, is in excess of the simplified acquisition threshold, as defined in FAR 2.101, on the date of award of this contract, and does not contain the clause at 52.215-2, Audit and Records--Negotiation.

(1) The Comptroller General of the United States, or an authorized representative of the Comptroller General, shall have access to and right to examine any of the Contractor's directly pertinent records involving transactions related to this contract.

(2) The Contractor shall make available at its offices at all reasonable times the records, materials, and other evidence for examination, audit, or reproduction, until 3 years after final payment under this contract or for any shorter period specified in FAR Subpart 4.7, Contractor Records Retention, of the other clauses of this contract. If this contract is completely or partially terminated, the records relating to the work terminated shall be made available for 3 years after any resulting final termination settlement. Records relating to appeals under the disputes clause or to litigation or the settlement of claims arising under or relating to this contract shall be made available until such appeals, litigation, or claims are finally resolved.

(3) As used in this clause, records include books, documents, accounting procedures and practices, and other data, regardless of type and regardless of form. This does not require the Contractor to create or maintain any record that the Contractor does not maintain in the ordinary course of business or pursuant to a provision of law.

(e) (1) Notwithstanding the requirements of the clauses in paragraphs (a), (b), (c), and (d) of this clause, the Contractor is not required to flow down any FAR clause, other than those in this paragraph (e)(1) in a subcontract for commercial products or commercial services. Unless otherwise indicated below, the extent of the flow down shall be as required by the clause—

(i) 52.203-13, Contractor Code of Business Ethics and Conduct (NOV 2021) (41 U.S.C. 3509).

(ii) 52.203-17, Contractor Employee Whistleblower Rights (NOV 2023) (41 U.S.C. 4712).

(iii) 52.203-19, Prohibition on Requiring Certain Internal Confidentiality Agreements or Statements (JAN 2017) (section 743 of Division E, Title VII, of the Consolidated and Further Continuing Appropriations Act, 2015 (Pub. L.

113-235) and its successor provisions in subsequent appropriations acts (and as extended in continuing resolutions)).

(iv) 52.204-23, Prohibition on Contracting for Hardware, Software, and Services Developed or Provided by Kaspersky Lab Covered Entities (DEC 2023) (Section 1634 of Pub. L. 115-91).

(v) 52.204-25, Prohibition on Contracting for Certain Telecommunications and Video Surveillance Services or Equipment. (NOV 2021) (Section 889(a)(1)(A) of Pub. L. 115-232).

(vi) 52.204-27, Prohibition on a ByteDance Covered Application (JUN 2023) (Section 102 of Division R of Pub. L.

117-328).

(vii)(A) 52.204-30, Federal Acquisition Supply Chain Security Act Orders--Prohibition. (DEC 2023) (Pub. L. 115- 390, title II).

(B) Alternate I (DEC 2023) of 52.204-30.

(viii) 52.219-8, Utilization of Small Business Concerns (JAN 2025) (15 U.S.C. 637(d)(2) and (3)), in all subcontracts that offer further subcontracting opportunities. If the subcontract (except subcontracts to small business concerns) exceeds the applicable threshold specified in FAR 19.702(a) on the date of subcontract award, the subcontractor must include 52.219-8 in lower tier subcontracts that offer subcontracting opportunities.

(ix) [Reserved]

(x) [Reserved]

(xi) 52.222-35, Equal Opportunity for Veterans (JUN 2020) (38 U.S.C. 4212).

(xii) 52.222-36, Equal Opportunity for Workers with Disabilities (JUN 2020) (29 U.S.C. 793).

(xiii) 52.222-37, Employment Reports on Veterans (JUN 2020) (38 U.S.C. 4212).

(xiv) 52.222-40, Notification of Employee Rights Under the National Labor Relations Act (DEC 2010) (E.O.

13496). Flow down required in accordance with paragraph (f) of FAR clause 52.222-40.

(xv) 52.222-41, Service Contract Labor Standards (AUG 2018), (41 U.S.C. chapter 67).

(xvi) _____ (A) 52.222-50, Combating Trafficking in Persons (OCT 2025) (22 U.S.C. chapter 78 and E.O. 13627).

_____ (B) Alternate I (MAR 2015) of 52.222-50 (22 U.S.C. chapter 78 and E.O. 13627).

(xvii) 52.222-51, Exemption from Application of the Service Contract Labor Standards to Contracts for Maintenance, Calibration, or Repair of Certain Equipment--Requirements (MAY 2014) (41 U.S.C. chapter 67.)

(xviii) 52.222-53, Exemption from Application of the Service Contract Labor Standards to Contracts for Certain Services--Requirements (MAY 2014) (41 U.S.C. chapter 67)

(xix) 52.222-54, Employment Eligibility Verification (JAN 2025) (E. O. 12989).

(xx) 52.222-55, Minimum Wages for Contractor Workers Under Executive Order 14026 (JAN 2022) (E.O. 13658).

(xxi) 52.222-62, Paid Sick Leave Under Executive Order 13706 (JAN 2022) (E.O. 13706).

(xxii) (A) 52.224-3, Privacy Training (JAN 2017) (5 U.S.C. 552a).

(B) Alternate I (JAN 2017) of 52.224-3.

(xxiii) 52.225-26, Contractors Performing Private Security Functions Outside the United States (OCT 2016) (Section 862, as amended, of the National Defense Authorization Act for Fiscal Year 2008; 10 U.S.C. Subtitle A, Part V, Subpart G Note).

(xxiv) 52.226-6, Promoting Excess Food Donation to Nonprofit Organizations. (JUN 2020) (42 U.S.C. 1792). Flow down required in accordance with paragraph (e) of FAR clause 52.226-6.

(xxv) 52.232-40, Providing Accelerated Payments to Small Business Subcontractors (MAR 2023) (31 U.S.C. 3903 and 10 U.S.C. 3801). Flow down required in accordance with paragraph (c) of 52.232-40.

(xxvi) 52.240-1, Prohibition on Unmanned Aircraft Systems Manufactured or Assembled by American Security Drone Act--Covered Foreign Entities (NOV 2024) (Sections 1821-1826, Pub. L. 118-31, 41 U.S.C. 3901 note prec.).

(xxvii) 52.247-64, Preference for Privately-Owned U.S. Flag Commercial Vessels (NOV 2021) (46 U.S.C. 55305 and 10 U.S.C. 2631). Flow down required in accordance with paragraph (d) of FAR clause 52.247-64.

(2) While not required, the Contractor may include in its subcontracts for commercial products and commercial services a minimal number of additional clauses necessary to satisfy its contractual obligations.

(End of clause)

52.222-42 STATEMENT OF EQUIVALENT RATES FOR FEDERAL HIRES (MAY 2014)

In compliance with the Service Contract Labor Standards statute and the regulations of the Secretary of Labor (29 CFR part 4), this clause identifies the classes of service employees expected to be employed under the contract and states the wages and fringe benefits payable to each if they were employed by the contracting agency subject to the provisions of 5 U.S.C. 5341 or 5332.

THIS STATEMENT IS FOR INFORMATION ONLY: IT IS NOT A WAGE DETERMINATION

Employee Class Monetary Wage-Fringe Benefits

TITLE HOURLY FRINGE BENEFIT GS EQUIVALENT

Maintenance Support $22.29 38.5 % GS-5 step 5

52.232-18 AVAILABILITY OF FUNDS (APR 1984)

Funds are not presently available for this contract. The Government's obligation under this contract is contingent upon the availability of appropriated funds from which payment for contract purposes can be made. No legal liability on the part of the Government for any payment may arise until funds are made available to the Contracting Officer for this contract and until the Contractor receives notice of such availability, to be confirmed in writing by the Contracting Officer.

52.252-2 CLAUSES INCORPORATED BY REFERENCE (FEB 1998)

This contract incorporates one or more clauses by reference, with the same force and effect as if they were given in full text. Upon request, the Contracting Officer will make their full text available. Also, the full text of a clause may be accessed electronically at this/these address(es):

Christopher Whiteside FLC Norfolk Contracting Code 215.2 1968 Gilbert Street Norfolk, VA 23511-3392

FAR Clauses: https://www.acquisition.gov/browse/index/far/ DFARS Clauses: http://www.acq.osd.mil/dpap/dars/dfarspgi/current/

252.204-7020 NIST SP 800-171 DOD ASSESSMENT REQUIREMENTS (NOV 2023)

(a) Definitions.

Basic Assessment means a contractor's self-assessment of the contractor's implementation of NIST SP 800-171 that-

(1) Is based on the Contractor's review of their system security plan(s) associated with covered contractor information system(s);

(2) Is conducted in accordance with the NIST SP 800-171 DoD Assessment Methodology; and

(3) Results in a confidence level of "Low" in the resulting score, because it is a self-generated score.

Covered contractor information system has the meaning given in the clause 252.204-7012, Safeguarding Covered Defense Information and Cyber Incident Reporting, of this contract.

High Assessment means an assessment that is conducted by Government personnel using NIST SP 800-171A, Assessing Security Requirements for Controlled Unclassified Information that--

(1) Consists of--

(i) A review of a contractor's Basic Assessment;

(ii) A thorough document review;

(iii) Verification, examination, and demonstration of a Contractor's system security plan to validate that NIST SP 800-171 security requirements have been implemented as described in the contractor's system security plan; and

(iv) Discussions with the contractor to obtain additional information or clarification, as needed; and

(2) Results in a confidence level of "High" in the resulting score.

Medium Assessment means an assessment conducted by the Government that--

(1) Consists of--

(i) A review of a contractor's Basic Assessment;

(ii) A thorough document review; and

(iii) Discussions with the contractor to obtain additional information or clarification, as needed; and

(2) Results in a confidence level of "Medium" in the resulting score.

(b) Applicability. This clause applies to covered contractor information systems that are required to comply with the National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171, in accordance with Defense Federal Acquisition Regulation System (DFARS) clause at 252.204-7012, Safeguarding Covered Defense Information and Cyber Incident Reporting, of this contract.

(c) Requirements. The Contractor shall provide access to its facilities, systems, and personnel necessary for the Government to conduct a Medium or High NIST SP 800-171 DoD Assessment, as described in NIST SP 800-171 DoD Assessment Methodology at https://www.acq.osd.mil/asda/dpc/cp/cyber/docs/safeguarding/NIST-SP-800-171- Assessment-Methodology-Version-1.2.1-6.24.2020.pdf, if necessary.

(d) Procedures. Summary level scores for all assessments will be posted in the Supplier Performance Risk System (SPRS) (https://www.sprs.csd.disa.mil/) to provide DoD Components visibility into the summary level scores of strategic assessments.

(1) Basic Assessments. A contractor may submit, via encrypted email, summary level scores of Basic Assessments conducted in accordance with the NIST SP 800-171 DoD Assessment Methodology to webptsmh@navy.mil for posting to SPRS.

(i) The email shall include the following information:

(A) Version of NIST SP 800-171 against which the assessment was conducted.

(B) Organization conducting the assessment (e.g., Contractor self-assessment).

(C) For each system security plan (security requirement 3.12.4) supporting the performance of a DoD contract--

(1) All industry Commercial and Government Entity (CAGE) code(s) associated with the information system(s) addressed by the system security plan; and

(2) A brief description of the system security plan architecture, if more than one plan exists.

(D) Date the assessment was completed.

(E) Summary level score (e.g., 95 out of 110, NOT the individual value for each requirement).

(F) Date that all requirements are expected to be implemented (i.e., a score of 110 is expected to be achieved) based on information gathered from associated plan(s) of action developed in accordance with NIST SP 800-171.

(ii) If multiple system security plans are addressed in the email described at paragraph (b)(1)(i) of this section, the Contractor shall use the following format for the report:

Brief CAGE codes description of Date of Total Date score of System security plan supported by this the plan assessment score 110 will plan architecture achieved

(2) Medium and High Assessments. DoD will post the following Medium and/or High Assessment summary level scores to SPRS for each system security plan assessed:

(i) The standard assessed (e.g., NIST SP 800-171 Rev 1).

(ii) Organization conducting the assessment, e.g., DCMA, or a specific organization (identified by Department of Defense Activity Address Code (DoDAAC)).

(iii) All industry CAGE code(s) associated with the information system(s) addressed by the system security plan.

(iv) A brief description of the system security plan architecture, if more than one system security plan exists.

(v) Date and level of the assessment, i.e., medium or high.

(vi) Summary level score (e.g., 105 out of 110, not the individual value assigned for each requirement).

(vii) Date that all requirements are expected to be implemented (i.e., a score of 110 is expected to be achieved) based on information gathered from associated plan(s) of action developed in accordance with NIST SP 800-171.

(e) Rebuttals. (1) DoD will provide Medium and High Assessment summary level scores to the Contractor and offer the opportunity for rebuttal and adjudication of assessment summary level scores prior to posting the summary level scores to SPRS (see SPRS User's Guide https://www.sprs.csd.disa.mil/pdf/SPRS_Awardee.pdf).

(2) Upon completion of each assessment, the contractor has 14 business days to provide additional information to demonstrate that they meet any security requirements not observed by the assessment team or to rebut the findings that may be of question.

(f) Accessibility.

(1) Assessment summary level scores posted in SPRS are available to DoD personnel, and are protected, in accordance with the standards set forth in DoD Instruction 5000.79, Defense-wide Sharing and Use of Supplier and Product Performance Information (PI).

(2) Authorized representatives of the Contractor for which the assessment was conducted may access SPRS to view their own summary level scores, in accordance with the SPRS Software User's Guide for Awardees/Contractors available at https://www.sprs.csd.disa.mil/pdf/SPRS_Awardee.pdf.

(3) A High NIST SP 800-171 DoD Assessment may result in documentation in addition to that listed in this clause.

DoD will retain and protect any such documentation as "Controlled Unclassified Information (CUI)" and intended for internal DoD use only. The information will be protected against unauthorized use and release, including through the exercise of applicable exemptions under the Freedom of Information Act (e.g., Exemption 4 covers trade secrets and commercial or financial information obtained from a contractor that is privileged or confidential).

(g) Subcontracts.

(1) The Contractor shall insert the substance of this clause, including this paragraph (g), in all subcontracts and other contractual instruments, including subcontracts for the acquisition of commercial products or commercial services (excluding commercially available off-the-shelf items).

(2) The Contractor shall not award a subcontract or other contractual instrument, that is subject to the implementation of NIST SP 800-171 security requirements, in accordance with DFARS clause 252.204-7012 of this contract, unless the subcontractor has completed, within the last 3 years, at least a Basic NIST SP 800-171 DoD Assessment, as described in https://www.acq.osd.mil/asda/dpc/cp/cyber/docs/safeguarding/NIST-SP-800-171- Assessment-Methodology-Version-1.2.1-6.24.2020.pdf, for all covered contractor information systems relevant to its offer that are not part of an information technology service or system operated on behalf of the Government.

(3) If a subcontractor does not have summary level scores of a current NIST SP 800-171 DoD Assessment (i.e., not more than 3 years old unless a lesser time is specified in the solicitation) posted in SPRS, the subcontractor may conduct and submit a Basic Assessment, in accordance with the NIST SP 800-171 DoD Assessment Methodology, to webptsmh@navy.mil for posting to SPRS along with the information required by paragraph (d) of this clause.

252.204-7021 CONTRACTOR COMPLIANCE WITH THE CYBERSECURITY MATURITY MODEL

CERTIFICATION LEVEL REQUIREMENTS (NOV 2025)

(a) Definitions. As used in this clause- Controlled unclassified information means information the Government creates or possesses, or information an entity creates or possesses for or on behalf of the Government, that a law, regulation, or Governmentwide policy requires or permits an agency to handle using safeguarding or dissemination controls (32 CFR 2002.4(h)).

Current means--

(1) With regard to Conditional Cybersecurity Maturity Model Certification (CMMC) Status--

(i) Not older than 180 days for Conditional Level 2 (Self) assessments and Conditional Level 2 (certified third-party assessment organization (C3PAO)) assessments, with--

(A) No changes in compliance with the requirements at 32 CFR part 170 since the Conditional CMMC Status date (see 32 CFR 170.16 and 170.17); and

(B) A corresponding affirmation of continuous compliance by an affirming official (see 32 CFR 170.4); and

(ii) Not older than 180 days for Conditional Level 3 (Defense Industrial Base Cybersecurity Assessment Center (DIBCAC)) assessments, with--

(A) No changes in compliance with the requirements at 32 CFR part 170 since the Conditional CMMC Status date (see 32 CFR 170.18); and

(B) A corresponding affirmation of continuous compliance by an affirming official;

(2) With regard to Final CMMC Status--

(i) Not older than 1 year for Final Level 1 (Self), with--

(A) No changes in compliance with the requirements at 32 CFR part 170 since the Final CMMC Status date (see 32 CFR 170.15); and

(B) A corresponding affirmation of continuous compliance, not older than 1 year, by an affirming official;

(ii) Not older than 3 years for Final Level 2 (Self) assessments and Final Level 2 (C3PAO) assessments, with--

(A) No changes in compliance with the requirements at 32 CFR part 170 since the Final CMMC Status date (see 32 CFR 170.16 and 170.17); and

(B) A corresponding affirmation of continuous compliance, not older than 1 year, by an affirming official; and

(iii) Not older than 3 years for Final Level 3 (DIBCAC) assessments, with--

(A) No changes in compliance with the requirements at 32 CFR part 170 since the Final CMMC Status date (see 32 CFR 170.18); and

(B) A corresponding affirmation of continuous compliance, not older than 1 year, by an affirming official; and

(3) With regard to affirmation of continuous compliance (32 CFR 170.22), not older than 1 year with no changes in compliance with the requirements at 32 CFR part 170.

Cybersecurity Maturity Model Certification (CMMC) status means the result of meeting or exceeding the minimum required score for the corresponding assessment. The potential statuses are as follows:

(1) Final Level 1 (Self).

(2) Conditional Level 2 (Self).

(3) Final Level 2 (Self).

(4) Conditional Level 2 (C3PAO).

(5) Final Level 2 (C3PAO).

(6) Conditional Level 3 (DIBCAC).

(7) Final Level 3 (DIBCAC).

Cybersecurity Maturity Model Certification unique identifier (CMMC UID) means 10 alpha-numeric characters assigned to each CMMC assessment and reflected in the Supplier Performance Risk System (SPRS) for each contractor information system.

Federal contract information (FCI) means information, not intended for public release, that is provided by or generated for the Government under a contract to develop or deliver a product or service to the Government. It does not include information provided by the Government to the public, such as on public websites, or simple transactional information, such as information necessary to process payments.

Plan of action and milestones means a document that identifies tasks to be accomplished. It details resources required to accomplish the elements of the plan, any milestones in meeting the tasks, and scheduled completion dates for the milestones, as defined in National Institute of Standards and Technology Special Publication 800-115

(32 CFR 170.21).

(b) Framework. The Cybersecurity Maturity Model Certification (CMMC) is a framework for assessing a contractor's compliance with applicable information security protections (see 32 CFR part 170).

(c) Duplication. The CMMC assessments will not duplicate efforts from any other comparable DoD assessment, except for rare circumstances when a reassessment may be necessary, for example, when there are indications of issues with cybersecurity and/or compliance with CMMC requirements.

(d) Requirements. The Contractor shall-- (1)(i) Have and maintain for the duration of the contract a current CMMC status at the following CMMC level, or higher: ___ [Contracting Officer insert: CMMC Level 1 (Self); CMMC Level 2 (Self); CMMC Level 2 (C3PAO);

or CMMC Level 3 (DIBCAC)] for all information systems used in performance of the contract, task order, or delivery order that process, store, or transmit FCI or CUI; and

(ii) Consult 32 CFR 170.23 related to the flowdown of the CMMC requirements, and flow down the correct CMMC level to subcontracts and other contractual instruments;

(2) Only process, store, or transmit FCI or CUI on contractor information systems that have a CMMC status at the CMMC level required in paragraph (d)(1) of this clause, or higher;

(3) Complete on an annual basis, and maintain as current, an affirmation, by the affirming official (see 32 CFR 170.4), of continuous compliance with the requirements associated with the CMMC level required in paragraph (d)(1) of this clause in the Supplier Performance Risk System (SPRS) (https://piee.eb.mil) for each CMMC UID applicable to each of the contractor information systems that process, store, or transmit FCI or CUI and that are used in performance of the contract;

(4) Ensure all subcontractors and suppliers complete prior to subcontract award, and maintain on an annual basis, an affirmation, by the affirming official (see 32 CFR 170.4), of continuous compliance with the requirements associated with the CMMC level required for the subcontract or other contractual instrument for each of the subcontractor information systems that process, store, or transmit FCI or CUI and that are used in performance of the subcontract; and

(5) If the Contractor has a CMMC Status of Conditional, successfully close out a valid plan of action and milestones (32 CFR 170.21) to achieve a CMMC Status of Final.

(e) Reporting. The Contractor shall--

(1) Submit to the Contracting Officer--

(i) The CMMC UID(s) issued by SPRS for contractor information systems that will process, store, or transmit FCI or CUI during performance of the contract; and

(ii) Any changes in the CMMC UIDs generated in SPRS throughout the life of the contract, task order, or delivery order, if applicable;

(2) Enter into SPRS the results of a current self-assessment for each CMMC UID, not covered by a C3PAO assessment or DIBCAC assessment, applicable to each of the contractor information systems that process, store, or transmit FCI or CUI and that are used in performance of the contract; and

(3) Complete in SPRS on an annual basis and maintain as current an affirmation of continuous compliance by the affirming official (see 32 CFR 170.4) for each self-assessment, C3PAO assessment, or DIBCAC assessment required under the contract in SPRS.

(f) Subcontracts. The Contractor shall--

(1) Insert the substance of this clause, including this paragraph

(f) and excluding paragraph (e)(1), in subcontracts and other contractual instruments, including those for the acquisition of commercial products and commercial services, excluding commercially available off-the-shelf items, if the subcontract or other contractual instrument will contain a requirement to process, store, or transmit FCI or CUI; and

(2) Prior to awarding a subcontract or other contractual instrument, ensure that the subcontractor has a current CMMC certificate or current…