80TECH27QA003 - RFQ - FEMSRMS.pdf

RFQ # 80TECH27QA003

NATIONAL AERONAUTICS AND SPACE ADMINISTRATION (NASA)

INFORMATION TECHNOLOGY PROCUREMENT OFFICE (ITPO)

INFORMATION TECHNOLOGY PROCUREMENTS ON-DEMAND TEAM (ITPOD)

FIRE & EMERGENCY MEDICAL SERVICES RECORDS MANAGEMENT SYSTEM

(FEMSRMS) SOFTWARE BASE + 3 OPTION YEARS ORDER

1. Type of Order.

This order is being issued on a firm fixed price (FFP) basis.

(End of text)

2. Order of Precedence.

This order is subject to the terms and conditions of the Federal Acquisition Regulation (FAR) and the NASA Federal Acquisition Regulation Supplement (NFS) clauses included herein. The NASA ITPO-ITPOD Contracting Officer (CO) shall be contacted in the event there are any issues/disagreements regarding the terms and conditions of this order.

3. Substitution of Terms

This order contains clauses taken from, among other sources, the FAR, and NFS. Whenever the word "contract" appears in FAR or NFS clauses presented herein, substitute the word "order" respectively. In addition, throughout this entire document, the term "Contracting Officer" refers to the NASA ITPO Contracting Officer and the term FAR refers to the Revolutionary FAR Overhaul, except where specifically defined otherwise.

4. 1852.216-78 Firm Fixed Price. (DEC 1988)

The total firm fixed price of this order is $TBD.

(End of clause)

10. Section 508 COMPLIANCE

The contractor shall ensure that all products, platforms, and services delivered as part of this work statement that are Information and Communication Technology (ICT) or contain ICT, must conform to the Revised Section 508 of the Rehabilitation Act Standards, 36 C.F.R. § 1194.1 & Apps. A, C & D. The Standards may be found at Revised 508 Standards and 255 Guidelines (access-board.gov).

The Applicable Chapters for this acquisition are as follows:

508 Chapter 1: Application and Administration 508 Chapter 2: Scoping Chapter 3: Functional Performance Criteria Chapter 4: Hardware Chapter 5: Software Chapter 6: Support Documentation and Services Chapter 7: Referenced Standards - WCAG 2.0.

11. INTERNET PROTOCL VERSION SIX (IPv6)

In accordance with FAR 11.002(g) and joint NASA Chief Information Officer (CIO)/NASA Associate Administrator for Procurement “Policies to Ensure IPv6) in Acquiring Information Technology is required. This (contract/task order) involves the acquisition of Information Technology (IT) that uses Internet Protocol (IP) technology. The contractor shall ensure that

(1) all deliverables that involve IT that uses IP (products, services, software.) comply with IPv6 standards and interoperate with both IPv6 and IPv4 systems and products; and (2) it has IPv6 technical support for fielded product management, development and implementation available. If the contractor plans to offer a deliverable that involves IT that is not initially compliant, the contractor shall (1) obtain the Contracting Officer’s approval before starting work on the deliverable; and (2) have IPv6 technical support for fielded product management, development, and implementation available.

Pursuant to the terms identified in this purchase order, the Contractor agrees to the following terms of an order exclusively with NASA ITPO:

52.252-2 Clauses Incorporated by Reference. (SEPT 2023)

This contract incorporates one or more clauses by reference, with the same force and effect as if they were given in full text. Upon request, the Contracting Officer will make their full text available. Also, the full text of a clause may be accessed electronically at these addresses:

Federal Acquisition Regulation (FAR) clauses:

https://www.acquisition.gov/?q=browsefar

NASA FAR Supplement (NFS) clauses:

https://www.hq.nasa.gov/office/procurement/regs/NFS.pdf

FAR CLAUSES BY REFERENCE:

52.203-6 Restrictions on Subcontractor Sales to the Government (JUN 2020) with

Alternate I (NOV 2021) 52.203-12 Limitation on Payments to Influence Certain Federal Transactions (JUN 2020) 52.204-13 System for Award Management Maintenance (DEVIATION SEP 2025) 52.209-6 Protecting the Government’s Interest When Subcontracting with Contractors

Debarred, Suspended, or Proposed for Debarment (DEVIATION DEC 2025) 52.209-10 Prohibition on Contracting with Inverted Domestic Corporations (DEVIATION

DEC 2025)

52.212-4 Contract Terms and Conditions-Commercial Items (DEVIATION SEP 2025) 52.219-4 Notice of Price Evaluation Preference for HUBZone Small Business Concerns

(DEVIATION DEC 2025)

52.219-8 Utilization of Small Business Concerns (DEVIATION DEC 2025) 52.219-9 Small Business Subcontracting Plan (DEVIATION DEC 2025) 52.219-16 Liquidated Damages – Subcontracting Plan (Deviation DEC 2025) 52.222-3 Convict Labor (DEVIATION DEC 2025) 52.222-19 Child Labor—Cooperation with Authorities and Remedies (DEVIATION DEC

2025) 52.222-35 Equal Opportunity for Veterans (DEVIATION DEC 2025) 52.222-36 Equal Opportunity for Workers with Disabilities (DEVIATION DEC 2025) 52.222-37 Employment Reports on Veterans (DEVIATION DEC 2025) 52.222-40 Notification of Employee Rights Under the National Labor Relations Act

(DEVIATION DEC 2025)

52.222-50 Combating Trafficking in Persons (DEVIATION DEC 2025) 52.222-90 Addressing DEI Discrimination by Federal Contractors (DEVIATION APR 2026) 52.223-23 Sustainable Products and Services (DEVIATION DEC 2025) 52.224-3 Privacy Training (Jan 2017) 52.226-8 Encouraging Contractor Policies to Ban Text Messaging While Driving (MAY

2024) 52.232-40 Providing Accelerated Payments to Small Business Subcontractors (Mar 2023) 52.233-3 Protest After Award (DEVIATION SEP 2025) 52.233-4 Applicable Law for Breach of Contract Claim (DEVIATION SEP 2025) 52.240-91 Security Prohibitions and Exclusions (NOV 2025) 52.240-93 Basic Safeguarding of Covered Contractor Information Systems (NOV 2025) 52.244-6 Subcontracts for Commercial Products and Commercial Services (Oct 2025)

NASA FAR SUPPLEMENT CLAUSES BY REFERENCE:

1852.203-71 Requirement to Inform Employees of Whistleblower Rights. (DEVIATION SEP

2025) 1852.215-84 Ombudsman (NOV 2023)

1852.226-73 Major Breech of Safety or Security (FEB 2026) with Alt 1 (FEB 2026) 1852.237-70 Emergency Evacuation Procedures (DEVIATION DEC 2025) 1852.237-72 Access to Sensitive Information (DEVIATION DEC 2025) 1852.237-73 Release of Sensitive Information (DEVIATION DEC 2025)

(End of by reference section)

FAR CLAUSES IN FULL TEXT:

52.217-8 Option to Extend Services (NOV 1999)

The Government may require continued performance of any services within the limits and at the rates specified in the contract. These rates may be adjusted only as a result of revisions to prevailing labor rates provided by the Secretary of Labor. The option provision may be exercised more than once, but the total extension of performance hereunder shall not exceed 6 months. The Contracting Officer may exercise the option by written notice to the Contractor prior to contract expiration.

52.217-9 Option to Extend the Term of the Contract (MAR 2020)

(a) The Government may extend the term of this contract by written notice to the Contractor before the contract expires; provided that the Government gives the Contractor a preliminary written notice of its intent to extend at least 30 days before the contract expires. The preliminary notice does not commit the Government to an extension.

(b) If the Government exercises this option, the extended contract shall be considered to include this option clause.

(c) The total duration of this contract, including the exercise of any options under this clause, shall not exceed 4 years.

52.252-6 Authorized Deviations in Clauses (NOV 2020)

(a) The use in this solicitation or contract of any Federal Acquisition Regulation (48 CFR Chapter 1) clause with an authorized deviation is indicated by the addition of "(DEVIATION)" after the date of the clause.

(b) The use in this solicitation or contract of any NASA FAR Supplement (48 CFR Chapter 18) clause with an authorized deviation is indicated by the addition of "(DEVIATION)" after the name of the regulation.

NASA FAR SUPPLEMENT CLAUSES IN FULL TEXT

1852.225-70 Export Licenses (DEVIATION DEC 2025)

(a) The contractor shall comply with all U.S. export control laws and regulations, including the International Traffic in Arms Regulations (ITAR), 22 CFR Parts 120 through 130, and the Export Administration Regulations (EAR), 15 CFR Parts 730 through 799, in the performance of this contract. In the absence of available license exemptions/exceptions, the contractor shall be responsible for obtaining the appropriate licenses or other approvals, if required, for exports of hardware, technical data, and software, or for the provision of technical assistance.

(b) The contractor shall be responsible for obtaining export licenses, if required, before utilizing foreign persons in the performance of this contract, including instances where the work is to be performed on-site at [insert name of NASA installation], where the foreign person will have access to export-controlled technical data or software.

(c) The contractor shall be responsible for all regulatory record keeping requirements associated with the use of licenses and license exemptions/exceptions.

(d) The contractor shall be responsible for ensuring that the provisions of this clause apply to its subcontractors.

1852.227-14 Rights in Data – General (DEVIATION Jun 2026)

(a) Definitions. As used in this clause-

Computer database or "database means" a collection of recorded information in a form capable of, and for the purpose of, being stored in, processed, and operated on by a computer. The term does not include computer software.

Computer software-

(1) Means

(i) Computer programs that comprise a series of instructions, rules, routines, or statements, regardless of the media in which recorded, that allow or cause a computer to perform a specific operation or series of operations; and

(ii) Recorded information comprising source code listings, design details, algorithms, processes, flow charts, formulas, and related material that would enable the computer program to be produced, created, or compiled.

(2) Does not include computer databases or computer software documentation.

Computer software documentation means owner’s manuals, user’s manuals, installation instructions, operating instructions, and other similar items, regardless of storage medium, that explain the capabilities of the computer software or provide instructions for using the software.

Data means recorded information, regardless of form or the media on which it may be recorded.

The term includes technical data and computer software. The term does not include information incidental to contract administration, such as financial, administrative, cost or pricing, or management information.

Form, fit, and function data means data relating to items, components, or processes that are sufficient to enable physical and functional interchangeability, and data identifying source, size, configuration, mating and attachment characteristics, functional characteristics, and performance requirements. For computer software it means data identifying source, functional characteristics, and performance requirements but specifically excludes the source code, algorithms, processes, formulas, and flow charts of the software.

Limited rights means the rights of the Government in limited rights data as set forth in the

Limited Rights Notice of paragraph (g)(3) if included in this clause.

Limited rights data means data, other than computer software, that embody trade secrets or are commercial or financial and confidential or privileged, to the extent that such data pertain to items, components, or processes developed at private expense, including minor modifications.

Restricted computer software means computer software developed at private expense and that is a trade secret, is commercial or financial and confidential or privileged, or is copyrighted computer software, including minor modifications of the computer software.

Restricted rights, as used in this clause, means the rights of the Government in restricted computer software, as set forth in a Restricted Rights Notice of paragraph (g) if included in this clause, or as otherwise may be provided in a collateral agreement incorporated in and made part of this contract, including minor modifications of such computer software.

Technical data means recorded information (regardless of the form or method of the recording) of a scientific or technical nature (including computer databases and computer software documentation). This term does not include computer software or financial, administrative, cost or pricing, or management data or other information incidental to contract administration. The term includes recorded information of a scientific or technical nature that is included in computer databases (See 41 U.S.C. 116).

Unlimited rights means the rights of the Government to use, disclose, reproduce, prepare derivative works, distribute copies to the public, and perform publicly and display publicly, in any manner and for any purpose, and to have or permit others to do so.

(b) Allocation of rights.

(1) Except as provided in paragraph (c) of this clause, the Government shall have unlimited rights in-

(i) Data first produced in the performance of this contract;

(ii) Form, fit, and function data delivered under this contract;

(iii) Data delivered under this contract (except for restricted computer software) that constitute manuals or instructional and training material for installation, operation, or routine maintenance and repair of items, components, or processes delivered or furnished for use under this contract; and

(iv) All other data delivered under this contract unless provided otherwise for limited rights data or restricted computer software in accordance with paragraph

(g) of this clause.

(2) The Contractor shall have the right to-

(i) Assert copyright in data first produced in the performance of this contract to the extent provided in paragraph (c)(1) of this clause;

(ii) Use, release to others, reproduce, distribute, or publish any data first produced or specifically used by the Contractor in the performance of this contract, unless provided otherwise in paragraph (d) of this clause;

(iii) Substantiate the use of, add, or correct limited rights, restricted rights, or copyright notices and to take other appropriate action, in accordance with paragraphs (e) and (f) of this clause; and

(iv) Protect from unauthorized disclosure and use those data that are limited rights data or restricted computer software to the extent provided in paragraph (g) of this clause.

(c) Copyright-

(1) Data first produced in the performance of this contract.

(i) Unless provided otherwise in paragraph (d) of this clause, the Contractor may, without prior approval of the Contracting Officer, assert copyright in scientific and technical articles based on or containing data first produced in the performance of this contract and published in academic, technical or professional journals, symposia proceedings, or similar works. The prior, express written permission of the Contracting Officer is required to assert copyright in all other data first produced in the performance of this contract.

(ii) When authorized to assert copyright to the data, the Contractor shall affix the applicable copyright notices of 17 U.S.C. 401 or 402, and an acknowledgment of

Government sponsorship (including contract number).

(iii) For data other than computer software, the Contractor grants to the

Government, and others acting on its behalf, a paid-up, nonexclusive, irrevocable, worldwide license in such copyrighted data to reproduce, prepare derivative works, distribute copies to the public, and perform publicly and display publicly by or on behalf of the Government. For computer software, the Contractor grants to the Government, and others acting on its behalf, a paid-up, nonexclusive, irrevocable, worldwide license in such copyrighted computer software to reproduce, prepare derivative works, and perform publicly and display publicly

(but not to distribute copies to the public) by or on behalf of the Government.

(iv) The contractor must mark each scientific and technical article based on or containing data first produced in the performance of this contract and submitted for publication in academic, technical or professional journals, symposia proceedings or similar works with a notice, similar in all material respects to the following, on the cover or first page of the article, reflecting the Government’s non-exclusive worldwide license in the copyright.

GOVERNMENT RIGHTS NOTICE

This work was authored by employees of [insert the name of the Contractor] under

Contract No. [insert contract number] with the National Aeronautics and Space

Administration. The United States Government retains and the publisher, by accepting the article for publication, acknowledges that the United States Government retains a non-exclusive, paid-up, irrevocable, worldwide license to reproduce, prepare derivative works, distribute copies to the public, and perform publicly and display publicly, or allow others to do so, for United States Government purposes. All other rights are reserved by the copyright owner.

(End of Notice)

(2) Data not first produced in the performance of this contract. The Contractor shall not, without the prior written permission of the Contracting Officer, incorporate in data delivered under this contract any data not first produced in the performance of this contract unless the Contractor-

(i) Identifies the data; and

(ii) Grants to the Government, or acquires on its behalf, a license of the same scope as set forth in paragraph (c)(1) of this clause or, if such data are restricted computer software, the Government shall acquire a copyright license as set forth in paragraph (g)(4) of this clause (if included in this contract) or as otherwise provided in a collateral agreement incorporated in or made part of this contract.

(3) Removal of copyright notices. The Government will not remove any authorized copyright notices placed on data pursuant to this paragraph (c), and will include such notices on all reproductions of the data.

(d) Release, publication, and use of data. The Contractor shall have the right to use, release to others, reproduce, distribute, or publish any data first produced or specifically used by the

Contractor in the performance of this contract, except-

(1) As prohibited by Federal law or regulation (e.g., export control or national security laws or regulations);

(2) As expressly set forth in this contract; or

(3) If the Contractor receives or is given access to data necessary for the performance of this contract that contain restrictive markings, the Contractor shall treat the data in accordance with such markings unless specifically authorized otherwise in writing by the

Contracting Officer.

(4)(i) The Contractor agrees not to assert claim to copyright, publish or release to others any computer software first produced in the performance of this contract unless authorized by the Contracting Officer in writing.

(ii) The prohibition on "release to others", as set forth in (d)(4)(i), does not prohibit release to another Federal Agency for its use or its contractors' use, as long as any such release is consistent with any restrictive markings on the software. Any restrictive markings on the software shall take precedence over the aforementioned release. Any release to a Federal Agency shall limit use to the Federal Agency or its contractors for

Government purposes only. Any other release shall require the Contracting Officer's prior written permission.

(iii) If the Government desires to obtain copyright in computer software first produced in the performance of this contract and permission has not been granted as set forth in paragraph (d)(4)(i) of this clause, the Contracting Officer may direct the contractor to assert, or authorize the assertion of, a claim to copyright in such data and to assign, or obtain the assignment of, such copyright to the Government or its designated assignee.

(e) Unauthorized marking of data.

(1) Notwithstanding any other provisions of this contract concerning inspection or acceptance, if any data delivered under this contract are marked with the notices specified in paragraph (g)(3) or (g) (4) if included in this clause, and use of the notices is not authorized by this clause, or if the data bears any other restrictive or limiting markings not authorized by this contract, the Contracting Officer may at any time either return the data to the Contractor, or cancel or ignore the markings. However, pursuant to 41 U.S.C.

4703, the following procedures shall apply prior to canceling or ignoring the markings.

(i) The Contracting Officer will make written inquiry to the Contractor affording the Contractor 60 days from receipt of the inquiry to provide written justification to substantiate the propriety of the markings;

(ii) If the Contractor fails to respond or fails to provide written justification to substantiate the propriety of the markings within the 60-day period (or a longer time approved in writing by the Contracting Officer for good cause shown), the

Government shall have the right to cancel or ignore the markings at any time after said period and the data will no longer be made subject to any disclosure prohibitions.

(iii) If the Contractor provides written justification to substantiate the propriety of the markings within the period set in paragraph (e)(1)(i) of this clause, the

Contracting Officer will consider such written justification and determine whether or not the markings are to be cancelled or ignored. If the Contracting Officer determines that the markings are authorized, the Contractor will be so notified in writing. If the Contracting Officer determines, with concurrence of the head of the contracting activity, that the markings are not authorized, the Contracting Officer will furnish the Contractor a written determination, which determination will become the final agency decision regarding the appropriateness of the markings unless the Contractor files suit in a court of competent jurisdiction within 90 days of receipt of the Contracting Officer’s decision. The Government will continue to abide by the markings under this paragraph (e)(1)(iii) until final resolution of the matter either by the Contracting Officer’s determination becoming final (in which instance the Government will thereafter have the right to cancel or ignore the markings at any time and the data will no longer be made subject to any disclosure prohibitions), or by final disposition of the matter by court decision if suit is filed.

(2) The time limits in the procedures set forth in paragraph (e)(1) of this clause may be modified in accordance with agency regulations implementing the Freedom of

Information Act ( 5 U.S.C. 552) if necessary to respond to a request thereunder.

(3) Except to the extent the Government’s action occurs as the result of final disposition of the matter by a court of competent jurisdiction, the Contractor is not precluded by paragraph (e) of the clause from bringing a claim, in accordance with the Disputes clause of this contract, that may arise as the result of the Government removing or ignoring authorized markings on data delivered under this contract.

(f) Omitted or incorrect markings.

(1) Data delivered to the Government without any restrictive markings shall be deemed to have been furnished with unlimited rights. The Government is not liable for the disclosure, use, or reproduction of such data.

(2) If the unmarked data has not been disclosed without restriction outside the

Government, the Contractor may request, within 6 months (or a longer time approved by the Contracting Officer in writing for good cause shown) after delivery of the data, permission to have authorized notices placed on the data at the Contractor’s expense. The

Contracting Officer may agree to do so if the Contractor-

(i) Identifies the data to which the omitted notice is to be applied;

(ii) Demonstrates that the omission of the notice was inadvertent;

(iii) Establishes that the proposed notice is authorized; and

(iv) Acknowledges that the Government has no liability for the disclosure, use, or reproduction of any data made prior to the addition of the notice or resulting from the omission of the notice.

(3) If data has been marked with an incorrect notice, the Contracting Officer may-

(i) Permit correction of the notice at the Contractor’s expense if the Contractor identifies the data and demonstrates that the correct notice is authorized; or

(ii) Correct any incorrect notices.

(g) Protection of limited rights data and restricted computer software.

(1) The Contractor may withhold from delivery qualifying limited rights data or restricted computer software that are not data identified in paragraphs (b)(1)(i), (ii), and (iii) of this clause. As a condition to this withholding, the Contractor shall-

(i) Identify the data being withheld; and

(ii) Furnish form, fit, and function data instead.

(2) Limited rights data that are formatted as a computer database for delivery to the

Government shall be treated as limited rights data and not restricted computer software.

(3) [Reserved]

(h) Subcontracting. The Contractor shall obtain from its subcontractors all data and rights therein necessary to fulfill the Contractor’s obligations to the Government under this contract. If a subcontractor refuses to accept terms affording the Government those rights, the Contractor shall promptly notify the Contracting Officer of the refusal and shall not proceed with the subcontract award without authorization in writing from the Contracting Officer.

(i) Relationship to patents or other rights. Nothing contained in this clause shall imply a license to the Government under any patent or be construed as affecting the scope of any license or other right otherwise granted to the Government.

1852.232-80 Submission of Vouchers/Invoices for Payment. (APR 2018)

(a) The designated payment office is the NASA Shared Services Center (NSSC) located at FMD Accounts Payable, Bldg. 1111, Jerry Hlass Road, Stennis Space Center, MS 39529.

(b) Except for classified vouchers, the Contractor shall submit all vouchers and invoices using the steps described at NSSC’s Vendor Payment information web site at:

https://www.nssc.nasa.gov/vendorpayment. Please contact the NSSC Customer Contact Center at 1-877-NSSC123 (1-877-677-2123) with any additional questions or comments.

(c) Payment requests.

(1) The payment periods are stipulated in the payment clause(s) contained in this contract.

(2) Vouchers submitted under cost-type contracts and invoices submitted under fixed-price contracts shall include the items delineated in FAR 32.905(b) supported by relevant back-up documentation. Back-up documentation shall include at a minimum, the following information:

(i) Vouchers.

(A) Breakdown of billed labor costs and associated contractor generated supporting documentation for billed direct labor costs to include rates used and number of hours incurred.

(B) Breakdown of billed other direct costs (ODCs) and associated contractor generated supporting documentation for billed ODCs.

(C) Indirect rate(s) used to calculate the amount of billed indirect expenses.

(D) Progress reports, as required.

(ii) Invoices.

(A) Description of goods and services delivered as part of the contract’s terms and conditions, including the dates of delivery/performance.

(B) Progress reports, as required.

(C) Date goods and services were performed.

(iii) Fee vouchers.

(A) Listing of all provisionally-billed fee by period or date earned since contract award.

(B) A reconciliation of all billed and earned fee.

(C) A clear explanation of the fee calculations.

(d) Non-electronic payment requests. The Contractor may submit a non-electronic voucher/invoice using the steps for non-electronic payment requests described at https://www.nssc.nasa.gov/vendorpayment, when any of the following conditions are met:

(1) The Contracting Officer administering the contract for payment has determined, in writing, that electronic submission would be unduly burdensome to the Contractor.

(2) The contract includes provisions allowing the contractor to submit vouchers or invoices using the steps for non-electronic payment requests. In such instances the Contractor agrees to submit non-electronic payment requests using the method or methods specified in Section G of the contract.

(e) Improper vouchers/invoices. The NSSC Payment Office will notify the contractor of any apparent error, defect, or impropriety in a voucher/invoices within seven calendar days of receipt by the NSSC Payment Office. Inquiries regarding requests for payment should be directed to the NSSC as specified in paragraph (b) of this section.

(f) Other payment clauses. In addition to the requirements of this clause, the Contractor shall meet the requirements of the appropriate payment clauses in this contract when submitting payment requests.

(g) In the event that amounts are withheld from payment in accordance with provisions of this contract, a separate payment request for the amount withheld will be required before payment for that amount may be made.

1852.240-76 Security Requirements for Unclassified Information Technology Resources.

(DEVIATION JAN 2026)

(a) The contractor shall protect the confidentiality, integrity, and availability of NASA

Electronic Information and IT resources and protect NASA Electronic Information from unauthorized disclosure.

(b) This clause is applicable to all NASA contractors and sub-contractors that process, manage, access, or store unclassified electronic information, to include Sensitive But Unclassified (SBU) information [or Controlled Unclassified Information (CUI)], for NASA in support of NASA’s missions, programs, projects and/or institutional requirements. Applicable requirements, regulations, policies, and guidelines are identified in the contract. The NASA data requirements description (DRD), “Security Requirements for Unclassified Information Technology Resources,” defines specific implementation requirements for this clause. For policy information considered sensitive, the documents will be identified as such in the contract and made available through the Contracting Officer.

(c) Definitions.

(1) IT resources means any hardware or software or interconnected system or subsystem of equipment, that is used to process, manage, access, or store electronic information.

(2) NASA Electronic Information is any data (as defined in the Rights in Data clause of this contract) or information (including information incidental to contract administration, such as financial, administrative, cost or pricing, or management information) that is processed, managed, accessed or stored on an IT system(s) in the performance of a NASA contract.

(3) Federal information system (FIS). The term "Federal information system" means an information system used or operated by an executive agency, by a contractor of an executive agency, or by another organization on behalf of an executive agency (40 U.S.C.

§11331)]

(4) Information System Security Plan (i.e., System Security Plan, IT Security Plan, or

Security Plan) A formal document that provides an overview of the security requirements for an information system and describes the security controls in place or planned for meeting those requirements.

(d) Contractors that process, store, or transmit federal information or operate information systems on behalf of the federal government shall meet the same security and privacy requirements as federal agencies. The contractor shall develop and submit an Information System Security Plan when operating a FIS or maintaining or collecting information for the purpose of processing, storing, or transmitting Federal information, and those activities are not incidental to providing a service or product to the Government. Such FIS plans are to be accomplished in accordance with the current version of NASA Procedural Requirements (NPR) 2810.1 Security of Information and Information Systems. The security plan and Authorization to Operate (ATO) shall be in place before any system may operate in the NASA environment. When the contractor does not operate a FIS but receives, process, transmits, or stores NASA information in performance of the contract, the contractor shall attest to the ability to secure NASA information within its own IT /information system.

(e) The contractor shall afford Government access to the Contractor's and subcontractors' facilities, installations, operations, documentation, databases, and personnel used in performance of the contract. Access shall be provided to the extent required to carry out a program of IT inspection (to include vulnerability testing), investigation and audit to safeguard against threats and hazards to the integrity, availability, and confidentiality of NASA Electronic Information or to the function of IT systems operated on behalf of NASA, and to preserve evidence of computer crime. The contractor shall report immediately upon notification any incident involving NASA information on nonfederal (contractor) systems.

(f) The contractor shall provide the name and contact information for the contractor's IT Security point of contact during phase in of the contract. Contractor employees requiring physical access to NASA facilities or electronic access to NASA systems shall complete the NASA Cybersecurity and Privacy Awareness Training

(g) The contractor shall insert this clause, including this paragraph in all subcontracts that process, manage, access or store NASA Electronic Information in support of the mission of the Agency.

List of Attachments

The following documents are attached hereto and made a part of this order:

Attachment Description A OCIO and ITPOD Rider B Statement of Work (SOW) C Applicable Documents

OTHER RFQ PROVISIONS:

52.252-1 Solicitation Provisions Incorporated by Reference (FEB 1998)

This solicitation incorporates one or more solicitation provisions by reference, with the same force and effect as if they were given in full text. Upon request, the Contracting Officer will make their full text available. The offeror is cautioned that the listed provisions may include blocks that must be completed by the offeror and submitted with its quotation or offer. In lieu of submitting the full text of those provisions, the offeror may identify the provision by paragraph identifier and provide the appropriate information with its quotation or offer. Also, the full text of a solicitation provision may be accessed electronically at this/these address(es):

Federal Acquisition Regulation (FAR) clauses:

https://www.acquisition.gov/?q=browsefar

NASA FAR Supplement (NFS) clauses:

https://www.hq.nasa.gov/office/procurement/regs/NFS.pdf

FAR PROVISIONS BY REFERENCE:

52.203-11 Certification and Disclosure Regarding Payments to Influence Certain Federal

Transactions (SEP 2024) 52.204-7 System for Award Management (DEVIATION NOV 2025) 52.212-1 Instructions to Offerors—Commercial Products and Commercial Services

(DEVIATION SEP 2025)

NASA FAR SUPPLEMENT PROVISIONS BY REFERENCE:

1852.233-70 Protest to NASA (DEVIATION SEP 2025)

(End of by reference section)

FAR PROVISIONS IN FULL TEXT:

52.240-90 Security Prohibitions and Exclusions Representations and Certifications

(NOV 2025)

(a) Definitions. As used in this provision-—

Backhaul, covered article, covered telecommunications equipment or services, critical technology, FASCSA order, Intelligence community, interconnection arrangements, national security system, roaming, sensitive compartmented information, sensitive compartmented information system, source, and substantial or essential component have the meanings provided in the clause 52.240-91, Security Prohibitions and Exclusions.

Business operations means engaging in commerce in any form, including by acquiring, developing, maintaining, owning, selling, possessing, leasing, or operating equipment, facilities, personnel, products, services, personal property, real property, or any other apparatus of business or commerce.

Marginalized populations of Sudan means—

(1) Adversely affected groups in regions authorized to receive assistance under section 8(c) of the Darfur Peace and Accountability Act (Pub. L. 109-344) (50 U.S.C. 1701 note); and

(2) Marginalized areas in Northern Sudan described in section 4(9) of such Act.

Restricted business operations means business operations in Sudan that include power production activities, mineral extraction activities, oil-related activities, or the production of military equipment, as those terms are defined in the Sudan Accountability and Divestment Act of 2007 (Pub. L. 110-174). Restricted business operations do not include business operations that the person (as that term is defined in Section 2 of the Sudan Accountability and Divestment Act of 2007) conducting the business can demonstrate—

(1) Are conducted under contract directly and exclusively with the regional government of southern Sudan;

(2) Are conducted under specific authorization from the Office of Foreign Assets Control in the Department of the Treasury, or are expressly exempted under Federal law from the requirement to be conducted under such authorization;

(3) Consist of providing goods or services to marginalized populations of Sudan;

(4) Consist of providing goods or services to an internationally recognized peacekeeping force or humanitarian organization;

(5) Consist of providing goods or services that are used only to promote health or education;

or

(6) Have been voluntarily suspended.

Sensitive technology—

(1) Means hardware, software, telecommunications equipment, or any other technology that is to be used specifically—

(i) To restrict the free flow of unbiased information in Iran; or

(ii) To disrupt, monitor, or otherwise restrict speech of the people of Iran; and

(2) Does not include information or informational materials the export of which the President does not have the authority to regulate or prohibit pursuant to section 203(b)(3) of the International Emergency Economic Powers Act (50 U.S.C. 1702(b)(3)).

(b) Procedures.

(1) Covered telecommunications and video surveillance. The Offeror shall review the list of excluded parties in the System for Award Management (SAM) at https://www.sam.gov for entities excluded from receiving federal awards for “covered telecommunications equipment or services.”

(2) FASCSA Orders.

(i) The Offeror shall search in SAM for the phrase “FASCSA order” for any covered article, or any products or services produced or provided by a source, if there is an applicable FASCSA order described in paragraph (e) of FAR 52.240-91, Security Prohibitions and Exclusions.

(ii) The Offeror shall review the solicitation for any FASCSA orders that are not in SAM but are effective and apply to the solicitation and resultant contract (see FAR 40.204- 1(c)(2)).

(iii) FASCSA orders issued after the date of solicitation do not apply unless added by an amendment to the solicitation.

(c) Covered telecommunications equipment or services representations. By submission of its offer, the Offeror represents that, after conducting a reasonable inquiry (that looks at any information in the Offeror’s possession but does not need to include an internal or third-party audit)—

(1) It will not provide covered telecommunications equipment or services to the Government in the performance of any contract, subcontract or other contractual instrument resulting from this solicitation, except as waived by the solicitation, or as disclosed in paragraph (g); and

(2) It does not use covered telecommunications equipment or services, or use any equipment, system, or service that uses covered telecommunications equipment or services, except as waived by the solicitation, or as disclosed in paragraph (g).

(d) FASCSA Representation. By submission of this offer, the offeror represents that it has conducted a reasonable inquiry, and that the offeror does not propose to provide or use in response to this solicitation any covered article, or any products or services produced or provided by a source, if the covered article or the source is prohibited by an applicable FASCSA order in effect on the date the solicitation was issued, except as waived by the solicitation, or as disclosed in paragraph (g). A reasonable inquiry will look at any information in the offeror’s possession but does not need to include an internal or third-party audit.

(e) Sudan certification. By submission of its offer, the offeror certifies, after conducting a reasonable inquiry (that looks at any information in the offeror’s possession but does not need to include an internal or third-party audit), that the offeror does not conduct any restricted business operations in Sudan.

(f) Iran Representation and Certifications.

(1) Except as provided in paragraph (f)(2) of this provision or if a waiver has been granted in accordance with FAR 40.203-3, the offeror, after conducting a reasonable inquiry (that looks at any information in the offeror’s possession but does not need to include an internal or third-party audit), by submission of its offer—

(i) Represents, to the best of its knowledge and belief, that the offeror does not export any sensitive technology to the government of Iran or any entities or individuals owned or controlled by, or acting on behalf or at the direction of, the government of Iran;

(ii) Certifies that the offeror, or any person (as defined at section 15 of the Iran Sanctions Act of 1996, Pub. L. 104-172, 50 U.S.C. 1701 note) owned or controlled by the offeror, does not engage in any activities for which sanctions may be imposed under section 5 of the Act. These sanctioned activities are in the areas of development of the petroleum resources of Iran, production of refined petroleum products in Iran, sale and provision of refined petroleum products to Iran, and contributing to Iran’s ability to acquire or develop certain weapons or technologies; and

(iii) Certifies that the offeror, and any person owned or controlled by the offeror, does not knowingly engage in any transaction that exceeds $15,000 with Iran’s Revolutionary Guard Corps or any of its officials, agents, or affiliates, the property and interests in property of which are blocked pursuant to the International Emergency Economic Powers Act (50 U.S.C. 1701 et seq.) (see OFAC’s Specially Designated Nationals and Blocked Persons List at https://www.treasury.gov/resource-center/sanctions/SDN- List/Pages/default.aspx)

(2) Exception for trade agreements. The representation and certification requirements of paragraph (f)(1) of this provision do not apply if—

(i) This solicitation includes a trade agreements notice or certification (e.g., 52.225-6, Trade Agreements Certificate); and

(ii) The offeror has certified that all the offered products to be supplied are designated country end products or designated country construction material.

(iii) The offeror shall email questions concerning sensitive technology to the Department of State at CISADA106@state.gov.

(g) Disclosure.

(1) If the Offeror is not able to represent compliance with the prohibitions in paragraphs (c) or (d), then the Offeror shall disclose within 72 hours to the contracting office identified in paragraph (g)(2) the following information for each product or service not compliant:

(i) Contract number and order number, if applicable;

(ii) Identification of whether this disclosure relates to paragraph (c) on covered telecommunication equipment or services, or to paragraph (d) on FASCSA orders;

(iii) A description of the products or services that the Contractor identifies or has reason to suspect is prohibited (include brand; model number, such as the original equipment manufacturer (OEM) number, manufacturer part number, or wholesaler number; and item description, as applicable);

(iv) The entity that produced the product or service (include entity name, unique entity identifier, Contractor and Government Entity (CAGE) code, facilities responsible for design, fabrication, assembly, packaging, and test of the product, and whether the entity was the OEM or a distributor (provide manufacturer codes and distributor codes used for the product));

(v) Description of the functionality of the product or service and how that functionality impacts the risk to the product or service;

(vi) An explanation of any factors relevant to determining if the product or service should be permitted by an applicable exception, exemption, or waiver (if the offeror would like the Government to consider a waiver);

(vii) Whether alternative products or services are available that would be compliant with the prohibition;

(viii) If the product or service is related to item maintenance, include the following information on the item being maintained:

(A) Brand;

(B) Model number, OEM number, manufacturer part number, or wholesaler number; and

(C) Item description, as applicable.

(ix) Any readily available information about mitigation actions undertaken or recommended.

(2) If a disclosure is required to be submitted to a contracting office, the offeror shall submit the disclosure as follows:

(i) If a Department of Defense contracting office, the offeror shall submit the disclosure to the website at https://dibnet.dod.mil.

(ii) For all other contracting offices, the Offeror shall submit the disclosure to the Contracting Officer.

(3) If the disclosure provided does not contain any of the information required by paragraph (1), and the Offeror later discovers new information that is required by paragraph (1), then the Offeror shall submit a subsequent disclosure within 72 hours of discovering the new information.

(h) Executive agency review of disclosures. The Contracting Officer will review disclosures provided in paragraph (g) to determine if any applicable waiver may be sought. The Contracting Officer may choose not to pursue a waiver and may instead make an award to an Offeror that does not require a waiver.

(End of provision)

52.252-5 Authorized Deviations in Provisions (NOV 2020)

(a) The use in this solicitation of any Federal Acquisition Regulation (48 CFR Chapter 1) provision with an authorized deviation is indicated by the addition of "(DEVIATION)" after the date of the provision.

(b) The use in this solicitation of any NASA FAR Supplement(48 CFR Chapter 18) provision with an authorized deviation is indicated by the addition of "(DEVIATION)" after the name of the regulation.

(End of provision)

NASA FAR SUPPLEMENT PROVISIONS IN FULL TEXT

1852.219-73 Small Business Subcontracting Plan (MAY 1999)

(a) This provision is not applicable to small business concerns.

(b) The contract expected to result from this solicitation will contain FAR clause 52.219–9, “Small Business Subcontracting Plan.” The apparent low bidder must submit the complete plan within 30 calendar days after request by the Contracting Officer.

(End of provision)