A12. Solicitation.pdf

PDF 964 KB Posted

Attached to
B10 Fuel purchase for Fuel Barge CE64
Solicitation number
W912P921T0001
Issued by

About this file

This solicitation requests quotations for the delivery of 200,000 gallons of Biodiesel blend B10 fuel to a US Army Corps of Engineers fuel barge. Quotations are due no later than November 23, 2020 and must be submitted via email to the contract specialist. The fuel is to be delivered between November 25, 2020 and January 30, 2021 at a location within 125 river miles of the Corps' Service Base that has a Coast Guard approved loading dock. The contractor must provide a marine licensed tankerman during fuel transfer operations and ensure all biofuel additives comply with EPA Comprehensive Procurement Guidelines. This solicitation is set aside for small businesses categorized under NAICS code 324110 with a size standard of 1,500 employees.

View the file

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

US Army Corps of Engineers St. Louis District

B10 Fuel purchase for Fuel Barge

CE64

COMBINED SYNOPSIS & SOLICITATION

RIVERS PROJECT OFFICE

20642 HIGHWAY J

SAINT LOUIS, MISSOURI

SOLICITATION NUMBER: W912P921T0001

NOVEMBER 2020

This is a combined synopsis/solicitation for commercial items prepared in accordance with the format in FAR Subpart 12.6, as supplemented with additional information included in this notice.

This announcement constitutes the only solicitation; proposals are being requested and a written solicitation will not be issued.

Solicitation Number: W912P921T0001

This solicitation is issued as a Request for Quotation.

Quotations are due via email to Contract Specialist, Allen Holmes, at allen.l.holmes@usace.army.mil no later than 11:00am CST, 23 November 2020.

The solicitation document and incorporated provisions and clauses are those in effect through the date of posting.

This solicitation is set-aside for total small businesses associated with NAICS 324110, size standard 1,500.

Please provide a completed copy of the provision at 52.212-3, Offeror Representations and Certifications – Commercial Items with your offer.

Any questions regarding this combined synopsis/solicitation shall be emailed to Contract Specialist, Allen Holmes, at allen.l.holmes@usace.army.mil.

W912P921T0001

Section SF 1449 - CONTINUATION SHEET

SCOPE OF WORK

Rivers Project Office – Service Base (Potter) B10 Fuel purchase for Fuel Barge CE64

Scope of Work

Project The contractor shall provide 200,000 gallons (plus or minus 10%) of Biodiesel blend, B10 (10% Biodiesel and 90% Diesel Fuel 2(DF2)). The biodiesel must meet ASTM D6751 standard for Biodiesel.

Date of Fueling The date of fueling may be between November 25th, 2020 and January 30th, 2021. The date of fueling shall be coordinated with a government representative.

Location The fuel point location shall be within 125 river miles of the U.S. Army Corps of Engineers, Service Base (UMR 177).

Coordination of the fueling shall be made with a government representative. The loading dock that the fuel barge is going to be loaded at must be Coast Guard approved. Certification from USCG must be submitted with proposal.

Fuel barge must be filled at a location and in a way to prevent grounding of the vessel.

Tankerman The contractor shall provide a marine licensed tanker man during the transfer of fuel to CE-64 for the duration of the refueling.

EPA Designated (CPG) Under the Comprehensive Procurement Guidelines (CPG) program, the Environmental Protection Agency (EPA) designates products that are or can be made with recovered materials, and recommends practices for buying these products. Any designated product that is being offered or supplied under this contract shall meet the minimum recommended content levels as identified under the CPG program. Visit http://www.epa.gov/epawaste/conserve/tools/cpg/products for a complete list of designated products and the associated recommended content levels. Offerors must be able to demonstrate that each offered product meets minimum content levels upon request. Bio-Diesel additives in the Additive section below shall comply with this section.

Additives:

The contractor shall furnish biocide, anti-gel, and a diesel fuel treatment made up of Hydrotreated Heavy Paraffinic Distillate CAS # 64742-54-7 concentration <90%, or approved equal necessary for the quantity of fuel being delivered. All additives shall be dumped in each compartment prior to transferring of the fuel. This will assure a good mixing of fuel and the needed additives. MSDS of the fuel and various additives shall be submitted to Star Loftus.

Quality Assurance:

The Contractor shall comply with following requirements to ensure quality fuel delivery.

1. All fuel shall be procured and delivered from a licensed storage terminal and documentation provided as such.

2. Each delivery should be documented with an official Bill of Lading (BOL) from the terminal.

3. An official terminal product quality test document should accompany final delivery invoice.

4. Any Biodiesel delivery should be accompanied by a certificate of analysis document.

5. Any fuel additive delivered shall be accompanied by a Material Safety Data Sheet

(MSDS).

6. Contractor shall have suitable containers on hand to provide 3 fuel samples to the

Government for performing independent testing.

AT-OPEC:

2/2b. Access and General Protection/Security Policy and Procedures.

"All contractor and all associated sub-contractors employees shall comply with applicable installation, facility and area commander installation/facility access and local security policies and procedures (provided by government representative). The contractor shall also provide all information required for background checks or background investigation and to meet installation/facility access requirements to be accomplished by installation Provost Marshal Office, Director of Emergency Services or Security Office.

Contractor workforce must comply with all personal identity verification requirements as directed by DOD, HQDA and/or local policy. In addition to the changes otherwise authorized by the changes clause of this contract, should the Force Protection Condition (FPCON) at any installation or facility change, the Government may require changes in contractor security matters or processes.

Access Control List: The Contractor will provide the Contracting Officer an Access Control List (ACL) which lists all employees to be on site during the duration of contract.

Employees not listed on the approved ACL but are on site will be required to leave. As employees are added or deleted from the submitted and approved ACL, this information must be reported immediately to the Contracting Officer. Added employees will not be permitted on-site until requirements of this paragraph are completed, submitted, and approved. In the event that an unexpected change in personnel is required, due to sudden absence of a critical employee or unforeseen change in work site condition, the Contractor shall immediately contact the Contracting Officer to obtain written approval for new/additional personnel to be brought on site prior to background check acceptance.“

4. Suspicious Activity Reporting Training

"The contractor and all associated sub-contractors shall receive a brief/training (provided by the COR) on the local suspicious activity reporting program. This locally developed training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the project manager, security representative or law enforcement entity. This training shall be completed within 30 calendar days of contract award and within 30 calendar days of new employees commencing performance with the results reported to the COR NLT 5 calendar days after the completion of the training."

13. Will be escorted in areas where they may be exposed to classified and/or sensitive materials and/or sensitive or restricted areas. "All contract employees, including subcontractor employees who are not in possession of the appropriate security clearance or access privileges, will be escorted in areas where they may be exposed to classified and/or sensitive materials and/or sensitive or restricted areas."

15. Pre-screen candidates using E-Verify Program. "The Contractor must pre-screen

Candidates using the E-verify Program (http://www.uscis.gov/e-verify) website to meet the established employment eligibility requirements. The Vendor must ensure that the Candidate has two valid forms of Government issued identification prior to enrollment to ensure the correct information is entered into the E-verify system. An initial list of verified/eligible Candidates must be provided to the COR no later than 3 business days after the initial contract award."

Proposal The contractor shall provide proposals with the following cost breakdown:

Cost per Gal of B10 Lump sum of Biocide Lump sum of Anti-gel Lump sum of Diesel Fuel Treatment Estimated time for refueling

Point of Contact

Neal Windhorst – 314-331-8380 Star Loftus – 314-331-8061

ITEM NO SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

0001 200,000 Job B10 Fuel Purchase for Fuel Barge CE64

FFP

The contractor shall provide 200,000 gallons (plus or minus 10%) of Biodiesel blend, B10 (10% Biodiesel and 90% Diesel Fuel 2(DF2)). The biodiesel must meet ASTM D6751 standard for Biodiesel.

NOTE: The requirements in DFARS 252.211-7003, Item Identification and Valuation, are applicable for this line item. The contractor shall provide DoD unique identification or a DoD recognized unique identification equivalent.

FOB: Destination

PSC CD: 9140

NET AMT

INSPECTION AND ACCEPTANCE TERMS

Supplies/services will be inspected/accepted at:

CLIN INSPECT AT INSPECT BY ACCEPT AT ACCEPT BY

0001 N/A N/A N/A Government

DELIVERY INFORMATION

CLIN DELIVERY DATE QUANTITY SHIP TO ADDRESS DODAAC /

CAGE

0001 N/A N/A N/A N/A

CLAUSES INCORPORATED BY REFERENCE

52.202-1 Definitions JUN 2020 52.203-3 Gratuities APR 1984 52.203-6 Restrictions On Subcontractor Sales To The Government JUN 2020 52.203-11 Certification And Disclosure Regarding Payments To

Influence Certain Federal Transactions

SEP 2007

52.203-12 Limitation On Payments To Influence Certain Federal Transactions

JUN 2020

52.203-12 Limitation On Payments To Influence Certain Federal Transactions

JUN 2020

52.203-17 Contractor Employee Whistleblower Rights and Requirement To Inform Employees of Whistleblower Rights

JUN 2020

52.203-17 Contractor Employee Whistleblower Rights and Requirement To Inform Employees of Whistleblower Rights

JUN 2020

52.204-4 Printed or Copied Double-Sided on Postconsumer Fiber Content Paper

MAY 2011

52.204-4 Printed or Copied Double-Sided on Postconsumer Fiber Content Paper

MAY 2011

52.204-7 System for Award Management OCT 2018 52.204-7 System for Award Management OCT 2018 52.204-8 Annual Representations and Certifications MAR 2020 52.204-9 Personal Identity Verification of Contractor Personnel JAN 2011 52.204-10 Reporting Executive Compensation and First-Tier

Subcontract Awards

JUN 2020

52.204-13 System for Award Management Maintenance OCT 2018 52.204-16 Commercial and Government Entity Code Reporting AUG 2020 52.204-17 Ownership or Control of Offeror AUG 2020 52.204-18 Commercial and Government Entity Code Maintenance AUG 2020 52.204-19 Incorporation by Reference of Representations and

Certifications.

DEC 2014

52.204-20 Predecessor of Offeror AUG 2020 52.204-21 Basic Safeguarding of Covered Contractor Information

Systems

JUN 2016

52.204-22 Alternative Line Item Proposal JAN 2017 52.209-2 Prohibition on Contracting with Inverted Domestic

Corporations--Representation

NOV 2015

52.209-6 Protecting the Government's Interest When Subcontracting With Contractors Debarred, Suspended, or Proposed for Debarment

JUN 2020

52.209-11 Representation by Corporations Regarding Delinquent Tax Liability or a Felony Conviction under any Federal Law

FEB 2016

52.211-18 Variation in Estimated Quantity APR 1984 52.212-1 Instructions to Offerors--Commercial Items JUN 2020 52.212-2 Evaluation - Commercial Items OCT 2014 52.212-3 Offeror Representations and Certifications--Commercial

Items

AUG 2020

52.212-4 Contract Terms and Conditions--Commercial Items OCT 2018 52.212-5 Contract Terms and Conditions Required to Implement

Statutes or Executive Orders--Commercial Items

OCT 2020

52.219-6 Notice Of Total Small Business Set-Aside MAR 2020 52.219-8 Utilization of Small Business Concerns OCT 2018 52.219-14 Limitations On Subcontracting MAR 2020 52.219-28 Post-Award Small Business Program Rerepresentation MAY 2020 52.222-3 Convict Labor JUN 2003 52.222-19 Child Labor -- Cooperation with Authorities and Remedies JAN 2020 52.222-21 Prohibition Of Segregated Facilities APR 2015 52.222-26 Equal Opportunity SEP 2016 52.222-35 Equal Opportunity for Veterans JUN 2020 52.222-36 Equal Opportunity for Workers with Disabilities JUN 2020 52.222-37 Employment Reports on Veterans JUN 2020 52.222-42 Statement Of Equivalent Rates For Federal Hires MAY 2014 52.223-18 Encouraging Contractor Policies To Ban Text Messaging

While Driving

JUN 2020

52.225-13 Restrictions on Certain Foreign Purchases JUN 2008 52.232-33 Payment by Electronic Funds Transfer--System for Award

Management

OCT 2018

52.232-40 Providing Accelerated Payments to Small Business Subcontractors

DEC 2013

52.243-4 Changes JUN 2007 52.245-9 Use And Charges APR 2012 52.247-34 F.O.B. Destination NOV 1991 252.203-7000 Requirements Relating to Compensation of Former DoD

Officials

SEP 2011

252.203-7001 Prohibition On Persons Convicted of Fraud or Other Defense- Contract-Related Felonies

DEC 2008

252.203-7002 Requirement to Inform Employees of Whistleblower Rights SEP 2013 252.203-7002 Requirement to Inform Employees of Whistleblower Rights SEP 2013 252.203-7005 Representation Relating to Compensation of Former DoD

Officials

NOV 2011

252.203-7005 Representation Relating to Compensation of Former DoD Officials

NOV 2011

252.204-7003 Control Of Government Personnel Work Product APR 1992 252.204-7003 Control Of Government Personnel Work Product APR 1992 252.204-7004 Antiterrorism Awareness Training for Contractors. FEB 2019 252.204-7008 Compliance With Safeguarding Covered Defense Information

Controls

OCT 2016

252.204-7015 Notice of Authorized Disclosure of Information for Litigation Support

MAY 2016

252.204-7015 Notice of Authorized Disclosure of Information for Litigation Support

MAY 2016

252.211-7003 Item Unique Identification and Valuation MAR 2016 252.213-7000 Notice to Prospective Suppliers on Use of Supplier

Performance Risk System in Past Performance Evaluations

SEP 2019

252.215-7008 Only One Offer JUL 2019 252.232-7003 Electronic Submission of Payment Requests and Receiving

Reports

DEC 2018

252.232-7010 Levies on Contract Payments DEC 2006

CLAUSES INCORPORATED BY FULL TEXT

52.252-2 CLAUSES INCORPORATED BY REFERENCE (FEB 1998)

This contract incorporates one or more clauses by reference, with the same force and effect as if they were given in full text. Upon request, the Contracting Officer will make their full text available. Also, the full text of a clause may be accessed electronically at this/these address(es):

http://farsite.hill.af.mil/

(End of clause)

252.204-7012 SAFEGUARDING COVERED DEFENSE INFORMATION AND CYBER INCIDENT

REPORTING (DEC 2019)

(a) Definitions. As used in this clause--

Adequate security means protective measures that are commensurate with the consequences and probability of loss, misuse, or unauthorized access to, or modification of information.

Compromise means disclosure of information to unauthorized persons, or a violation of the security policy of a system, in which unauthorized intentional or unintentional disclosure, modification, destruction, or loss of an object, or the copying of information to unauthorized media may have occurred.

Contractor attributional/proprietary information means information that identifies the contractor(s), whether directly or indirectly, by the grouping of information that can be traced back to the contractor(s) (e.g., program description, facility locations), personally identifiable information, as well as trade secrets, commercial or financial information, or other commercially sensitive information that is not customarily shared outside of the company.

Controlled technical information means technical information with military or space application that is subject to controls on the access, use, reproduction, modification, performance, display, release, disclosure, or dissemination.

Controlled technical information would meet the criteria, if disseminated, for distribution statements B through F using the criteria set forth in DoD Instruction 5230.24, Distribution Statements on Technical Documents. The term does not include information that is lawfully publicly available without restrictions.

Covered contractor information system means an unclassified information system that is owned, or operated by or for, a contractor and that processes, stores, or transmits covered defense information.

Covered defense information means unclassified controlled technical information or other information, as described in the Controlled Unclassified Information (CUI) Registry at http://www.archives.gov/cui/registry/category-list.html, that requires safeguarding or dissemination controls pursuant to and consistent with law, regulations, and Governmentwide policies, and is--

(1) Marked or otherwise identified in the contract, task order, or delivery order and provided to the contractor by or on behalf of DoD in support of the performance of the contract; or

(2) Collected, developed, received, transmitted, used, or stored by or on behalf of the contractor in support of the performance of the contract.

Cyber incident means actions taken through the use of computer networks that result in a compromise or an actual or potentially adverse effect on an information system and/or the information residing therein.

Forensic analysis means the practice of gathering, retaining, and analyzing computer-related data for investigative purposes in a manner that maintains the integrity of the data.

Information system means a discrete set of information resources organized for the collection, processing, maintenance, use, sharing, dissemination, or disposition of information.

Malicious software means computer software or firmware intended to perform an unauthorized process that will have adverse impact on the confidentiality, integrity, or availability of an information system. This definition includes a virus, worm, Trojan horse, or other code-based entity that infects a host, as well as spyware and some forms of adware.

Media means physical devices or writing surfaces including, but is not limited to, magnetic tapes, optical disks, magnetic disks, large-scale integration memory chips, and printouts onto which covered defense information is recorded, stored, or printed within a covered contractor information system.

Operationally critical support means supplies or services designated by the Government as critical for airlift, sealift, intermodal transportation services, or logistical support that is essential to the mobilization, deployment, or sustainment of the Armed Forces in a contingency operation.

Rapidly report means within 72 hours of discovery of any cyber incident.

Technical information means technical data or computer software, as those terms are defined in the clause at DFARS 252.227-7013, Rights in Technical Data--Noncommercial Items, regardless of whether or not the clause is incorporated in this solicitation or contract. Examples of technical information include research and engineering data, engineering drawings, and associated lists, specifications, standards, process sheets, manuals, technical reports, technical orders, catalog-item identifications, data sets, studies and analyses and related information, and computer software executable code and source code.

(b) Adequate security. The Contractor shall provide adequate security on all covered contractor information systems.

To provide adequate security, the Contractor shall implement, at a minimum, the following information security protections:

(1) For covered contractor information systems that are part of an information technology (IT) service or system operated on behalf of the Government, the following security requirements apply:

(i) Cloud computing services shall be subject to the security requirements specified in the clause 252.239-7010, Cloud Computing Services, of this contract.

(ii) Any other such IT service or system (i.e., other than cloud computing) shall be subject to the security requirements specified elsewhere in this contract.

(2) For covered contractor information systems that are not part of an IT service or system operated on behalf of the Government and therefore are not subject to the security requirement specified at paragraph (b)(1) of this clause, the following security requirements apply:

(i) Except as provided in paragraph (b)(2)(ii) of this clause, the covered contractor information system shall be subject to the security requirements in National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171, “Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations” (available via the internet at http://dx.doi.org/10.6028/NIST.SP.800-171) in effect at the time the solicitation is issued or as authorized by the Contracting Officer.

(ii)(A) The Contractor shall implement NIST SP 800-171, as soon as practical, but not later than December 31, 2017. For all contracts awarded prior to October 1, 2017, the Contractor shall notify the DoD Chief Information Officer (CIO), via email at osd.dibcsia@mail.mil, within 30 days of contract award, of any security requirements specified by NIST SP 800-171 not implemented at the time of contract award.

(B) The Contractor shall submit requests to vary from NIST SP 800-171 in writing to the Contracting Officer, for consideration by the DoD CIO. The Contractor need not implement any security requirement adjudicated by an authorized representative of the DoD CIO to be nonapplicable or to have an alternative, but equally effective, security measure that may be implemented in its place.

(C) If the DoD CIO has previously adjudicated the contractor's requests indicating that a requirement is not applicable or that an alternative security measure is equally effective, a copy of that approval shall be provided to the Contracting Officer when requesting its recognition under this contract.

(D) If the Contractor intends to use an external cloud service provider to store, process, or transmit any covered defense information in performance of this contract, the Contractor shall require and ensure that the cloud service provider meets security requirements equivalent to those established by the Government for the Federal Risk and Authorization Management Program (FedRAMP) Moderate baseline (https://www.fedramp.gov/resources/documents/) and that the cloud service provider complies with requirements in paragraphs (c) through (g) of this clause for cyber incident reporting, malicious software, media preservation and protection, access to additional information and equipment necessary for forensic analysis, and cyber incident damage assessment.

(3) Apply other information systems security measures when the Contractor reasonably determines that information systems security measures, in addition to those identified in paragraphs (b)(1) and (2) of this clause, may be required to provide adequate security in a dynamic environment or to accommodate special circumstances (e.g., medical devices) and any individual, isolated, or temporary deficiencies based on an assessed risk or vulnerability. These measures may be addressed in a system security plan.

(c) Cyber incident reporting requirement.

(1) When the Contractor discovers a cyber incident that affects a covered contractor information system or the covered defense information residing therein, or that affects the contractor's ability to perform the requirements of the contract that are designated as operationally critical support and identified in the contract, the Contractor shall--

(i) Conduct a review for evidence of compromise of covered defense information, including, but not limited to, identifying compromised computers, servers, specific data, and user accounts. This review shall also include analyzing covered contractor information system(s) that were part of the cyber incident, as well as other information systems on the Contractor's network(s), that may have been accessed as a result of the incident in order to identify compromised covered defense information, or that affect the Contractor's ability to provide operationally critical support; and

(ii) Rapidly report cyber incidents to DoD at https://dibnet.dod.mil.

(2) Cyber incident report. The cyber incident report shall be treated as information created by or for DoD and shall include, at a minimum, the required elements at https://dibnet.dod.mil.

(3) Medium assurance certificate requirement. In order to report cyber incidents in accordance with this clause, the Contractor or subcontractor shall have or acquire a DoD-approved medium assurance certificate to report cyber incidents. For information on obtaining a DoD-approved medium assurance certificate, see https://public.cyber.mil/eca/.

(d) Malicious software. When the Contractor or subcontractors discover and isolate malicious software in connection with a reported cyber incident, submit the malicious software to DoD Cyber Crime Center (DC3) in accordance with instructions provided by DC3 or the Contracting Officer. Do not send the malicious software to the Contracting Officer.

(e) Media preservation and protection. When a Contractor discovers a cyber incident has occurred, the Contractor shall preserve and protect images of all known affected information systems identified in paragraph (c)(1)(i) of this clause and all relevant monitoring/packet capture data for at least 90 days from the submission of the cyber incident report to allow DoD to request the media or decline interest.

(f) Access to additional information or equipment necessary for forensic analysis. Upon request by DoD, the Contractor shall provide DoD with access to additional information or equipment that is necessary to conduct a forensic analysis.

(g) Cyber incident damage assessment activities. If DoD elects to conduct a damage assessment, the Contracting Officer will request that the Contractor provide all of the damage assessment information gathered in accordance with paragraph (e) of this clause.

(h) DoD safeguarding and use of contractor attributional/proprietary information. The Government shall protect against the unauthorized use or release of information obtained from the contractor (or derived from information obtained from the contractor) under this clause that includes contractor attributional/proprietary information, including such information submitted in accordance with paragraph (c). To the maximum extent practicable, the Contractor shall identify and mark attributional/proprietary information. In making an authorized release of such information, the Government will implement appropriate procedures to minimize the contractor attributional/proprietary information that is included in such authorized release, seeking to include only that information that is necessary for the authorized purpose(s) for which the information is being released.

(i) Use and release of contractor attributional/proprietary information not created by or for DoD. Information that is obtained from the contractor (or derived from information obtained from the contractor) under this clause that is not created by or for DoD is authorized to be released outside of DoD--

(1) To entities with missions that may be affected by such information;

(2) To entities that may be called upon to assist in the diagnosis, detection, or mitigation of cyber incidents;

(3) To Government entities that conduct counterintelligence or law enforcement investigations;

(4) For national security purposes, including cyber situational awareness and defense purposes (including with Defense Industrial Base (DIB) participants in the program at 32 CFR part 236); or

(5) To a support services contractor (“recipient”) that is directly supporting Government activities under a contract that includes the clause at 252.204-7009, Limitations on the Use or Disclosure of Third-Party Contractor Reported Cyber Incident Information.

(j) Use and release of contractor attributional/proprietary information created by or for DoD. Information that is obtained from the contractor (or derived from information obtained from the contractor) under this clause that is created by or for DoD (including the information submitted pursuant to paragraph (c) of this clause) is authorized to be used and released outside of DoD for purposes and activities authorized by paragraph (i) of this clause, and for any other lawful Government purpose or activity, subject to all applicable statutory, regulatory, and policy based restrictions on the Government's use and release of such information.

(k) The Contractor shall conduct activities under this clause in accordance with applicable laws and regulations on the interception, monitoring, access, use, and disclosure of electronic communications and data.

(l) Other safeguarding or reporting requirements. The safeguarding and cyber incident reporting required by this clause in no way abrogates the Contractor's responsibility for other safeguarding or cyber incident reporting pertaining to its unclassified information systems as required by other applicable clauses of this contract, or as a result of other applicable U.S. Government statutory or regulatory requirements.

(m) Subcontracts. The Contractor shall--

(1) Include this clause, including this paragraph (m), in subcontracts, or similar contractual instruments, for operationally critical support, or for which subcontract performance will involve covered defense information, including subcontracts for commercial items, without alteration, except to identify the parties. The Contractor shall determine if the information required for subcontractor performance retains its identity as covered defense information and will require protection under this clause, and, if necessary, consult with the Contracting Officer; and

(2) Require subcontractors to--

(i) Notify the prime Contractor (or next higher-tier subcontractor) when submitting a request to vary from a NIST SP 800-171 security requirement to the Contracting Officer, in accordance with paragraph (b)(2)(ii)(B) of this clause; and

(ii) Provide the incident report number, automatically assigned by DoD, to the prime Contractor (or next higher-tier subcontractor) as soon as practicable, when reporting a cyber incident to DoD as required in paragraph (c) of this clause.

(End of clause)

File details come from the government source that posted it. Updated .