A19 SOLICITATION 75D301-26-Q-79090.pdf

11. DELIVERY FOR FOB

DESTINATION UNLESS

BLOCK IS MARKED

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS

OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, & 30

1. REQUISITION NUMBER

PAGE 1 OF

2. CONTRACT NO.

3. AWARD/EFFECTIVE

DATE

4. ORDER NUMBER

5. SOLICITATION NUMBER

75D301-26-Q-79090

6. SOLICITATION

ISSUE DATE

07/29/2026

7. FOR SOLICITATION

INFORMATION CALL:

a. NAME Peter Loree

b. TELEPHONE NUMBER (No collect calls)

(770) 488-5490

8. OFFER DUE DATE/

LOCAL TIME

8/5/2026 10 AM ET

9. ISSUED BY CODE 15948 10. THIS ACQUISITION IS 12. DISCOUNT TERMS

OFR - Office of Acquisition Services Chamblee Campus Building 108 4770 Buford Highway Atlanta, GA 30341-

UNRESTRICTED

X SET ASIDE: 100 % FOR

X SMALL BUSINESS

SMALL DISADV. BUSINESS

8(A)

SIC: 541513

SIZE STANDARD: $37.0M

X SEE SCHEDULE

13a. THIS CONTRACT IS A RATED ORDER

UNDER DPAS (15 CFR 700)

13b. RATING

14. METHOD OF SOLICITATION

X RFQ IFB RFP

15. DELIVER TO CODE 11205 16. ADMINISTERED BY CODE 8219

CDC (NCEZID)

1600 CLIFTON ROAD

BLDG 23, 4TH FLOOR

ATLANTA, GA 30329-4018

Centers for Disease Control and Prevention Chamblee Campus Building 102, MS S102-4 4770 Buford Hwy Atlanta, GA 30341-3717 CODE 18a. PAYMENT WILL BE MADE BY CODE 434

Centers for Disease Control and Prevention (FMO) PO Box 15580 404-718-8100

Atlanta, GA 30333-0080

TELEPHONE NO.

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT SUCH ADDRESS IN OFFER 18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a UNLESS BLOCK BELOW

SEE ADDENDUM

19.

ITEM NO.

20.

SCHEDULE OF SUPPLIES/SERVICES

21.

QUANTITY

22.

UNIT

23.

UNIT PRICE

24.

AMOUNT

“See Continuation Page”

(Attach Additional Sheets as Necessary)

25. ACCOUNTING AND APPROPRIATION DATA

26. TOTAL AWARD AMOUNT (For Govt. Use Only)

X 27a. SOLICITATION INCORPORATES BY REFERENCE FAR 52.212-1, 52.212-4. FAR 52.212-3 AND 52.212-5 ARE ATTACHED. ADDENDA X ARE ARE NOT ATTACHED.

X 27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA X ARE ARE NOT ATTACHED.

28.

X

CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN 1 COPIES

TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND DELIVER ALL ITEMS SET

FORTH OR OTHERWISE IDENTIFIED ABOVE AND ON ANY ADDITIONAL SHEETS SUBJECT

TO THE TERMS AND CONDITIONS SPECIFIED HEREIN.

29.

AWARD OF CONTRACT: REFERENCE OFFER

DATED . YOUR OFFER ON SOLICITATION (BLOCK 5),

INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE SET FORTH

HEREIN, IS ACCEPTED AS TO ITEMS:

30a. SIGNATURE OF OFFEROR/CONTRACTOR 31a. UNITED STATES OF AMERICA (Signature of Contracting Officer)

30b. NAME AND TITLE OF SIGNER (Type or print)

30c. DATE SIGNED

31b. NAME OF CONTRACTING OFFICER (Type or print) Howard D Bish

31c. DATE SIGNED

32a. QUANTITY IN COLUMN 21 HAS BEEN 33. SHIP NUMBER 34. VOUCHER NUMBER

RECEIVED INSPECTED

PARTIAL FINAL

36. PAYMENT 37. CHECK NUMBER

32b. SIGNATURE OF AUTHORIZED GOV’T REPRESENTATIVE 32c. DATE COMPLETE PARTIAL FINAL

41a. I CERTIFY THIS AMOUNT IS CORRECT AND PROPER FOR PAYMENT 41b. SIGNATURE AND TITLE OF CERTIFYING OFFICER 41c. DATE

38. S/R ACCOUNT NUMBER 39. S/R VOUCHER NUMBER

42a. RECEIVED BY (Print)

42b. RECEIVED AT (Location)

42c. DATE REC’D 42d. TOTAL CONTAINERS

40. PAID BY

AUTHORIZED FOR LOCAL REPRODUCTION SEE REVERSE FOR OMB CONTROL NUMBER AND PAPERWORK BURDEN STATEMENT STANDARD FORM 1449 (10-95)

ACCEPTED, AND CONFORMS TO THE

CONTRACT, EXCEPT AS NOTED

35. AMOUNT VERIFIED

CORRECT FOR

17a. CONTRACTOR/

OFFEROR

FACILITY

CODE

IS CHECKED

Page i

TABLE OF CONTENTS

Section Document/Clause/Provision Page No.

A Standard Form 1449 1 B Continuation of SF1449 (Block 19 – 24) 3 C Contract Clauses 5 D Contract Documents, Exhibits or Attachments 12 E Solicitation Provisions 268

SECTION B - CONTINUATION CONTINUATION OF SF1449

Base Period / Year 1 Items:

ITEM SUPPLIES / SERVICES QTY / UNIT UNIT PRICE EXTENDED PRICE

0001 Dell Hardware Support

ProSupport: Next Business Day Onsite Service After Problem Diagnosis ProSupport: 7x24 HW/SW Technical Support and Assistance Keep your Hard Drive For Enterprise

Firm Fixed Price Severable Services

Period of Performance 8/8/2026 - 8/7/2027

1 Job __________ __________

Option Period 1 / Year 2 Items:

ITEM SUPPLIES / SERVICES QTY / UNIT UNIT PRICE EXTENDED PRICE

1001 Dell Hardware Support

ProSupport: Next Business Day Onsite Service After Problem Diagnosis ProSupport: 7x24 HW/SW Technical Support and Assistance Keep your Hard Drive For Enterprise

Firm Fixed Price Severable Services

Period of Performance 8/8/2027 - 8/7/2028

Option Period 2 / Year 3 Items:

ITEM SUPPLIES / SERVICES QTY / UNIT UNIT PRICE EXTENDED PRICE

2001 Dell Hardware Support

ProSupport: Next Business Day Onsite Service After Problem Diagnosis ProSupport: 7x24 HW/SW Technical Support and Assistance Keep your Hard Drive For Enterprise

Firm Fixed Price Severable Services

Period of Performance 8/8/2028 - 8/7/2029

SECTION C - CONTRACT TERMS AND CONDITIONS

FAR 52.252-2 Clauses Incorporated by Reference (Feb 1998) This contract incorporates one or more clauses by reference, with the same force and effect as if they were given in full text. Upon request, the Contracting Officer will make their full text available. Also, the full text of a clause may be accessed electronically at this/these address(es):

https://www.acquisition.gov/far-overhaul https://www.acquisition.gov/hhsar

(End of Clause)

FAR SOURCE TITLE AND DATE

52.203-6 with Alt I Restrictions on Subcontractor Sales to the Government (JUN 2020) (NOV 2021) 52.203-17 Contractor Employee Whistleblower Rights (NOV 2023) 52.203-19 Prohibition on Requiring Certain Internal Confidentiality Agreements or Statements

(JAN 2017)

52.204-13 System for Award Management (DEVIATION) (RFO AUG 2025) 52.209-6 Protecting the Government's Interest When Subcontracting With Contractors Debarred, Suspended, Proposed for Debarment, or Voluntarily Excluded (DEVIATION) (RFO APR 2026)

52.209-10 Prohibition on Contracting with Inverted Domestic Corporations (DEVIATION) (RFO

APR 2026)

52.212-4 Contract Terms and Conditions—Commercial Products and Commercial Services

(DEVIATION) (RFO APR 2026)

52.219-6 Notice of Total Small Business Set-Aside (DEVIATION) (RFO APR 2026) 52.219-14 Limitations on Subcontracting (DEVIATION) (RFO APR 2026) 52.222-3 Convict Labor (DEVIATION) (RFO APR 2026) 52.222-19 Child Labor-Cooperation with Authorities and Remedies (DEVIATION) (RFO APR

2026) 52.222-35 Equal Opportunity for Veterans (DEVIATION) (RFO APR 2026) 52.222-36 Equal Opportunity for Workers with Disabilities (DEVIATION) (RFO APR 2026) 52.222-37 Employment Reports on Veterans (DEVIATION) (RFO APR 2026) 52.222-50 Combating Trafficking in Persons (DEVIATION) (RFO AUG 2025) 52.222-54 Employment Eligibility Verification (DEVIATION) (RFO APR 2026) 52.222-90 Addressing DEI Discrimination by Federal Contractors (DEVIATION) (RFO APR

2026) 52.223-23 Sustainable Products and Services (DEVIATION) (RFO APR 2026) 52.226-8 Encouraging Contractor Policies to Ban Text Messaging While Driving (MAY 2024) 52.232-33 Payment by Electronic Funds Transfer-System for Award Management (OCT 2018) 52.232-40 Providing Accelerated Payments to Small Business Subcontractors (DEVIATION)

(APR 2026)

52.233-3 Protest after Award (DEVIATION) (RFO APR 2026) 52.233-4 Applicable Law for Breach of Contract Claim (DEVIATION) (RFO APR 2026) 52.240-91 Security Prohibitions and Exclusions (DEVIATION) (RFO NOV 2025) 52.240-92 Security Requirements (DEVIATION) (RFO NOV 2025) 52.240-93 Basic Safeguarding of Covered Contractor Information Systems (DEVIATION) (RFO

AUG 2025)

52.244-6 Subcontracts for Commercial Products and Commercial Services (DEVIATION) (RFO

SEP 2025)

https://www.acquisition.gov/hhsar

HHSAR SOURCE TITLE AND DATE

352.203-70 Anti-Lobbying (DEC 2015) 352.208-70 Printing and Duplication (DEVIATION) (RFO FEB 2026)

FAR 52.217-8 Option to Extend Services (NOV 1999)

The Government may require continued performance of any services within the limits and at the rates specified in the contract. These rates may be adjusted only as a result of revisions to prevailing labor rates provided by the Secretary of Labor. The option provision may be exercised more than once, but the total extension of performance hereunder shall not exceed 6 months. The Contracting Officer may exercise the option by written notice to the Contractor within 30 days of the order end date.

(End of Clause)

FAR 52.217-9 Option to Extend the Term of the Contract (MAR 2000)

(a) The Government may extend the term of this contract by written notice to the Contractor within 15 days before the contract expires; provided that the Government gives the Contractor a preliminary written notice of its intent to extend at least 30 days before the contract expires. . The preliminary notice does not commit the Government to an extension.

(b) If the Government exercises this option, the extended contract shall be considered to include this option clause.

(c) The total duration of this contract, including the exercise of any options under this clause, shall not exceed 36 months.

(End of clause)

HHSAR 352.232-71 Electronic Submission of Payment Requests (APR 2026) (RFO DEVIATION)

(a) Definitions. As used in this clause—

(1) “ Payment request” means a bill, voucher, invoice, or request for contract financing payment with associated supporting documentation. The payment request must comply with the requirements in FAR 32.905(b), and the applicable payment clause included in this contract.

(b) Submission Instructions. Except as provided in paragraph (c) of this clause, the Contractor must submit payment requests electronically using the Department of Treasury Invoice Processing Platform (IPP) or successor system.

Information regarding IPP, including IPP Customer Support contact information, is available at www.ipp.gov or any successor site.

(c) Alternate submission procedures. The Contractor may submit payment requests using other than IPP only when the Contracting Officer authorizes alternate procedures in writing.

(d) Submission of alternate payment procedures authorization. If alternate payment procedures are authorized, the Contractor must include a copy of the Contracting Officer's written authorization with each payment request.

(End of clause) http://www.ipp.gov/

CDCA_H042 Records Management Obligations (JUN 2020)

A. Applicability

The following applies to all Contractors whose employees create, work with, or otherwise handle Federal records, as defined in Section B, regardless of the medium in which the record exists.

B. Definitions

“Federal record” as defined in 44 U.S.C. § 3301, includes all recorded information, regardless of form or characteristics, made or received by a Federal agency under Federal law or in connection with the transaction of public business and preserved or appropriate for preservation by that agency or its legitimate successor as evidence of the organization, functions, policies, decisions, procedures, operations, or other activities of the United States Government or because of the informational value of data in them.

The term Federal record:

1. includes Centers for Disease Control and Prevention (CDC) records.

2. does not include personal materials.

3. applies to records created, received, or maintained by Contractors pursuant to their CDC contract.

4. may include deliverables and documentation associated with deliverables.

C. Requirements

1. Contractor shall comply with all applicable records management laws and regulations, as well as National Archives and Records Administration (NARA) records policies, including but not limited to the Federal Records Act (44 U.S.C. chs. 21, 29, 31, 33), NARA regulations at 36 CFR Chapter XII Subchapter B, and those policies associated with the safeguarding of records covered by the Privacy Act of 1974 (5 U.S.C. 552a). These policies include the preservation of all records, regardless of form or characteristics, mode of transmission, or state of completion.

2. In accordance with 36 CFR 1222.32, all data created for Government use and delivered to, or falling under the legal control of, the Government are Federal records subject to the provisions of 44 U.S.C. chapters 21, 29, 31, and 33, the Freedom of Information Act (FOIA) (5 U.S.C. 552), as amended, and the Privacy Act of 1974 (5 U.S.C.

552a), as amended and must be managed and scheduled for disposition only as permitted by statute or regulation.

3. In accordance with 36 CFR 1222.32, Contractor shall maintain all records created for Government use or created in the course of performing the contract and/or delivered to, or under the legal control of the Government and must be managed in accordance with Federal law. Electronic records and associated metadata must be accompanied by sufficient technical documentation to permit understanding and use of the records and data.

4. CDC and its contractors are responsible for preventing the alienation or unauthorized destruction of records, including all forms of mutilation. Records may not be removed from the legal custody of CDC or destroyed except for in accordance with the provisions of the agency records schedules and with the written concurrence of the Head of the Contracting Activity. Willful and unlawful destruction, damage or alienation of Federal records is subject to the fines and penalties imposed by 18 U.S.C. 2701. In the event of any unlawful or accidental removal, defacing, alteration, or destruction of records, Contractor must report to the Contracting Officer and the Contracting Officer’s Representative. The agency must report promptly to NARA in accordance with 36 CFR 1230.

5. The Contractor shall immediately notify the appropriate Contracting Officer upon discovery of any inadvertent or unauthorized disclosures of information, data, documentary materials, records, or equipment. Disclosure of non-public information is limited to authorized personnel with a need-to-know as described in the contract. The Contractor shall ensure that the appropriate personnel, administrative, technical, and physical safeguards are established to ensure the security and confidentiality of this information, data, documentary material, records and/or equipment is properly protected. The Contractor shall not remove material from Government facilities or systems, or facilities or systems operated or maintained on the Government’s behalf, without the express written permission of the Head of the Contracting Activity. When information, data, documentary material, records and/or equipment is no longer required, it shall be returned to CDC control or the Contractor must hold it until otherwise directed. Items returned to the Government shall be hand carried, mailed, emailed, or securely electronically transmitted to the Contracting Officer or address prescribed in the contract. Destruction of records is EXPRESSLY PROHIBITED unless in accordance with Paragraph (4).

6. The Contractor is required to obtain the Contracting Officer's approval prior to engaging in any contractual relationship (sub-contractor) in support of this contract requiring the disclosure of information, documentary material and/or records generated under, or relating to, contracts. The Contractor (and any sub-contractor) is required to abide by Government and CDC guidance for protecting sensitive, proprietary information, classified, and controlled unclassified information.

7. The Contractor shall only use Government IT equipment for purposes specifically tied to or authorized by the contract and in accordance with CDC policy.

8. The Contractor shall not create or maintain any records containing any non-public CDC information that are not specifically tied to or authorized by the contract.

9. The Contractor shall not retain, use, sell, or disseminate copies of any deliverable that contains information covered by the Privacy Act of 1974 or that which is generally protected from public disclosure by an exemption to the Freedom of Information Act.

10. Training. All Contractor employees assigned to this contract who create, work with, or otherwise handle records are required to take CDC-provided records management training. The Contractor is responsible for confirming training has been completed according to agency policies, including initial training and any annual or refresher training.

D. Flowdown of requirements to subcontractors

1. The Contractor shall incorporate the entire substance of the terms and conditions herein, including this paragraph, in all subcontracts under this contract, and must require written subcontractor acknowledgment of same.

2. Violation by a subcontractor of any provision set forth herein will be attributed to the Contractor.

CDC0_G008 Contracting Officer’s Representative (COR) (JUL 2017)

Performance of the work hereunder shall be subject to the technical directions of the designated COR for this contract.

As used herein, technical directions are directions to the Contractor which fill in details, suggests possible lines of inquiry, or otherwise completes the general scope of work set forth herein. These technical directions must be within the general scope of work, and may not alter the scope of work or cause changes of such a nature as to justify an adjustment in the stated contract price/cost, or any stated limitation thereof.

In the event that the Contractor believes full implementation of any of these directions may exceed the scope of the contract, he or she shall notify the originator of the technical direction and the Contracting Officer, immediately or as soon as possible, in a letter or e-mail separate of any required report(s). No technical direction, nor its fulfillment, shall alter or abrogate the rights and obligations fixed in this contract.

The Government COR is not authorized to change any of the terms and conditions of this contract. Contract changes shall be made only by the Contracting Officer by properly written modification(s) to the contract.

The Government will provide the Contractor with a copy of the COR delegation memorandum upon request.

CDCP_G009 Contracting Officer (JUL 1999)

(a) The Contracting Officer is the only individual who can legally commit the Government to the expenditure of public funds. No person other than the Contracting Officer can make any changes to the terms, conditions, general provisions, or other stipulations of this contract.

(b) No information, other than that which may be contained in an authorized modification to this contract, duly issued by the Contracting Officer, which may be received from any person employed by the United States Government, or otherwise, shall be considered grounds for deviation from any stipulation of this contract.

CDC0_G018 Payment by Electronic Funds Transfer (FEB 2018)

(a) The Government shall use electronic funds transfer to the maximum extent possible when making payments under this contract. FAR 52.232-33, Payment by Electronic Funds Transfer System for Award Management, in Section I, requires the contractor to designate in writing a financial institution for receipt of electronic funds transfer payments.

(b) In the case that EFT information is not within the System of Award Management, FAR 52.232-34 requires mandatory submission of Contractor’s EFT information directly to the office designated in this contract to receive that information (hereafter: “designation office”); see below. The contractor shall submit the EFT information within the form titled “ACH Vendor/Miscellaneous Payment Enrollment From” to the address indicated below. Note: The form is either attached to this contract (see Section J, List of Attachments) or may be obtained by contacting the Contracting Officer or the CDC Office of Financial Resources at 678-475-4510.

(c) In cases where the contractor has previously provided such information, i.e., pursuant to a prior contract/order, and been enrolled in the program, the form is not required unless the designated financial institution has changed.

(d) The completed form shall be mailed after award, but no later than 14 calendar days before an invoice is submitted, to the following address:

The Centers for Disease Control and Prevention Office of Financial Resources (OFR) P.O. Box 15580 Atlanta, GA 30333 Or Fax copy to: 404-638-5342

CDCH.10 Artificial Intelligence Compliance and Risk Management Plan (July 2026)

The use of Artificial Intelligence (AI), including GenAI, is prohibited without an approved AI Compliance and Risk Management Plan. The contractor is responsible for updating the AI Compliance and Risk Management Plan throughout the life of the contract as changes occur. If a change to AI use, AI functionality, AI model, or deployment configuration is anticipated, the contractor must notify the contracting officer and Contracting Officer’s Representative (COR) immediately and provide a revised plan. The government will issue approval or disapproval before AI can be incorporated. The contractor must identify whether planned or potential AI use may involve a high-impact AI use case (as defined in defined in Appendix A of OMB-M-25-21) and must provide sufficient descriptive information for the Government to complete any required AI impact or high-impact assessment.

The AI Compliance and Risk Management Plan must:

1. Identify the specific tasks or functions where AI will be used.

2. Explain how logs, audits, or other forms of AI generated data will be stored, used, retained, or deleted.

3. State whether the AI technologies are open-source, proprietary, or any other type.

4. Include applicable model cards or system documentation describing the AI technologies used.

5. Describe how bias in AI models and outputs will be identified, monitored, and mitigated, including the origin, quality, and weighting of data.

6. Explain the AI safeguards in place, including compliance and risk management practices, protections against unauthorized data access, and steps taken to manage bias and reduce risk in alignment with applicable AI policies and directives.

7. Describe internal policies governing AI use, including transparency, accountability, data integrity, accuracy, protection of sensitive or proprietary information, foreseeable risks, and potential social impacts.

8. Explain how the contractor will assess and prevent unfair or disparate impacts, address privacy, civil rights, and civil liberties concerns, and prevent misuse, unauthorized use, or corruption of AI systems.

9. Confirm that the AI solution will not make or support decisions based on unlawful discrimination in violation of federal civil rights laws, including Title VII of the Civil Rights Act, the Americans with Disabilities Act (ADA), and the Age Discrimination in Employment Act (ADEA).

10. Describe how applicable technological or voluntary consensus standards will be incorporated to reduce acquisition and operational risk

11. The plan must describe how Government data, outputs, prompts, logs, and outputs be accessed, used, protected, retained, deleted, and transferred, and identify any proposed limitations on Government rights, access, or reuse.

12. The AI Compliance and Risk Management Plan will be reviewed by the Government and an approval or disapproval issued.

The vendor must ensure that any AI use adheres to the following requirements of the HHS AI Strategy:

AI Safeguards:

• The contractor must assess and reduce risks related to unintended disclosure of sensitive information, including conducting model-specific risk analyses before releasing or sharing AI models or model weights. Documentation must describe the origin, quality, and suitability of training data; how bias is identified and managed; how sensitive data is protected; and how models are selected, trained, tested, validated, audited, and maintained. The contractor must also document data sourcing, transparency practices, output weighting methods, and responsible data use. Compliance with NIST standards and HHS AI policy must be documented.

Data Portability and Interoperability:

• The contractor or service provider must ensure the use of open and standard Data formats and application programming interfaces (APIs) for all Data Outputs, Custom Developments, and AI Systems.

• The contractor or service provider must ensure that neither the Contractor nor any applicable Service Provider use proprietary technologies or formats that require additional licensing or create vendor dependencies

• The contractor or service provider must provide tools enabling government customers to export all Government Data and content (including user-generated content, conversational history, uploaded documents, media files, and custom knowledge bases) in open, machine-readable formats such as JSON or XML. The export must preserve the data's structural and relational integrity, including associated schema definitions. The exported data and schema must be sufficient to allow accurate and complete ingestion and reconstruction of the data and relationships within a separate system and must not otherwise create vendor lock-in situations.

CDCH.20 Non-Personal Services (JUN 2020)

(a) Personal services shall not be performed under this contract. Although the Government may provide sporadic or occasional instructions within the scope of the contract, the Contractor is responsible for control and supervision of its employees. If the Contractor (including its employees) believes any Government action or communication has https://www.hhs.gov/sites/default/files/hhs-artificial-intelligence-strategy.pdf been given that would create a personal services relationship between the Government and any Contractor employee, the Contractor shall promptly notify the Contracting Officer of this communication or action.

(b) The Contractor shall comply with, and ensure their employees and subcontractors comply with, CDC Policy titled Contractor Identification and Safeguarding of Non-Public Information (Policy No. CDC-IS-2006-01). No Contractor employee shall hold him or herself out to be a Government employee, agent, or representative. No Contractor employee shall state orally or in writing at any time that he or she is acting on behalf of the Government.

In all communications with third parties in connection with this contract, Contractor employees shall identify themselves as Contractor employees and specify the name of the company for which they work. The Contractor is limited to performing the services identified in the contract statement of work and shall not interpret any communication with anyone as a permissible change in contract scope or as authorization to perform work not described in the contract. All contract changes will be incorporated by a modification signed by the Contracting Officer.

(c) The Contractor shall ensure that all its employees and subcontractor employees working on this contract are informed of the terms and conditions herein. The Contractor agrees that this is a non-personal services contract; and that for all the purposes of the contract, the Contractor is not, nor shall it hold itself out to be an agent or partner of, or joint venture with, the Government. The Contractor shall notify its employees that they shall neither supervise nor accept supervision from Government employees. The substance of the terms herein shall be included in all subcontracts at any tier.

(d) The terms and conditions above do not limit the Government's rights under other terms of the contract, including those related to the Government's right to inspect and accept or reject the services performed under this contract.

CDCH.23 Evaluation of Contractor Performance Utilizing CPARS (Aug 2021)

In accordance with FAR 42.11, Centers for Disease Control and Prevention (CDC) will review and evaluate contract performance. FAR 42.1502 and 42.1102 requires agencies to prepare evaluations of contractor performance and submit them to the Contractor Performance Assessment Reporting System (CPARS). CDC utilizes this web-based system to prepare and report contractor performance evaluations. All information contained in these assessments may be used by the Government, within the limitations of FAR 42.15, for future source selections in accordance with FAR 15.104 where past performance is an evaluation factor.

The CPARS system requires a contractor representative to be assigned so that the contractor has appropriate input into the performance evaluation process. The CPARS contractor representative will be given access to CPARS and will be given the opportunity to concur or not-concur with performance evaluations before the evaluations are complete. The CPARS contractor representative will also have the opportunity to add comments to performance evaluations.

The assessment is not subject to the Disputes clause of the contract, nor is it subject to appeal beyond the review and comment procedures described in the guides on the CPARS website. Refer to: www.cpars.gov for details and additional information related to CPARS, CPARS user access, how contract performance assessments are conducted, and how contractors participate. Access and training for all persons responsible for the preparation and review of performance assessments is also available at the CPARS website.

The contractor must provide the CDC contracting office with the name, e-mail address, and phone number of their designated CPARS representative who will be responsible for logging into CPARS and reviewing and commenting on performance evaluations. The contractor must maintain a current representative to serve as the contractor representative in CPARS. It is the contractor’s responsibility to notify the CDC contracting office, in writing (letter or email), when their CPARS representative information needs to be changed or updated. Failure to maintain current CPARS contractor representative information will result in the loss of an opportunity to review and comment on performance evaluations.

http://www.cpars.gov/

SECTION D - CONTRACT DOCUMENTS, EXHIBITS OR

ATTACHMENTS

Title: OAMD SciComp Dell Hardware Extended Warranty

SECTION 1 – BACKGROUND

High throughput sequencing and other data-intensive laboratory technologies represent the cutting edge of public health laboratory science. The Centers for Disease Control's Office of Advanced Molecular Detection manages the agency's High Performance Computing Center of Excellence, which includes extensive computing, network and storage resources to support CDC's scientific and public health mission. These high-performance computing resources are used by the majority of CDC's infectious disease programs for pathogen surveillance, outbreak investigations and applied public health research.

The core infrastructure for this environment includes a High-Performance Computing (HPC) cluster consisting of Dell PowerEdge equipment listed below.

SECTION 2 – PURPOSE/OBJECTIVE

The purpose of this procurement is to extend warranty for qualified Dell computers with authorized support from the vendor.

SECTION 3 – SCOPE OF WORK

The contractor will provide level of extended warranty support listed for the following hardware:

Base Period ProSupport: Next Business Day Onsite Service After Problem Diagnosis ProSupport: 7x24 HW/SW Technical Support and Assistance Keep your Hard Drive For Enterprise

Asset List to cover:

14FHF33

14FJF33

6STPNF3

6SVDNF3

7H0FNF3

7H0GNF3

7H0HNF3

7H0JNF3

7H0KNF3

7H0LNF3

CS5LDF3

CS5MDF3

CS5NDF3

CS5PDF3

CS5QDF3

CS5RDF3

CS5SDF3

CS5TDF3

CS6JDF3

CS6KDF3

CS6LDF3

CS6MDF3

CS6NDF3

CS6PDF3

CS6QDF3

CS6RDF3

CS6SDF3

CS6TDF3

CS7JDF3

CS7KDF3

CS7LDF3

CS7MDF3

CS7NDF3

CS7PDF3

CS7QDF3

CS7RDF3

CS7SDF3

CS7TDF3

CS8JDF3

CS8KDF3

CS8LDF3

CS8MDF3

CS8NDF3

FXV8KD3

FXVSJD3

FXVTJD3

FXVVJD3

FXVWJD3

FXVXJD3

FXVYJD3

FXVZJD3

FXVZZC3

FXW00D3

G5GKVD3

G5GLDF3

G5GLVD3

G5GMDF3

G5GMVD3

G5GNDF3

G5GNVD3

G5GPDF3

G5GQDF3

GNL4H63

GNL5H63

GNL6H63

GNL7H63

DHH9Z23

DHHBZ23

DHHCZ23

DHHDZ23

DHHFZ23

DHHGZ23

DHHHZ23

DHHJZ23

DHJ7Z23

DHJ8Z23

DHJ9Z23

DHJBZ23

DHJCZ23

BVQG243

HBJP753

HBJQ753

HBJR753

HBJS753

HBJT753

HK2C853

86534Y2

CSK5333

CSK6333

CSK7333

CSK8333

CSKZ233

CSL0333

CSL1333

CSL2333

CSL3333

CSL4333

CSL5333

CSL6333

CSL7333

CSL8333

CSLZ233

CSM0333

CSM1333

CSM2333

CSM3333

CSM4333

CSM5333

CSM6333

CSM7333

CSM8333

CSMZ233

CSN0333

CSN1333

Option 1, Year 2 ProSupport: Next Business Day On-Site Service After Problem Diagnosis ProSupport: 7x24 HW/SW Technical Support and Assistance Keep your Hard Drive For Enterprise

Asset List to cover:

Same assets as in base

Option 2, Year 3 ProSupport: Next Business Day On-Site Service After Problem Diagnosis ProSupport: 7x24 HW/SW Technical Support and Assistance Keep your Hard Drive For Enterprise

Asset List to Cover:

Same assets as in base

SECTION 4 – TASKS TO BE PERFORMED

The contractor shall provide Dell hardware extended warranty as indicated in the scope of work above.

SECTION 5 – GOVERNMENT FURNISHED PROPERTY

No Government Furnished Materials

SECTION 6 – PLACE OF PERFORMANCE AND CONTRACT SUPPORT HOURS

SUBSECTION A – PLACE OF PERFORMANCE

Support will be provided remotely or on-site as needed.

SUBSECTION B – CONTRACT SUPPORT HOURS

Technical support will be provided as needed.

SECTION 7 – TRAVEL

No travel involved in this acquisition. Vendor will provide next business day onsite support as needed for hardware.

SECTION 8 – DELIVERABLES/REPORTING SCHEDULE

Item Deliverable Quantity/Format Due Date Deliver To

Copy of extended warranty

Copy of extended warranty

1 Within 10 business days after each POP start (base + each option year)

Dhwani Batra (bun3@cdc.gov) and Olga Stuchlik (hus0@cdc.gov)

Hardware Replacement Support

The contractor shall provide Dell hardware support as indicated in the scope above

As needed As needed Dhwani Batra (bun3@cdc.gov) and Parish Roberts (xrv5@cdc.gov)

SECTION 9 – ADDITIONAL REQUIREMENTS

A. Section 508 Compliance

Part A – Provision HHSAR 352.239-78 Electronic Information and [Communication] Technology Accessibility Notice. (Deviation) (MAR 2024)

(a) Any offeror responding to this solicitation must comply with established HHS Information and Communication Technology (ICT) accessibility standards. Information about Section 508 is available at https://www.hhs.gov/web/section-508/index.html.

(b) The Section 508 accessibility standards applicable to this solicitation are stated in the clause at 352.239-79 Information and Communication Technology Accessibility. In order to facilitate the Government’s determination whether proposed ICT supplies, products, platforms, information, and documentation meet applicable Section 508 mailto:bun3@cdc.gov mailto:hus0@cdc.gov mailto:bun3@cdc.gov mailto:xrv5@cdc.gov https://www.hhs.gov/web/section-508/index.html accessibility standards, offerors must submit an appropriate HHS Section 508 Accessibility Conformance Checklist (see https://www.hhs.gov/web/section-508/accessibility-checklists/index.html) or an Accessibility Conformance Report (ACR) (based on the Voluntary Product Accessibility Template (VPAT) see https://www.itic.org/policy/accessibility/vpat), in accordance with the completion instructions. The purpose of the checklists and conformance reports are to assist HHS acquisition and program officials in determining whether proposed ICT supplies, products, platforms, information, and documentation conform to applicable Section 508 accessibility standards. Checklists and ACRs evaluate—in detail—whether the ICT conforms to specific Section 508 accessibility standards and identifies remediation efforts needed to address conformance issues.

(c) If an offeror claims its supplies or services meet applicable Section 508 accessibility standards, and it is later determined by the Government, i.e., after award of a contract or order, that supplies, products, platforms, information, documentation, or services support delivered do not conform to the described accessibility standards, remediation of the supplies, products, platforms, information, documentation, or services support to the level of conformance specified in the contract will be the responsibility of the Contractor at its expense.

(d) In order to facilitate the Government's determination whether proposed ICT supplies meet applicable Section 508 accessibility standards, offerors must submit an Accessibility Conformance Report, in accordance with its completion instructions and tailored to the requirements in the solicitation. The purpose of the Report is to assist HHS acquisition and program officials in determining whether proposed ICT supplies conform to applicable Section 508 accessibility standards. The template allows offerors or developers to self-evaluate their supplies and document, in detail, whether they conform to a specific Section 508 accessibility standard, and any underway remediation efforts addressing conformance issues. Instructions for preparing the Template are available at https://www.section508.gov/.

(e) Additionally, offerors must provide enough information to assist the Government in determining that the ICT services conform to Section 508 accessibility standards, including any underway remediation efforts addressing conformance issues.

(f) Respondents to this solicitation must identify any inability to conform to Section 508 requirements. If an offeror claims its supplies or services meet applicable Section 508 accessibility standards, and it is later determined by the Government, i.e., after award of a contract or order, that supplies or services delivered do not conform to the described accessibility standards, remediation of the supplies or services to the level of conformance specified in the contract will be the responsibility of the Contractor at its expense.

(g) Items delivered as electronic content must be accessible to HHS acceptance criteria. Checklist for various formats are available at http://508.hhs.gov/. Materials, other than items incidental to contract management, that are final items for delivery should be accompanied by the appropriate checklist, except upon approval of the Contracting Officer or Contracting Officer’s Representative.

Part B – Clause HHSAR 352.239-74[9] Electronic, Information, and Communication Technology Accessibility. (Deviation) (MAR 2024)

(a) Pursuant to Section 508 of the Rehabilitation Act of 1973 (29 U.S.C. 794d), as amended by the Workforce Investment Act of 1998, all information and communication technology (ICT) supplies, products, platforms, information, documentation, and services, or support developed, acquired, maintained or delivered under this contract or order must comply with the Revised 508 Standards, which are located at 36 C.F.R. 1194.1 and Appendices A, B, and C, and are available at https://www.access-board.gov/ict/. Information about Section 508 is available at https://www.hhs.gov/web/section-508/index.html.

(b) Additional Section 508 accessibility standards applicable to this contract or order are identified as follows:

205 WCAG 2.0 Level A & AA Success Criteria 302 Functional Performance Criteria 502 Inoperability with Assistive Technology 503 Applications 504 Authoring Tools https://www.hhs.gov/web/section-508/accessibility-checklists/index.html https://www.itic.org/policy/accessibility/vpat https://www.section508.gov/ https://www.access-board.gov/ict/ https://www.hhs.gov/web/section-508/index.html

602 Support Documentation 603 Support Services

If it is determined by the Government that ICT supplies, products, platforms, information, documentation, and services support provided by the Contractor do not conform to the described accessibility standards in the contract, remediation of the supplies, products, platforms, information, documentation, or services support to the level of conformance specified in the contract will be the responsibility of the Contractor at its own expense.

(c) In the event of a modification(s) to this contract or order, which adds new ICT supplies or services or revises the type of, or specifications for, supplies, products, platforms, information, documentation, or services support, the Contracting Officer shall require that the Contractor submit a completed HHS Section 508 Accessibility Conformance Checklist (see https://www.hhs.gov/web/section-508/accessibility-checklists/index.html) or an Accessibility Conformance Report (ACR) (based on the Voluntary Product Accessibility Template (VPAT) see https://www.itic.org/policy/accessibility/vpat), and any other additional information necessary to assist the Government in determining that the ICT supplies or services conform to Section 508 accessibility standards. If it is determined by the Government that ICT supplies, products, platforms, information, documentation, and services support provided by the Contractor do not conform to the described accessibility standards in the contract, remediation of the supplies, products, platforms, information, documentation, or services support to the level of conformance specified in the contract will be the responsibility of the Contractor at its own expense.

(d) If this is an Indefinite-Delivery type contract, a Blanket Purchase Agreement or a Basic Ordering Agreement, the task/delivery order requests that include ICT supplies, products, platforms, information, documentation, or services support will define the specifications and accessibility standards for the order. In those cases, the Contractor shall be required to provide a completed HHS Section 508 Accessibility Conformance Checklist (see https://www.hhs.gov/web/section-508/accessibility-checklists/index.html) or an ACR (based on the VPAT see https://www.itic.org/policy/accessibility/vpat), and any other additional information necessary to assist the Government in determining that the ICT supplies, products, platforms, information, documentation, or services support conform to Section 508 accessibility standards. If it is determined by the Government that ICT supplies and services provided by the Contractor do not conform to the described accessibility standards in the provided documentation, remediation of the supplies, products, platforms, information, documentation, or services support to the level of conformance specified in the contract will be the responsibility of the Contractor at its own expense.

(e) The contractor shall identify to the Contracting Officer any perceived exception or exemption to Section 508 requirements for review by the agency Section 508 Program.

https://www.hhs.gov/web/section-508/accessibility-checklists/index.html https://www.itic.org/policy/accessibility/vpat https://www.hhs.gov/web/section-508/accessibility-checklists/index.html https://www.itic.org/policy/accessibility/vpat

B. Information Security and Privacy Information

Standard-1: Procurements Requiring Information Security and/or Physical Access Security

a. Applicability.

The requirements herein apply whether the entire contract or modification (hereafter "contract"), or portion thereof, includes either or all of the followings. No contractor will be permitted to access or operate CDC infrastructure or systems overseas unless prior approval is received from CDC CISO. OTHER CONSIDERATIONS AND

ADDITIONAL INFORMATION FOR OFFICE OF ACQUISITION SERVICES

Security Compliance Section

Standard-1: Procurements Requiring Information Security and/or Physical Access Security

Baseline Security Requirements

Applicability. The requirements herein apply whether the entire contract or modification (hereafter "contract"), or portion thereof, includes either or all of the followings. No contractor will be permitted to access or operate CDC infrastructure or systems overseas unless prior approval is received from CDC CISO.

i. Access (Physical or Logical) to Government Information: A Contractor (and/or any subcontractor) will have or will be given the ability to have, routine physical (entry) or logical (electronic) access to government information.

ii. Operate a Federal System Containing Information: A Contractor (and/or any subcontractor) will operate a federal system and information technology containing data that supports the CDC mission. In addition to the Federal Acquisition Regulation (FAR) Subpart 2.1 definition of "information technology" (IT), the term as used in this section includes computers, ancillary equipment (including imaging peripherals, input, output, and storage devices necessary for security and surveillance), peripheral equipment designed to be controlled by the central processing unit of a computer, software, firmware and similar procedures, services (including support services), and related resources.

b. Safeguarding Information and Information Systems. All government information and information systems must be protected in accordance with HHS/CDC policies and level of risk. At a minimum, the Contractor (and/or any subcontractor) must:

i. Protect the:

Confidentiality, which means preserving authorized restrictions on access and disclosure, based on the security terms found in this contract, including means for protecting personal privacy and proprietary information;

Integrity, which means guarding against improper information modification or destruction, and ensuring information non-repudiation and authenticity; and Availability, which means ensuring timely and reliable access to and use of information.

ii. Categorize all information owned and/or collected/managed on behalf of CDC and information systems that store, process, and/or transmit HHS information in accordance with FIPS 199 and National Institute of Standards and Technology (NIST) Special Publication (SP) 800-60, Volume II: Appendices to Guide for Mapping Types of Information and Information Systems to Security Categories. Based on information provided by the ISSO, CISO, CDC CPO, or other representative, the impact level for each Security Objective (Confidentiality, Integrity, and Availability) and the Overall Impact Level, which is the highest watermark of the three factors of the information or information system are the following:

Confidentiality: [ x ] Low [ ] Moderate [ ] High Integrity: [ x ] Low [ ] Moderate [ ] High Availability: [ x ] Low [ ] Moderate [ ] High Overall Impact Level: [ x ] Low [ ] Moderate [ ] High

iii. Based on the agreed-upon level of impact, implement the necessary safeguards to protect all information systems and information collected and/or managed on behalf of CDC regardless of location or purpose.

iv. Report any discovered or unanticipated threats or hazards by either the agency or contractor, or if existing safeguards have ceased to function immediately after discovery, within one (1) hour or less, to the government representative(s).

v. Adopt and implement all applicable policies, procedures, controls, and standards required by the CDC Information Security Program to ensure the confidentiality, integrity, and availability of government information and government information systems for which the Contractor is responsible under this contract or to which the Contractor may otherwise have access under this contract. Obtain all applicable security and privacy policies by contacting the CO/COR or CDC security and/or privacy officials.

c. Privacy Act. Comply with the Privacy Act requirements (when applicable), and tailor FAR and HHSAR clauses as needed.

d. Privacy Compliance. Comply with the E-Government Act of 2002, NIST SP 800-53, and applicable CDC privacy policies, and complete all the requirements below:

i. Per the Office of Management and Budget (OMB) Circular A-130, Personally Identifiable Information (PII), is "information that can be used to distinguish or trace an individual's identity, either alone or when combined with other information that is linked or linkable to a specific individual." Examples of PII include, but are not limited to the following: Social Security number, date and place of birth, mother's maiden name, biometric records, etc.

ii. To ensure that the public's personal information is protected in a manner commensurate with the privacy risks, CDC uses a privacy analysis process to assess the risks associated with CDC's collection and maintenance of PII and to ensure information is handled in accordance with applicable legal, regulatory, and policy requirements. PTAs analyze how information is handled in IT systems and electronic information collections and determines if the IT system or electronic information collection collects, disseminates, maintains, or disposes of PII. PIAs are used to assess the privacy risks of IT systems and electronic information collections that collect, disseminate, maintain, or dispose of PII about members of the public. PIAs also provide transparency into how CDC collects, disseminates, maintains, or disposes of the public's PII.

iii. The Contractor must support the agency with conducting a Privacy Threshold Analysis (PTA) for the information system and/or information handled under this contract to determine whether or not PII is collected, disseminated, maintained, or disposed as part of the contract. The PTA will determine if a full Privacy Impact Assessment (PIA) needs to be completed.

If the results of the PTA show that a full PIA is needed, the Contractor must support the agency with completing a PIA for the system or information within 60 days after completion of the PTA and in accordance with CDC policy and OMB M-03-22, Guidance for Implementing the Privacy Provisions of the E-Government Act of 2002.

The Contractor must support the agency in reviewing the PIA at least every three years throughout the system development lifecycle (SDLC)/information lifecycle, or when determined by the agency that a review is required based on a major change to the system, or when new types of PII are collected that introduces new or increased privacy risks, whichever comes first.

e. Controlled Unclassified Information (CUI). Executive Order 13556 defines CUI as "information that laws, regulations, or Government-wide policies require to have safeguarding or dissemination controls, excluding classified information." The Contractor (and/or any subcontractor) must comply with Executive Order 13556, Controlled Unclassified Information, (implemented at 3 CFR, part 2002) when handling CUI. 32 C.F.R. 2002.4(aa) As implemented the term "handling" refers to "…any use of CUI, including but not limited to marking, safeguarding, transporting, disseminating, re-using, and disposing of the information." 81 Fed. Reg. 63323. The requirements below apply only to nonfederal systems that process, store, or transmit CUI, or that provide security protection for such components.