ATT_04_RFQ_HST_PA_ADDM_06052023.docx

ATTACHMENT 5 - NARA TERMS AND CONDITIONS

(Addenda to FAR 52.212-4, Contract Terms and Conditions)

1. ORIGIN OF MANUFACTURE

Supplies furnished under this request for quotation are of domestic origin unless otherwise indicated by the Vendor. Vendor shall complete the table in Attachment 8, Volume 3 and submit it with Vendor’s quote.

2. KEY PERSONNEL

a. The Vendor agrees to assign to the task order those key personnel whose resumes were submitted with the Vendor’s quotation as required to fill the requirements of the task order. No substitution or addition of personnel will be made except in accordance with this clause or by written permission by the Contracting Officer.

b. The Vendor agrees that during the first 12 months of the task order, no personnel substitutions will be permitted, unless such substitutions are necessitated by an individual's sudden illness, death or termination of employment. In any of these events, the Vendor shall promptly notify the Contracting Officer and provide the information required by paragraph (d) below.

c. If key personnel, for whatever reason, become unavailable for work under this task order for a continuous period exceeding thirty (30) working days, or are expected to devote substantially less effort to the work than indicated in its quotation, the Vendor shall propose a substitution of such personnel, in accordance with paragraph (d) below.

d. All proposed key personnel substitutions shall be submitted, in writing, to the Contracting Officer at least thirty (30) days, or ninety (90) days if a security clearance is to be obtained, in prior to the proposed substitution. Each request shall provide a detailed explanation of the circumstances necessitating the proposed substitution; a complete resume(s) for the proposed substitute(s); and any other information required by the Contracting Officer to approve or disapprove the proposed substitution(s). Resumes for key personnel substitutions must be submitted in accordance with the format specified. All proposed substitutes (no matter when they are proposed during the performance period) shall have qualifications that are equal to or higher than the qualifications of the person being replaced.

e. In the event the Vendor designates additional key personnel as deemed appropriate for the requirement, the Vendor shall submit to the Contracting Officer for approval the information required in paragraph (d) above.

f. The Contracting Officer shall evaluate requests for substitution and addition of personnel and promptly notify the Vendor, in writing, whether a request is approved or disapproved.

g. If the Contracting Officer determines that suitable and timely replacement of key personnel who have been reassigned, terminated, or have otherwise become unavailable to perform under the task order is not reasonably forthcoming, or that a resultant reduction of productive effort would impair the successful completion of the task order, the task order may be terminated by the Contracting Officer for default or for the convenience of the Government, as appropriate. Alternatively, at the Contracting Officer's discretion, if the Contracting Officer finds the Vendor to be at fault for the condition, the CO may equitably adjust (downward) the task order price to compensate the Government for any delay, loss or damage as a result of the Vendor's action.

3. PAYMENT

a. Payments must be made upon submission of a proper invoice. Payments will be due on the 30th calendar day after receipt of a proper invoice, or on the 30th calendar day after the date the supplies were accepted by the Government, whichever is later.

b. No payments will be made by check. Invoice payments will be made electronically in accordance with FAR 52.232-33, Payment by Electronic Funds Transfer—System for Award Management.

c. The date of payment by wire transfer through the Treasury Financial Communications System must be considered the date payment is made.

d. Payment for delivered supplies will be made upon submission of the Vendor’s properly certified invoice.

e. All invoices will be paid using information from the System for Award Management (SAM). Therefore, payment will be made to the EFT information that matches the Dunn and Bradstreet Number (DUNS) for this award.

4. ELECTRONIC INVOICING AND PAYMENT REQUIREMENTS – INVOICE PROCESSING PLATFORM (IPP) (JANUARY 2020)

Payment requests must be submitted electronically through the U. S. Department of the Treasury's Invoice Processing Platform System (IPP).

"Payment request" means any request for contract financing payment or invoice payment by the Contractor. To constitute a proper invoice, the payment request must comply with the requirements identified in the applicable Prompt Payment clause included in the contract, or the clause 52.212-4 Contract Terms and Conditions – Commercial Items included in commercial item contracts. The IPP website address is: https://www.ipp.gov.

Under this order/contract, the following documents are required to be submitted as an attachment to the IPP invoice: Invoice shall be submitted after Government’s acceptance of all deliverables. The invoice shall contain information required by FAR 52.212-4(g).

Vendor Invoice to include:

1. Award number

2. CLIN//Item number of deliverable

3. Description of deliverable

4. Price of deliverable

5. Quantity of deliverable

6. Date deliverable was provided to the Government for inspection if applicable

7. Serial number/part number if applicable

The Contractor must use the IPP website to register, access and use IPP for submitting requests for payment. Contractor assistance with enrollment can be obtained by contacting the IPP Customer Support Helpdesk by sending an email to IPPCustomerSupport@ fiscal.treasury.gov or phone (866) 973-3131.

If the Contractor is unable to comply with the requirement to use IPP for submitting invoices for payment, the Contractor must submit a waiver request in writing to the Contracting Officer with its proposal or quotation.

(End of Clause)

5. SECURITY OF INFORMATION AND PROTECTION OF CONTROLLED UNCLASSIFIED INFORMATION, INCLUDING PERSONALLY IDENTIFIABLE INFORMATION (APRIL 2017)

(a) Applicability

This clause applies to all controlled unclassified information, which may include personally identifiable information, as defined in Section B, regardless of the medium in which it is found and includes paper records.

(b) Definitions. As used in this clause:

“Breach” means the loss of control, compromise, unauthorized disclosure, unauthorized acquisition, unauthorized access, or any similar situation where persons other than authorized users, and for other than authorized purpose, have access or potential access to personally identifiable information, in usable form whether physical or electronic.

“Controlled Unclassified Information” means information the Government creates or possesses, or that an entity creates or possesses for or on behalf of the Government, that a law, regulation, or Government-wide policy requires or permits an agency to handle using safeguarding or dissemination controls. However, CUI does not include classified information or information a non-executive branch entity possesses and maintains in its own systems that did not come from, or was not created or possessed by or for, an executive branch agency or an entity acting for an agency. Law, regulation, or Government-wide policy may require or permit safeguarding or dissemination controls in three ways: Requiring or permitting agencies to control or protect the information but providing no specific controls, which makes the information CUI Basic; requiring or permitting agencies to control or protect the information and providing specific controls for doing so, which makes the information CUI Specified; or requiring or permitting agencies to control the information and specifying only some of those controls, which makes the information CUI Specified, but with CUI Basic controls where the authority does not specify.

“Personally identifiable information (PII)” means any information that permits the identity of an individual to be directly or indirectly inferred, including any other information that is linked or linkable to that individual regardless of whether the individual is a citizen of the United States, legal permanent resident, or a visitor to the United States. Examples of PII include the following:

(1) Name.

(2) Date of birth.

(3) Mailing address.

(4) Telephone number.

(5) Social Security Number.

(6) Email address.

(7) Zip code.

(8) Account numbers.

(9) Certificate/license numbers.

(10) Vehicle identifiers including license plates.

(11) Uniform resource locators (URLs).

(12) Internet protocol addresses.

(13) Biometric identifiers (e.g., fingerprints).

(14) Photographic facial images.

(15) Any other unique identifying number or characteristic.

(16) Any information where it is reasonably foreseeable that the information will be linked with other information to identify the individual.

“Sensitive personally identifiable information (sensitive PII)” means a subset of PII, which if lost, compromised or disclosed without authorization, could result in substantial harm, embarrassment, inconvenience, or unfairness to an individual.

(1) Complete social security numbers, alien registration numbers (A-number) and biometric identifiers (such as fingerprint, voiceprint, or iris scan) are considered sensitive PII even if they are not coupled with additional PII.

(2) Additional examples include any grouping of information that contains an individual’s name or other unique identifier plus one or more of the following elements:

(i) Driver’s license number, passport number, or truncated social security number (such as last 4 digits);

(ii) Date of birth (month, day, and year);

(iii) Citizenship or immigration status;

(iv) Financial information such as account numbers or electronic funds transfer information;

(v) Medical information; and/or

(vi) System authentication information such as mother’s maiden name, account passwords or personal identification numbers.

(3) Other PII may be “sensitive” depending on its context, such as a list of employees with less than satisfactory performance ratings or an unlisted home address or phone number. In contrast, a business card or public telephone directory of agency employees contains PII but it is not sensitive.

(c) Data Security.

(1) The Vendor shall limit access to the data covered by this clause to those employees and subcontractor who require the information in order to perform their official duties under this task order.

(2) The Vendor employees, and subcontractors must physically or electronically secure CUI, which may include sensitive PII, when not in use and/or under the control of an authorized individual, and when in transit to prevent unauthorized access or loss.

(3) When CUI is no longer needed or required to be retained under applicable Government records retention policies, it must be destroyed in accordance with NIST 800-88 standards.

(4) The Vendor shall only use CUI obtained under this task order for purposes of the Vendor; it shall not be disclosed, released, disseminated, or published without the prior written consent of the Contracting Officer.

(5) If it is established elsewhere in this task order that information to be utilized under this task order, or a portion thereof, is subject to the Privacy Act, The Vendor shall follow the rules and procedures of disclosure set forth in the Privacy Act of 1974, 5 U.S.C. 552a, and implementing regulations and policies, with respect to systems of records determined to be subject to the Privacy Act.

(6) At expiration or termination of this task order, the Vendor shall turn over all CUI obtained under the Vendor that is in its possession.

(d) Systems Access. Work to be performed under this task order may require the handling of CUI, including PII. The Vendor shall provide the Government access to, and information regarding those systems handling CUI, including sensitive PII for the Government under the Vendor, when requested by the Government, as part of the Vendor’s responsibility to ensure compliance with security requirements, and shall otherwise cooperate with the Government in assuring compliance with such requirements. Government access shall include independent testing of controls, system penetration testing by the Government, Federal Information Security Management Act data reviews, and access by agency Inspectors General (IG) for IG reviews.

When requested by the NARA CO or COR or other NARA official as described herein, in connection with NARA’s efforts to ensure compliance with security requirements and to maintain and safeguard against threats and hazards to the security, confidentiality, integrity, and availability of NARA Information, Vendor shall provide NARA, including the NARA OIG, (1) access to any and all information and records, including electronic information, regarding a Covered Information System, and (2) physical access to Vendor's facilities, installations, systems, operations, documents, records, and databases. Such access may include independent validation testing of controls, system penetration testing, and FISMA data reviews by NARA or agents acting on behalf of NARA, and such access shall be provided within 72 hours of the request. Additionally, the Vendor shall cooperate with NARA’s efforts to ensure, maintain, and safeguard the security, confidentiality, integrity, and availability of NARA information.

(e) Systems Security.

(1) In performing its duties related to management, operation, and/or access of systems containing PII under this task order, the Vendor, its employees and subcontractors shall comply with all applicable security requirements and rules of conduct applicable to the agency’s systems as described in:

a) NARA Directive 1608 http://www.archives.gov/foia/directives/nara1608.pdf and

b) FedRAMP baseline controls for moderate IT systems.

(2) In addition, the use of Vendor-Owned laptops or other portable storage devices to process or store sensitive PII is prohibited under this task order until the Vendor provides, and the Contracting Officer, in coordination with the Senior Agency Official for Privacy (SAOP) or the SAOP’s designee, approves the Vendor’s written acknowledgment that the following requirements are met:

(i) Laptops and other portable storage devices must employ encryption that is NIST Federal Information Processing Standard (FIPS) 140-2 validated (or its successor) http://csrc.nist.gov/publications/PubsFIPS.html, and approved.

(ii) The Vendor has developed and implemented a process to ensure that security and other applications software are kept current.

(iii) Mobile computing devices utilize anti-virus software and a host-based firewall mechanism.

(iv) Removable media, such as hard drives, flash drives, devices with flash memory, CDs and floppy disks containing CUI, which may include sensitive PII shall not be removed from a Government facility unless they are encrypted using a NIST FIPS 140-2 or successor approved product.

(v) When no longer needed, all removable media, hard drives, and flash memory shall be destroyed in accordance with Government security requirements identified in NARA’s Media Protection Methodology.

(vi) The Vendor shall maintain an accurate inventory of devices used in the performance of this task order.

(3) All NARA information obtained under this task order shall be removed from Vendor-Owned information technology assets at the direction of the Contracting Officer or Contracting Officer’s Representative. Removal must be accomplished in accordance with standard FedRAMP controls for media protection in moderate IT systems and NIST 800-88 standards. Certification of data removal will be performed by the Vendor’s Project Manager and written notification confirming acknowledgment will be delivered to the Contracting Officer within 30 days of the direction to remove the information.

(4) Back up or mirrors of any systems or files containing CUI shall be treated in the same manner as the original data containing CUI, with the same protections and obligations.

(5) The Vendor shall require FIPS 140-2 (or successor) encryption of any sensitive PII when transmitted electronically across the Internet or other public works.

(f) Breach Notification to Government.

(1) The Vendor has been provided with: NARA Directive 1608, and is aware of its roles, responsibilities, and relationship with the Government in case of data breach.

(2) In the event of any actual or suspected breach of sensitive PII, the Vendor shall immediately, and in no event later than one hour of discovery, report the breach to the Contracting Officer, the COR, the Senior Agency Official for Privacy (currently NARA’s General Counsel garymstern@nara.gov) and the Chief Information Officer (only for IT requirements) in accordance with NARA Directive 1608.

(3) The Vendor is responsible for positively verifying that notification is received and acknowledged by appropriate Government parties identified in subparagraph (2) above.

(4) In the event of a confirmed, potential or suspected Security Breach, involving unauthorized exposure, loss of control, compromise, exfiltration, manipulation, disclosure, acquisition, or accessing of any Covered Information System or any NARA Information accessed by, retrievable from, processed by stored on, or transmitted within, to or from any such system, Vendor shall immediately (and in no event later than within 1 hour of discovery) report any Confirmed Breach to the NARA CO and the CO's Representative (''COR").

(5) NARA, at its sole discretion, may obtain, and Vendor will permit, the assistance of other federal agencies and/or third party contractors or firms to aid in response activities related to any security incident, PII or Security Breach. Additionally. NARA, at its sole discretion, may require Vendor to retain, at Vendor's expense, a Third Party Assessing Organization (3PAO) acceptable to NARA, with expertise in incident response, compromise assessment, and federal security control requirements, to conduct a thorough vulnerability and security assessment of all affected Information Systems.

(6) Any report submitted in accordance with paragraphs (1), (2) and (3) above, shall identify (I) both the Information Systems and NARA Information involved or at risk, including the type, amount, and level of sensitivity of the NARA Information and, if the NARA Information contains PII, the estimated number of unique instances of Pll, (2) all steps and processes being undertaken by Vendor to minimize, remedy, and/or investigate the Security Incident, (3) any and all other information as required by the USCERT Federal Incident Notification Guidelines, including the functional impact, information impact, impact to recoverability, threat vector, mitigation details, and all available incident details; and (4) any other information specifically requested by the NARA. Vendor shall continue to provide written updates to the NARA CO regarding the status of the Security incident at least every three (3) calendar days until informed otherwise by the NARA CO.

(7) Response activities related to any security incident or PII or Security Breach undertaken by NARA, including activities undertaken by Vendor, other federal agencies, and any third-party contractors or firms at the request or direction of NARA, may include inspections, investigations, forensic reviews, data analyses and processing, and final determinations of responsibility for the Security Incident and/or liability for any additional response activities. Vendor shall be responsible for all costs and related resource a locations required for all such response activities related to any Security Incident or Breach, including the cost of any penetration testing.

(g) Personally Identifiable Information Notification Requirement

Vendor certifies that it has a security policy in place that contains procedures to promptly notify any individual whose Personally Identifiable Information ("Pll") was, or is reasonably determined by NARA to have been, compromised. Any notification shall be coordinated with the NARA CO and shall not proceed until NARA has made a determination that notification would not impede a law enforcement investigation or jeopardize national security. The method and content of any notification by Vendor shall be coordinated with, and subject to the approval of, NARA. Vendor shall be responsible for taking corrective action consistent with NARA Data Breach Notification Procedures and as directed by the NARA CO, including all costs and expenses associated already covered by above clauses added in PII clause with such corrective action, which may include providing credit monitoring to any individuals whose Pll was actually or potentially compromised.

All determinations regarding whether and when to notify individuals and/or federal agencies potentially affected by a Security Incident, Breach, or PII Breach will be made by NARA senior officials at NARA’s discretion.

(h) Flowdown of security requirements to subcontractors.

(1) The Vendor shall incorporate the substance of this clause, its terms and requirements including this paragraph (g), in all subcontracts under this task order, and require written subcontractor acknowledgement of same.

(2) Violation by a subcontractor of any provision set forth in this clause will be attributed to the Vendor.

(End of Clause)

6. NARA KEEP HARD DRIVE (KHD) CLAUSE

In accordance with NARA policy, NARA will take title to all electronic storage devices, including but not limited to hard drives that may contain Personally Identifiable Information (PII). NARA will not allow the removal of any electronic storage device that may contain PII data from its facilities by a contractor, including individuals performing maintenance on equipment, devices or systems. This provision applies even in the event the equipment is leased. NARA will handle the destruction of this hardware internally. This provision must flow down to all subcontracts, including those for maintenance.

If the Vendor comes into possession of an electronic storage device that may contain PII, the Vendor will immediately notify the Contracting Officer and return the electronic storage device to NARA. Vendor will protect the confidentiality of the electronic storage device and will not access, disclose, release, disseminate, or publish any of the information on the electronic storage device.

7. PERMITS AND LICENSES (SEPT 1998)

In performance of work under this contract, the Contractor shall, without additional expense to the Government, be responsible for obtaining any necessary licenses and permits, and for complying with any Federal, State, and municipal laws, codes, and regulations applicable to the performance of the work.

8. INSURANCE REQUIREMENTS

a. In accordance with the clause of this contract entitled “INSURANCE--WORK ON A GOVERNMENT INSTALLATION” (FAR 52.228-5), the Contractor shall acquire and maintain during the entire performance period of this contract insurance of at least the following kinds and minimum amounts set forth below.

MINIMUM

TYPES OF INSURANCE AMOUNT

by Workmen’s Compensation above

General Liability Insurance (Comprehensive)

9. OVERTIME (SEPT 1998)

All overtime cost is included in the contract price. The Contractor is obligated, at no additional compensation, to meet all requirements of this contract. The Contractor shall pay overtime premiums to all employees as required by the terms and conditions of this contract, and all applicable State and Federal laws at no increase in the contract fixed price and no additional expense to the Government.

10. COOPERATION WITH OTHER ONSITE NARA CONTRACTORS

a. When the Government undertakes or awards other contracts for additional work at the facilities the Contractor shall: (1) fully cooperate with the other Contractors and Government employees and (2) carefully fit its own work to such other additional contracted work as may be directed by the COR. The Contractor shall not commit or permit any act, which will interfere with the performance of work awarded to another Contractor or with the performance of other Government employees.

b. In any case where, in the course of fulfilling the contract requirements, the Contractor disturbs any work guaranteed under another separate contract, the Contractor shall restore such disturbed work to a condition satisfactory to the COR and guarantee such restored work to the same extent as it was guaranteed under the other contract.

11. STOP WORK CANCELLATION (APR 2014)

The Contractor is required to report to work and resume full Contract performance within 24 hours of receiving notification of the stop work cancellation unless otherwise instructed by the CO and/or COR.

12. RECORDS MANAGEMENT OBLIGATIONS

A. Applicability

This clause applies to all Contractors whose employees create, work with, or otherwise handle Federal records, as defined in Section B, regardless of the medium in which the record exists.

B. Definitions

“Federal record” as defined in 44 U.S.C. § 3301, includes all recorded information, regardless of form or characteristics, made or received by a Federal agency under Federal law or in connection with the transaction of public business and preserved or appropriate for preservation by that agency or its legitimate successor as evidence of the organization, functions, policies, decisions, procedures, operations, or other activities of the United States Government or because of the informational value of data in them. Federal record:

(1) includes [Agency] records.

(2) does not include personal files.

(3) applies to records created, received, or maintained by Contractors pursuant to their [Agency] contract.

(4) may include deliverables and documentation associated with deliverables.

C. Requirements

(1) Contractor agrees to comply with all applicable records management laws and regulations, as well as National Archives and Records Administration (NARA) records policies, including but not limited to the Federal Records Act (44 U.S.C. chs. 21, 29, 31, 33), NARA regulations at 36 CFR Chapter XII Subchapter B, and those policies associated with the safeguarding of records covered by the Privacy Act of 1974. These policies include the preservation of all records created or received regardless of format, or mode of transmission, or state of completion.

(2) In accordance with 36 C.F.R. 1222.32, all data created for Government use and delivered to, or falling under the legal control of, the Government are Federal records subject to the provisions of 44 U.S.C. chapters 21, 29, 31, and 33, the Freedom of Information Act (FOIA) (5 U.S.C. 552), as amended, and the Privacy Act of 1974 (5 U.S.C. 552a), as amended and must be managed and scheduled for disposition only as permitted by statute or regulation.

(3) In accordance with 36 C.F.R. 1222.32, Contractor must maintain all records created for Government use or created in the course of performing the contract and/or delivered to, or under the legal control of the Government and must be managed in accordance with Federal law. Electronic records and metadata must be accompanied by sufficient technical documentation to permit understanding and use of the records and data.

(4) No disposition of Federal records will be allowed without the prior written consent of the Head of the Contracting Activity, acting in accordance with the provisions of a NARA approved agency records schedules. [Agency] and its contractors are responsible for preventing the alienation or unauthorized destruction of records, including all forms of mutilation. Records may not be removed from the legal custody of [Agency] or destroyed except for in accordance with the provisions of the agency records schedules and with the written concurrence of the Head of the Contracting Activity. Willful and unlawful destruction, damage or alienation of Federal records is subject to the fines and penalties imposed by 18 U.S.C. 2701.

(5) The Contractor shall immediately notify the appropriate Contracting Officer upon discovery of any inadvertent or unauthorized disclosures of information, data, documentary materials, records or equipment. Disclosure of non-public information is limited to authorized personnel with a need-to-know as described in the delivery/task order. The Contractor shall ensure that the appropriate personnel, administrative, technical, and physical safeguards are established to ensure the security and confidentiality of this information, data, documentary material, records and/or equipment is properly protected. The Contractor shall not remove material from Government facilities or systems, or facilities or systems operated or maintained on the Government’s behalf, without the express written permission of the Head of the Contracting Activity. When information, data, documentary material, records and/or equipment is no longer required, it shall be returned to [Agency] control or the Contractor must hold it until otherwise directed. Items returned to the Government shall be hand carried, mailed, emailed, or securely electronically transmitted to the Contracting Officer or address prescribed in the delivery/task order. Destruction of records is EXPRESSLY PROHIBITED unless in accordance with Paragraph (4).

(6) The Contractor is required to obtain the Contracting Officer's approval prior to engaging in any contractual relationship (sub-contractor) in support of this contract requiring the disclosure of information, documentary material and/or records generated under, or relating to, contracts. The Contractor (and any sub-contractor) is required to abide by Government and [Agency] guidance for protecting sensitive, proprietary information, classified, and controlled unclassified information.

(7) The Contractor shall only use Government IT equipment for purposes specifically tied to or authorized by the contract and in accordance with [Agency] policy.

(8) The Contractor shall not create or maintain any records containing any non-public [Agency] information that are not specifically tied to or authorized by the contract.

(9) The Contractor shall not retain, use, sell, or disseminate copies of any deliverable that contains information covered by the Privacy Act of 1974 or that which is generally protected from public disclosure by an exemption to the Freedom of Information Act.

(10) The [Agency] owns the rights to all data and records produced as part of this contract. All deliverables under the contract are the property of the U.S. Government for which [Agency] shall have unlimited rights to use, dispose of, or disclose such data contained therein as it determines to be in the public interest. Any Contractor rights in the data or deliverables must be identified as required by FAR 52.227-11 through FAR 52.227-20.

(11) Initial Training. All Contractor employees assigned to this contract and who work with or otherwise handle Federal records are required to take agency-provided records management training within thirty days after award of the contract or within thirty days of an employee beginning work on the contract. The Contractor is responsible for maintaining records confirming that all required employees complete the training.

(12) Annual training. All Contractor employees assigned to this contract and who work with or otherwise handle Federal records will be required to complete annual records management training. The Contractor employees will be notified via their [email address] of the deadline for this obligation each year. The Contractor is responsible for maintaining records confirming all required contractor employees completed training.

D. Flowdown of requirements to subcontractors

(1) The Contractor shall incorporate the substance of this clause, its terms and requirements including this paragraph, in all subcontracts under this contract, and require written subcontractor acknowledgment of same.

(2) Violation by a subcontractor of any provision set forth in this clause will be attributed to the Contractor.

13. COVID-19 HEALTH SCREENING AND MASK-WEARING REQUIREMENTS

In response to the COVID-19 pandemic, the National Archives and Records Administration (NARA) implemented health and safety measures to protect our workforce and to reduce the spread of COVID-19. The most effective ways to limit the spread of COVID-19 in the workplace are the proper use of personal protective equipment (PPE), social distancing, good personal hygiene, and other related precautions recommended by the Centers for Disease Control and Prevention (CDC). NARA’s health and safety protocols, health screening procedures, and health screening inventory are outlined below and must be provided to every contractor working at a NARA facility.

Note: Please provide all contractor employees working under this contract a copy of the Health Screening Procedures and Health Screening Inventory.

I. HEALTH SCREENING

All contractors who are scheduled to work at a NARA facility must assess their own health before reporting to work. NARA will not check temperatures or ask your employees questions about their health. However, NARA may deny them access to the facility or send them home if they are showing obvious signs of illness (e.g. shaking, chills, flushed appearance, vomiting). NARA will only obtain the minimum health status information necessary to protect the health of other facility occupants. NARA will maintain their privacy and protect all health related information obtained.

A. Procedure

1. Temperature Checks. All NARA employees and contractors are required to check their temperatures on the days they are scheduled to work at a NARA facility. They must check their temperature at home, before reporting for duty.

2. Complete the health screening inventory. After checking their temperature and before reporting to the NARA workplace, your employees must answer each of the “yes” or “no” questions provided in paragraph B, Health Screening Inventory.

a. If your employee responds “yes” to any question on the health screening inventory:

(1) They must not report for duty to the NARA facility. They must immediately contact their project manager/supervisor and let him or her know that they answered “yes” to at least one question.

(2) If they were in the NARA facility within two weeks of experiencing symptoms, they must provide their project manager/supervisor with information necessary for NARA to conduct contact tracing. Once the information is obtained, the project manager/supervisor must provide the employee’s responses to the Contracting Officer’s Representative (COR). The project manager/supervisor must ask the employee the following questions:

i. Were you in the facility in the last two days before you first felt ill or were diagnosed, or within 14 days after you came in close contact with someone diagnosed with COVID-19?

ii. Where did you spend the majority of your time in the facility?

iii. Was there anyone else in the facility who you were within 6 feet of for a total of 15 minutes or more over a 24-hour period?

(3) If your employee was diagnosed with COVID-19, tested positive, is experiencing symptoms, or was exposed to someone else who has COVID-19, they should be placed on 10 calendar days of home isolation. They may return to work at the NARA workplace at the end of the 10-day isolation period, only if they are free of COVID-19 related symptoms

(4) Seek medical attention.

b. If your employee responds “no” to all questions on the health screening inventory, they may report to work as scheduled.

B. Health Screening Inventory

Note: Your employee must answer the following questions to the best of their ability:

1. Have you experienced any symptoms of COVID-19 in the past 48 hours? Do not include symptoms that are explained by something other than respiratory illness (e.g. allergies, asthma, an illness that has been diagnosed as something other than COVID-19, routine aches, pain, or headaches that you normally experience). The following is a list of COVID-19 symptoms recognized by the CDC. Check the CDC website for the latest updates.

2. Have you been diagnosed with COVID-19 (with or without symptoms), are you currently waiting on the results of a COVID-19 test due to an exposure or symptoms, or has a health care provider advised you to stay at home or otherwise self-isolate?

[ ] Yes [ ] No

3. In the past 14 days, have you been in close physical contact (within 6 feet for longer than 15 minutes) with a person who has been diagnosed with COVID-19 or experienced COVID-19 symptoms?

[ ] Yes [ ] No

4. Have you traveled out of State or out of the country in the past 10 days (with no COVID test) or in the past 7 days (if you have been tested since returning)?

88310323Q00068, HS TRUMAN LIBRARY AND MUSEUM PUBLIC ADDRESS SYSTEM INSTALLATION

[ ] Yes [ ] No

II. MASK-WEARING

On January 20, 2021, President Biden signed Executive Order 13991, Protecting the Federal Workforce and Requiring Mask-Wearing. The goal of the Executive order is to halt the spread of COVID-19 by relying on the best available data and science-based public health measures. These measures include wearing face masks, physical distancing and other related precautions recommended by the Centers for Disease Control and Prevention (CDC). NARA is implementing these health and safety measures to protect our workforce and to reduce the spread of COVID-19. [Note: This will be updated as needed prior to award to reflect the current CDC COVID procedures.]

A. All contractors working under a NARA contract and visitors must wear an appropriate face mask over their nose and mouth, at all times, while in a NARA facility, including outdoor shared spaces. Face masks may be removed only:

(1) When an individual is alone in an office with floor-to-ceiling walls and a closed door;

(2) When an individual is working alone in a records storage space (Federal Records Center (FRC) stack or archival bay); or

(3) For a brief period when eating or drinking while maintaining a minimum of 6 feet of physical distancing from others.

B. In accordance with CDC guidelines, an “Appropriate” face mask covers the nose and mouth, does not have an exhaust valve or vent, and does not display offensive words, images, or logos. NARA allows our employees to provide their own face masks if they meet our definition of “appropriate”. If it is consistent with your policy, you may allow your employees to wear their own appropriate face masks.

C. NARA will deny your employees access to our facility if they refuse to wear an appropriate face mask. Contractors will be solely responsible for any negative effect on contract performance that is the direct result of a contractor employee being denied access because she or he refused to wear a face mask in a NARA facility.

Note: The CDC COVID-19 website remains the authoritative source for facts about how to protect yourself and your family from COVID-19, and how to recognize symptoms of the virus. The site is frequently updated with virus guidance and provides updated travel advisories. It is wise to review the CDC website regularly for updated guidance.

(END OF CLAUSE)