Attachment A - SF-1449.pdf

15F06723Q0000157 Page 1 of 34

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS

OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24 & 30

1. REQUISITION NUMBER PAGE 1 OF

5. SOLICITATION NUMBER

15F06723Q0000157

2. CONTRACT NO. 3. AWARD/EFFECTIVE

DATE

4. ORDER NUMBER 6. SOLICITATION ISSUE

DATE

05/02/2023

7. FOR SOLICITATION

INFORMATION CALL:

a. NAME b. TELEPHONE NUMBER (No collect calls) 8. OFFER DUE DATE / LOCAL

TIME

05/23/2023 04:00 CT

CODE UNIT_CHIEF

FEDERAL BUREAU OF INVESTIGATION

PSAU - PROFESSIONAL SERVICES ACQUISITION UNIT

935 PENNSYLVANIA AVE, NW

WASHINGTON, DC 20535-0001

9. ISSUED BY X UNRESTRICTED OR SET ASIDE: % FOR

SMALL BUSINESS

HUBZONE SMALL

BUSINESS

SERVICE-DISABLED

VETERAN-OWNED

SMALL BUSINESS

WOMEN-OWNED SMALL BUSINESS (WOSB)

ELIGIBLE UNDER THE WOMEN-OWNED

SMALL BUSINESS PROGRAM

EDWOSB

8(A)

NAICS: 624230

SIZE STANDARD: 41,500,000

10. THE ACQUISITION IS

SEE

SCHEDULE

11. DELIVERY FOR FOB DESTINATION

UNLESS BLOCK IS MARKED

NET 30

12. DISCOUNT TERMS

13a. THIS CONTRACT IS A

RATED ORDER UNDER DPAS

(15 CFR 700)

13b. RATING

X RFQ IFB RFP

14. METHOD OF SOLICITATION

1200CODE15. DELIVER TO

SEE ATTACHED DELIVERY LOCATION TABLE

CODE 15F06716. ADMINISTERED BY

FEDERAL BUREAU OF INVESTIGATION

PSAU - PROFESSIONAL SERVICES ACQUISITION UNIT

935 PENNSYLVANIA AVE, NW

WASHINGTON, DC 20535-0001

FACILITY

CODE

CODE

TELEPHONE NO.

17a. CONTRACTOR/

OFFEROR

1200CODE18a. PAYMENT WILL BE MADE BY

Send all invoices via IPP, NOT central_invoices@fbi.gov

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT SUCH ADDRESS IN

OFFER SEE ADDENDUM

18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a UNLESS BLOCK BELOW IS

CHECKED

19.

ITEM NO.

20.

SCHEDULE OF SUPPLIES/SERVICES

21.

QUANTITY

22.

UNIT

23.

UNIT PRICE

24.

AMOUNT

0001 Order Dependent Reference "RFQ 15F06723Q0000157" and all attachments.

PSC: R499

(Use Reverse and/or Attach Additional Sheets as Necessary)

0 EA $________________ $________________

25. ACCOUNTING AND APPROPRIATION DATA 26. TOTAL AWARD AMOUNT (For Govt. Use Only)

X 27a. SOLICITATION INCORPORATES BY REFERENCE FAR 52.212-1, 52.212-4. FAR 52.212-3 AND 52.212-5 ARE ATTACHED. ADDENDA ARE X ARE NOT ATTACHED

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA ARE ARE NOT ATTACHED

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN ____ COPIES TO

ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND DELIVER ALL ITEMS SET FORTH

OR OTHERWISE IDENTIFIED ABOVE AND ON ANY ADDITIONAL SHEETS SUBJECT TO THE

TERMS AND CONDITIONS SPECIFIED.

29. AWARD OF CONTRACT: REF. _____________________________ OFFER

DATED _________________ . YOUR OFFER ON SOLICITATION (BLOCK 5)

INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE SET FORTH HEREIN,

IS ACCEPTED AS TO ITEMS:

30a. SIGNATURE OF OFFEROR/CONTRACTOR 31a. UNITED STATES OF AMERICA (SIGNATURE OF CONTRACTING OFFICER)

30b. NAME AND TITLE OF SIGNER (TYPE OR PRINT) 30c. DATE SIGNED 31b. NAME OF THE CONTRACTING OFFICER (TYPE OR PRINT)

Steven McMan

31c. DATE SIGNED

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

STANDARD FORM 1449 (REV. 2/2012)

Prescribed by GSA - FAR (48 CFR) 53.212

15F06723Q0000157 Page 2 of 34

19.

ITEM NO.

20.

SCHEDULE OF SUPPLIES/SERVICES

21.

QUANTITY

22.

UNIT

23.

UNIT PRICE

24.

AMOUNT

32a. QUANTITY IN COLUMN 21 HAS BEEN

RECEIVED INSPECTED ACCEPTED, AND CONFORMS TO THE CONTRACT, EXCEPT AS NOTED: _________________________________

32b. SIGNATURE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32c. DATE 32d. PRINTED NAME AND TITLE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32e. MAILING ADDRESS OF AUTHORIZED GOVERNMENT REPRESENTATIVE 32f. TELEPHONE NUMBER OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32g. E-MAIL OF AUTHORIZED GOVERNMENT REPRESENTATIVE

PARTIAL FINAL

33. SHIP NUMBER 34. VOUCHER NUMBER 35. AMOUNT VERIFIED

CORRECT FOR

COMPLETE PARTIAL FINAL

36. PAYMENT 37. CHECK NUMBER

38. S/R ACCOUNT NUMBER 39. S/R VOUCHER NUMBER 40. PAID BY

41a. I CERTIFY THIS ACCOUNT IS CORRECT AND PROPER FOR PAYMENT 42a. RECEIVED BY (Print)

41b. SIGNATURE AND TITLE OF CERTIFYING OFFICER 41c. DATE

42b. RECEIVED AT (Location)

42c. DATE REC'D (YY/MM/DD) 42d. TOTAL CONTAINERS

STANDARD FORM 1449 (REV. 2/2012) BACK

15F06723Q0000157 Page 3 of 34

Table of Contents

Section Description Page Number

1 Solicitation/Contract Form 2 Commodity or Services Schedule 3 Contract Clauses

FBI-0023 Federal Bureau of Investigation Electronic Invoicing Requirements DJAR-PGD-15-02-1B Contractor Internal Confidentiality Agreements or Statements Prohibiting or Restricting Reporting of Waste, Fraud, and Abuse - Solicitation - (DEVIATION 2015-02) (March 2015) DJAR-PGD-05-10 Electronic Subcontracting Reporting System (eSRS) - DOJ Procurement Guidance Document (PGD) 05-10 DJAR-PGD-02-02B Non-U.S. Citizens Prohibited from Access to DOJ Information Technology (IT) Systems

APN 21-07 CONTRACTOR PRIVACY REQUIREMENTS (NOV 2021)

DJAR-PGD-15-03 Security of Department Information and Systems DJAR-PGD-07-12 Maintaining Contractor Performance During a Pandemic or Other Emergency FBI-0012 CARS Clause: Clauses for Procurements of Critical Assets - Contract Security Requirements from Acquisition Security Unit (ASU) FBI-0008 Financial Disclosure - Contract Security Requirements from Acquisition Security Unit

(ASU)

FBI-0002 CLASSIFIED CONTRACTS - CONTRACT SECURITY REQUIREMENTS

FBI-0003 Contracting Officer's Security Representative (COSR) - Contract Security Requirements from Acquisition Security Unit (ASU) FBI-0006 (U) Contractor Suitability Special Security Requirement (SSR) FBI-0007 DOJ Security of Systems and PII - Procurement Section Directive (PSD): 11-24.101 FBI-0009 Personnel Security - Contract Security Requirements from Acquisition Security Unit

(ASU)

FBI-0010 Warrantless Search - Contract Security Requirements from Acquisition Security Unit

(ASU)

FBI-0011 CARS Clause: Clauses for Contracts Involving Access to Classified Information - Contract Security Requirements from Acquisition Security Unit (ASU) FBI-0013 e-QIP - Contract Security Requirements from Acquisition Security Unit (ASU), Procurement Section Directive (PSD): 09-22.18 FBI-0014 Inverted Domestic Corporations FBI-0021 Providing Deoxyribonucleic Acid (DNA) Sample for Elimination FBI-0022 Information and Communication Technology Compliance in accordance with Section 508 of the Rehabilitation Act DJAR-PGD-11-01 Class Deviation from the FAR clause 52.209-8, Updates of Information Regarding Responsibility Matters - DOJ Procurement Guidance Document (PGD) 11-01 DJAR-PGD-07-10 Ensuring New Acquisitions Include Common Security Configurations DJAR-PGD-08-05 Contractor Certification of Compliance with Federal Tax Requirements DJAR-PGD-08-04 Security of Systems and Data, Including Personally Identifiable Information DJAR-PGD-02-02A Non-U.S. Citizens Prohibited from Access to DOJ Information Technology (IT) Systems 52.223-99 Ensuring Adequate COVID-19 Safety Protocols for Federal Contractors 52.219-2 Equal Low Bids (Oct 1995) DJAR-PGD-08-03 Contractor Code of Business Ethics and Conduct - DOJ Procurement Guidance Document (PGD) 08-03 DOJ-02 Contractor Privacy Requirements (JAN 2022) 52.223-99 DEV Ensuring Adequate COVID-19 Safety Protocols for Federal Contractors (Oct 2021)

(DEVIATION)

FBI-0004 DOJ Residency Requirement - Contract Security Requirements from Acquisition Security Unit (ASU) FBI-0001 Small Business Accelerated Payment FBI-0016 Representation Regarding Felony Conviction Under Any Federal law or Unpaid Delinquency Tax Liability (Deviation 2012-02) (January 2012) DJAR-PGD-15-02-2C Contractor Certification of Compliance with Federal Tax Requirements - Award (DEVIATION 2015-02) (March 2015)

15F06723Q0000157 Page 4 of 34

4 List of Attachments 5 Solicitation Provisions

52.222-38 Compliance with Veterans' Employment Reporting Requirements (Feb 2016) 52.227-6 Alt I Royalty Information (Apr 1984) - Alternate I (Apr 1984) 52.222-48 Exemption from Application of the Service Contract Labor Standards to Contracts for Maintenance, Calibration, or Repair of Certain Equipment-Certification (May 2014) 52.222-52 Exemption from Application of the Service Contract Labor Standards to Contracts for Certain Services-Certification (May 2014) 52.223-1 Biobased Product Certification (May 2012) 52.227-6 Royalty Information (Apr 1984) 52.223-22 Public Disclosure of Greenhouse Gas Emissions and Reduction Goals-Representation (Dec 2016) 52.225-2 Buy American Certificate (Oct 2022) 52.226-3 Disaster or Emergency Area Representation (Nov 2007) 52.225-20 Prohibition on Conducting Restricted Business Operations in Sudan - Certification (Aug 2009) 52.226-2 Historically Black College or University and Minority Institution Representation (Oct 2014) 52.225-25 Prohibition on Contracting with Entities Engaging in Certain Activities or Transactions Relating to Iran--Representation and Certifications (Jun 2020) 52.204-3 Taxpayer Identification (Oct 1998) 52.229-11 Tax on Certain Foreign Procurements--Notice and Representation (Jun 2020) 52.203-18 Prohibition on Contracting with Entities that Require Certain Internal Confidentiality Agreements or Statements--Representation (Jan 2017) 52.203-11 Certification And Disclosure Regarding Payments To Influence Certain Federal Transactions (Sept 2007) 52.204-17 Ownership or Control of Offeror (Aug 2020) 52.203-2 Certificate Of Independent Price Determination (Apr 1985) 52.230-7 Proposal Disclosure Cost Accounting Practice Changes (Apr 2005) 52.204-8 Annual Representations and Certifications (Dec 2022) 52.204-5 Women-Owned Business (Other Than Small Business) (Oct 2014) 52.204-20 Predecessor of Offeror (Aug 2020) 52.204-24 Representation Regarding Certain Telecommunications and Video Surveillance Services or Equipment (Nov 2021) 52.204-26 Covered Telecommunications Equipment or Services-Representation (Oct 2020) 52.209-2 Prohibition on Contracting with Inverted Domestic Corporations--Representation (Nov 2015) 52.209-5 Certification Regarding Responsibility Matters (Aug 2020) 52.209-7 Information Regarding Responsibility Matters (Oct 2018) 52.209-11 Representation by Corporations Regarding Delinquent Tax Liability or a Felony Conviction under any Federal Law (Feb 2016) 52.230-1 Alt I Cost Accounting Standards Notices and Certification (Jun 2020) - Alternate I (Apr 1996) 52.234-3 Notice of Earned Value Management System-Post Award Postaward Integrated Baseline Review (Aug 2019) 52.227-15 Representation of Limited Rights Data and Restricted Computer Software (Dec 2007) 52.209-12 Certification Regarding Tax Matters (Oct 2020) 52.209-13 Violation of Arms Control Treaties or Agreements-Certification (Nov 2021) 52.214-14 Place of Performance-Sealed Bidding (Apr 1985) 52.214-16 Minimum Bid Acceptance Period (Apr 1984) 52.215-6 Place of Performance (Oct 1997) 52.227-7 Patents-Notice of Government Licensee (Apr 1984) 52.219-1 Small Business Program Representations (Oct 2022) 52.230-1 Cost Accounting Standards Notices and Certification (Jun 2020) 52.219-1 Alt I Small Business Program Representations (Oct 2022) - Alternate I (Sept 2015) 52.219-1 Alt II Small Business Program Representations (Oct 2022) - Alternate II (Sep 2021) 52.234-2 Notice of Earned Value Management System-Preaward Integrated Baseline Review (Nov 2016) 52.250-2 SAFETY Act Coverage Not Applicable (Feb 2009) 52.214-20 Bid Samples (Apr 2002)

15F06723Q0000157 Page 5 of 34

52.214-20 Alt II Bid Samples (Apr 2002) - Alternate II (May 2002) 52.211-14 Notice of Priority Rating for National Defense, Emergency Preparedness, and Energy Program Use (Apr 2008) 52.214-31 Facsimile Bids (Dec 1989) 52.204-22 Alternative Line Item Proposal (Jan 2017) 52.204-7 System for Award Management (Oct 2018) 52.215-20 Alt II Requirements for Certified Cost or Pricing Data and Data Other Than Certified Cost or Pricing Data (Nov 2021) - Alternate II (Oct 1997) 52.237-10 Identification of Uncompensated Overtime (Mar 2015) 52.207-2 Notice of Streamlined Competition (May 2006) 52.250-4 Alt I SAFETY Act Pre-qualification Designation Notice (Feb 2009) - Alternate I (Feb 2009) 2852.233-70 Protests Filed Directly with the Department of Justice (NOV 2020) 52.222-46 Evaluation of Compensation for Professional Employees (Feb 1993) 52.216-1 Type of Contract (Apr 1984) 52.214-7 Late Submissions, Modifications, and Withdrawals of Bids (Nov 1999) 52.215-1 Instructions to Offerors-Competitive Acquisition (Nov 2021) 52.204-6 Unique Entity Identifier (Oct 2016) 52.252-5 Authorized Deviations in Provisions (Nov 2020) 52.215-16 Facilities Capital Cost of Money (June 2003) 52.207-1 Notice Of Standard Competition (May 2006) 52.215-3 Request for Information or Solicitation for Planning Purposes (Oct 1997) 52.204-7 Alt I System for Award Management (Oct 2018) - Alternate I (Oct 2018) 52.207-6 Solicitation of Offers From Small Business Concerns and Small Business Teaming Arrangements or Joint Ventures (Multiple-Award Contracts) (Dec 2022) 52.214-6 Explanation to Prospective Bidders (Apr 1984) 52.250-4 SAFETY Act Pre-qualification Designation Notice (Feb 2009) 52.215-20 Alt III Requirements for Certified Cost or Pricing Data and Data Other Than Certified Cost or Pricing Data (Nov 2021) - Alternate III (Oct 1997) 52.204-16 Commercial and Government Entity Code Reporting (Aug 2020) 52.214-21 Descriptive Literature (Apr 2002) 52.214-34 Submission of Offers in the English Language (Apr 1991) 52.233-2 Service of Protest (Sept 2006) 52.214-20 Alt I Bid Samples (Apr 2002) - Alternate I (May 2002) 52.222-56 Certification Regarding Trafficking in Persons Compliance Plan (Oct 2020) 52.228-1 Bid Guarantee (Sept 1996) 52.232-38 Submission of Electronic Funds Transfer Information with Offer (Jul 2013) 52.252-3 Alterations in Solicitation (Apr 1984) 52.228-17 Individual Surety-Pledge of Assets (Bid Guarantee) (Feb 2021) 52.232-13 Notice of Progress Payments (Apr 1984) 52.250-3 Alt II SAFETY Act Block Designation/Certification (Feb 2009) - Alternate II (Feb 2009) 52.232-31 Invitation to Propose Financing Terms (Dec 2022) 52.232-14 Notice of Availability of Progress Payments Exclusively for Small Business Concerns (Apr 1984) 52.232-28 Alt I Invitation to Propose Performance-Based Payments (Mar 2000) - Alternate I (Mar 2000) 52.232-28 Invitation to Propose Performance-Based Payments (Mar 2000) 52.211-1 Availability of Specifications Listed in the GSA Index of Federal Specifications, Standards and Commercial Item Descriptions, FPMR Part 101-29 (Aug 1998) 52.211-2 Availability of Specifications, Standards, and Data Item Descriptions Listed in the Acquisition Streamlining and Standardization Information System (ASSIST) (Jul 2021) 52.215-20 Requirements for Certified Cost or Pricing Data and Data Other Than Certified Cost or Pricing Data (Nov 2021) 52.214-12 Preparation of Bids (Apr 1984) 52.215-1 Alt I Instructions to Offerors-Competitive Acquisition (Nov 2021) - Alternate I (Oct 1997) 52.214-5 Submission of Bids (Dec 2016) 52.250-3 Alt I SAFETY Act Block Designation/Certification (Feb 2009) - Alternate I (Feb 2009) 52.215-5 Facsimile Proposals (Oct 1997)

15F06723Q0000157 Page 6 of 34

52.215-20 Alt IV Requirements for Certified Cost or Pricing Data and Data Other Than Certified Cost or Pricing Data (Nov 2021) - Alternate IV (Oct 2010) 52.214-25 Step Two of Two-Step Sealed Bidding (Apr 1985) 52.211-3 Availability of Specifications Not Listed in the GSA Index of Federal Specifications, Standards, and Commercial Item Descriptions (June 1988) 52.211-4 Availability for Examination of Specifications Not Listed in the GSA Index of Federal Specifications, Standards and Commercial Item Descriptions (June 1988) 52.214-4 False Statements in Bids (Apr 1984) 52.211-7 Alternatives to Government-Unique Standards (Nov 1999) 52.214-23 Late Submission, Modifications, and Withdrawals of Technical Proposals under Two-Step Sealed Bidding (Nov 1999) 52.214-15 Period for Acceptance of Bids (Apr 1984) 52.250-3 SAFETY Act Block Designation/Certification (Feb 2009) 52.215-20 Alt I Requirements for Certified Cost or Pricing Data and Data Other Than Certified Cost or Pricing Data (Nov 2021) - Alternate I (Oct 2010) 52.214-35 Submission of Offers in U.S. Currency (Apr 1991) 52.214-3 Amendments to Invitations for Bids (Dec 2016) 52.219-31 Notice of Small Business Reserve (Mar 2020) 52.214-10 Contract Award-Sealed Bidding (July 1990) 52.250-4 Alt II SAFETY Act Pre-qualification Designation Notice (Feb 2009) - Alternate II (Feb 2009) 52.215-22 Limitations on Pass-Through Charges-Identification of Subcontract Effort (Oct 2009) 52.214-21 Alt I Descriptive Literature (Apr 2002) - Alternate I (Jan 2017) 52.215-1 Alt II Instructions to Offerors-Competitive Acquisition (Nov 2021) - Alternate II (Oct 1997) 52.217-4 Evaluation of Options Exercised at the Time of Contract Award (June 1988) 52.217-5 Evaluation of Options (July 1990) 52.225-17 Evaluation of Foreign Currency Offers (Feb 2000) 52.214-24 Multiple Technical Proposals (Apr 1984) 52.214-22 Evaluation of Bids for Multiple Awards (Mar 1990) 52.217-3 Evaluation Exclusive of Options (Apr 1984) 52.232-15 Progress Payments Not Included (Apr 1984) FBI-0005 Source Selection Evaluation Board - Contract Security Requirements from Acquisition Security Unit (ASU)

15F06723Q0000157 Page 7 of 34

Section 2 - Commodity or Services Schedule

SCHEDULE OF SUPPLIES/SERVICES

CONTINUATION SHEET

ITEM NO. SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

NO ADDITIONAL LINE INFORMATION

15F06723Q0000157 Page 8 of 34

Section 3 - Contract Clauses

Clauses By Reference

52.252-2 CLAUSES INCORPORATED BY REFERENCE (FEB 1998)

This contract incorporates one or more clauses by reference, with the same force and effect as if they were given in full text. Upon request, the Contracting Officer will make their full text available. Also, the full text of a clause may be accessed electronically at this/these address(es): www.acquisition.gov

Clause Title Fill-ins (if applicable)

FBI-0023 Federal Bureau of Investigation Electronic Invoicing Requirements

DJAR-PGD-15-02-1B Contractor Internal Confidentiality Agreements or Statements

Prohibiting or Restricting Reporting of Waste, Fraud, and Abuse -

Solicitation - (DEVIATION 2015-02) (March 2015)

DJAR-PGD-05-10 Electronic Subcontracting Reporting System (eSRS) - DOJ

Procurement Guidance Document (PGD) 05-10

DJAR-PGD-02-02B Non-U.S. Citizens Prohibited from Access to DOJ Information

Technology (IT) Systems

APN 21-07 CONTRACTOR PRIVACY REQUIREMENTS (NOV 2021)

DJAR-PGD-15-03 Security of Department Information and Systems

52.219-2 Equal Low Bids (Oct 1995)

DJAR-PGD-08-03 Contractor Code of Business Ethics and Conduct - DOJ Procurement

Guidance Document (PGD) 08-03

Clauses By Full Text

DJAR-PGD-07-12 Maintaining Contractor Performance During a Pandemic or Other Emergency

Continuing Contract Performance During a Pandemic Influenza or other National Emergency During a Pandemic or other emergency we understand that our contractor workforce will experience the same high levels of absenteeism as our federal employees. Although the Excusable Delays and Termination for Default clauses used in government contracts list epidemics and quarantine restrictions among the reasons to excuse delays in contract performance, we expect our contractors to make a reasonable effort to keep performance at an acceptable level during emergency periods.

The Office of Personnel Management (OPM) has provided guidance to federal managers and employees on the kinds of actions to be taken to ensure the continuity of operations during emergency periods. This guidance is also applicable to our contract workforce.

Contractors are expected to have reasonable policies in place for continuing work performance, particularly those performing mission critical services, during a pandemic influenza or other emergency situation.

The types of actions a federal contractor should reasonably take to help ensure performance are:

Encourage employees to get inoculations or follow other preventive measures as advised by the public health service.

15F06723Q0000157 Page 9 of 34

Contractors should cross-train workers as backup for all positions performing critical services. This is particularly important for work such as guard services where telework is not an option.

• Implement telework to the greatest extent possible in the workgroup so systems are in place to support successful remote work in an emergency.

• Communicate expectations to all employees regarding their roles and responsibilities in relation to remote work in the event of a pandemic health crisis or other emergency.

Establish communication processes to notify employees of activation of this plan.

• Integrate pandemic health crisis response expectations into telework agreements.

With the employee, assess requirements for working at home (supplies and equipment needed for an extended telework period).

Security concerns should be considered in making equipment choices; agencies or contractors may wish to avoid use of employees' personal computers and provide them with PCs or laptops as appropriate.

• Determine how all employees who may telework will communicate with one another and with management to accomplish work.

Practice telework regularly to ensure effectiveness.

• Make it clear that in emergency situations, employees must perform all duties assigned by management, even if they are outside usual or customary duties.

• Identify how time and attendance will be maintained.

It is the contractor's responsibility to advise the government contracting officer if they anticipate not being able to perform and to work with the Department to fill gaps as necessary. This means direct communication with the contracting officer or in his/her absence, another responsible person in the contracting office via telephone or email messages acknowledging the contractors notification.

The incumbent contractor is responsible for assisting the Department in estimating the adverse impacts of nonperformance and to work diligently with the Department to develop a strategy for maintaining the continuity of operations.

(End of Clause)

FBI-0012 CARS Clause: Clauses for Procurements of Critical Assets - Contract Security Requirements from Acquisition Security Unit (ASU)

Every effort must be made to ensure that supplies are provided and integrated and services are performed using sound security components, practices, and procedures. Acquisition of supplies or services from concerns under Foreign Ownership, Control, or Influence (FOCI) or of supplies developed, manufactured, maintained, or modified by concerns under FOCI (any or all of which shall be referred to herein as "Use of FOCI source") is of serious concern and must be approved prior to contract award. Approval decisions will be made on a case by case basis after the source or technology has been identified by the Offeror and subjected to a risk assessment. The risk assessment process will vary depending on the acquisition type and proposed use of a FOCI source, available risk mitigation measures, and the information/justification provided by the Offeror. Any Offeror responding to this Request for Proposal (RFP), Request for Quotation (RFQ), or Sealed Bid acknowledges the Government's requirements to secure services or equipment from firms which are not under Foreign Ownership, Control, or Influence (FOCI), or where any FOCI, in the opinion of the Government, adversely impacts on National Security or security requirements. The Offeror understands and agrees that the Government retains the right to reject any response to this RFP, RFQ, or Sealed Bid made by the Offeror, without any further recourse by or explanation to the Offeror, if the FOCI for that Offeror is determined by the Government to be an unacceptable security risk. Risk assessments will be on a case by case basis and will be used to determine whether the use of a FOCI source poses an unacceptable security risk. If an unacceptable security risk is determined, the Government retains the right to reject the use of a FOCI source or to require that certain risk mitigation measures be taken by the Offeror. Similarly, the Government retains the unilateral right to approve the use of a FOCI source when the risk assessment indicates that such use would be in the Governments' best interests. If the use of a FOCI source is not approved, no classified information will be disclosed to the Offeror as part of the Government's rationale for non approval. The Offeror (prime and subs) may not seek reimbursement from the Government for any costs associated with responding to this RFP, RFQ or Sealed Bid, as a result of a FOCI non#approval decision.

In Section K, Offerors shall complete the Acquisition Risk Questions and Key Management Personnel Listing (KMPL) for the prime contractor and all proposed subcontractors. Provision of false information shall be cause for default under the Default Clause of this contract. The information in Section K regarding Key Management Personnel, which may identify U.S. persons, is being requested pursuant to the National Security Act of 1947, as amended, Executive Order 12829, National Industrial Security Program, and Director of Central Intelligence Directive 7/6, Community Acquisition Risk Center, or superseding Acts, Orders or Directives. The FBI will use this information to conduct the acquisition risk determination and may share the information internally and externally with members of the Intelligence Community and other U.S. Government entities, if necessary, consistent with appropriate routine uses for its Central Records System (CRS), Justice/FBI-002, last published in full in the Federal Register on February 20, 1998 (63 Fed. Reg. 8671), or any updates thereto. In the absence of proof of death of any of the Key Management Personnel, their consent, or an overriding public interest, the information will not otherwise be disseminated except pursuant to the routine uses for the CRS. The Government reserves the right to prohibit individuals who are not U.S. citizens from all or certain aspects of the work to be performed under this Contract. Foreign Ownership, Control, or Influence (FOCI) For purposes of this clause, a U.S. company is considered under FOCI whenever a foreign interest has the power, direct or indirect, and whether or not exercisable through the ownership of the U.S. company's securities, by contractual arrangements or other means, to direct or decide matters affecting the management or

15F06723Q0000157 Page 10 of 34 operations of that company. Changed conditions, such as change in ownership, indebtedness, or the foreign intelligence threat, may justify certain adjustments to the security terms under which a company is operating, or, alternatively, that different FOCI mitigation measures be employed. If a changed condition is of sufficient significance, it might also result in a determination that a company is no longer considered to be under FOCI. There is a continuing obligation of the Selected Offeror to advise the Government of such changed conditions. Failure to abide by this obligation shall be cause for default under the Default Clause of this contract.

Factors: The following factors will be used as the basis for making an acquisition risk determination. If the Offeror, or its proposed subcontractors, meet any of the following factors, they must identify themselves as a potential FOCI company and submit themselves for a Government FOCI evaluation and risk assessment: (1) Ownership or beneficial ownership, direct or indirect, of 5 percent or more of the Offeror's company's voting securities by a foreign person. (2) Ownership or beneficial ownership, direct or indirect, of 25 percent or more of any class of the Offeror's company's non- voting securities by a foreign person. (3) Management positions, such as directors, officers, or executive personnel of the Offeror's company held by non-U.S. citizens. (4) Foreign person power, direct or indirect, to control the election, appointment, or tenure of directors, officers or executive personnel of the Offeror's company or other decisions or activities of the Offeror's company. (5) Contracts, agreements, understandings, or arrangements between the Offeror's company and a foreign person. (6) Loan arrangements between the Offeror's company and a foreign person if the Offeror's company's (the borrower) overall debt to equity ratio is 40:60 or greater; or financial obligations that are subject to the ability of a foreign person to demand repayment. (7) Annual total revenues or net income in excess of 5 percent from a single foreign person or in excess of 30 percent from foreign persons in the aggregate. (8) Ten percent or more of any class of the Offeror's voting securities held in "nominee shares", in "street names", or in some other method that does not disclose the beneficial ownership of equitable title. (9) Interlocking directors with foreign persons and any officer or management official of the Offeror's company who is also employed by a foreign person. (10) Any other factor that indicates or demonstrates a capability on the part of foreign persons to control or influence the operations or management of the Offeror's company. (11) Ownership of 10 percent or more of any foreign interest. Every effort must be made to ensure that supplies are provided and integrated and services are performed using sound security components, practices, and procedures. Acquisition of supplies or services from concerns under Foreign Ownership, Control, or Influence (FOCI) or of supplies developed, manufactured, maintained, or modified by concerns under FOCI (any or all of which shall be referred to herein as "Use of FOCI source") is of serious concern and must be approved prior to contract award and evaluated during contract performance.

Approval decisions will be made on a case by case basis after the source or technology has been identified by the Offeror and subjected to a risk assessment.

Any Offeror responding to this Request for Proposal (RFP), Request for Quotation (RFQ), or Sealed Bid acknowledges the Government's requirements to secure services or equipment from firms which are not an acquisition risk; are not under Foreign Ownership, Control, or Influence (FOCI); or where any FOCI, in the opinion of the Government, adversely impacts on National Security or security requirements. The Offeror understands and agrees that the Government retains the right to reject any response to this RFP, RFQ, or Sealed Bid made by the Offeror, without any further recourse by or explanation to the Offeror, if the acquisition risk for that Offeror is determined by the Government to be an unacceptable security risk. The risk assessment process will vary depending on the acquisition type and proposed use of a FOCI source, available risk mitigation measures, and the information/ justification provided by the Offeror. Risk assessments will be on a case by case basis and will be used to determine whether the use of a FOCI source poses an unacceptable security risk. If an unacceptable security risk is determined, the Government retains the right to reject the use of a FOCI source or to require that certain risk mitigation measures be taken by the contractor. Similarly, the Government retains the unilateral right to approve the use of a FOCI source when the risk assessment indicates that such use would be in the Governments' best interests.

If the use of a FOCI source is not approved, no classified information will be disclosed to the Offeror as part of the Government's rationale for non approval. The Offeror (prime and subs) may not seek reimbursement from the Government for any costs associated with responding to this RFP, RFQ, or Sealed Bid, as a result of a FOCI non#approval decision.

FBI-0008 Financial Disclosure - Contract Security Requirements from Acquisition Security Unit (ASU)

1.1 Financial Disclosure Requirements: Financial considerations and foreign travel have been identified as significant elements in recent espionage cases. In response to these threats, Executive Order 12968 established a requirement that all Executive Branch personnel who are granted access to "particularly sensitive classified information" as a condition of such access, file with the agency head an annual financial disclosure report. With the continuous dependency on contractors to support the FBI, to include access to classified information, if a procurement is expected to result in the acquisition of services involving the assignment of contractor personnel to FBI locations, access to Sensitive Compartmented Information (SCI) and access to the FBI's Secret Network (FBINET) the Program Management Officer/Contracting Officer's Representative (COR), in coordination with the assigned Chief Security Officer, are required to identify during procurement planning stages, whether an acquisition will require the anticipated contract to include the Special Security Requirement identified below.

1.2 Special Security Requirement: Security Requirements Applicable to Contractor Personnel Assigned to FBI Locations, with Access to Sensitive Compartmented Information (SCI) and the FBI Secret Network (FBINET), or those selected by the Director or Deputy Director of the FBI. Requirements are applicable to all individuals to be assigned to FBI locations, to include those identified as "Key Personnel", if specified in the contract, who will require access to FBI locations, SCI and FBINET, or those selected by the Director or Deputy Director of the FBI. Award of this contract is anticipated to result in the assignment of contractor personnel to

15F06723Q0000157 Page 11 of 34

FBI controlled or occupied space with access to SCI and the FBINET. As such, all contractor personnel assigned to such space with access to SCI and FBINET, or those selected by the Director or Deputy Director of the FBI, are required to file an annual Security Financial Disclosure Form (SFDF). Information collected through these filings is used to help make personnel security determinations including whether to allow access to classified information, sensitive areas, and equipment; or to permit assignment to sensitive national security positions. The data may be subsequently used as part of a review process to evaluate continued eligibility for access to classified information or as evidence in legal proceedings. Upon request, contractor employees required to file must: a. Submit an annual financial disclosure form electronically using the SFDF. The SFDF is a web-based form that is accessible only through the FBI Intranet. Every form submitted undergoes automated analysis, and is stored in a secure database; b. Sign and submit two consent forms: Disclosure and Authorization Pertaining to Consumer Reports Pursuant to the Fair Credit Reporting Act, (DOJ-555) and Personnel Consent to Release Information, (FD-979) to the assigned FBI Chief Security Officer. (These consent forms are used only if deemed necessary by the FBI in the event of a financial review. If a filer submitted the consent forms in a previous year, he/ she would be required to resubmit only the form if requested to do so by the assigned FBI Chief Security Officer); c. Include all requested information pertaining to the filer, his or her spouse, and any dependent children. A filer whose spouse or dependent(s) refuse to provide financial information should explain the circumstances of this refusal in the Comments Section of the SFDF.

The filer may be subject to penalties, including having access to classified information suspended, revoked, or denied. Individual circumstances are reviewed on a case by case basis. d. Not omit or provide false or misleading information on an SFDF. Filings are reviewed for accuracy and completeness, and filers may be contacted by FBI employees/contractors assigned the responsibility of the Financial Disclosure Program regarding any potential discrepancies and/or omissions. Contractor employees who meet the sited criteria are required to file and are responsible for the successful completion of the SFDF process. Refusal to submit financial disclosure information could result in the immediate removal of the employee from FBI space, restricted access to FBI information or denial of unescorted access to FBI facilities. Exceptions will be resolved on a case-by-case basis. If contract performance is impacted as a result of removal of the employee, the contractor may be found in default of the contract. If a contractor employee terminates employment and/or assignment to the FBI prior to the reporting requirement, the contractor employee is not required to file.

FBI-0002 CLASSIFIED CONTRACTS - CONTRACT SECURITY REQUIREMENTS

Service contracts wherein contractor employees require access to classified information or information systems containing classified information are subject to a number of security requirements that might not be applicable to all Government contracts. The National Industrial Security Program (NISP) was established under EO 12829 as a single integrated program across the Executive Branch designed to safeguard classified information released to contractors. Non-defense agencies such as the Department of Justice/FBI that have industrial security services agreements with the Department of Defense shall use the DD Form 254, “Contract Security Classification Specification,” to provide security classification guidance to U.S. contractors. The NISP and the National Industrial Security Operating Manual (NISPOM) require that the contractor be in possession of an approved DD-254 before commencing performance on a covered contract and that the contractor agree to abide by the requirements of the DD-254 in accordance with Federal industrial security regulations.

This FBI clause serves to supplement the DOJ personnel security clause “Personnel Security Requirements for Contractor Employees (NOV 2021)-Alt. I-Classified Information-Cleared Contractors,” and provides guidance with respect to the FBI’s internal requirements regarding personnel security on classified contracts. Additionally, classified contracts should also contain FAR clause 52.204-2, “Security Requirements.”

Companies performing classified contracts with the FBI will have a designated facility security officer (FSO) who will represent the company with respect to personnel security issues. Once a classified contract is awarded contractor employees will likely need access to FBI facilities, classified/protected information, and classified IT systems. This is accomplished by the submission of a Visitor Access Request (VAR) to the FBI by the awardee company for each contractor employee requiring access. The company will submit VARs for contractor employees to the FBI Security Division’s Access Control and Clearance Passage Unit (ACCPU). ACCPU will also conduct appropriate record checks with respect to the individual contractor employee identified in the VAR and will then approve or deny the VAR. ACCPU reserves the right to deny the VAR if its review discloses derogatory information that cannot be mitigated.

VAR denials by ACCPU will be reviewed at a higher level in the Security Division. If the VAR is approved by ACCPU the company will be notified and the Chief Security Officer of the sponsoring Office/Division will schedule the contractor employees for arrival and access processing along with a Security Awareness Briefing.

All contractor employees granted access to FBI space and FBI information systems shall comply with all FBI security policies and procedures. Contractor personnel shall possess at least an active and transferable Government Secret clearance at the time of proposal submission. Contractors who will have access to FBI facilities, systems or data shall possess an active and transferable Top Secret clearance at the time of proposal submission. As such all contractor employees assigned to work in FBI space, or access FBI information systems, should be briefed by the awardee company on the FBI and DOJ security and personal conduct requirements identified in the contract in advance of arrival. In particular, it should be noted that the use of controlled substances by a contractor employee while holding an FBI approved VAR will result in the termination of access and the revocation of the VAR. Any questions that the contractor or contractor personnel may have regarding the applicability of DOJ or FBI contract security requirements will be addressed by the Chief Security Officer (or his or her designees) of the sponsoring Office/Division.

15F06723Q0000157 Page 12 of 34

As a condition of being granted access to FBI space and information the FBI Security Division will require contractor employees to execute a nondisclosure agreement (NDA) with the FBI. If the contractor employee is approved for Sensitive Compartmented Information (SCI) categories of access additional NDAs may be required. The failure of contractor employees to honor the terms and conditions of the NDA may result in the revocation of the VAR and denial of access to FBI space or information. Additionally, contractor employees granted access to FBI space and information will be subject to continued scrutiny regarding potential security concerns through the government-wide Continuous Evaluation (CE) vetting process.

Contractor employees will be required to comply with the FBI’s self-reporting responsibilities as set forth in the Self-reporting Requirements Policy Guide, 1037PG. It is to emphasized that the FBI’s self-reporting obligations in 1037PG are IN ADDITION to any self-reporting obligations contractor employees may have to their company’s FSO. For example, foreign travel and foreign contacts must be reported to the FBI even though a report may have been filed with the company FSO. If a contractor employee is granted SCI access by the FBI then he or she will also be subject to financial disclosure obligations applicable to FBI personnel holding SCI access.

Contractor employees may be subject to counterintelligence (CI) focused polygraph examinations based upon where they are assigned in the FBI under their contracts and whether they will be processed for a category of SCI access. The FBI’s polygraph requirements for contractor employees are set forth in the FBI’s Polygraph Program Policy Guide, 0798PG, section 4.11. Additionally, contractor employees not subject to a CI focused polygraph under section 4.11 of 0798PG may be required to take a CI focused polygraph if CE vetting discloses conduct raising CI concerns.

Security requirements are considered to be material terms and conditions of the contract and a failure by the company to fully comply with security requirements due to willful misconduct or a lack of good faith on behalf of company employees may result in serious sanctions being taken by the FBI, including but not limited to possible termination.

FBI-0003 Contracting Officer's Security Representative (COSR) - Contract Security Requirements from Acquisition Security Unit

(ASU)

COSR are the designated representatives of the CO and derives their authorities directly from the CO. They are responsible for certifying the contractor’s capability for handling classified material and ensuring that customer security policies and procedures are met. The COSR is the focal point for the contractor, CO, and COR regarding security issues. The COSR cannot initiate any course of action that may alter the terms of the contract. The COSR is UC Saunders and can be reached on (202) 220-9230. The provisions of this clause shall apply to the extent that any aspect of this contract requires the contractor to access classified, of Sensitive But Unclassified and/or Law Enforcement Sensitive information. If, subsequent to the date of this contract, the security requirements under this contract are changed by the FBI, as provided in this clause, and the security costs or time required for delivery under this contract are thereby increased or decreased, the contract price, delivery schedule, or both, and any other provision of this contract which may be affected shall be subject to an equitable adjustment in accordance with the procedures in the Changes clause of this contract.

FBI-0006 (U) Contractor Suitability Special Security Requirement (SSR)

Access to FBI facilities and information is subject to specific security and suitability requirements. The FBI reserves the right and prerogative to deny and/or restrict facility and information access of any contractor employee determined by the FBI, at any time prior to or during performance, to be unsuitable for access and/or present a risk of compromising sensitive government information to which he or she would have access to under this contract. Contractors will be allotted a reasonable amount of time, determined by the government, to replace the employee found not suitable for contract performance. Failure to replace the employee may result in a no cost termination by the government.

FBI-0007 DOJ Security of Systems and PII - Procurement Section Directive (PSD): 11-24.101

On 3/20/2008, the Senior Procurement Executive, DOJ, notified the FBI of requirements for addressing Department systems and data, including provisions governing the use of laptops by contractors which are to be included in all current and future contracts where a contractor handles data that originated within the Department, data that the contractor manages or acquires for the Department, and/ or data that is acquired in order to perform on the contract and concerns Department programs or personnel. Effective immediately if a procurement is expected to result in the acquisition of services where the contractor handles data that originated within the Department, data that the contractor manages or acquires for the Department, and/or data that is acquired in order to perform the contract and concerns Department programs or personnel procurement officials are required to incorporate the appropriate special security requirements. It should be noted that within Section A, paragraphs a, b, and d apply to all data, even data that may not be personally identifiable information (PII). Section B sets forth special security requirements that must be used in contracts involving PII obtained by the Department from a contractor, such as an information seller or data broker. A request for a wavier from the requirement to include these special security requirements, or deviations from the language (except those that are more stringent), must be made in writing to the Senior Procurement Executive. Permission for a deviation or waiver will only be granted in unusual circumstances.

15F06723Q0000157 Page 13 of 34

INFORMATION TO BE INCLUDED IN CONTRACT: 1.2 Special Security Requirements: A. Security of Systems and Data, Including Personally Identifiable Data: a. Systems Security: The work to be performed under this contract requires the handling of data that originated within the Department of Justice, data that the contractor manages or acquires for the Department, and/or data that is acquired in order to perform the contract and concerns Department programs or personnel. For all systems handling such data, the contractor shall comply with all security requirements applicable to Department of Justice systems, including but not limited to all Executive Branch system security requirements (e.g. requirements imposed by OMB and NIST), DOJ IT Security Standards, and DOJ Order 2640.2E. The contractor shall provide DOJ access to and information regarding the contractor's systems when requested by the Department in connection with its efforts to ensure compliance with all such security requirements, and shall otherwise cooperate with the Department in such efforts. DOJ access shall include independent validation testing of controls, system penetration testing by DOJ, FISMA data reviews and access by the DOJ Office of the Inspector General for its reviews. The use of contractor-owned laptops or other media storage devices to process or store data covered by this clause is prohibited until the contractor provides a letter to the Contracting Officer (CO) certifying the following requirements: 1. Laptops must employ encryption using a NIST Federal Information Processing Standard (FIPS) 140-2 approved product; 2. The contractor must develop and implement a process to ensure that security and other applications software is kept up-to-date; 3. Mobile computing devices will utilize anti-viral software and a host-based firewall mechanism; 4. The contractor shall log all computer-readable data extracts from databases holding sensitive information and verify each extract including sensitive data has been erased within 90 days or its use is still required. All DOJ information is sensitive information unless designated as non-sensitive by the Department; 5. Contractor-owned removable media, such as removable hard drives, flash drives, CDs, and floppy disks, containing DOJ data, shall not be removed from DOJ facilities unless encrypted using a NIST FIPS 140-2 approved product; 6. When no longer needed, all removable media and laptop hard drives shall be processed (sanitized, degaussed or destroyed) in accordance with security requirements applicable to DOJ; 7. Contracting firms shall keep an accurate inventory of devices used on DOJ contracts; 8. Rules of behavior must be signed by users. These rules shall address at a minimum: authorized and official use; prohibition against unauthorized users; and protection of sensitive data and personally identifiable information; 9. All DOJ data will be removed from contractor-owned laptops upon termination of contractor work. This removal must be accomplished in accordance with DOJ IT Security Standard requirements. Certification of data removal will be performed by the contractor's project management and a letter confirming certification will be delivered to the CO within 15 days of termination of contractor work; b.