B08_Attachment_2_USGS_Clauses.docx

Contents

Work Statement Attachment - Information Technology Security Requirements Summary

1. Background Investigation - Not applicable

2. Non-disclosure Agreement - Not applicable

3. Training - Not applicable

4. Personnel Changes - Not applicable

5. Contractor Location - Not applicable

6. Applicable Standards - Not applicable

7. Security Categorization - Not applicable

8. Property Rights - The Government's rights in software delivered hereunder shall be as described in software developer's commercial software license agreement or the clause FAR 52.227-19, Commercial Computer Software-Restricted Rights, whichever is greater.

9. Independent Verification and Validation (IV & V) - Not applicable

10. Certification & Accreditation - Not applicable

11. Internet Logon Banner - Not applicable

12. Incident Reporting - Not applicable

13. Quality Control – All software or hardware purchased must be free of malicious code such as viruses, Trojan horse programs, worms, spyware, etc. Validation of this must be written into the contract.

14. Self Assessment - Not applicable

15. Vulnerability Analysis - Not applicable

16. Logon Banner - Not applicable

17. Security Controls - Not applicable

18. Contingency Plan - Not applicable

Prevention of Malicious Code

(a) Definitions. Malicious code is a computer code developed for the purpose of causing some form of intentional damage to computer systems or networks. Malicious code may be a complete program or code imbedded in software programs that appear to provide useful functions. The term includes computer viruses and other destructive programs, such as "Trojan Horses" and network "worms."

(b) The contractor must have in place an anti-virus procedure to ensure that media supplied is uncontaminated by malicious code.

(c) The contractor is required to scan all delivered software to insure it is free of malicious code prior to its installation or operation on USGS-owned computers or contractor-owned computers connected to USGS computer systems or networks. Contractors using diagnostics software disks or connecting to a non-USGS computer while performing repairs or upgrades to a USGS computer will scan the serviced computer's drive(s) to insure they are free of malicious code upon completion of the service call, or prior to return of serviced equipment, if servicing is performed off-site.

INTERNET PROTOCOL version 6 (June 2012)

1. Any system hardware, software, firmware and/or networked component (voice, video or data) developed, procured, or acquired in support and/or performance of this contract shall be capable of transmitting, receiving, processing, forwarding and storing digital information across system boundaries utilizing system packets that are formatted in accordance with commercial standards of Internet Protocol (IP) version 6 (IPv6) as set forth in the USGv6 Profile (NIST Special Publication 500-267) and corresponding declarations of conformance defined in the USGv6 Test Program. In addition, this system shall maintain interoperability with IPv4 systems and provide at least the same level of performance and reliability capabilities of IPv4 products.

2. Specifically, any new IP product or system developed, acquired, or produced must:

a. Interoperate with both IPv6 and IPv4 systems and products, and

b. Have available contractor/vendor IPv6 technical support for development and implementation and fielded product management.

3. As IPv6 evolves, the Contractor commits to upgrading or providing an appropriate migration path for each item developed, delivered or utilized at no additional cost to the Government. The Contractor shall retrofit all non-IPv6 capable equipment, as defined above, that is fielded under this contract with IPv6 capable equipment, at no additional cost to the Government.

4. The contractor shall provide technical support for both IPv4 and IPv6.

5. Any system or software must be able to operate on networks supporting IPv4, IPv6 or one that supports both.

6. Any product whose non-compliance is discovered and made known to the Contractor within one year after acceptance shall be upgraded, modified or replaced to bring it into compliance at no additional cost to the Government.

(End of clause)

GS0339 – Green Acquisition "The USGS is committed to promoting the natural environment and protecting the health and well-being of people. In the performance of work under this contract, the Contractor shall exert its best efforts to provide services in a manner that will promote the natural environment and protect health and well-being. Green purchasing or environmentally preferable contracting includes the initiatives described below:

Alternative Fuels and Vehicles are described at http://www.afdc.energy.gov/afdc/ Biobased Products are described at http://www.biopreferred.gov/ Energy efficient products are described at http://energystar.gov/products for Energy Star products and at http://www.eere.energy.gov/femp/procurement for FEMP designated products.

Environmentally Preferable Computers are described at http://www.epeat.net Significant New Alternatives Program (SNAP) are described at http://www.epa.gov/snap/overview-snap The Comprehensive Procurement Guidelines promote the use of recovered and recycled products at https://www.epa.gov/smm/comprehensive-procurement-guideline-cpg-program Water efficient products and services are described at https://www.epa.gov/watersense"

Section 508 Applicable Standards The resources acquired in this investment must meet all applicable standards established by the Access Board in 36 CFR Part 1194, including technical, functional performance, information, documentation, and support standards. The products, services, information and data that are provided to the Government or the public as a result of this acquisition shall afford individuals with disabilities access comparable to that afforded to individuals without disabilities.

Standards applicable to this acquisition include:

_X_ Software Applications and Operating Systems 1194.21 ___ Web-based Intranet and Internet Information and Applications 1194.22 ___ Telecommunications Products 1194.23 ___ Video or Multimedia Products 1194.24 _X__ Self-Contained, Closed Products 1194.25 _X_ Desktop and Portable Computers 1194.26 __ Functional performance criteria 1194.31 _X_ Information, Documentation, and Support 1194.41 The full text of the above referenced standards can be found at:https://www.access-board.gov/guidelines-and-standards/communications-and-it/about-the-section-508-standards/section-508-standards

GS1131 - Unilateral Deobligation of Unexpended Funds The contractor shall submit all invoices under the award no later than 90 calendar days after the period of performance has expired, unless a request for extension has been submitted to the Contracting Officer. After 120 days has passed since the expiration of the performance period, the government reserves the right to issue a unilateral modification deobligating any unexpended funds, and to initiate closeout procedures.

DOI ELECTRONIC INVOICING - Electronic Invoicing and Payment Requirements - Invoice Processing Platform (IPP) (April 2013) Payment requests must be submitted electronically through the U. S. Department of the Treasury's Invoice Processing Platform System (IPP).

'Payment request' means any request for contract financing payment or invoice payment by the Contractor. To constitute a proper invoice, the payment request must comply with the requirements identified in the applicable Prompt Payment clause included in the contract, or the clause 52.212-4 Contract Terms and Conditions - Commercial Items included in commercial item contracts. The IPP website address is: https://www.ipp.gov.

Under this contract, the following documents are required to be submitted as an attachment to the IPP invoice:

Proper invoice to include:

1. Name & address of the Contractor.

2. Invoice date & number.

3. Contract number, contract line item number and, if applicable, the order number.

4. Description, quantity, unit of measure, unit price and extended price of the items delivered.

5. Shipping number and date of shipment including the bill of lading number and weight of shipment if shipped on Government bill of lading.

6. Terms of any discount for prompt payment offered.

7. Name and address of official to whom payment is to be sent.

8. Name, title, and phone number of person to notify in event of defective invoice.

9. Taxpayer Identification Number (TIN). The Contractor shall include its TIN on the invoice only if required elsewhere in this contract.

10. Any other information or documentation required by the contract.

The Contractor must use the IPP website to register access and use IPP for submitting requests for payment. The Contractor Government Business Point of Contact (as listed in SAM) will receive enrollment instructions via email from the Federal Reserve Bank of St. Louis (FRBSTL) within 3 - 5 business days of the contract award date. Contractor assistance with enrollment can be obtained by contacting the IPP Production Helpdesk via email IPPCustomerSupport@fiscal.treasury.gov or phone (866) 973-3131.

If the Contractor is unable to comply with the requirement to use IPP for submitting invoices for payment, the Contractor must submit a waiver request in writing to the Contracting Officer with its proposal or quotation.

(End of Local Clause)