CB18-RFP0008_Cyber_Security_Monitoring_RFP.pdf

REQUEST FOR PROPOSALS (RFP)

FOR

CYBER SECURITY MONITORING SERVICES

SOLICITATION NO. CB18-RFP0008

Congressional Budget Office

Washington, DC

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS

OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24 & 30

1. REQUISITION NUMBER

5. SOLICITATION NUMBER

CB18-RFP0008

2. CONTRACT NO. 3. AWARD/EFFECTIVE DATE 4. ORDER NUMBER 6. SOLICITATION ISSUE

DATE

04/25/2018

7. FOR SOLICITATION INFORMATION

CALL:

a. NAME b. TELEPHONE NUMBER (No collect calls) 202-226-9850

8. OFFER DUE DATE / LOCAL

TIME

05/16/2018 @ 5:00PM

CODE AOCBO

Acquisitions Office Congressional Budget Office FHOB 2nd & D Streets, SW Acquisitions@cbo.gov Washington, DC 20515

9. ISSUED BY X UNRESTRICTED OR SET ASIDE: % FOR

SMALL BUSINESS

HUBZONE SMALL

BUSINESS

SERVICE-DISABLED

VETERAN-OWNED

SMALL BUSINESS

WOMEN-OWNED SMALL BUSINESS (WOSB)

ELIGIBLE UNDER THE WOMEN-OWNED

SMALL BUSINESS PROGRAM

EDWOSB

8(A)

NAICS: 541513

SIZE STANDARD: $27.5M

10. THE ACQUISITION IS

SEE

SCHEDULE

11. DELIVERY FOR FOB DESTINATION

UNLESS BLOCK IS MARKED

12. DISCOUNT TERMS

13a. THIS CONTRACT IS

RATED ORDER UNDER DPAS

13b. RATING

RFQ IFB X RFP

14. METHOD OF SOLICITATION

SSCBOCODE15. DELIVER TO

Congressional Budget Office 2nd and D Streets, SW

FHOB

Washington, DC 20515-0001

CODE AOCBO16. ADMINISTERED BY

Acquisitions Office Congressional Budget Office FHOB 2nd & D Streets, SW Acquisitions@cbo.gov

FACILITY

CODE

CODE

Telephone No.

17a. CONTRACTOR/

OFFEROR

AOCBOCODE18a. PAYMENT WILL BE MADE BY Congressional Budget Office Office of Financial Management invoices@cbo.gov OR Fax: 202-226-3879 Washington, DC 20515

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT SUCH ADDRESS IN

OFFER SEE ADDENDUM

18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a UNLESS BLOCK BELOW IS

CHECKED

19. ITEM NO. 20. SCHEDULE OF SUPPLIES/SERVICES

(Use Reverse and/or Attach Additional Sheets as Necessary)

21. QUANTITY 22. UNIT 23. UNIT PRICE 24. AMOUNT

See Lines

25. ACCOUNTING AND APPROPRIATION DATA

See Line Item Detail

26. TOTAL AWARD AMOUNT (For Govt. Use Only)

27a. SOLICITATION INCORPORATES BY REFERENCE FAR 52.212-1, 52.212-4. FAR 52.212-3 AND 52.212-5 ARE ATTACHED. ADDENDA ARE ARE NOT ATTACHED

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA ARE ARE NOT ATTACHED

X 28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN 1 COPIES TO

ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND DELIVER ALL ITEMS SET FORTH

OR OTHERWISE IDENTIFIED ABOVE AND ON ANY ADDITIONAL SHEETS SUBJECT TO THE

TERMS AND CONDITIONS SPECIFIED.

29. AWARD OF CONTRACT: REF. _____________________________ OFFER

DATED _________________ . YOUR OFFER ON SOLICITATION (BLOCK 5)

INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE SET FORTH HEREIN,

IS ACCEPTED AS TO ITEMS:

30a. SIGNATURE OF OFFEROR/CONTRACTOR 31a. UNITED STATES OF AMERICA (SIGNATURE OF CONTRACTING OFFICER)

30b. NAME AND TITLE OF SIGNER (TYPE OR PRINT) 30c. DATE SIGNED 31b. NAME OF THE CONTRACTING OFFICER (TYPE OR PRINT) 31c. DATE SIGNED

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

STANDARD FORM 1449 (REV. 02/2012)

Prescribed by GSA - FAR (48 CFR) 53.212

Document Number: CB18-RFP0008 Page 1 of 38

Part 1 - Continuation Sheet

Number Supplies or Services Quantity Unit Unit Price Total ( Inc. disc., tax, and fees)

1 Base Year - Cyber Security Monitoring Services 12.000000 MO

Period of Performance: 06/01/2018 - 05/31/2019

Description: Provide services in support of Information Security and Cyber Security for monitoring CBO systems to prevent and identify security-related incidents.

Pricing Options: Base

2 Option Year 1 - Cyber Security Monitoring

Services

12.000000 MO

Period of Performance: 06/01/2019 - 05/31/2020

Description: Provide services in support of Information Security and Cyber Security for monitoring CBO systems to prevent and identify security-related incidents.

Pricing Options: Option

3 Option Year 2 - Cyber Security Monitoring

Services

12.000000 MO

Period of Performance: 06/01/2021 - 05/31/2022

Description: Provide services in support of Information Security and Cyber Security for monitoring CBO systems to prevent and identify security-related incidents.

Pricing Options: Option

4 Option Year 3 - Cyber Security Monitoring

Services

12.000000 MO

Period of Performance: 06/01/2022 - 05/31/2023

Description: Provide services in support of Information Security and Cyber Security for monitoring CBO systems to prevent and identify security-related incidents.

Pricing Options: Option

5 Option Year 4 - Cyber Security Monitoring

Services

12.000000 MO

Period of Performance: 06/01/2023 - 05/31/2024

Description: Provide services in support of Information Security and Cyber Security for monitoring CBO systems to prevent and identify security-related incidents.

Pricing Options: Option

Document Number: CB18-RFP0008 Page 2 of 38

Solicitation No. CB18-RFP0008 Page 3 of 38

Part 2 – Contract Clauses

The following clause applies to Open Market orders:

1A. CBO 201-01 Terms and Conditions Limited (May 2003) This contract expressly limits acceptance to terms and conditions stated herein. Any additional or different terms and conditions proposed by the Contractor are rejected unless expressly agreed to by the Congressional Budget Office (CBO) in writing. If the Contractor commences shipment or performance pursuant to this contract, then the Contractor shall be deemed to have agreed to and accepted this contract in its entirety, including its terms and conditions as set forth herein.

The following clause applies to GSA Schedule orders:

1B. CBO 201-01 Terms and Conditions Limited (May 2003) Alternate I (July 2004) The instant action is subject to the terms and conditions under the GS Schedule number referenced in Block 2 of the award form, as supplemented by the following terms. If any of the terms or conditions in the GS Contract and this supplement are inconsistent, the terms and conditions of the GS Schedule shall govern, unless otherwise agreed between the parties.

2. CBO 201-02 Endorsements/News Releases/Advertising (May 2003) The Contractor agrees not to refer to this contract or CBO, in advertising, promotional or any other materials, in such a manner as to state or imply that the products or services provided are endorsed or preferred by CBO or are considered by CBO to be superior to other products or services. No news release, press conference, or advertisement pertaining to this contract will be distributed or broadcast without prior written approval by CBO.

3. CBO 203-170 Contractor Employee Whistleblower Rights (Dec 2014) The Contractor shall not require any employees or contractors of the Contractor seeking to report fraud, waste, or abuse to sign internal confidentiality agreements or statements prohibiting or otherwise restricting such employees or contactors from lawfully reporting such waste, fraud, or abuse to a designated investigative or law enforcement representative of a Federal department or agency authorized to receive such information.

4. CBO 209-01 Key Personnel (March 2018)

(a) The following individuals are considered to be essential to the successful performance of the work hereunder:

(1) Project Manager

(2) Employee with TS level clearance

The Contractor agrees that these key personnel may not be removed from the contract work or replaced without compliance with paragraphs (b) and (c) of this clause.

(b) If one or more of the key personnel, for whatever reason, becomes, or is expected to become, unavailable for work under this contract for a continuous period exceeding 30 work days, or is expected to devote substantially less effort to the work than indicated in the proposal or initially anticipated, the Contractor shall immediately notify the Contracting Officer and shall, subject to the concurrence of the Contracting Officer, promptly replace the personnel with personnel of at least substantially equal ability and qualifications.

(c) Each request for approval of substitutions must be in writing and contain a detailed explanation of the circumstances necessitating the proposed substitutions. The request must also contain a complete resumé for the proposed substitute and other information requested or needed by the Contracting Officer to evaluate the proposed substitution. The Contracting Officer and the COR shall evaluate the Contractor’s request and the Contracting Officer shall promptly notify the Contractor of his or her decision in writing.

(d) If the Contracting Officer determines that suitable and timely replacement of key personnel who have been reassigned, terminated, or have otherwise become unavailable for the contract work is not reasonably forthcoming, or that the resultant reduction of productive effort would be so substantial as to impair the successful completion of the contract or the service order, the contract may be terminated by the Contracting Officer for default or for the convenience of the government, as appropriate. If the Contracting Officer finds the Contractor at fault for the condition, the contract price or fixed fee may be equitably adjusted downward to compensate the government for any resultant delay, loss, or damage.

5. CBO 211-101 Performance Period – Base Contract and Options (Feb 2007) The overall performance period of this contract consists of the following time periods:

Solicitation No. CB18-RFP0008 Page 4 of 38

(a) The performance period for Line Item No. 001, Base Year, of the contract will commence on the date of award and extend one calendar year.

(b) If each successive option period is exercised (see contract clause CBO 217-09, Option to Extend the Term of the Contract), the performance periods for Option Years 1 through 4 will begin the day after completion of the base period and extend for 12 months each.

6. CBO 212-04 Compliance with Laws (Jan 2015) The Contractor shall comply with all applicable Federal, State, and local laws, rules and regulations applicable to its performance under this contract. The Contractor further agrees to hold CBO harmless from any and all liabilities, claims, fines, penalties, including reasonable costs and settlements, which may arise out of the delivery by the Contractor of goods or supplies or the furnishing of services that do not meet the requirements of any applicable laws or regulations.

7. CBO 217-08 Option to Extend Services (Nov 1999) The government may require continued performance of any services within the limits and at the rates specified in the contract. These rates may be adjusted only as a result of revisions to prevailing labor rates provided by the Secretary of Labor. The option provision may be exercised more than once, but the total extension of performance hereunder shall not exceed 6 months. The Contracting Officer may exercise the option by written notice to the Contractor within 30 days before the contract expires.

8. CBO 217-09 Option to Extend the Term of the Contract (March 2000)

(a) CBO may extend the term of this contract by written notice to the Contractor within 30 days before the contract expires; provided that CBO gives the Contractor a preliminary written notice of its intent to extend at least 60 days before the contract expires. The preliminary notice does not commit CBO to an extension.

(b) If CBO exercises this option, the extended contract shall be considered to include this option clause.

(c) The total duration of this contract, including the exercise of any options under this clause, shall not exceed five (5) years.

9. CBO 222-35 Equal Opportunity for Veterans (Oct 2015)

(a) Definitions. As used in this clause—

“Active duty wartime or campaign badge veteran,” “Armed Forces service medal veteran,” “disabled veteran,” “protected veteran,” “qualified disabled veteran,” and “recently separated veteran” have the meanings given at Federal Acquisition Regulation (FAR) 22.1301.

(b) Equal opportunity clause. The Contractor shall abide by the requirements of the equal opportunity clause at 41 CFR 60-300.5(a), as of March 24, 2014. This clause prohibits discrimination against qualified protected veterans, and requires affirmative action by the Contractor to employ and advance in employment qualified protected veterans.

(c) Subcontracts. The Contractor shall insert the terms of this clause in subcontracts of $150,000 or more unless exempted by rules, regulations, or orders of the Secretary of Labor. The Contractor shall act as specified by the Director, Office of Federal Contract Compliance Programs, to enforce the terms, including action for noncompliance. Such necessary changes in language may be made as shall be appropriate to identify properly the parties and their undertakings.

10. CBO 222-37 Employment Reports on Veterans (Feb 2016)

(a) Definitions. As used in this clause, “active duty wartime or campaign badge veteran,” “Armed Forces service medal veteran,” “disabled veteran,” “protected veteran,” and “recently separated veteran,” have the meanings given in the Equal Opportunity for Veterans clause at CBO 222-35.

(b) Unless the Contractor is a State or local government agency, the Contractor shall report at least annually, as required by the Secretary of Labor, on—

(1) The total number of employees in the contractor’s workforce, by job category and hiring location, who are protected veterans (i.e., active duty wartime or campaign badge veterans, Armed Forces service medal veterans, disabled veterans, and recently separated veterans);

(2) The total number of new employees hired during the period covered by the report, and of the total, the number of protected veterans (i.e., active duty wartime or campaign badge veterans, Armed Forces service medal veterans, disabled veterans, and recently separated veterans); and

Solicitation No. CB18-RFP0008 Page 5 of 38

(3) The maximum number and minimum number of employees of the Contractor or subcontractor at each hiring location during the period covered by the report.

(c) The Contractor shall report the above items by filing the VETS-4212 “Federal Contractor Veterans’ Employment Report” (see “VETS-4212 Federal Contractor Reporting” and “Filing Your VETS-4212 Report” at http://www.dol.gov/vets/vets4212.htm).

(d) The Contractor shall file VETS-4212 Reports no later than September 30 of each year.

(e) The employment activity report required by paragraphs (b)(2) and (b)(3) of this clause shall reflect total new hires, and maximum and minimum number of employees, during the most recent 12-month period preceding the ending date selected for the report. Contractors may select an ending date—

(1) As of the end of any pay period between July 1 and August 31 of the year the report is due; or

(2) As of December 31, if the Contractor has prior written approval from the Equal Employment Opportunity

Commission to do so for purposes of submitting the Employer Information Report EEO-1 (Standard Form 100).

(f) The number of veterans reported must be based on data known to the contractor when completing the VETS- 4212. The contractor’s knowledge of veterans status may be obtained in a variety of ways, including an invitation to applicants to self-identify (in accordance with 41 CFR 60-300.42), voluntary self-disclosure by employees, or actual knowledge of veteran status by the contractor. This paragraph does not relieve an employer of liability for discrimination under 38 U.S.C. 4212.

(g) The Contractor shall insert the terms of this clause in subcontracts of $150,000 or more unless exempted by rules, regulations, or orders of the Secretary of Labor.

11. CBO 223-20 Special Inspection Procedures (Jan 2007) All persons entering the Ford House Office Building shall gain access to the building by passing through magnetometer screening devices. In addition, all hand-carried items shall be screened by x-ray devices prior to entry into the building.

12. CBO 227-19 Commercial Software, Data, or Subscription License & Agreement (April 2018)

(a) Notwithstanding any contrary provisions contained in the Contractor’s standard commercial license or agreement, the Contractor agrees that the contract terms shall take precedence over the Contractor’s standard commercial agreement and any related license agreements.

(b) The terms and provisions of this contract shall comply with Federal laws and CBO’s Procurement Guidelines.

(c) If included in the Contractor’s standard commercial agreement, the following provisions are unenforceable against CBO and shall not apply:

(1) Indemnification by the government (see FAR 52.232–39, Unenforceability of Unauthorized Obligations (Jun 2013));

(2) Governing law (see FAR 52. 233-4, Applicable Law for Breach of Contract Claim (Oct 2004));

(3) Venue;

(4) Automatic renewal; and

(5) Any other provision that conflicts with federal law.

(d) This clause also applies to any related so-called “shrink-wrapped” license agreement or other end-user license agreement.

13. CBO 232-01 Payment (Oct 2012)

(a) Upon submission of proper invoices or time statements to the designated office and at the time(s) provided for in this contract, CBO shall pay the Contractor –

(1) The prices stipulated in this contract for supplies delivered and accepted, less any deductions provided in this contract. Unless otherwise specified, payment shall be made upon acceptance of any portion of the work delivered or rendered for which a price is separately stated in the contract; or

(2) At the rates prescribed for the services performed by the Contractor and accepted as set forth in this contract. If provided for in this contract, CBO shall also pay the Contractor –

Solicitation No. CB18-RFP0008 Page 6 of 38

(i) A per diem rate in lieu of subsistence for each day the Contractor is in a travel status away from home or regular place of employment in accordance with CBO’s travel policy; and

(ii) Any other transportation expenses.

(b) Discount. In connection with any discount offered for early payment, time shall be computed from the date of the invoice. For the purpose of computing the discount earned, payment shall be considered to have been made on the date the electronic funds transfer was made by CBO.

(c) Payment due date. The payment due date shall be the 30th day after CBO’s Office of Financial Management has received a proper invoice from the Contractor. However, if that Office fails to annotate the invoice with the actual date of receipt at the time of receipt, the invoice payment due date shall be the 30th day after the date of the Contractor’s invoice;

provided a proper invoice is received and there is no disagreement over quantity, quality, or Contractor compliance with contract requirements. If the contract does not require submission of an invoice for payment, the due date will be, and CBO shall pay the Contractor, as specified in the contract. CBO, as an office of Congress, shall not be subject to late payment interest charges.

14. CBO 232-02 Invoice (Oct 2005)

(a) Unless this contract does not require submission of an invoice for payment, the Contractor’s invoices must be submitted before payment can be made. An invoice is the Contractor’s bill or written request for payment under the contract for supplies delivered or services performed. An invoice shall be prepared and submitted to the Office of Financial Management by one of the following methods:

Option 1 Option 2 Option 3 E-mail invoices to:

invoices@cbo.gov

Fax invoices to:

(202) 226-3879

Mail/deliver invoices to:

Office of Financial Management Congressional Budget Office 2nd and D Streets SW Washington DC 20515 Tel: (202) 226-2609

NOTICE: Mailing invoices to CBO’s street address in lieu of electronic submission may delay payment. Due to the special mail handling procedures currently in effect, it can take up to 2 weeks for CBO to receive invoices through the mail. Electronic submission is the preferred invoice submission method.

(b) A proper invoice must include the items below. If the invoice does not comply with these requirements, the Contractor shall be notified of the defect within seven (7) days after receipt of the invoice by CBO’s Office of Financial Management.

(1) Name and address of the Contractor;

(2) Invoice number and date;

(3) The Contractor’s Tax Identification Number;

(4) Purchase Order or contract number or other authorization for supplies delivered or services performed;

(5) Description, quantity, unit of measure, unit price, and extended price of supplies delivered or services rendered;

(6) Name, title, phone number, and mailing address of person to be notified in the event of a defective invoice;

(7) Any other information or documentation required by the contract.

15. CBO 232-19 Obligations Contingent on Future Appropriation (May 2003) Unless otherwise provided in this contract, CBO’s obligation under this contract in any fiscal year beyond the fiscal year for which this contract is entered into is contingent on the availability of appropriated funds.

16. CBO 232-23 Assignment (May 2003)

(a) Neither this contract nor the obligation of the Contractor to perform shall be assigned or delegated by the Contractor without CBO’s consent.

(b) The Contractor may assign its rights to be paid amounts due or to become due as a result of the performance of this contract to a bank, trust company, or other financing institution, including any Federal lending agency.

(c) If the Contractor assigns the proceeds of this contract, the Contractor shall require as a condition of any such assignment, that the assignee submit a completed Vendor Survey form and shall be paid by EFT in accordance with the terms of the Method of Payment clause of this contract. In all respects, the requirements of that clause shall apply to the assignee as if it were the Contractor. EFT information that shows the ultimate recipient of the payment to be other than the

Solicitation No. CB18-RFP0008 Page 7 of 38

Contractor, in the absence of a proper assignment of claims acceptable to CBO, is incorrect EFT information within the meaning of paragraph (b) of the Method of Payment clause at CBO 232-34.

17. CBO 232-34 Method of Payment (July 2013)

(a) All payments by CBO under this contract shall be made by electronic funds transfer (EFT). CBO shall make payment to the Contractor using the EFT information—

(1) provided by the Contractor on the CBO Vendor Survey form; or

(2) obtained MANUALLY by CBO from the System for Award Management (SAM) database.

(b) CBO need not make payment to the Contractor under this contract, and any invoice shall be deemed not to be a proper invoice for the purpose of the payment clause under this contract, unless and until CBO has been provided or has been able to obtain the Contractor’s EFT information under paragraph (a).

(c) The Contractor shall be responsible for notifying CBO when the Contractor’s EFT information changes. The Contractor shall either:

(1) provide a revised CBO Vendor Survey form; or

(2) notify CBO Procurement Services that changes have been entered into the SAM database (CBO DOES NOT

MAINTAIN AN AUTOMATED LINK TO SAM).

(d) (1) If an incomplete or erroneous transfer occurs because CBO used the Contractor’s correct EFT information inaccurately, CBO remains responsible for making a correct payment and recovering any erroneously directed funds.

(2) If an incomplete or erroneous transfer occurs because the Contractor’s EFT information was incorrect, or was revised within 30 days of release of the EFT payment transaction instruction to the Federal Reserve System, then—

(a) if the funds are no longer under the control of the designated billing office, CBO is deemed to have made payment and the Contractor is responsible for recovery of any erroneously directed funds; or

(b) if the funds remain under the control of the designated billing office, CBO shall not make payment until the Contractor provides CBO with the notification required in paragraph (b).

(e) CBO shall forward to the Contractor available payment information at the request of the Contractor. CBO does not guarantee that any particular format or method of delivery is available and retains the latitude to use the format and delivery method most convenient to CBO.

18. CBO 232-100 Availability of Funds Under a Continuing Resolution (Dec 2017) Alternate I (Feb 2018)

(a) If CBO is operating under a Continuing Resolution (CR) during any period of this contract, which results in the agency operating with limited funding appropriated for activities, this contract will be funded within the limits of the CR.

(b) For performance of the work set forth in this contract, the Contractor agrees to perform up to the point at which the total amount payable by CBO approximates but does not exceed the total amount currently obligated to the contract.

The Contractor will not be obligated to continue performance of the work beyond that point. CBO shall not be obligated in any event to reimburse the Contractor in excess of the amount obligated to the contract.

(c) CBO contemplates increasing the obligational amount for performance of this contract, provided additional appropriations become available for that purpose. When additional funds are allotted for continued performance of the work set forth in this contract, the Contracting Officer will issue a unilateral modification to this action to obligate additional funds and extend the period of performance (if applicable).

(d) The Contracting Officer is the only person authorized to provide notice, communication, or other form of representation to increase or decrease the amount of funds obligated by CBO to this contract. The Contracting Officer may at any time obligate additional funds for performance of the work set forth in this contract.

(e) Should additional funds for performance of the work set forth in this contract not be allotted, this contract shall be deemed to have been constructively terminated for convenience at no cost to either party beyond the amount obligated at that time.

(f) Nothing in this clause will be deemed to limit the rights of CBO under any terms and conditions of this contract.

This clause will become inoperative upon the obligation of funds for the total price of the work except for rights and obligations then existing under this clause.

Solicitation No. CB18-RFP0008 Page 8 of 38

19. CBO 233-01 Disputes (April 2015) Alternate I (Dec 1991)

(a) This contract is subject to the Contract Disputes Act of 1978, as amended (41 U.S.C. chapter 71), and as modified by Section 1501 of Title I of Division H of the Consolidated Appropriations Act, 2008, Pub. L. No. 110-161, 121 Stat. 1844 (2008).

(b) Except as provided in the Act, all disputes arising under or relating to this contract shall be resolved under this clause.

(c) “Claim,” as used in this clause, means a written demand or written assertion by one of the contracting parties seeking, as a matter of right, the payment of money in a sum certain, the adjustment or interpretation of contract terms, or other relief arising under or relating to this contract. However, a written demand or written assertion by the Contractor seeking the payment of money exceeding $50,000 is not a claim under the Act until certified. A voucher, invoice, or other routine request for payment that is not in dispute when submitted is not a claim under the Act. The submission may be converted to a claim under the Act, by complying with the submission and certification requirements of this clause, if it is disputed either as to liability or amount or is not acted upon in a reasonable time.

(d) (1) A claim by the Contractor shall be made in writing and, unless otherwise stated in this contract, submitted within 6 years after accrual of the claim to the Contracting Officer for a written decision. A claim by the Government against the Contractor shall be subject to a written decision by the Contracting Officer.

(2) (i) The Contractor shall provide the certification specified in paragraph (d)(2)(iii) of this clause when submitting any claim exceeding $50,000.

(ii) The certification requirement does not apply to issues in controversy that have not been submitted as all or part of a claim.

(iii) The certification shall state as follows: “I certify that the claim is made in good faith; that the supporting data are accurate and complete to the best of my knowledge and belief; that the amount requested accurately reflects the contract adjustment for which the Contractor believes the Government is liable; and that I am duly authorized to certify the claim on behalf of the Contractor.”

(3) The certification may be executed by any person duly authorized to bind the Contractor with respect to the claim.

(e) For Contractor claims of $100,000 or less, the Contracting Officer must, if requested in writing by the Contractor, render a decision within 60 days of the request. For Contractor-certified claims over $100,000, the Contracting Officer must, within 60 days, decide the claim or notify the Contractor of the date by which the decision will be made.

(f) The Contracting Officer’s decision shall be final unless the Contractor appeals, within 90 days of receipt of a Contracting Officer’s decision, to the following authority:

Government Accountability Office Contract Appeals Board 441 G Street N.W., Room 7182 Washington DC 20548 Fax: (202) 512-9749 E-mail: CAB@gao.gov

(g) If the claim by the Contractor is submitted to the Contracting Officer or a claim by the Government is presented to the Contractor, the parties, by mutual consent, may agree to use alternative dispute resolution (ADR). If the Contractor refuses an offer for ADR, the Contractor shall inform the Contracting Officer, in writing, of the Contractor’s specific reasons for rejecting the offer.

(h) The Government shall pay interest on the amount found due and unpaid from (1) the date that the Contracting Officer receives the claim (certified, if required); or (2) the date that payment otherwise would be due, if that date is later, until the date of payment. With regard to claims having defective certifications, as defined in FAR 33.201, interest shall be paid from the date that the Contracting Officer initially receives the claim. Simple interest on claims shall be paid at the rate, fixed by the Secretary of the Treasury as provided in the Act, which is applicable to the period during which the

Solicitation No. CB18-RFP0008 Page 9 of 38

Contracting Officer receives the claim and then at the rate applicable for each 6-month period as fixed by the Treasury Secretary during the pendency of the claim.

(i) The Contractor shall proceed diligently with performance of this contract, pending final resolution of any request for relief, claim, appeal, or action arising under or relating to the contract, and comply with any decision of the Contracting Officer.

20. CBO 233-03 Protest after Award (Aug 1996)

(a) Upon receipt of a notice of protest (as defined in Federal Acquisition Regulations (FAR) 33.101) or a determination that a protest is likely (see FAR 33.102(d)), the Contracting Officer may, by written order to the Contractor, direct the Contractor to stop performance of the work called for by this contract. The order shall be specifically identified as a stop-work order issued under this clause. Upon receipt of the order, the Contractor shall immediately comply with its terms and take all reasonable steps to minimize the incurrence of costs allocable to the work covered by the order during the period of work stop-page. Upon receipt of the final decision in the protest, the Contracting Officer shall either—

(1) Cancel the stop-work order; or

(2) Terminate the work covered by the order as provided in the Termination for Default, or the Termination for Convenience, clause of this contract.

(b) If a stop-work order issued under this clause is canceled either before or after a final decision in the protest, the Contractor shall resume work. The Contracting Officer shall make an equitable adjustment in the delivery schedule or contract price, or both, and the contract shall be modified, in writing, accordingly, if—

(1) The stop-work order results in an increase in the time required for, or in the Contractor’s cost properly allocable to, the performance of any part of this contract; and

(2) The Contractor asserts its right to an adjustment within 30 days after the end of the period of work stoppage; provided, that if the Contracting Officer decides the facts justify the action, the Contracting Officer may receive and act upon a proposal at any time before final payment under this contract.

(c) If a stop-work order is not canceled and the work covered by the order is terminated for the convenience of the Government, the Contracting Officer shall allow reasonable costs resulting from the stop-work order in arriving at the termination settlement.

(d) If a stop-work order is not canceled and the work covered by the order is terminated for default, the Contracting Officer shall allow, by equitable adjustment or otherwise, reasonable costs resulting from the stop-work order.

(e) The Government’s rights to terminate this contract at any time are not affected by action taken under this clause.

(f) If, as the result of the Contractor’s intentional or negligent misstatement, misrepresentation, or miscertification, a protest related to this contract is sustained, and the Government pays costs, as provided in FAR 33.102(b)(2) or 33.104(h)(1), the Government may require the Contractor to reimburse the Government the amount of such costs. In addition to any other remedy available, and pursuant to the requirements of Subpart 32.6, the Government may collect this debt by offsetting the amount against any payment due the Contractor under any contract between the Contractor and the Government.

21. CBO 236-08 Other Contracts (Apr 1984) The government may undertake or award other contracts for additional work related to the work under this contract. The Contractor shall fully cooperate with the other contractors and with government employees and shall carefully adapt scheduling and performing the work under this contract to accommodate the additional work, heeding any direction that may be provided by the Contracting Officer. The Contractor shall not commit or permit any act that will interfere with the performance of work by any other contractor or by government employees.

22. CBO 239-01 Security for Confidential Information (Dec 2014) Alternate I (Nov 2015)

(a) All CBO information must be appropriately protected by the Contractor. The Contractor acknowledges that, during the course of this contract, the Contractor may become acquainted with and have access to certain confidential information owned or licensed by CBO or used by CBO in the conduct of its business, which may include, but is not limited to: IT security measures; personnel data; trade secrets, commercial and financial information, and other proprietary business data; and personal information, including financial and medical records.

Solicitation No. CB18-RFP0008 Page 10 of 38

(b) Contractor who is maintaining CBO confidential information on the Contractor’s computer system shall secure that information against loss (whether destruction or theft) and unauthorized access, use, modification, or disclosure.

Unless measures are specified elsewhere in this contract, the Contractor shall use the same degree of care, but no less than a reasonable degree of care, as the Contractor uses to protect its own confidential information of a like nature to prevent loss, and unauthorized access, use, modification, or disclosure.

(c) The Contractor shall safeguard the security and confidentiality of all confidential information owned or licensed by CBO or used by CBO in the conduct of its business. The Contractor shall comply with all CBO security requirements and protocols and agrees not to disclose, directly or indirectly, any confidential information or to use it in any manner, during the term of this contract or thereafter, except for authorized purposes under this contract. Contractor employees, representatives or agents working on or with CBO systems, whether on- or off-site, will be required to execute individual non-disclosure agreements consistent with this clause.

(d) These provisions are consistent with and do not supersede, conflict with, or otherwise alter the employee obligations, rights, or liabilities created by existing statute or Executive order relating to (1) classified information,

(2) communications to Congress, (3) the reporting to an Inspector General of a violation of any law, rule, or regulation, or mismanagement, a gross waste of funds, an abuse of authority, or a substantial and specific danger to public health or safety, or (4) any other whistleblower protection. The definitions, requirements, obligations, rights, sanctions, and liabilities created by controlling Executive orders and statutory provisions are incorporated into this agreement and are controlling.

(e) Contractor staff requiring routine access to CBO’s facilities and/or IT systems must have a favorably adjudicated personnel investigation appropriate for their job responsibilities as determined by the agency’s Security Officer. In addition, the Contractor must have received favorable results on the Federal Bureau of Investigation (FBI) fingerprint check before access to CBO’s facilities and/or IT systems is granted and an ID card issued, if applicable.

(f) Prior to commencement of work under this contract, and annually thereafter, all Contractor staff who require access to any of CBO’s IT systems are required to complete the IT Security Awareness training. Certification that this training has been completed must be submitted to the COR prior to the Contractor and its employees starting work under this contract.

23. CBO 242-13 Bankruptcy (July 1995) In the event the Contractor enters into proceedings relating to bankruptcy, whether voluntary or involuntary, the Contractor agrees to furnish, by certified mail or electronic commerce method authorized by the contract, written notification of the bankruptcy to the Contracting Officer responsible for administering the contract. This notification shall be furnished within five days of the initiation of the proceedings relating to bankruptcy filing. This notification shall include the date on which the bankruptcy petition was filed, the identity of the court in which the bankruptcy petition was filed, and a listing of Government contract numbers and contracting offices for all Government contracts against which final payment has not been made. This obligation remains in effect until final payment under this contract.

24. CBO 242-100 Contracting Officer’s Authority (June 2004) The Contracting Officer is the only person authorized to make or approve any changes in any of the requirements of this contract, notwithstanding any provision contained elsewhere in this contract. In the event that the Contractor makes any change at the direction of any person other than the Contracting Officer, the change will be considered to have been made without authority and no adjustment will be made in the contract price to cover any increase in costs incurred as a result thereof.

25. CBO 242-101 Contracting Officer’s Representative (COR) (Sept 2017)

(a) The Contracting Officer’s Representative (COR) is a representative of CBO with limited authority who has been designated in writing by the Contracting Officer to provide technical direction, clarification, and guidance with respect to existing specifications and performance work statement/statement of work/statement of objectives, as established in the contract. The COR also monitors the progress and quality of the Contractor’s performance for payment purposes. The COR shall promptly report Contractor performance discrepancies and suggested corrective actions to the Contracting Officer for resolution.

(b) The COR is not authorized to take any direct or indirect actions or make any commitments that will result in changes to price, quantity, quality, schedule, place of performance, delivery or any other terms or conditions of the written contract.

Solicitation No. CB18-RFP0008 Page 11 of 38

(c) The Contractor is responsible for promptly providing written notification to the Contracting Officer if it believes the COR has requested or directed any change to the existing contract. No action shall be taken by the Contractor for any proposed change to the existing contract until the Contracting Officer has issued a written directive or a written modification to the contract. CBO will not accept and is not liable for any alleged change to the contract unless the change is included in a written contract modification or directive signed or issued by the Contracting Officer.

(d) COR authority is not delegable.

(e) The COR for this contract is: (This information will be provided at the time of contract award)

Name: John Makings Job Title: Senior Information Security Engineer Unit / Division: IRM & TS Unit / MBIS Division Telephone: (202) 226-2637 E-mail: John.Makings@cbo.gov

26. CBO 242-103 Postaward Conference (March 2018)

(a) Prior to the Contractor starting work, a postaward conference (as described in FAR Subpart 42.5) will be convened by the contracting activity or contract administration office. The Contractor’s Project Manager and any Key Personnel shall attend the conference. If the contract involves subcontractors, a representative of each major subcontractor is also required to attend.

(b) The conference will be held at the Congressional Budget Office in Washington, DC.

(c) The Contracting Officer and the Contractor will agree on the date and time of the conference after award of the contract. In the event of a conflict in schedules, the Contracting Officer shall establish the date for the conference.

(d) The Contractor shall include any associated costs for attendance at the conference in its offer.

27. CBO 243-01 Changes (May 2003)

(a) CBO may at any time, by written order, make changes within the general scope of this contract in any one or more of the following:

(1) Description of services to be performed;

(2) Time of performance;

(3) Place of delivery or performance.

(4) Drawings, designs, or specifications when supplies to be furnished are to be specially manufactured for

CBO.

(b) If any such change causes an increase or decrease in the cost of, or the time required for, performance of any part of the work under this contract, CBO shall make an equitable adjustment in the contract price, the delivery schedule, or both, and shall modify the contract.

(c) The Contractor must assert its right to an adjustment under this clause within 30 days from the date of receipt of the written order. However, if CBO decides that the facts justify it, CBO may receive and act upon a proposal submitted before final payment of the contract.

(d) Failure to agree to any adjustment shall be a dispute under the Disputes clause. However, nothing in this clause shall excuse the Contractor from proceeding with the contract as changed.

28. CBO 246-04 Inspection of Services – Fixed-Price (Aug 1996)

(a) Definition: “Services,” as used in this clause, includes services performed, workmanship, and material furnished or utilized in the performance of services.

(b) The Contractor shall provide and maintain an inspection system acceptable to the government covering the services under this contract. Complete records of all inspection work performed by the Contractor shall be maintained and made available to the government during contract performance and for as long afterwards as the contract requires.

Solicitation No. CB18-RFP0008 Page 12 of 38

(c) The government has the right to inspect and test all services called for by the contract, to the extent practicable at all times and places during the term of the contract. The government shall perform inspections and tests in a manner that will not unduly delay the work.

(d) If the government performs inspections or tests on the premises of the Contractor or a subcontractor, the Contractor shall furnish, and shall require subcontractors to furnish, at no increase in contract price, all reasonable facilities and assistance for the safe and convenient performance of these duties.

(e) If any of the services do not conform with contract requirements, the government may require the Contractor to perform the services again in conformity with contract requirements, at no increase in contract amount. When the defects in services cannot be corrected by reperformance, the government may –

(1) Require the Contractor to take necessary action to ensure that future performance conforms to contract requirements; and

(2) Reduce the contract price to reflect the reduced value of the services performed.

(f) If the Contractor fails to promptly perform the services again or to take the necessary action to ensure future performance in conformity with contract requirements, the government may –

(1) By contract or otherwise, perform the services and charge to the Contractor any cost incurred by the government that is directly related to the performance of such service; or

(2) Terminate the contract for default.

29. CBO 246-17 Warranties (May 2003)

(a) The Contractor warrants free and clear title to all delivered products and further warrants that the products shall be free from defects in workmanship, material or design and shall conform either to the description and specifications in this contract or consistent with the sample of said product provided to CBO.

(b) The Contractor warrants that the products, in the form delivered to CBO, are free from any valid claim for patent infringement and that any labels or trademarks affixed thereto by or on behalf of the Contractor are free from any valid claim for copyright or trademark infringement and agrees to save and hold harmless and indemnify CBO against such infringement liability based upon CBO’s possession thereof without alteration.

(c) The goods and services provided shall be free from defects in materials and workmanship for a period of at least ninety (90) days after completion of performance (in the case of services) or after acceptance (in the case of goods or supplies) unless a longer warranty period is provided or is required by law. Should the Contractor’s services or goods or supplies prove to be defective within the warranty period, the Contractor agrees to promptly replace or repair the goods or supplies or correct such services to CBO’s satisfaction without cost to CBO.

(d) Unless this contract specifies otherwise, the Contractor represents that all goods, supplies, and other materials provided are new and are not of such age or so deteriorated as to impair their usefulness or safety.

(e) Except as otherwise provided by an express or implied warranty, the Contractor will not be liable to CBO for consequential damages resulting from any defect or deficiencies in accepted items.

30. CBO 249-02 Termination for Convenience (May 2003) CBO reserves the right to terminate this contract, or any part hereof, for its sole convenience. In the event of such termination, the Contractor will be notified by the Contracting Officer, in writing, and shall immediately stop all work hereunder and shall immediately cause any and all of its suppliers and subcontractors to cease work. Subject to the terms of this contract, the Contractor shall be paid a percentage of the contract price reflecting the percentage of the work performed prior to the notice of termination, plus reasonable charges the Contractor can demonstrate to the satisfaction of CBO have resulted from the termination. The Contractor shall not be required to comply with the cost accounting standards or contract cost principles for this purpose. The Contractor shall not be paid for any work performed or costs incurred which reasonably could have been avoided.

31. CBO 249-08 Termination for Default (May 2003) CBO may terminate this contract, or any part hereof, for cause in the event of any default by the Contractor, or if the Contractor fails to comply with any contract terms and conditions, or fails to provide CBO, upon request, with adequate

Solicitation No. CB18-RFP0008 Page 13 of 38 assurances of future performance. In the event of termination for cause, the Contractor will be notified by the Contracting Officer in writing. CBO shall not be liable to the Contractor for any amount for supplies or services not accepted, and the Contractor shall be liable to CBO for any and all rights and remedies provided by law. If it is determined that CBO improperly terminated this contract for default, such termination shall be deemed a termination for convenience.

32. CBO 249-11 Waiver of Default (May 2003) Waiver by either party of any default by the other hereunder shall not be deemed a waiver by such party of any other, subsequent default.

33. CBO 249-14 Excusable Delays (May 2003) The Contractor shall be liable for default unless nonperformance is caused by an occurrence beyond the reasonable control of the Contractor and without its fault or negligence. The Contractor shall notify the Contracting Officer in writing as soon as it is reasonably possible after the commencement of any excusable delay, describing the matter in detail, shall remedy such occurrence expeditiously, and shall promptly give written notice to the Contracting Officer of the cessation of such occurrence.

Solicitation No. CB18-RFP0008 Page 14 of 38

Part 3 – List of Contract Documents

Document No.

Title No. of Pages

1 Statement of Work 4 2 Appendix A – Technical Details 1 3 Nondisclosure Agreement for Appendix A 1 4 Offeror Representations and Certifications 8

Solicitation No. CB18-RFP0008 Page 15 of 38

Document No. 1: Statement of Work Cyber Security Monitoring

1. Agency Background The Congressional Budget Office (CBO) is a small legislative branch agency that provides economic and budgetary analysis to the U.S. Congress to aid in policy decisions. The agency’s research, analysis, and reports include baseline and long term budget projections, formal and information cost estimates on pending legislature, scorekeeping reports, and an analysis of the President’s budget.

CBO’s Information Resource Management (IRM) unit has oversight of all the agency’s information technology operations and is responsible for implementing and maintaining…