DACS15P1048.docx

PART I - THE SCHEDULE1. THIS CONTRACT IS A RATED ORDER

RATING

PAGE OF

PAGES

UNDER DPAS (15 CFR 700)

2. CONTRACT NUMBER

3. SOLICITATION NUMBER

4. TYPE OF SOLICITATION

5. DATE ISSUED

6. REQUISITION/PURCHASE NUMBER

SEALED BID (IFB)

NEGOTIATED (RFP)

7. ISSUED BY

CODE

8. ADDRESS OFFER TO

(If other than Item 7) NOTE: In sealed bid solicitations "offer" and "offeror" mean "bid" and "bidder".

9. Sealed offers in original and __________3___________________ copies for furnishing the supplies or services in the Schedule will be received at the place specified in Item 8, or if hand carried, in the depository located in 1until 11am eastern time local time _______________________ (Hour) (Date) CAUTION - LATE Submissions, Modifications, and Withdrawals: See Section L, Provision No. 52.214-7 or 52.215-1. All Offers are subject to all terms and conditions contained in this solicitation.

A. NAME

B. TELEPHONE (NO COLLECT CALLS)

C. E-MAIL ADDRESS

AREA CODE

NUMBER

EXTENSION sdonley@nsf.gov (X)

SEC.

DESCRIPTION

PAGE(S)

(X)

SEC.

DESCRIPTION

PAGE(S)

PART I - THE SCHEDULE

PART II - CONTRACT CLAUSES

A

SOLICITATION/CONTRACT FORM

I

CONTRACT CLAUSES

B

SUPPLIES OR SERVICES AND PRICES/COSTS

PART III - LIST OF DOCUMENTS, EXHIBITS AND OTHER ATTACH.

C

DESCRIPTION/SPECS./WORK STATEMENT

J

LIST OF ATTACHMENTS

D

PACKAGING AND MARKING

PART IV - REPRESENTATIONS AND INSTRUCTIONS

E

INSPECTION AND ACCEPTANCE

F

DELIVERIES OR PERFORMANCE

G

CONTRACT ADMINISTRATION DATA

L

INSTRUCTIONS, CONDITIONS, AND NOTICES TO OFFERORS

H

SPECIAL CONTRACT REQUIREMENTS

M

EVALUATION FACTORS FOR AWARD

K

REPRESENTATIONS, CERTIFICATIONS AND OTHER

STATEMENTS OF OFFERORS

NOTE: Item 12 does not apply if the solicitation includes the provisions at 52.214-16, Minimum Bid Acceptance Period.

12. In compliance with the above, the undersigned agrees, if this offer is accepted within ________ calendar days (60 calendar days unless a different period is inserted by the offeror) from the date for receipt of offers specified above, to furnish any or all items upon which prices are offered at the set opposite each item, delivered at the designated point(s), within the time specified in the schedule.

13. DISCOUNT FOR PROMPT PAYMENT

10 CALENDAR DAYS (%)

20 CALENDAR DAYS (%)

30 CALENDAR DAYS (%)

CALENDAR DAYS (%)

(See Section I, Clause No. 52-232-8)

14. ACKNOWLEDGEMENT OF AMENDMENTS

AMENDMENT NO.

DATE

AMENDMENT NO.

DATE

(The offeror acknowledges receipt of amendments to the SOLICITATION for offerors and related documents numbered and dated):

DUNS:

DUNS+4:

CODE

FACILITY

16. NAME AND TITLE OF PERSON AUTHORIZED TO SIGN OFFER

15A. NAME AND

ADDRESS OF

OFFEROR

(Type or print)

15B. TELEPHONE NUMBER

17. SIGNATURE

18. OFFER DATE

AREA CODE

NUMBER

EXTENSION

15C. CHECK IF REMITTANCE ADDRESS IS DIFFERENT FROM

ABOVE - ENTER SUCH ADDRESS IN SCHEDULE.

19. ACCEPTED AS TO ITEMS NUMBERED

20. AMOUNT

21. ACCOUNTING AND APPROPRIATION

22. AUTHORITY FOR USING OTHER THAN FULL AND OPEN COMPETITION:

23. SUBMIT INVOICES TO ADDRESS SHOWN IN

ITEM

(4 copies unless otherwise specified) 10 U.S.C. 2304(c) 41 U.S.C. 3304(a) ( )

24. ADMINISTERED BY (If other than Item 7)

25. PAYMENT WILL BE MADE BY

CODE

PHONE:

FAX:

26. NAME OF CONTRACTING OFFICER (Type or print)

27. UNITED STATES OF AMERICA

28. AWARD DATE

IMPORTANT - Award will be made on this Form, or on Standard Form 26, or by other authorized official written notice.

(Signature of Contracting Officer)

(REV. 6/2014)

10. FOR INFORMATION CALL:

11. TABLE OF CONTENTS

AUTHORIZED FOR LOCAL REPRODUCTION

STANDARD FORM 33

Previous edition is unusable Prescribed by GSA-FAR (48 CFR) 53.214(c)

SOLICITATION, OFFER AND AWARD

SOLICITATION

OFFER (Must be fully completed by offeror) AWARD (To be completed by Government) n N/A

DACS15P1048

X National Science Foundation Div. of Acq. & Cooperative Support 4201 Wilson Boulevard Suite 475 Arlington VA 22230 04-07-2016 See Attached Table of Contents X X X X X X X X X X X X X National Science Foundation DFM, Phone: (703) 292-8280 Commercial Cash Management 4201 Wilson Boulevard, Suite II-605 Arlington VA 22230

SECTION A - SOLICITATION/CONTRACT FORM

SF 33 SOLICITATION, OFFER AND AWARD

M. Scott Donley

Table of Contents

SECTION B - SUPPLIES OR SERVICES AND PRICE/COSTS

B.1 FIXED RATES FOR SERVICES - - INDEFINITE DELIVERY/INDEFINITE QUANTITY CONTRACT The following fixed rates shall apply for payment purposes for the duration of the contract.

Base Period (Date of Award through 60 months)

Hourly Rate

Hourly Rate Contract Year Five Hourly Rate

TOTAL CONTRACT LABOR CEILING:

$____$15,000,000.00______________

*To be inserted by the Government at time of Award.

The rate, or rates, set forth above cover all expenses, including report preparation, salaries, overhead, general and administrative expenses and profit.

The contractor shall voucher for only the time of the personnel whose services are applied directly to the work called for in individual Task Orders and accepted by the Contracting Officer’s Technical Representative (COTR). The Government shall pay the contractor for the life of a task order at rates in effect when the task order was issued, even if performance under the task order crosses into another period. The contractor shall maintain time and labor distribution records for all employees who work under the contract. These records must document time worked and work performed by each individual on all Task Orders.

B.2 MINIMUM AND MAXIMUM AMOUNTS

During the period of performance of this contract (including all options), the Government shall place orders totaling a minimum of $5,000. The total amount of all orders shall not exceed $15,000,000.00

B.3 OTHER DIRECT COSTS (ODCs)

Direct costs not matching the categories listed below are not allowable as a charge to this contract without prior written approval of the Contracting Officer:

Other Direct Costs for the purposes of this contract shall include: travel of contractors, subcontractors, and consultants, communications such as telephone, fax, postage, delivery services, photocopying (within the limits of Federal Contracting Regulations), expert consultant or researcher fees and expenses, meeting facility rental, meeting equipment rental such as projectors, meeting supplies such as charts and markers and other services, facility, equipment and supply rental as necessary to accomplish the purpose as stated in each Task Order. Other Direct Costs shall also include reimbursement of other services and supplies authorized by statute or regulation and as specified in individual Task Orders.

DACS15P1048 Section B

B - 2

SECTION C - DESCRIPTION/SPECIFICATIONS/STATEMENT OF WORK

DACS15P1048 Section C See Attached File C - 1

SECTION D - PACKAGING AND MARKING

D.1 ENVIRONMENTALLY SAFE PACKAGING

The contractor shall package non-breakable deliverables (reports, proposals, studies, etc.) using environmentally safe packaging materials (e.g., recycled paper). The packaging methods shall be in accordance with the best commercial practices and provide adequate protection during shipping and handling.

D.2 PRESERVATION, PACKAGING AND PACKING

Packaging and marking of all deliverables shall be in accordance with the best commercial practice necessary to ensure safe and timely delivery at destination, in accordance with applicable security requirements.

All data and correspondence submitted to the Contracting Officer (CO) or Contracting Officer Technical Representative (COTR) shall reference the Task Order Number, report title and number, and the name of the Contracting Officer or Specialist as appropriate.

D.3 INITIAL PACKING, MARKING, AND STORAGE OF EQUIPMENT

All initial packing, marking and storage incidental to shipping of equipment to be provided under this Task Order shall be made Freight on Board Destination (FOB Destination) at the contractor’s expense. Such packing, supervision marking and storage costs shall not be billed to the Government. Supervision of packing and unpacking of initially acquired equipment shall be furnished by the contractor.

D.4 MARKING

All data shall be prepared for shipment in accordance with best commercial practice. The package or envelope shall be clearly marked with any special markings specified in this contract (or Task Order). Packages shall be clearly marked as follows:

a. Name of Contractor;

b. Contract Number;

c. Task Title and/or Number;

d. Description of Items Contained Therein

e. CO/COTR Name and Address; and if applicable packages containing software or other magnetic media shall be marked on external containers with a notice substantially as follows: “CAUTION: SOFTWARE/MAGNETIC MEDIA ENCLOSED. DO NOT EXPOSE TO HEAT OR MAGNETIC FIELDS.”

D.5 PAYMENT OF POSTAGE AND SHIPPING COSTS

All postage and shipping costs related to the submission of the information (including reports and forms) required by this contract shall be paid by the contractor.

D - 2

SECTION E - INSPECTION AND ACCEPTANCE

E.1 NOTICE LISTING CONTRACT CLAUSES INCORPORATED BY REFERENCE

The following contract clauses pertinent to this section are hereby incorporated by reference (by Citation Number, Title, and Date) in accordance with the clause at FAR "52.252-2 CLAUSES INCORPORATED BY REFERENCE" in Section I of this contract. See FAR 52.252-2 for an internet address (if specified) for electronic access to the full text of a clause.

NUMBER TITLE DATE

E.2 INSPECTION AND ACCEPTANCE

Inspection and Acceptance of the supplies or services to be furnished under this contract shall be made at the point of destination on a Task Order basis by the designated Contracting Officer’s Representative (COR) designated in Section G.

E.3 REVIEW AND ACCEPTANCE

(a) Review and acceptance of all services or deliverables provided under this contract shall be performed on individual Task Orders by the COR.

(b) The Government shall accept or reject services and materials as promptly as practicable after delivery. Normally the Government will take no more than ten (10) working days to determine the acceptability of all completed final deliverables. However, the Contractor may presume acceptance sixty (60) days after the date of delivery, unless otherwise accepted earlier.

(c) All deliverables will be evaluated for acceptability and quality in compliance with the requirements defined in the specifications, schedules, test plan or other acceptance criteria. Deficiencies in final deliverables shall be corrected by the Contractor within ten (10) working days, at no additional cost to the Government.

E.4 DELIVERY OF REPORTS

Unless otherwise specified, all reports shall be addressed to the recipients listed in Section J, Attachment 2, and “Data Requirements List.” Reports specific to task orders will be specified in the individual Task Order.

E.5 NOTICE OF DELAY

If, because of technical difficulties, the Contractor becomes unable to complete the contract work at the time specified, notwithstanding the exercise of good faith and diligent efforts in performing the work called for under this contact, the Contractor shall give the Contracting Officer written notice of the anticipated delay and the reasons for it. The notice and reasons shall be delivered promptly after the condition creating the anticipated delay becomes known to the Contractor, but in no event less than 45 days before the completion date specified in the Task Order, unless otherwise permitted by the Contracting Officer. When such notice is given, the Contracting Officer, in their sole discretion may extend the completion time specified in the schedule for such period as the Contracting Officer deem advisable.

The requirements described in this clause, excludes section C.2.c Quick Turnaround Tasks.

E.6 TASK ORDER CORs

Due to the technical complexity of the requirement specified in the Statement of Work (see section C), the CO may appoint COR for each task order. A Task Order COR must be a Government employee whose duties include but are not limited to, assisting with acceptance of deliverables, assisting monitoring of Contractor performance, providing support for the certification of invoices for payment and ensuring that Government property is being used properly.

SECTION F - DELIVERIES OR PERFORMANCE

F.1 NOTICE LISTING CONTRACT CLAUSES INCORPORATED BY REFERENCE

The following contract clauses pertinent to this section are hereby incorporated by reference (by Citation Number, Title, and Date) in accordance with the clause at FAR "52.252-2 CLAUSES INCORPORATED BY REFERENCE" in Section I of this contract. See FAR 52.252-2 for an internet address (if specified) for electronic access to the full text of a clause.

FEDERAL ACQUISITION REGULATION (48 CFR CHAPTER 1)

NUMBER TITLE DATE

F.2 PERIOD OF PERFORMANCE

The period of performance of this contract is from date of award through 60 months from date of award.

F.3 PLACE OF PERFORMANCE

The services to be performed under this contract shall be performed at the contractor’s place of business.

F.4 MONTHLY PROGRESS REPORTS

(a) The contractor shall submit written monthly progress reports for each Task Order issued under the contract for the duration of the Task Order. The report shall show the status of all major events and activities identified in each task and shall provide a financial report for both the period of the report and cumulatively for the entire performance period of each task described in the Task Order. The Contractor shall present in narrative form a summary of all work performed during the reporting period, including technical status, accomplishments, and problems encountered, future plans for the coming month, and any actions required on the part of the Foundation or other Government agency.

(b) The reporting period shall consist of the first full month of performance, plus any fractional part of the initial month. Thereafter, the reporting period shall consist of each calendar month. Reports are due on the 15th of each month.

(c) Reports are to be forwarded in the specified number of copies to the following individuals:

DACS15P1048 Section F

F-3 F - 3

Number of Copies Addressee

1 Designated COTR (to be determined) National Science Foundation Division of Science Resources Statistics Room 965 S 4201 Wilson Boulevard Arlington, VA 22230

1 Contracting Officer (to be determined) National Science Foundation Division of Acquisition and Cooperative Support (DACS) 4201 Wilson Boulevard, Room 475 Arlington, VA 22230

1 Task Leader(s) as identified in individual Task Orders

F.5 MEETINGS

The Contractor shall plan to attend meetings with the NSF COTR, other members of the Division of Science Resources Statistics (SRS) and the Contracting Officer.

SECTION G - CONTRACT ADMINISTRATION DATA

G.1 NSF020 AUTHORITY OF GOVERNMENT PERSONNEL (APR 2013)

Contracting Officer The Contracting Officer (CO) is the only person authorized to approve changes in any of the requirements under this contract. Notwithstanding any clause contained elsewhere in this contract, the said authority remains solely with the CO.

In the event the Contractor effects any change at the direction of any person other than the CO, including any change beyond the scope of authority given to the duly authorized Contracting Officer's Representative identified in the contract, the change will be considered to have been made without authority and no adjustment will be made in the contract price to cover any increase in charges incurred as a result thereof. The CO has the authority to perform any and all post-award functions in administering and enforcing this contract in accordance with its terms and conditions.

Contracting Officer's Representative The Contracting Officer's Representative (COR) (, ) is responsible for administering the performance of work under this contract. IN NO EVENT, however, will any understanding, agreement, modification, change order, or other matter deviating from the terms of this contract be effective or binding upon the Government unless formalized by proper contractual documents executed by the CO prior to completion of the contract.

The COR may give technical direction to the Contractor that fills in details, requires pursuit of certain lines of inquiry, or otherwise serves to facilitate the Contractor's compliance with the contract. To be valid, technical direction by the COR must be consistent with the general scope of work set forth in this contract; may not constitute new assignment of work nor change be expressed terms, conditions or specifications of this contract; and shall not constitute a basis for any increase in the contract estimated cost, or extension to the contract delivery schedule.

G.2 NSF110 SUBMISSION OF PROPER INVOICE (APR 2013)

In order to initiate payment, the Contractor shall submit proper invoices for reimbursement in the manner and format described herein.

Contractors that are small businesses under the appropriate NAICs code for this contract are permitted to request accelerated payments in accordance with the OMB Memorandum, Accelerating Payments to Small Businesses for Goods and Services, dated September 14, 2011. Requests for accelerated payments shall be made through designating in bold lettering or other prominent display on or near the top of the invoice "Small Business Invoice". Per the OMB Memorandum, Accelerating Payments to Small Businesses for Goods and Services, dated September 14, 2011, the accomplishment of accelerated payments to small businesses is a goal and not a guarantee.

The following data must be included in an invoice for it to constitute a proper invoice:

a. Name of Contractor and invoice date;

b. Contract number, or other authorization for delivery of property or services;

c. Description, price, fee (if applicable), and quantity of property and services actually delivered or rendered;

d. Shipping and payment terms;

e. Name (where practicable), title, phone number, and complete mailing address of responsible official to whom payment is to be sent;

f. Other substantiating documentation or information as required by the contract;

g. Period of performance.

Form: The Contractor may use its own form, providing all the above information is on the invoice. However, it is preferred that invoices be submitted on the Government Standard Form 1034, "Public Voucher for Purchases and Services Other Than Personal Continuation Sheet." These forms are available from the Government Printing Office, 710 N. Capitol Street, Washington, DC 20801.

Address: Submit all proper invoices as follows:

a. One complete invoice (Original) without attachments to the National Science Foundation, Division of Financial Management, Commercial Cash Management Section, Room II-605, 4201 Wilson Boulevard, Arlington, VA 22230.

b. One invoice copy with all attachments to the National Science Foundation, Room , 4201 Wilson Boulevard, Arlington, VA 22230.

Final Invoice: Upon completion of the required work, the Contractor shall submit a completion invoice in compliance with the clause entitled, FAR Clause 52.232-7 entitled Payments under Time-and-Materials and Labor-Hour Contracts.. This completion invoice must be clearly marked as such and be submitted promptly upon completion of the work, but no later than one year from the completion date of this contract. The Contractor shall submit the original completion invoice to the Contracting Officer for approval and copies of the completion invoice to DFM and NCSES.

Payment Due Date: Payment under this contract will be due on the 30th calendar day following acceptance of each properly submitted invoice.

If any contract deliverables are rejected for failure to conform to the technical requirements of the contract or are otherwise unacceptable, the provisions of the paragraph immediately preceding will apply to delivery of acceptable contract deliverables, unless otherwise determined by the Contracting Officer.

All payments for proper invoices will be made via Electronic Fund Transfer (EFT).

G.3 NSF230 PERFORMANCE EVALUATION SYSTEM (SEP 2014)

NSF utilizes the Department of Defense's (DOD) web based Contractor Performance Assessment Reporting System (CPARS) to provide Contractor performance evaluations. Within 15 days of contract award, the Contractor shall notify the Contracting Officer (CO) of the name(s) and e-mail address(es) of the Contractor Representative(s) that need to be assigned in CPARS by the NSF CPARS Focal Point. The contractor is responsible for (1) updating the Contractor Representative information to the CO if and when it changes during the term of the contract and (2) reviewing and commenting on proposed ratings and remarks within the required 60 calendar days from receipt of notification of the availability of a rating for review from the CPARS system for all evaluations forwarded in the system by the Government Assessing Official, who is the CO. If the Contractor Representative sends comments within the first 14 days following the Assessing Official’s signature date and the Assessing Official or Reviewing Official closes the evaluation, the evaluation will become available in the Past Performance Information Retrieval System - Report Card (PPIRS-RC) within one day. On day 15 following the Assessing Official’s evaluation signature date, the evaluation will become available in PPIRS-RC with or without Contractor Representative comments and whether or not it has been closed by the Assessing Official or Reviewing Official. If no Contractor Representative comments have been sent and the evaluation has not been closed, it will be marked as “Pending” in PPIRS-RC. If the Contractor Representative sends comments at any time prior to 61 days following the Assessing Official’s evaluation signature date, those comments will be reflected in PPIRS-RC within one day. On day 61 following the Assessing Official’s evaluation signature date, the Contractor Rep will be “locked out” of the evaluation and may no longer send comments. Reference material concerning CPARS, including the CPARS User Manual and Guidance for CPARS, is available at the CPARS website which is at http://www.cpars.gov/main/refmatl.htm.

G.5 SAFEGUARDING OF INFORMATION

Unless otherwise specified, all government provided information or data which is produced, or otherwise made available to the contractor during the performance of this contract shall be considered confidential and proprietary and shall not be used for any other purpose other than the performance of the work under this contract.

G.6 TRAVEL AND PER DIEM

All travel performed under this contract must be approved by the COR and shall be performed in accordance with Federal Travel Regulations (FTR). The actual costs for lodging, meals, and incidental expenses will be considered reasonable and allowable if they do not exceed the maximum per diem rates in effect at the time of travel as set forth in the FTR. Travel will be reimbursed at actual costs (with a copy of the receipts for expenses) in the following categories:

1) Airline Tickets (commercial rates)

2) Hotel Expenses (Government rates unless pre-approved by the COR)

3) All Other Modes of Transportation (Taxi receipts are not required if less than $50.00)

G.7 TECHNICAL DIRECTION

(a) Contracting Officer Representative (COR) means an individual appointed by the Contracting Officer in accordance with NSF procedures to perform specific technical and administrative functions.

(b) The Contracting Officer Representative(s) may provide technical direction during contract performance. Technical direction includes:

(1) Instruction to the contractor that approves approaches, solutions, design, or refinements; fills in details; completes the general description of work; shifts emphasis among work areas or tasks; and

(2) Evaluation and acceptance of reports or other deliverables.

(c) Technical Direction must be within the scope of work of the Task Order and any other documents thereunder. The COR does not have the authority to issue technical direction which:

(1) Requires additional work outside the scope of the Task Order;

(2) Constitutes a change as defined in the “Changes” clause;

(3) Causes an increase or decrease in the estimated cost of the Task Order;

(4) Alters the period of performance of the Task Order;

(5) Changes any of the other terms or conditions of the Task Order.

(d) Technical direction will be issued in writing or confirmed in writing within five (5) days after oral issuance. The Contracting Officer and Contract Specialist will be copied on any technical direction issued by the COR.

(e) If, in the contractor’s opinion, any instruction or direction by the COR falls within any of the categories defined in paragraph (c) of this clause, the contractor shall not proceed but shall notify the Contracting Officer in writing within three (3) days after receiving it and shall request that the Contracting Officer take appropriate action as described in this paragraph. Upon receiving this notification, the Contracting Officer shall:

(1) Advise the contractor in writing as soon as practicable, but not later than 30 days after receipt of the contractor’s notification, that the technical direction is within the scope of the contract effort and does not constitute a change under the “Changes” clause of the contract;

(2) Advise the contractor within a reasonable time that the government will issue a written modification to the contract; or

(3) Advise the contractor that the technical direction is outside the scope of the Task Order and is hereby rescinded.

(f) A failure of the contractor and Contracting Officer to agree as to whether the technical direction is within the scope of the contract, or a failure to agree upon the contract action to be taken with respect thereto, shall be subject to the provisions of the clause entitled “Disputes” in the Task Order.

(g) Any action(s) taken by the contractor, in response to any direction given by any person acting on behalf of the government or any government official other than the Contracting Officer or the COR, shall be at the contractor’s risk.

DACS15P1048 Section G

G - 6

SECTION H - SPECIAL CONTRACT REQUIREMENTS

H.1 NSF030 SECURITY REQUIREMENTS AND ACCESS TO NATIONAL SCIENCE FOUNDATION FACILITIES AND UNCLASSIFIED INFORMATION TECHNOLOGY RESOURCES (MAR 2015) Authorities

1. Federal Information Security Management Act (FISMA), Public Law 107-347

2. Office of Management and Budget (OMB) Circular A-130, Appendix III, “Security of Federal Automated Information Systems”

3. Homeland Security Presidential Directive 12 (HSPD-12), “Policy for a Common Identification Standard for Federal Employees and Contractors”

4. National Institute of Standards and Technology (NIST), Federal Information Processing Standard (FIPS) 201-1, “Personal Identity Verification (PIV) of Federal Employees and Contractors”

5. National Institute of Standards and Technology (NIST), Special Publication 800-37, “Guide for the Security Certification and Accreditation of Federal Information Systems”

6. National Institute of Standards and Technology (NIST), Special Publication 800-53 Rev 4, “Security and Privacy Controls for Federal Information Systems and Organizations”

7. NIST Special Publication 800-18, “Guide for Developing Security Plans for Federal Information Systems”

8. NSF Personnel Manual (Manual 14)

9. NSF Policy Regarding the Privacy of Sensitive Information

10. NSF Information Technology Privacy Policy

11. NSF Bulletin 13-09 Onboarding and Separation Policy for Contractors

12. NSF Contractor Onboarding and Separation Guide

1. General

a. Policy Compliance - All Contractor personnel performing under this contract and requiring access to NSF information systems, networks, or data must comply with all Federal Information Security Management Act (FISMA), Office of Management and Budget (OMB), Homeland Security Presidential Directive 12 (HSPD-12), National Institute of Standards and Technology (NIST) and NSF IT security policies, procedures and guidance.

b. Compliance with Onboarding and Separation Procedures - The Contractor is responsible for its employees’ conduct and establishing in- and out-processing procedures that ensure accomplishment of the actions identified in this clause.

c. Contractor Self-Identification - In accordance with requirements set forth in the Federal Acquisition Regulation (FAR) and guidance issued by OMB, all contractor personnel attending meetings, interacting with NSF staff to complete work assignments, and working in other situations where their contractor status is not obvious to third parties or internal agency staff, are required to identify themselves as contractor employees, including email signature blocks and voicemail. Similarly, documents or reports produced by contractors must be suitably marked as contractor products, or ensure that contractor participation is appropriately disclosed. Contractors interacting with Government staff or the public for purely administrative functions, such as for the purpose of forwarding telephone calls, may be exempted from this self-identification requirement.

d. Expiration of Contract - Contractor personnel access to NSF facilities for work performance will be revoked upon expiration of this contract or task orders issued hereunder.

e. Incorporation in Subcontracts - The Contractor shall incorporate the substance of this clause in all subcontracts.

2. Personnel Onboarding

a. Federal Identity Card - Contractor personnel assigned to work at NSF facilities may be issued a Federal identity card and/or NSF building access card that permits their entrance to NSF facilities without going through visitor access processes. Contractor personnel may also be granted certain other privileges such as NSF e-mail accounts and/or access to NSF information systems. This access shall be provided solely at the discretion of the NSF, and may be revoked or withdrawn at any time, without notice or cause, by the Contracting Officer.

b. Background Investigation - Contractor personnel requiring routine physical access to NSF facilities for more than six months require a Federal identity card and NSF building access card and shall be investigated (i.e., a National Agency Check with Inquiries or higher level investigation). Contractor personnel requiring privileged access or limited privileged access to systems operated by a Contractor for the NSF or interconnected to a NSF network shall be investigated at an appropriate level. The FBI National Criminal History Check must be completed, and the investigation must be scheduled by OPM, before the cards are issued. NSF shall submit the National Agency Check with Inquiries (NACI) (or higher level) investigation to OPM using the standard personnel investigation forms listed in this clause. Contractors are required to report to the NSF Human Resource Management (HRM) Security Office during business hours to be electronically fingerprinted, inputted into the online Electronic Questionnaire for Investigations Processing (eQIP) system and provide other required documents to begin the investigations process. The Contractor shall submit the required forms to the NSF HRM Security Office within five (5) days after award or assignment of an individual to a position requiring investigation.

c. Level of Investigation - Guidance for selecting the appropriate level of investigation is based on the risk of adverse impact to the NSF. The levels of risk for which investigation is required is as follows (IT-1 has the highest level of risk):

i. IT-1: Individuals having privileged access or limited privileged access to systems whose misuse can cause very serious adverse impact to NSF programs.

ii. IT-2: Individuals having privileged access or limited privileged access to systems whose misuse can cause significant adverse impact to NSF programs. These systems include, for example, those that interconnect with a NSF network in a way that exceeds access by the general public, such as bypassing firewalls; and systems operated by a Contractor for the NSF whose function or data has substantial cost to replace, even if these systems are not interconnected with a NSF network.

d. Required Forms - Investigation for individuals shall employ forms appropriate for the level of risk as follows:

i. IT-1: Electronic fingerprints, online Standard Form (SF) 85 Questionnaire for Non-Sensitive Positions, Official Form (OF) 306 Declaration for Federal Employment, Credit Report Notice Form and resume.

ii. IT-2: Electronic fingerprints, Electronic and Standard Form (SF) 85P Questionnaire for Public Trust Positions, Official Form (OF) 306 Declaration for Federal Employment, Credit Report Notice Form and resume.

e. Proof of Investigation - Investigation of Contractor personnel may be waived by the HRM Security Office for individuals in cases where proof of prior investigation at the NACI or higher level within the last two years can be obtained.

f. Temporary Badge - Until favorable results are received from the FBI National Criminal History Check and OPM has scheduled an investigation, NSF will not issue a Federal identity card, LAN ID, NSF building access card, or credentials to access NSF federal systems. Contractors will use a temporary visitor badge.

g. IT Security and Privacy Awareness Training - The Contractor shall ensure that its employees, in performance of the contract, receive initial IT Security Awareness Training before being granted access to NSF systems and networks, and receive refresher IT Security Awareness Training annually. The Contractor may use web-based training available from the NSF to meet this requirement.

h. Rules of Behavior - The Contractor shall ensure that its employees, in performance of the contract, sign and submit the “National Science Foundation (NSF) Information System Access Rules of Behavior” before being granted access to NSF systems and networks.

i. Employee and Contractor Separation - At any time during the term of this contract or task orders issued hereunder, Contractor personnel issued a Federal identity card and NSF building access card, or granted access to NSF e-mail or any other NSF information system, that do not require any further access, and/or at completion, expiration or termination of any such contract or task order where access has been granted, SHALL;

i. Complete and submit the online Contractor/Guest Exit Form, which will result in termination of all access to any NSF e-mail accounts and information systems.

ii. Report to the second floor guard station (located outside Room 225), identify themselves to the personnel present, and surrender their Federal identity card and NSF building access card.

iii. Notify the Contracting Officer Representative (COR) and appropriate Property Custodian of any NSF equipment to be surrendered to NSF.

3. Access Controls for NSF Systems and Information - The Contractor shall be responsible for Information Technology security for all systems used in performance of this contract, or those which are connected to a NSF network. This clause is applicable to all or any part of the contract that includes information technology resources or services in which the Contractor must have physical or electronic access to NSF’s information, including sensitive information and personally identifiable information, contained in unclassified systems that directly support the mission of the Agency. This includes information technology, hardware, software, and the management, operation, maintenance, programming, and system administration of computer systems, networks, and telecommunications systems.

4. Protection of Sensitive and Personally Identifiable Information (PII)

a. Access to Information - In the course of performing official duties, Contractors may have the need to access sensitive or personally identifiable information (PII). Sensitive information includes personally identifiable information and sensitive NSF information such as proposal reviews, reviewer identity tied to reviews, unfunded proposals, proprietary parts of funded proposals; and other similar information. The majority of sensitive information maintained by NSF is in systems of records protected under the Privacy Act sensitive data. Sensitive information may also exist in other types of records, such as databases, log files, e-mail, and correspondence files. All Contractor personnel are responsible for recognizing sensitive information and avoiding inappropriate or accidental access, use, or disclosure in accordance with NSF IT policies.

b. Personally Identifiable Information - Personally identifiable information (PII) refers to information which can be used to distinguish or trace an individual’s identity, such as their name, social security number, biometric records, etc., alone or when combined with other personal or identifying information which is linked or linkable to a specific individual, such as date and place of birth, mother’s maiden name, etc. All Contractor personnel are responsible for recognizing personally identifiable information and avoiding inappropriate or accidental access, use, or disclosure in accordance with NSF IT policies.

c. Information Use - The Contractor must not use or redistribute any NSF information processed, stored, or transmitted by the Contractor except as specified in the Contract.

5. Systems and Information Integrity

a. Vulnerability Management - If access, including remote access, is through a Contractor-managed system, the Contractor is responsible for IT security patching and maintenance of the system. NSF is responsible for security and patching of NSF managed devices, including contractor devices if they have a NSF image, when the contractor device is connected to the NSF network.

b. US Government Configuration Baseline (USGCB) - The contractor shall certify applications are fully functional and operate correctly as intended on systems using the US Government Configuration Baseline (USGCB). The standard installation, operation, maintenance, updates, and/or patching of software, including software purchased under this Agreement, shall not alter the configuration settings from the approved USGCB configuration. Offerings that require installation should follow OMB memorandum 07-18. Applications designed for normal end users shall run in the standard user context without elevated system administration privileges. The contractor shall use Security Content Automation Protocol (SCAP) validated tools with USGCB Scanner capability to certify their products operate correctly with USGCB configurations and do not alter USGCB settings.

6. Security Assessment and Authorization (A&A)

a. Major Applications - For Information Systems NSF has identified as Major Applications or General Support Systems (GSS) that are not connected to a NSF network, but for which the Contractor has operational responsibility on behalf of NSF, the Contractor must conform to all NSF policy guidance and reporting requirements regarding Assessment and Authorization (A&A) of IT systems. NSF shall perform all the assessment activities as outlined in NIST SP 800-37, while the contractor will provide full support and documentation to NSF for this effort. Unless otherwise specified by NSF, NSF shall fulfill the roles of “Chief Information Security Officer” and “Authorizing Official” as outlined in NIST SP 800-37 Appendix D. For all Contractor Operated systems, NSF shall establish accreditation boundaries and assessment schedules.

b. Timeline - The A&A activities will be done prior to service commencement (go-live into Production) and periodically thereafter as required by Federal or NSF policies. This is currently every three years, unless there is a major change.

c. Security Assessment - On the years where a full A&A is not performed, there will still be a security assessment performed in accordance with the guidance in NIST SP 800-37.

7. Cooperation with Audits

a. Contractor Cooperation - The Contractor (and subcontractors) shall fully cooperate with all audits, inspections, investigations, or other reviews conducted by or on behalf of the Contracting Officer or the Chief Information Security Officer or designated representative including the IT Security Officer. Full cooperation includes, but is not limited to, prompt disclosure to authorized requestors of information sufficient to identify the nature and extent of any computer security incident, including a breach of sensitive information or personally identifiable information and the individuals responsible for such activity. The Contractor’s (and any subcontractors’) cooperation with audits, inspections, investigations, and reviews conducted under this clause will be provided at no additional cost to the Government.

b. Government Data and Records - The Contractor (or subcontractor) shall timely produce to the Contracting Officer, a Contracting Officer’s Representative (COR), or the Chief Information Security Officer, Government data, information, or records under the control of or in the possession of the Contractor pursuant to this contract, which the Agency, may request in furtherance of other audits, inspections, investigations, reviews or litigation in which the Chief Information Security Officer is involved. Requests for production under this paragraph shall specify a reasonable deadline for compliance which will presumptively determine whether response to the request has been made in a timely manner. Unless expressly provided otherwise elsewhere in this contract, the production of data, information, or records under this paragraph will be at no additional cost to the Government.

8. Incident Response

a. Incident Data Preservation - In the event of any suspected violation of Federal laws and regulations such as illegal activity, computer security incidents, violations of Agency policy, malicious or otherwise prohibited use, (as defined in NIST Special Publication 800-61, Computer Security Incident Handling Guide), including but not limited to those constituting an actual or potential threat or hazard to the integrity, availability, or confidentiality of agency information in the possession or under the control of the Contractor (or subcontractor), or to the function of information systems operated by the Contractor (or subcontractor) in the performance of this contract, the Contractor (or subcontractor) shall preserve such data, records, logs and other evidence which are reasonably necessary to conduct a thorough investigation of the computer security incident.

b. Notification - In the event of any violation or computer security incident as described in paragraph (a), above, the Contractor shall promptly notify the Chief Information Security Officer or the agency IT Security Officer. The IT Security Officer must report violations or computer security incidents to the Chief Information Security Officer. The Chief Information Security Officer will determine whether to notify a representative of the agency’s Office of Inspector General about the incident. This notification requirement is in addition to any other notification requirements which may be required by law or this contract. Established Federal agency timeframes for reporting security incidents to the United States Computer Emergency Readiness Team (US-CERT), although not exhaustive, serve as a useful guideline for determining whether reports under this paragraph are made promptly. (See US CERT Federal Incident Reporting Guidelines, https://www.us-cert.gov/incident-notification-guidelines.)

c. Notification to Inspector General - If an incident is determined to be actual or suspected criminal activity, the Chief Information Security Officer will make the determination to notify the agency’s Office of the Inspector General (OIG).

H.2 NSF070 REPLACEMENT OF PERSONNEL - CONTRACTOR PERSONNEL CONDUCT (AUG 2010)

The Contractor shall be responsible for the furnishing of personnel fully qualified to perform the services as provided for in this contract. As a designated representative of the Contractor, Contractor personnel are expected to perform and act in a professional manner at all times. The Contractor shall be fully responsible for the actions of Contractor employees during the performance term of this contract.

Performance of contract services may involve work and/or residence on Federal and other program facilities as required by the contract. Contractor employees are expected to follow the rules of conduct established by the manager of such facilities that apply to all (both Government or non-Government) personnel working or residing on such facilities. A copy of such rules will be available from the facility manager.

Personnel who perform ineffectively, refuse to cooperate…