BPA_ATTACHMENTS-DJJ-15-R-EOA02-0006.docx

ATTACHMENT – J.1

List of authorized individuals designated to place work orders under this contract

Individual Name Dollar Limitation Phone Number

ATTACHMENT –J.2

SAMPLE COURT REPORTING/ORDERING FORM

Date:_____________ BPA Number:_________________

Order Number: ___________________

Services Required:

Time, Place and Duration of Services:

Special Packaging or Shipping Requirements (if any):

Funding:

Attachment - J.3

Continuing Contract Performance During a Pandemic Influenza or Other National Emergency

During a Pandemic or other emergency we understand that our contractor workforce will experience the same high levels of absenteeism as our federal employees. Although the Excusable Delays and Termination for Default clauses used in government contracts list epidemics and quarantine restrictions among the reasons to excuse delays in contract performance, we expect our contractors to make a reasonable effort to keep performance at an acceptable level during emergency periods.

The Office of Personnel Management (OPM) has provided guidance to federal managers and employees on the kinds of actions to be taken to ensure the continuity of operations during emergency periods. This guidance is also applicable to our contract workforce. Contractors are expected to have reasonable policies in place for continuing work performance, particularly those performing mission critical services, during a pandemic influenza or other emergency situation.

The types of actions a federal contractor should reasonably take to help ensure performance are:

· Encourage employees to get inoculations or follow other preventive measures as advised by the public health service.

· Contractors should cross-train workers as backup for all positions performing critical services. This is particularly important for work such as guard services where telework is not an option.

· Implement telework to the greatest extent possible in the workgroup so systems are in place to support successful remote work in an emergency.

· Communicate expectations to all employees regarding their roles and responsibilities in relation to remote work in the event of a pandemic health crisis or other emergency.

· Establish communication processes to notify employees of activation of this plan.

· Integrate pandemic health crisis response expectations into telework agreements.

· With the employee, assess requirements for working at home (supplies and equipment needed for an extended telework period). Contract Security requirements must be considered in making equipment choices; agencies or contractors may wish to avoid use of employees' personal computers and provide them with PCs or laptops as appropriate.

· Determine how all employees who may telework will communicate with one another and with management to accomplish work.

· Practice telework regularly to ensure effectiveness.

· Make it clear that in emergency situations, employees must perform all duties assigned by management, even if they are outside usual or customary duties.

· Identify how time and attendance will be maintained.

It is the contractor's responsibility to advise the government contracting officer or COTR if they anticipate not being able to perform and to work with the Department to fill gaps as necessary. This means direct communication with the contracting officer, COTR or in his/her absence, another responsible person in the contracting office via telephone or email messages acknowledging the contractors notification. The incumbent contractor is responsible for assisting the Department in estimating the adverse impacts of nonperformance and to work diligently with the Department to develop a strategy for maintaining the continuity of operations.

The Department does reserve the right in such emergency situations to use federal employees, employees of other agencies, contract support from other existing contractors, or to enter into new contracts for critical support services. Any new contracting efforts would be acquired following the guidance in the Office of federal Procurement Policy issuance "Emergency Acquisitions", May, 2007 and Subpart 18.2 Emergency Acquisition Flexibilities of the Federal Acquisition Regulations.

Attachment - J.4

Security of Systems and Data, Including Personally Identifiable Data

a. Systems Security

The work to be performed under this contract requires the handling of data that originated within the Department, data that the contractor manages or acquires for the Department, and/or data that is acquired in order to perform the contract and concerns Department programs or personnel.

For all systems handling such data, the contractor shall comply with all security requirements applicable to Department of Justice systems, including but not limited to all Executive Branch system security requirements (e.g., requirements imposed by OMB and NIST), DOJ IT Security Standards, and DOJ Order 2640.2F. The contractor shall provide DOJ access to and information regarding the contractor’s systems when requested by the Department in connection with its efforts to ensure compliance with all such security requirements, and shall otherwise cooperate with the Department in such efforts. DOJ access shall include independent validation testing of controls, system penetration testing by DOJ, FISMA data reviews, and access by the DOJ Office of the Inspector General for its reviews.

The use of contractor-owned laptops or other media storage devices to process or store data covered by this clause is prohibited until the contractor provides a letter to the contracting officer (CO) certifying the following requirements:

1. Laptops must employ hard drive encryption using a NIST Federal Information Processing Standard (FIPS) 140-2 validated product;

2. The contractor must develop and implement a process to ensure that security and other applications software is kept up-to-date;

3. Mobile computing devices will utilize anti-viral software and a host-based firewall mechanism.

4. The contractor shall log all computer-readable data extracts from databases holding sensitive information and verify each extract including sensitive data has been erased within 90 days or its use is still required. All DOJ information is sensitive information unless designated as non-sensitive by the Department.

5. Contractor-owned removable media, such as removable hard drives, flash drives, CDs, and floppy disks, containing DOJ data, shall not be removed from DOJ facilities unless encrypted using a NIST FIPS 140-2 validated product;

6. When no longer needed, all removable media and laptop hard drives shall be processed (sanitized, degaussed, or destroyed) in accordance with security requirements applicable to DOJ;

7. Contracting firms shall keep an accurate inventory of devices used on DOJ contracts;

8. Rules of behavior must be signed by users. These rules shall address at a minimum: authorized and official use; prohibition against unauthorized users; and protection of sensitive data and personally identifiable information;

9. All DOJ data will be removed from contractor-owned laptops upon termination of contractor work. This removal must be accomplished in accordance with DOJ IT Security Standard requirements. Certification of data removal will be performed by the contractor’s project manager and a letter confirming certification will be delivered to the CO within 15 days of termination of contractor work.

b. Data Security

By acceptance of, or performance on, this contract, the contractor agrees that with respect to the data identified in paragraph a, in the event of any actual or suspected breach of such data (i.e., loss of control, compromise, unauthorized disclosure, access for an unauthorized purpose, or other unauthorized access, whether physical or electronic), the contractor will immediately (and in no event later than within one hour of discovery) report the breach to the DOJ CO and the contracting officer’s technical representative (COTR).

If the data breach occurs outside of regular business hours and/or neither the CO nor the COTR can be reached, the contractor shall call the EOUSA Security Operations Center at (803) 705-5533 within one hour of discovery of the breach. The contractor shall also notify the CO as soon as possible during regular business hours.

c. Personally Identifiable Information Notification Requirement

The contractor further certifies that it has a security policy in place that contains procedures to promptly notify any individual whose personally identifiable information (as defined by OMB) was, or is reasonably believed to have been, breached. Any notification shall be coordinated with the Department, and shall not proceed until the Department has made a determination that notification would not impede a law enforcement investigation or jeopardize national security. The method and content of any notification by the contractor shall be coordinated with, and be subject to the approval of, the Department. The contractor assumes full responsibility for taking corrective action consistent with the Department’s Data Breach Notification Procedures, which may include offering credit monitoring when appropriate.

d. Pass-through of Security Requirements to Subcontractors

The requirements set forth in Paragraphs a through c, above, apply to all subcontractors who perform work in connection with this contract. For each subcontractor, the contractor must certify that it has required the subcontractor to adhere to all such requirements. Any breach by a subcontractor of any of the provisions set forth in this clause will be attributed to the contractor.

Attachment - J.5

Information Resellers or Data Brokers

Under this BPA, the Department obtains personally identifiable information about individuals from the contractor. The contractor hereby certifies that it has a security policy in place which contains procedures to promptly notify any individual whose personally identifiable information (as defined by OMB) was, or is reasonably believed to have been, lost or acquired by an unauthorized person while the data is under the control of the contractor. In any case in which the data that was lost or improperly acquired reflects or consists of data that originated with the Department, or reflects sensitive law enforcement or national security interest in the data, the contractor shall notify the Department contracting officer so that the Department may determine whether notification would impede a law enforcement investigation or jeopardize national security. In such cases, the contractor shall not notify the individuals until it receives further instruction from the Department.

Attachment - J.6

PLEASE INCLUDE THIS CHECK LIST IN YOUR SUBMISSION

DJJ-15-R-EOA02-0006 – Southern District of Georgia CHECK LIST

SF-1449 (Boxes # 12, 17a, #30a, #30b, #30c filled out?)

Duns # (on SF-1449 box 20) filled out?

Tax ID # (on SF-1449 box 20) filled out?

Volume I - Resumes of all prospective key personnel along with up to 3 professional references for each proposed person.

Volume II- Organizational references for work within the last three (3) years of the Solicitation Issue Date (See Standard Form 1449, box 6) with all information as required.

Volume III- Summary of organizational experience - not to exceed two pages. Specifically address the type of recording method/equipment information being proposed and knowledge/implementation of Grand Jury security measures and staffing accessibility.

Volume IV – Price quoted as reflected in Section B (with calculations to include totals)

Must do the following online in SAM (Systems for Award Management): https://www.sam.gov/portal/public/SAM/

*1. Registered in SAM (Systems for Award Management)?

2. FAR 52.212-3 Offeror Representations and Certifications Commercial Items (Aug 2013)

3. FAR 52.209-5 Certification Regarding Responsibility Matters (Apr 2010) (ONLY IF >$150,000)

Do not manually fill out any of these certifications. All listed Representations and Certifications listed above must be registered online through SAM.

Manually fill out the following certification and include in your quote. This clause is in the solicitation in full text.

FAR 52.209-7 Information Regarding Responsibility Matters (Jul 2013) (ONLY IF >$500K)

Are you a Small Business (NAICS code 561492; average annual receipts must not exceed $14.0 million)?

Is the Offeror's name on every page of the quote and quote pages numbered? Each page must have a unique page number. Please do not duplicate page numbers between different volumes.

Do you plan on using more than 5 Court Reporters/Key Personnel for this BPA?

Are you submitting a fully completed Contractor Determination of Responsibility (Attachment D.12.6 - both top AND bottom portions) with a point of contact information (name, phone number, email address) of the financial institution representative that will verify he/she filled out this questionnaire.

* In order to be an eligible for award, the Offeror must be registered in SAM before the time of award.

Attachment -J.7

CONTRACTOR DETERMINATION OF RESPONSIBILITY

(FINANCIAL INFORMATION)

TO BE COMPLETED BY CONTRACTOR

Solicitation Information: Offeror:

Date:

Solicitation: DJJ-15-R-EOA02-0006

Requirement: Grand Jury and Depositions

Contract Amount: (dollar value base plus all options for your proposal)

Financial Reference Contacted:

Financial Institution Name & Address:

Financial Institution Phone:

Financial Institution Contact:

Name/ Title/ Email Address (all mandatory information):

TO BE COMPLETED BY FINANCIAL INSTITUTION:

Questions:

1. When was the account opened? _______________________________________

2. How is the account maintained? (Excellent Fair Poor)

3. What is the average monthly balance? (High Medium Low)

4. Number of figures of balance (Example: If the company has $1,000.00, the number of figures would be a 4). (7 6 5 4 3 2 1)

5. Any account overdrafts? (Yes) (No)

6. Has offeror ever filed for bankruptcy? (Yes) (No)

7. Is the credit standing sufficient to obtain loans from your bank? (Yes) (No)

8. Comments/Further Explanations of Items Above: ____________________________________________________________________________________________________________________________________________________________