Solicitation Amendment FA441725R00150001 SF 30.pdf

R

11. THIS ITEM ONLY APPLIES TO AMENDMENTS OF SOLICITATIONS

The above numbered solicitation is amended as set forth in Item 14. The hour and date specified for receipt of Offers is extended. is not extended.

Offers must acknowledge receipt of this amendment prior to the hour and date specified in the solicitation or as amended, by one of the following methods:

(a) By completing items 8 and 15, and returning copies of the amendment; (b) By acknowledging receipt of this amendment on each copy of the offer submitted;

or (c) By separate letter or electronic communication which includes a reference to the solicitation and amendment numbers. FAILURE OF YOUR ACKNOWLEDGMENT TO BE RECEIVED AT THE PLACE DESIGNATED FOR THE RECEIPT OF OFFERS PRIOR TO THE HOUR AND DATE SPECIFIED MAY RESULT IN REJECTION OF YOUR OFFER. If by virtue of this amendment you desire to change an offer already submitted, such change may be made by letter or electronic communication, provided each letter or electronic communication makes reference to the solicitation and this amendment, and is received prior to the opening hour and date specified.

12. ACCOUNTING AND APPROPRIATION DATA (If required)

13. THIS ITEM APPLIES ONLY TO MODIFICATIONS OF CONTRACTS/ORDERS.

IT MODIFIES THE CONTRACT/ORDER NUMBER AS DESCRIBED IN ITEM 14.

CHECK ONE A. THIS CHANGE ORDER IS ISSUED PURSUANT TO: (Specify authority) THE CHANGES SET FORTH IN ITEM 14 ARE MADE IN THE CONTRACT ORDER

NUMBER IN ITEM 10A.

B. THE ABOVE NUMBERED CONTRACT/ORDER IS MODIFIED TO REFLECT THE ADMINISTRATIVE CHANGES (such as changes in paying office, appropriation data, etc.) SET FORTH IN ITEM 14, PURSUANT TO THE AUTHORITY OF FAR 43.103(b).

C. THIS SUPPLEMENTAL AGREEMENT IS ENTERED INTO PURSUANT TO AUTHORITY OF:

D. OTHER (Specify type of modification and authority)

E. IMPORTANT: Contractor is not is required to sign this document and return copies to the issuing office.

14. DESCRIPTION OF AMENDMENT/MODIFICATION (Organized by UCF section headings, including solicitation/contract subject matter where feasible.)

Except as provided herein, all terms and conditions of the document referenced in Item 9A or 10A, as heretofore changed, remains unchanged and in full force and effect.

15A. NAME AND TITLE OF SIGNER (Type or print) 16A. NAME AND TITLE OF CONTRACTING OFFICER (Type or print)

15B. CONTRACTOR/OFFEROR

(Signature of person authorized to sign)

15C. DATE SIGNED 16B. UNITED STATES OF AMERICA

(Signature of Contracting Officer)

16C. DATE SIGNED

Previous edition unusable STANDARD FORM 30 (REV. 11/2016) Prescribed by GSA FAR (48 CFR) 53.243

AMENDMENT OF SOLICITATION/MODIFICATION OF CONTRACT 1. CONTRACT ID CODE PAGE OF PAGES

2. AMENDMENT/MODIFICATION NUMBER 3. EFFECTIVE DATE 4. REQUISITION/PURCHASE REQUISITION NUMBER 5. PROJECT NUMBER (If applicable)

6. ISSUED BY CODE 7. ADMINISTERED BY (If other than Item 6) CODE

8. NAME AND ADDRESS OF CONTRACTOR (Number, street, county, State and ZIP Code) (X) 9A. AMENDMENT OF SOLICITATION NUMBER

9B. DATED (SEE ITEM 11)

10A. MODIFICATION OF CONTRACT/ORDER NUMBE

10B. DATED (SEE ITEM 13)

CODE FACILITY CODE

SF 30 BLOCK 14 CONTINUATION PAGE

SUMMARY OF CHANGES

The purpose of this amendment is to incorporate contractor submitted and Government answered Block 14 (Description of Amendment/Modification):

questions and to incorporate the following revised documents:

a. Attachment 1 - Section L - Instructions, Conditions, and Notices to Offerors

b. Attachment 2 - Section M - Evaluation Factors for Award

c. Attachment 3 - PWS COCESS

d. Attachment 4 - WD 2015-4531 Rev. 30

e. Attachment 8 - Common COCESS Items Price List Updated 514

f. Attachment 9 - Pricing Discount Coefficient Table

g. Attachment 19 - CDRL A0010 Supplemental Priced Item List (SPI)

h. Add Attachment 19a - Store Stock Items 2025

i. Add Q&A Attachment

Solicitation/Contract Form

The following modifications were made:

Information From To Response Due Date 09 Jun 2025 17 Jun 2025

Contract Clauses

Header Miscellaneous Text (Added):

52.217-2Cancellation Under Multi-year Contracts.

As prescribed in , insert the following clause: (a)17.109

Cancellation Under Multi-year Contracts (Oct 1997)

(a)"Cancellation," as used in this clause, means that the Government is canceling its requirements for all or supplies services in program years subsequent to that in which notice of cancellation is provided. Cancellation occur by shall the date or within the time period specified in the Schedule, unless a later date is agreed to, if the - Contracting Officer

(1)Notifies the Contractor that funds are not available for contract performance for any subsequent program year; or

(2)Fails to notify the Contractor that funds are available for performance of the succeeding program year requirement.

(b)Except for cancellation under this clause or termination under the Default clause, any reduction by the Contracting in the requirements of this contract be considered a termination under theOfficer shall Termination for Convenience of the Government clause.

(c)If cancellation under this clause occurs, the Contractor will be paid a cancellation charge not over the cancellation ceiling specified in the Schedule as applicable at the time of cancellation.

(d)The cancellation charge will cover only-

(1)Costs-

(i)Incurred by the Contractor and/or subcontractor;

(ii)Reasonably necessary for performance of the contract; and

(iii)That would have been equitably amortized over the entire multi-year contract period but, because of the cancellation, are not so amortized; and

(2)A reasonable profit or fee on the costs.

FA441725R00150001

https://www.acquisition.gov/far/part-17#FAR_17_109

(e)The cancellation charge be computed and the made for it as if the were being made under the shall claim claim of the Government clause of this contract. The Contractor submit theTermination for Convenience shall claim promptly but no later than 1 year from the date-

(1)Of notification of the nonavailability of funds; or

(2)Specified in the Schedule by which notification of the availability of additional funds for the next succeeding program year is required to be issued, whichever is earlier, unless extensions are granted by the in writing

.Contracting Officer

(f)The Contractor's include- claim may

(1)Reasonable nonrecurring costs (see of the Federal Regulation) which are applicable to subpart 15.4 Acquisition and normally would have been amortized in all or services which are multi-year requirements; supplies

(2)Allocable portions of the costs of facilities acquired or established for the conduct of the work, to the extent that it is impracticable for the Contractor to use the facilities in its commercial work, and if the costs are not charged to the contract through overhead or otherwise depreciated;

(3)Costs incurred for the assembly, training, and transportation to and from the job site of a specialized work force;

and

(4)Costs not amortized solely because the cancellation had precluded anticipated benefits of Contractor or subcontractor learning.

(g)The not include- claim shall

(1)Labor, material, or other expenses incurred by the Contractor or subcontractors for performance of the canceled work;

(2)Any cost already paid to the Contractor;

(3)Anticipated profit or unearned fee on the canceled work; or

(4)For service contracts, the remaining useful commercial life of facilities. "Useful commercial life" means the commercial utility of the facilities rather than their physical life with due consideration given to such factors as location of facilities, their specialized nature, and obsolescence.

(h)This contract include an clause with the period for exercising the limited to the date in the may Option option contract for notification that funds are available for the next succeeding program year. If so, the Contractor agrees not to include in quantities any costs of a startup or nonrecurring nature that have been fully set forth in the option contract. The Contractor further agrees that the quantities will reflect only those recurring costs and a option reasonable profit or fee necessary to furnish the additional quantities. option

(i)Quantities added to the original contract through the clause of this contract be included in the quantity Option shall canceled for the purpose of computing allowable cancellation charges.

(End of clause)

252.204-7012 Safeguarding Covered Defense Information and Cyber Incident 2024-O0013)Reporting. (DEVIATION

Use the following clause in lieu of the clause at DFARS 252.204-7012. SAFEGUARDING COVERED DEFENSE INFORMATION AND CYBER

INCIDENT

REPORTING (MAY 2024) (DEVIATION 2024-O0013)

(a) Definitions. As used in this clause--

FA441725R00150001

https://www.acquisition.gov/far/part-15#FAR_Subpart_15_4

Adequate consequences security means protective measures that are commensurate with the and probability of loss, misuse, or unauthorized access to, of information.or modification

Compromise means disclosure of information to unauthorized persons, or a violation of the security policy of a system, in which unauthorized intentional unauthorized media may have occurred.or unintentional disclosure, modification, destruction, or loss of an object, or the copying of information to

Contractor whether directly attributional/proprietary information means information that identifiesthe contractor(s), or indirectly, by the grouping of be traced back to the contractor(s) identifiable information that can (e.g., program description, facility locations),personally information, as well as trade outsideof the company.secrets, commercial or financialinformation, or other commercially sensitive information that is not customarily shared

Controlledtechnical information meanstechnical information with military or space application that is subject to controls on the access, use, reproduction, display, would meet the criteria, modification,performance, release, disclosure, or dissemination. Controlled technicalinformation if disseminated, for

F using the criteria on Technical distribution statements Bthrough set forth in DoD Instruction 5230.24, DistributionStatements Documents. The term does lawfully publiclyavailable without restrictions.not include information that is

Covered contractor information system means an unclassified information system that is owned, or operated by or for, a contractor and that processes, covered defense information.stores, or transmits

Covered defense information means unclassified controlled technical information or other information, as described in the Controlled Unclassified Information (CUI)

Registry at http://www.archives.gov/cui/registry/category-list.html, that requires safeguarding or dissemination controls pursuant to and consistent with law, regulations, and Governmentwide policies, and is--

(1) Marked or otherwise identified in the contract, task order, or delivery order and provided to the contractor by or on behalf of DoD in support of the performance of the contract; or

(2) Collected, developed, received, transmitted, used, or stored by or on behalf of the contractor in support of the performance of the contract.

Cyber in a compromise incident means actions taken through the use of computer networks that result or an actual or potentially adverse effect on an system and/or the information residing therein.information

Forensic analysis means the practice of gathering, retaining, and analyzing computer-related data for investigative purposes in a manner that maintains integrity of the data.the

Information collection, system means a discrete set of information resources organized for the processing, maintenance, use, sharing, dissemination, or disposition of information.

Malicious unauthorized software means computer software or firmware intended to perform an process that will have adverse impact on the availability confidentiality, integrity, or of an information system. This definition includes a virus, worm, Trojanhorse, or other code-based entity that infects of adware.a host, as well as spyware and some forms

Media magnetic tapes, optical disks, magnetic disks, large-scale integration means physical devices or writing surfaces including, but is not limited to, memory chips, and onto which covered defense a covered contractor information system.printouts information is recorded, stored, or printed within

Operationally as critical critical support means supplies or services designated by the Government for airlift, sealift, intermodal transportation services, or logistical the Armed Forces in a contingency operation.support that is essential to the mobilization, deployment, or sustainment of

Rapidly report means within 72 hours of discovery of any cyber incident.

Technical information means technical data or computer software, as those terms are defined in the clause at DFARS 252.227-7013, Rights in Technical Data--Other Than Commercial Products and Commercial Services, regardless of whether or not the clause is incorporated in this solicitation or contract. Examples of technical information include research and engineering data, engineering drawings, and associated lists, specifications, standards, process sheets, manuals, technical reports, technical orders, catalog-item identifications, data sets, studies and analyses and related information, and computer software executable code and source code.

(b) Adequate security. The Contractor shall provide adequate security on all covered systems. To provide contractor information adequate security, the Contractor shall implement, the following information security protections: at a minimum,

(1) For covered contractor information systems that are part of an Information Technology service or system operated on behalf of the (IT) Government, the following security requirements apply:

(i) Cloud computing services shall be subject to the security requirements 252.239-7010, Cloud Computing Services, of this specified in the clause contract.

(ii) Any other such IT service or system (i.e., other than cloud computing) to the security requirements specified elsewhere in this contract.shall be subject

(2) For covered contractor information systems that are not part of an IT service operated on behalf of the Government and therefore or system are not subject to the security specified at paragraph (b)(1) of this clause, the following security requirement requirements apply:

(i) Except as provided in paragraph (b)(2)(ii) of this clause, the covered system shall be subject to the security contractor information requirements in National Technology (NIST) Special Publication (SP) 800-171,"ProtectingInstitute of Standards and Controlled Unclassified Information in Nonfederal Information Systems and 2 (available via the internet at Organizations", Revision http:// dx.doi.org/10.6028/NIST.SP.800-171).

(ii)(A) The Contractor shall implement NIST SP 800-171,as soon as practical, but not later than December 31, 2017. For all contracts awarded prior to October within 30 days of contract1, 2017, the Contractor shall notify the DoD Chief Information Officer (CIO),via email at osd.dibcsia@mail.mil, award, of any securityrequirements specified by NIST SP 800-171 not implemented at the time of contractaward.

(B) The Contractor shall submit requests to vary from NIST SP 800-171in Contracting Officer, for consideration by the DoD CIO. writing to the The Contractor any security requirement adjudicated by an authorized CIO to need not implement representative of the DoD be nonapplicable or to have an alternative, but equally measure that may be implemented in its place.effective, security

(C) If the DoD CIO has previously adjudicated the contractor's requests indicating a requirement is not applicable or that an alternative security that measure effective, a copy of that approval shall be provided to the Contracting Officer requesting its recognition under thisis equally when contract.

(D) If the Contractor intends to use an external cloud service provider to or transmit any covered defense information store, process, in performance of this contract, the Contractor shall require and ensure that the cloud service provider meets security requirements equivalent to those established by the Government for the Federal Risk and Authorization Management Program (FedRAMP) Moderate baseline(https:// ) and that the cloud service provider with requirements in paragraphs (c) www.fedramp.gov/resources/documents/ complies through (g) of this clause for cyber incident malicious software, media preservation and protection, access to additional reporting, and equipment necessary for forensic analysis, and cyber incident damage assessment.information

(3) Apply other information systems security measures when the Contractor reasonably determines that information systems security measures, in addition to those identified in paragraphs (b)(1) and (2) of this clause, may be required to provide adequate security in a dynamic environment or to accommodate special deficiencies based on an assessed risk or circumstances (e.g., medical devices) and any individual, isolated, or temporary vulnerability. These measures may be addressed in a system security plan.

(c) Cyber incident reporting requirement.

mailto:osd.dibcsia@mail.mil

(1) When the Contractor discovers a cyber incident that affects a covered contractor system or the covered defense information information residing therein, or that affects the contractor's ability to perform the requirements of the contract that are designated as operationally critical support and identified in the contract, the Contractor shall--

(i) Conduct a review for evidence of compromise of covered defense information, including, but not limited to, identifying compromised computers, specific information servers, data, and user accounts. This review shall also include analyzing covered contractor system(s) that were part of the cyber incident, as well as other information of the incident systems on the Contractor's network(s), that may have been accessed as a result in order to identify compromised covered that affect the Contractor's defense information, or ability to provide operationally critical support; and

(ii) Rapidly report cyber incidents to DoD at .https://dibnet.dod.mil

(2) Cyber incident report . The cyber incident report shall be treated as information created by or for DoD and shall include, at a minimum, the required elements at . https://dibnet.dod.mil

(3) Medium assurance certificate requirement. In order to report cyber incidents with this clause, the Contractor or in accordance subcontractor shall have or acquire a DoD-approved medium assurance certificate to report cyber incidents. For information DoD-on obtaining a approved medium assurance certificate, see .https://public.cyber.mil/eca/

(d) Malicious software. When the Contractor or subcontractors discover and isolate in connection with a malicious software reported cyber incident, submit the malicious Crime Center (DC3) in accordance with instructions provided by DC3 software to DoD Cyber or the Contracting Officer. Do not send the malicious software to the Contracting Officer.

(e) Media preservation and protection. When a Contractor discovers a cyber incident has occurred, the Contractor shall preserve and protect information relevant images of all known affected systems identified in paragraph (c)(1)(i) of this clause and all monitoring/packet capture data for at least cyber incident 90 days from the submission of the report to allow DoD to request the media or decline interest.

(f) Access to additional information or equipment necessary for forensic analysis. Upon request by DoD, the Contractor shall provide DoD with access to additional information is necessary to conduct a forensic analysis. equipment that

(g) Cyber incident damage assessment activities. If DoD elects to conduct a damage assessment, the Contracting Officer will request that the

Contractor provide all of the damage information gathered in accordance with paragraph (e) of this clause. assessment

(h) DoD safeguarding and use of contractor attributional/proprietary information. The Government shall protect against the unauthorized use or release of information the contractor (or derived from information obtained from the contractor)obtained from under clause that includes contractor attributional/proprietary information, including submitted in accordance with paragraph this such information

(c). To the maximum information. extent practicable, the Contractor shall identify and mark attributional/proprietary In making an authorized release of such information, the Government will implement appropriate procedures to minimize the contractor attributional/proprietary information that is included in such seeking purpose(s) for which the information is being released.authorized release, to include only that information that is necessary for the authorized

(i) Use and release of contractor attributional/proprietary information not created by or for DoD.

Information that is obtained from the contractor (or derived from information obtained from the contractor) under this clause that is not created by or for DoD is authorized to be released outside of DoD--

(1) To entities with missions that may be affected by such information;

(2) To entities that may be called upon to assist in the diagnosis, detection, or mitigation of cyber incidents;

(3) To Government entities that conduct counterintelligence or law enforcement investigations;

(4) For national security purposes, including cyber situational awareness and defense purposes (including with Defense Industrial Base (DIB) participants in the program at 32 CFR part236); or

(5) To a support services contractor ("recipient") that is directly supporting a contract that Government activities under includes the clause at 252.204-7009,Limitations Use or Disclosure of Third-Party Contractor Reported Cyber Incident Information. on the

(j) Use and release of contractor attributional/proprietary information created by or for DoD. Information that is obtained from the contractor (or derived from information obtained contractor) under this clause that is created by or for DoD (including the from the information pursuant to paragraph (c) of this clause) is authorized to be used and released outside of DoD for purposes and activities authorized by submitted paragraph

(i) of this clause, statutory, and for any other lawful Government purpose or activity, subject to all applicable regulatory, and policy based restrictions on and release of such information.the Government's use

(k) The Contractor shall conduct activities under this clause in accordance with applicable laws and regulations on the interception, monitoring, access, use, and disclosure of electronic communications and data.

(l) Other safeguarding or reporting requirements. The safeguarding and cyber incident required by this clause in no way reporting abrogates the Contractor's responsibility other safeguarding or cyber incident reporting pertaining to its unclassified systems as for information required by other applicable clauses of this contract, or as a result of other applicable U.S. Government statutory or regulatory requirements.

(m) Subcontracts. The Contractor shall--

(1) Include this clause, including this paragraph (m), in subcontracts, or similar for operationally critical support, contractual instruments, or for which subcontract performance involve covered defense information, including subcontracts for commercial or commercial will products services, without alteration, except to identify the parties. shall determine if the information required for subcontractor The Contractor performance its identity as covered defense information and will require this clause, and, if necessary, consult retains protection under with the Contracting Officer; and

(2) Require subcontractors to--

(i) Notify the prime Contractor (or next higher-tier subcontractor) when submitting a request to vary from a NIST SP 800-171 security requirement to theContracting in accordance with paragraph (b)(2)(ii)(B) of this clause; andOfficer,

(ii) Provide the incident report number, automatically assigned by DoD, to the prime Contractor (or next higher-tier subcontractor) as soon as practicable, when reporting to DoD as required in paragraph (c) of this clause. a cyber incident

(End of clause)

Additional Regulation or Supplemental Clauses Incorporated by Full Text

The following Clause(s) were deleted:

FAR Clauses Incorporated by Full Text 52.217-9 Option to Extend the Term of the Contract. (Mar 2000)

As prescribed in , insert a clause substantially the same as the following:17.208(g)

OPTION TO EXTEND THE TERM OF THE CONTRACT (MAR 2000)

The Government may extend the term of this contract by written notice to the Contractor within [insert the period of time within which the Contracting (a) 30 days Officer may exercise the option]; provided that the Government gives the Contractor a preliminary written notice of its intent to extend at least days[60 days 60days

] before the contract expires. The preliminary notice does not commit the Government to an extension.unless a different number of days is inserted

If the Government exercises this option, the extended contract shall be considered to include this option clause.(b)

The total duration of this contract, including the exercise of any options under this clause, shall not exceed (months) (years).(c) 60 months

(End of clause)

List of Attachments

The following Attachment(s) were added:

Attachment 1 - Section L- Instructions, Conditions, and Notices to Offerors 3 Attachment 19 -CDRL A0010 Supplemental Priced Item List (SPI) Attachment 19a - Store Stock Items 2025 Attachment 2 - Section M- Evaluation Factors for Award Attachment 3 - PWS COCESS Final 5.15.25 Attachment 4 - WD 2015-4531 Rev. 30 Attachment 8 - Common COCESS Items Price List Updated 6.2.25 Attachment 9 - Pricing Discount Coefficient Table Final Version COCESS Question #37 (Q&A) - 5 Year Inventory list COCESS Questions 2 June 2025 COCESS Salient Characteristics 01 COCESS Salient Characteristics 02 COCESS Salient Characteristics 03 COCESS Salient Characteristics 04

The following Attachment(s) were deleted:

Attachment 1- Section L Attachment 19 - CDRL A0010 Supplemental Priced Item List (SPI) Attachment 2- Section M Attachment 3 - PWS COCESS Final Attachment 4 - WD 2015-4531 Rev. 29 Attachment 8 - Common COCESS Items Price List Attachment 9 - Pricing Discount Coefficient Table

350 TULLY ST BLDG 90339, CP 850 884 7602

HURLBURT FIELD, FL 32544-5810

UNITED STATES

MELISSA PEREZ HUGHES, Email: melissa.perez-hughes@us.af.mil Telephone: 8508844856 AdminBy:

SCD: PAS: