Summary of Changes - 26R00040002 SF 30.pdf

AMENDMENT OF SOLICITATION/MODIFICATION OF CONTRACT 1. CONTRACT ID CODE

J

2. AMENDMENT/MODIFICATION NUMBER

3. EFFECTIVE DATE

26 Mar 2026

4. REQUISITION/PURCHASE

REQUISITION NUMBER

5. PROJECT NUMBER (if applicable)

6. ISSUED BY CODE FA5205

FA5205 35 CONS PK

UNIT 5201, APO AP 96319-5201

APO, AP 96319-5201

UNITED STATES

Rebecca Rohrs, Email: rebecca.rohrs@us.af.mil Telephone: 3152268779 Kade Forrester, Email: kade.forrester.1@us.af.mil Telephone: 315-226-8053

7. ADMINISTERED BY (if other than Item 6)

CODE

SCD: PAS:

8. NAME AND ADDRESS OF CONTRACTOR (Number, street, county, State and ZIP Code)

CODE: FACILITY CODE:

9A. AMENDMENT OF SOLICITATION NUMBER

FA520526R0004

9B. DATED (SEE ITEM 11)

02 Mar 2026

10A. MODIFICATION OF CONTRACT/ORDER

NUMBER

10B. DATED (SEE ITEM 13)

11. THIS ITEM ONLY APPLIES TO AMENDMENTS OF SOLICITATIONS

The above numbered solicitation is amended as set forth in Item 14. The hour and date specified for receipt of Offers is extended. is not extended.

Offers must acknowledge receipt of this amendment prior to the hour and date specified in the solicitation or as amended, by one of the following methods:

(a) By completing items 8 and 15, and returning copies of the amendment; (b) By acknowledging receipt of this amendment on each copy of the offer submitted; 1 or (c) By separate letter or electronic communication which includes a reference to the solicitation and amendment numbers. FAILURE OF YOUR ACKNOWLEDGMENT TO BE RECEIVED AT THE PLACE DESIGNATED FOR THE RECEIPT OF OFFERS PRIOR TO THE HOUR AND DATE SPECIFIED MAY RESULT IN REJECTION OF YOUR OFFER. If by virtue of this amendment you desire to change an offer already submitted, such change may be made by letter or electronic communication, provided each letter or electronic communication makes reference to the solicitation and this amendment, and is received prior to the opening hour and date specified.

12. ACCOUNTING AND APPROPRIATION DATA (if required) See Section G - Contract Administration Data

13. THIS ITEM APPLIES ONLY TO MODIFICATIONS OF CONTRACTS/ORDERS.

IT MODIFIES THE CONTRACT/ORDER NUMBER AS DESCRIBED IN ITEM 14.

CHECK

ONE

A.THIS CHANGE ORDER IS ISSUED PURSUANT TO: (Specify authority) THE CHANGES SET FORTH IN ITEM 14 ARE MADE IN THE CONTRACT ORDER NUMBER IN ITEM 10A.

B. THE ABOVE NUMBERED CONTRACT/ORDER IS MODIFIED TO REFLECT THE ADMINISTRATIVE CHANGES (such as changes in paying office, appropriation data, etc.)

SET FORTH IN ITEM 14, PURSUANT TO THE AUTHORITY OF FAR 43.103(b).

C. THIS SUPPLEMENTAL AGREEMENT IS ENTERED INTO PURSUANT TO AUTHORITY OF:

D. OTHER (Specify type of modification and authority)

E. IMPORTANT: Contractor is not is required to sign this document and return copies to the issuing office.

14. DESCRIPTION OF AMENDMENT/MODIFICATION (Organized by UCF section headings, including solicitation/contract subject matter where feasible.)

The purpose of this amendment is to:

1. Extend the Due date from 01 April 2026 to 08 April 2026.

a. This change comes at the request of interest vendors to provide more time after returning answers to questions.

2. Clarify wording on solicitation submission in 52.212-1 for pricing submission.

3. Provide updated attachments.

Except as provided herein, all terms and conditions of the document referenced in Item 9A or 10A, as heretofore changed, remains unchanged and in full force and effect.

15A. NAME AND TITLE OF SIGNER (Type or print) 16A. NAME AND TITLE OF CONTRACTING OFFICER (Type or print)

15B. CONTRACTOR/OFFEROR

(Signature of person authorized to sign)

15C. DATE SIGNED 16B. UNITED STATES OF AMERICA

(Signature of Contracting Officer)

16C. DATE SIGNED

Computer generated. Previous edition unusable STANDARD FORM 30 (REV. 11/2016) Prescribed by GSA-FAR (48 CFR) 53.243

Created On:

25 Mar 2026, 14:35 PM Japan Standard Time

SF 30 BLOCK 14 CONTINUATION PAGE

SUMMARY OF CHANGES

Contract Clauses

Header Miscellaneous Text (Added):

252.204-7021 Contractor Compliance With the Cybersecurity Maturity Model Certification Level Requirements.

As prescribed in (a), the following clause: 204.7504 use

CONTRACTOR COMPLIANCE WITH THE CYBERSECURITY MATURITY MODEL CERTIFICATION LEVEL

REQUIREMENT ( )S NOV 2025

(a) Definitions. As used in this clause--

"Controlled unclassified information" means information the Government creates or possesses, or information an entity creates or possesses for or on behalf of the Government, that a law, regulation, or Governmentwide policy requires or permits an agency to handle using safeguarding or dissemination controls (32 CFR 2002.4(h)).

"Current" means--

(1) With regard to Conditional Cybersecurity Maturity Model Certification (CMMC) Status--

(i) Not older than 180 days for Conditional Level 2 (Self) assessments and Conditional Level 2 (certified third-party assessment organization (C3PAO)) assessments, with--

(A) No changes in compliance with the requirements at 32 CFR part 170 since the Conditional CMMC Status date (see 32 CFR 170.16 and 170.17); and

(B) A corresponding affirmation of continuous compliance by an affirming official (see 32 CFR 170.4); and

(ii) Not older than 180 days for Conditional Level 3 (Defense Industrial Base Cybersecurity Assessment Center (DIBCAC)) assessments, with--

(A) No changes in compliance with the requirements at 32 CFR part 170 since the Conditional CMMC Status date (see 32 CFR 170.18); and

(B) A corresponding affirmation of continuous compliance by an affirming official;

(2) With regard to Final CMMC Status--

FA520526R00040002

https://www.acquisition.gov/dfars/204.7504-solicitation-provision-and-contract-clause.#DFARS_204.7504

(i) Not older than 1 year for Final Level 1 (Self), with--

(A) No changes in compliance with the requirements at 32 CFR part 170 since the Final CMMC Status date (see 32 CFR 170.15); and

(B) A corresponding affirmation of continuous compliance, not older than 1 year, by an affirming official;

(ii) Not older than 3 years for Final Level 2 (Self) assessments and Final Level 2 (C3PAO) assessments, with--

(A) No changes in compliance with the requirements at 32 CFR part 170 since the Final CMMC Status date (see 32 CFR

170.16 and 170.17); and

(B) A corresponding affirmation of continuous compliance, not older than 1 year, by an affirming official; and

(iii) Not older than 3 years for Final Level 3 (DIBCAC) assessments, with--

(A) No changes in compliance with the requirements at 32 CFR part 170 since the Final CMMC Status date (see 32 CFR 170.18); and

(B) A corresponding affirmation of continuous compliance, not older than 1 year, by an affirming official; and

(3) With regard to affirmation of continuous compliance (32 CFR 170.22), not older than 1 year with no changes in compliance with the requirements at 32 CFR part 170.

"Cybersecurity Maturity Model Certification (CMMC) status" means the result of meeting or exceeding the minimum required score for the corresponding assessment. The potential statuses are as follows:

(1) Final Level 1 (Self).

(2) Conditional Level 2 (Self).

(3) Final Level 2 (Self).

(4) Conditional Level 2 (C3PAO).

(5) Final Level 2 (C3PAO).

(6) Conditional Level 3 (DIBCAC).

(7) Final Level 3 (DIBCAC).

"Cybersecurity Maturity Model Certification unique identifier (CMMC UID)" means 10 alpha-numeric characters assigned to each CMMC assessment and reflected in theSupplier Performance Risk System (SPRS) for each contractor information system.

"Federal contract information (FCI)" means information, not intended for public release, that is provided by or generated for the Government under a contract to develop or deliver a product or service to the Government. It does not include information provided by the Government to the public, such as on public websites, or simple transactional information, such as information necessary to process payments.

FA520526R00040002

"Plan of action and milestones" means a document that identifies tasks to be accomplished. It details resources required to accomplish the elements of the plan, any milestones in meeting the tasks, and scheduled completion dates for the milestones, as defined in National Institute of Standards and Technology Special

Publication 800-115 (32 CFR 170.21).

(b) Framework. The Cybersecurity Maturity Model Certification (CMMC) is a framework for assessing a contractor's compliance with applicable information security protections (see 32 CFR part 170).

(c) Duplication. The CMMC assessments will not duplicate efforts from any other comparable DoD assessment, except for rare circumstances when a reassessment may be necessary, for example, when there are indications of issues with cybersecurity and/or compliance with CMMC requirements.

(d) The Contractor shall Requirements. --

(1)(i) Have and maintain for the duration of the contract a current CMMC status at the following CMMC level, or higher:

for all information systems used in performance of the contract, task order, or delivery order that CMMC Level 2 (Self) process, store, or transmit FCI or CUI; and

(ii) Consult 32 CFR 170.23 related to the flowdown of the CMMC requirements, and flow down the correct CMMC level to subcontracts and other contractual instruments;

(2) Only process, store, or transmit FCI or CUI on contractor information systems that have a CMMC status at the CMMC level requiredin paragraph (d)(1) of this clause, or higher;

(3) Complete on an annual basis, and maintain as current,an affirmation, by the affirming official (see 32 CFR 170.4), of continuous compliance with the requirements associated with the CMMC level required in paragraph (d)(1) of this clause in the Supplier Performance Risk System (SPRS) (https://piee.eb.mil) for each CMMC UID applicable to each of the contractor information systems that process, store, or transmit FCI or CUI and that are used in performance of the contract;

(4) Ensure all subcontractors and suppliers complete prior to subcontract award, and maintain on an annual basis,an affirmation, by the affirming official (see 32 CFR 170.4), of continuous compliance with the requirements associated with the CMMC level required for the subcontract or other contractual instrument for each of the subcontractor information systems that process, store, or transmit FCI or CUI and that are used in performance of the subcontract; and

(5) If the Contractor has a CMMC Status of Conditional, successfully close out a valid plan of action and milestones (32 CFR 170.21) to achieve a CMMC Status of Final.

(e) Reporting. The Contractor shall--

(1) Submit to the Contracting Officer--

(i) The CMMC UID(s) issued by SPRS for contractor information systems that will process, store, or transmit FCI or CUI during performance of the contract; and

(ii) Any changes in the CMMC UIDs generated in SPRS throughout the life of the contract, task order, or delivery order, if applicable;

(2)Enter into SPRS the results of a current self-assessment for each CMMC UID, not covered by a C3PAO assessment or DIBCAC assessment, applicable to each of the contractor information systems that process, store, or transmit FCI or CUI and that are used in performance of the contract; and

(3) Complete in SPRS on an annual basis and maintain as current an affirmation of continuous compliance by the affirming official (see 32 CFR 170.4) for each self-assessment, C3PAO assessment, or DIBCAC assessment required under the contract in SPRS.

(f) The Contractor shall-- Subcontracts.

(1) ) , in Insert the substance of this clause, including this paragraph ( f and excluding paragraph (e)(1) subcontracts and other contractual instruments, including those for the acquisition of commercial products and commercial services, excluding commercially available off-the-shelf items , if the subcontract or other contractual instrument will

; andcontain a requirement to process, store, or transmit FCI or CUI

(2) , ensure that the subcontractor has a current Prior to awarding a subcontract or other contractual instrument CMMC certificate or current CMMC status

. at the CMMC level that is appropriate for the information that is being flowed down to the subcontractor based on the requirements at 32 CFR 170.23

(End of clause)

252.204-7025 Notice of Cybersecurity Maturity Model Certification Level Requirements.

As prescribed in (b), use the following provision: 204.7504

NOTICE OF CYBERSECURITY MATURITY MODEL CERTIFICATION LEVEL REQUIREMENTS (NOV 2025)

(a) Definitions. As used in this provision, "controlled unclassified information (CUI)," "current," "Cybersecurity Maturity Model Certification (CMMC) status," "Cybersecurity Maturity Model Certification unique identifier (CMMC UID)," "Federal contract information (FCI)", and "plan of action and milestones" have the meaning given in the Defense Federal Acquisition Regulation Supplement 252.204-7021, Contractor Compliance With the Cybersecurity Maturity Model Certification Level Requirements, clause of this solicitation.

(b)(1) Cybersecurity Maturity Model Certification (CMMC) level. The CMMC level required by this solicitation is: CMMC This CMMC level, or higher (see 32 CFR part 170), is required prior to award for each contractor information Level 2 (Self) system that will process, store, or transmit Federal contract information (FCI) or controlled unclassified information (CUI) during performance of the contract.

(2) The Offeror will not be eligible for award of a contract, task order, or delivery order resulting from this solicitation if the Offeror does not have, for each of the contractor information systems that will process, store, or transmit FCI or CUI and that will be used in performance of a contract resulting from this solicitation--

FA520526R00040002

https://www.acquisition.gov/dfars/204.7504-solicitation-provision-and-contract-clause.#DFARS_204.7504

(i) The current CMMC status entered in the Supplier Performance Risk System (SPRS) (https://piee.eb.mil) at the CMMC level required by paragraph (b)(1) of this provision; and

(ii) A current affirmation of continuous compliance with the security requirements identified at 32 CFR part 170 in SPRS.

(c) Plan of action and milestones. If the Offeror has a CMMC Status of Conditional, the Offeror shall successfully close out a valid plan of action and milestones (32 CFR 170.21) to achieve a CMMC Status of Final.

(d) CMMC unique identifiers. The Offeror shall provide, in the proposal, the CMMC unique identifier(s) (CMMC UIDs) issued by SPRS for each contractor information system that will process, store, or transmit FCI or CUI during performance of a contract, task order, or delivery order resulting from this solicitation. The Offeror also shall update the list when new CMMC UIDs are generated in SPRS. The CMMC UIDs are provided in SPRS after the Offeror enters the results of self-assessment(s) for each such information system.

(End of provision)

Instructions, Conditions, & Notices to Offerors or Quoters

Additional Regulation or Supplemental Clauses Incorporated by Full Text

The following Clause modifications were made:

52.212-1 Instructions to Offerors-Commercial Products and Commercial Services. Feb 2026 hereby reads as follows:

Instructions to Offerors-Commercial Products and Commercial Services (Feb 2026)

(a) . Submit signed and dated offers to the office specified in this solicitation at or before the exact time specified in this solicitation. As a minimum, Submission of offers offers shall include-

(1) The solicitation number;

(2) The name, address, telephone number of the Offeror;

(3) The Offeror's Unique Entity Identifier (UEI) and, if applicable, Electronic Funds Transfer (EFT) indicator;

(4) Information necessary to evaluate the factors contained in the provision at 52.212-2 or as described in the solicitation;

(5) Responses to provisions that require Offeror completion of information, representations, and certifications (other than those collected via the System for Award Management (SAM)); and

(6) A statement specifying the extent of agreement with all terms, conditions, and provisions included in the solicitation and any solicitation amendments.

(b) . The Offeror agrees to hold the prices in its offer firm for 60 calendar days from the date specified for receipt of offers, unless another Period for acceptance of offers time period is specified in an addendum to the solicitation.

(c) .Late submissions, modifications, revisions, and withdrawals of offers

(1) Offerors are responsible for submitting offers and any modifications or revisions to the Government office designated in the solicitation by the time specified in the solicitation.

(2) Any offer, modification, or revision received after the time specified for receipt of offers is "late" and will not be considered unless it is received before award is made and the Contracting Officer determines that accepting the late offer would not unduly delay the acquisition. However, a late modification of an otherwise successful offer that makes its terms more favorable to the Government will be considered at any time it is received and may be accepted.

(3) If an emergency or unanticipated event interrupts normal Government processes so that offers cannot be received at the Government office designated for receipt of offers by the exact time specified in the solicitation, and urgent Government requirements preclude amendment of the solicitation or other notice of an extension of the closing date, the time specified for receipt of offers will be deemed to be extended to the same time of day specified in the solicitation on the first work day on which normal Government processes resume.

(4) Offerors may withdraw their offers by written notice to the Government received at any time before award.

(d) . The Government intends to evaluate offers and award a contract without discussions with Offerors. Therefore, the Contract award (not applicable to Invitation for Bids) Offeror's initial offer should contain the Offeror's best terms. However, the Government reserves the right to conduct discussions, if necessary. The Government may reject any or all offers if such action is in the public interest, accept other than the lowest offer, and waive informalities and minor irregularities in offers received.

(e) . If a postaward debriefing is given to requesting Offerors, the Government will disclose the following information, if applicable:Debriefings

(1) The agency's evaluation of the significant weak or deficient factors in the debriefed Offeror's offer.

(2) The overall evaluated cost or price and technical rating of the successful Offeror and the debriefed Offeror and past performance information on the debriefed Offeror.

(3) The overall ranking of all Offerors when any ranking was developed by the agency during source selection.

(4) A summary of the rationale for award.

(5) For acquisitions of commercial products, the make and model of the product to be delivered by the successful Offeror.

(6) Reasonable responses to relevant questions posed by the debriefed Offeror as to whether the agency followed source-selection procedures set forth in the solicitation, applicable regulations, and other applicable authorities.

(End of provision)

Addendum to 52.212-1

A. Offerors will provide the following in addition to the required listed in FAR 52.212-1.

Responses shall consist of four (4) separate parts; Part I - Summary and Miscellaneous Data, Part II - Technical Proposal, Part III - Past Performance Proposal, and Part IV - Price Proposal.

Offers must provide all required parts/items to be considered responsive.

B. Specific Instructions:

1. PART I - SUMMARY AND MISCELLANEOUS DATA. Submit electronic copy.

(a) The offeror shall provide a concise summary and master table of contents of the entire quote.

(b) Complete blocks 12, 17, and 30 of the RFQ SF 1449 Section A, along with acknowledging all associated SF 30 submitted by the USG if applicable. Amendments will not be counted against the page limits.

(c) Provide proof of Facility Clearance

(d) Provide Mission-Essential Contractor Services Plan

2. PARTII - TECHNICAL PROPOSAL. Submit electronic copy.

(a) The offer shall provide a technical proposal consisting of the subfactors below. All sub-factors shall be evaluated on an acceptable/unacceptable basis based on the requirements listed in the PWS.

(b) No more than five (5) pages per Sub-Factor, total of fifteen (15) pages shall be evaluated by the USG. Any pages in excess shall not be considered for evaluation.

i.Sub-Factor I: Management/Staffing Plan ii.Sub-Factor II: Quality Assurance Plan iii.Sub-Factor III: Resumes

3. PART III - PAST PERFORMANCE PROPOSAL - Submit electronic copy.

(a) Offeror shall provide a listing of any recent and relevant contracts of similar scope. The minimum number of recent and relevant required contracts in the listing is two

(2). The Maximum number is ten (10). List shall consist of the following format project title, of recent and relevant required contracts in the listing contract number, contract dollar value, location and if any quality issues. This is the minimum requirement. A contractor may submit additional columns if relevant.

(b) Recent is defined as contracts/sub-contracts performed and/or being performed for any customer within the past ten (10) years prior to issuance of this solicitation.

(c) Relevant is defined as projects involving the performance of IMPS or construction site surveillance services of similar scope, effort, complexity and or magnitude to this solicitation.

Project Title

Contract #

$ Value

Location

Any Quality Issues

4. PARTIV - PRICE PROPOSAL - Submit electronic copy.

(a) This part shall contain a completed Section B (Supplies or Services and Prices/Costs), and completed attachments 2 and 3 (Price Lists). Vendor shall also submit an excel version of the Excel file of attachments 2 and 3 along with PART IV submission.

(b) Insert proposed unit prices and extended amounts in Section B for each Contract Line-Item Number (CLIN)/Item Number . The and in Attachments 2 and 3 (Price Lists) extended amount must equal the unit price multiplied by the number of units. It is imperative that mathematical calculations are correct; particular care should be taken to ensure the amounts match when using a spreadsheet program, such as Microsoft EXCEL. The unit prices and extended amounts are limited to two decimal places.

(c) Extreme care should be exercised to ensure that no price data of any kind are included in any other Part of the proposal.

C. Documents submitted in response to this RFP must be consistent with the following:

1. Requirements of this solicitation (CLINs and PWS) and government standards and regulations pertaining to this PWS.

2. Evaluation Factors for Award in Section M of this solicitation.

3. If a Part in a proposal exceeds the specified page limit cited in the Part Content, the excessive pages will not be evaluated.

4. Format for proposal Parts I, II, III and IV shall be as follows:

(a) Each Part shall contain a Table of Contents, Cross References, and the List of Tables and Drawing (if applicable). Cover pages, Table of Contents, and Tabs will not be counted against the page limits. However, pages depicting tables, charts, graphs and figures will count toward the page limit. The number of copies of each part is specified in paragraph B, Specific Instructions, above.

(b) The proposals will be on 8 1/2" X 11" paper, except for fold-outs used for charts, tables, or diagrams, which may not exceed 11" X 17".

(c) A page is defined as one face of a sheet of paper containing information. Two pages may be printed on one sheet of paper.

(d) All printing shall be single-spaced. Spacing characteristics are applicable to charts and graphs.

(e) Written entries shall not be less than 11 font size. Size of print is applicable to charts and graphs.

(f) Page margins shall be a minimum of 1 inch top, bottom, and each side.

(g) Offerors shall submit electronic proposals via e-mail. Larger files may be submitted via DoD Safe. No zip files will be accepted. Email the file(s) by the solicitation closing date and time to the following email addresses: Rebecca.rohrs@us.af.mil and kade.forrester.1@us.af.mil.

Offerors are recommended to seek email acknowledging receipt of proposals submitted electronically.

(h) Each Part shall be complete in itself and shall not reference information contained in other Parts. Page 1 of a Part is defined as the first page after the Table of Contents. All pages shall be numbered.

(i) Price data of any kind shall be presented only in the Price Proposal Part, Attachment 2, and Attachment 3.

(j) Elaborate formats, bindings, and color presentations are not desired or required.

The following table summarizes the proposal submission:

PART

TITLE

PAGE LIMIT

DUE DATE

I

SUMMARY AND MISCELLANEOUS DATA

See SF 1449 Block 8

II

TECHNICAL PROPOSAL

III

PAST PERFORMANCE

IV

PRICE PROPOSAL

PART TITLE ELECTRONIC COPY PAPER COPY PAGE LIMIT DUE DATE

QUESTIONS

All questions are due to the POC below by no later than 0900 JST on 16 MARCH 2026 (1900 EDT on 15 MARCH 2026) via email. All questions must be submitted in an excel sheet capturing the relevant areas (document, page #& paragraph) the question is in regards to, the question, and any clarification requested.

The USG will collect, combine and respond to all questions via an amendment to the SAM posting.

POCs:

SSgt Rebecca Rohrs rebecca.rohrs@us.af.mil

Lt Kade Forrester kade.forrester.1@us.af.mil

(End Addendum)