Attach_4_Instructions_to_Offerors.pdf

52.204-21 Basic Safeguarding of Covered Contractor Information Systems (Jun 2016)

(a) Definitions. As used in this clause--

“Covered contractor information system” means an information system that is owned or operated by a contractor that processes, stores, or transmits Federal contract information.

“Federal contract information” means information, not intended for public release, that is provided by or generated for the Government under a contract to develop or deliver a product or service to the Government, but not including information provided by the Government to the public (such as on public Web sites) or simple transactional information, such as necessary to process payments.

“Information” means any communication or representation of knowledge such as facts, data, or opinions, in any medium or form, including textual, numerical, graphic, cartographic, narrative, or audiovisual (Committee on National Security Systems Instruction (CNSSI) 4009).

“Information system” means a discrete set of information resources organized for the collection, processing, maintenance, use, sharing, dissemination, or disposition of information (44 U.S.C. 3502).

“Safeguarding” means measures or controls that are prescribed to protect information systems.

(b) Safeguarding requirements and procedures.

(1) The Contractor shall apply the following basic safeguarding requirements and procedures to protect covered contractor information systems. Requirements and procedures for basic safeguarding of covered contractor information systems shall include, at a minimum, the following security controls:

(i) Limit information system access to authorized users, processes acting on behalf of authorized users, or devices (including other information systems).

(ii) Limit information system access to the types of transactions and functions that authorized users are permitted to execute.

(iii) Verify and control/limit connections to and use of external information systems.

(iv) Control information posted or processed on publicly accessible information systems.

(v) Identify information system users, processes acting on behalf of users, or devices.

(vi) Authenticate (or verify) the identities of those users, processes, or devices, as a prerequisite to allowing access to organizational information systems.

(vii) Sanitize or destroy information system media containing Federal Contract Information before disposal or release for reuse.

(viii) Limit physical access to organizational information systems, equipment, and the respective operating environments to authorized individuals.

(ix) Escort visitors and monitor visitor activity; maintain audit logs of physical access; and control and manage physical access devices.

(x) Monitor, control, and protect organizational communications (i.e., information transmitted or received by organizational information systems) at the external boundaries and key internal boundaries of the information systems.

(xi) Implement subnetworks for publicly accessible system components that are physically or logically separated from internal networks.

(xii) Identify, report, and correct information and information system flaws in a timely manner.

(xiii) Provide protection from malicious code at appropriate locations within organizational information systems.

(xiv) Update malicious code protection mechanisms when new releases are available.

(xv) Perform periodic scans of the information system and real-time scans of files from external sources as files are downloaded, opened, or executed.

(2) Other requirements. This clause does not relieve the Contractor of any other specific safeguarding requirements specified by Federal agencies and departments relating to covered contractor information systems generally or other Federal safeguarding requirements for controlled unclassified information (CUI) as established by Executive Order 13556.

(c) Subcontracts. The Contractor shall include the substance of this clause, including this paragraph (c), in subcontracts under this contract (including subcontracts for the acquisition of commercial items, other than commercially available off-the-shelf items), in which the subcontractor may have Federal contract information residing in or transiting through its information system.

(End of clause)

5352.209-9000 ORGANIZATIONAL CONFLICT OF INTEREST (OCT 2010) ALTERNATE I (OCT 2010).

(a) The following restrictions and definitions apply to prevent conflicting roles which may bias the Contractor's judgment or objectivity, or to preclude the Contractor from obtaining an unfair competitive advantage in concurrent or future acquisitions.

(1) Descriptions or definitions:

"Contractor" means the business entity receiving the award of this contract, its parents, affiliates, divisions and subsidiaries.

"Development" means all efforts towards solution of broadly-defined problems. This may encompass research, evaluating technical feasibility, proof of design and test, or engineering of programs not yet approved for acquisition or operation.

"Proprietary Information" means all information designated as proprietary in accordance with law and regulation, and held in confidence or disclosed under restriction to prevent uncontrolled distribution. Examples include limited or restricted data, trade secrets, sensitive financial information, and computer software; and may appear in cost and pricing data or involve classified information.

"System" means the system that is the subject of this contract.

"System Life" means all phases of the system's development, production, or support.

"Systems Engineering" means preparing specifications, identifying and resolving interface problems, developing test requirements, evaluating test data, and supervising design.

"Technical Direction" means developing work statements, determining parameters, directing other Contractors' operations, or resolving technical controversies.

(2)

(i) The Contractor shall prepare and submit complete specifications for nondevelopmental items to be used in a competitive acquisition. The Contractor shall not furnish these items to the DoD. either as a prime or subcontractor, for the duration of the initial production contract plus 1 year.

5352.209-9001 POTENTIAL ORGANIZATIONAL CONFLICT OF INTEREST (OCT 2010),

ALTERNATE I (OCT 2010).

(a) There is potential organizational conflict of interest (see FAR Subpart 9.5.Organizational and Consultant Conflicts of Interest) due to the nature of the work to be performed by the contractor under the support contract.

Accordingly:

(1) This effort requires independent verification, validation, and performance monitoring tasks.Companies and subsidiaries with manufacturing capabilities (that build, operate, or maintain radar systems such as TSR systems) who submit a proposal will be required to identify if there could be a real or perceived Conflict of Interest

(2) As part of the proposal, the offeror shall identify to the Contracting Officer, any real or perceived Conflict of

Interest and how the contractor would avoid, nuetralize, or mitigate the Conflict of Interest.

(b) The organizational conflict of interest clause in this solicitation may not be modified or deleted.