Attachment 4 - Model Section K- Representations and Certifications.pdf

SECTION K FA8650-XX-C-XXXX

PAGE K - 1

I. NOTICE: The following solicitation provisions pertinent to this section are hereby incorporated by reference:

A. FEDERAL ACQUISITION REGULATION SOLICITATION PROVISIONS

52.204-16 COMMERCIAL AND GOVERNMENT ENTITY CODE REPORTING (AUG 2020)

52.204-17 OWNERSHIP OR CONTROL OF OFFEROR (AUG 2020)

B. DEFENSE FEDERAL ACQUISITION REGULATION SUPPLEMENT SOLICITATION PROVISIONS

252.204-7008 COMPLIANCE WITH SAFEGUARDING COVERED DEFENSE INFORMATION

CONTROLS (OCT 2016)

252.204-7016 COVERED DEFENSE TELECOMMUNICATIONS EQUIPMENT OR SERVICES—

REPRESENTATION (DEC 2019)

252.204-7017 PROHIBITION ON THE ACQUISITION OF COVERED DEFENSE

TELECOMMUNICATIONS EQUIPMENT OR SERVICES—REPRESENTATION (MAY

2021)

II. NOTICE: The following solicitation provisions pertinent to this section are hereby incorporated in full text:

A. FEDERAL ACQUISITION REGULATION SOLICITATION PROVISIONS

52.204-08 ANNUAL REPRESENTATIONS AND CERTIFICATIONS (JAN 2022)

(a)

(1) The North American Industry Classification System (NAICS) code for this acquisition is 541715.

(2) The small business size standard is 1000 employees.

(3) The small business size standard for a concern that submits an offer, other than on a construction or service acquisition, but proposes to furnish an end item that it did not itself manufacture, process, or produce is 500 employees if the acquisition—

(i)Is set aside for small business and has a value above the simplified acquisition threshold;

(ii)Uses the HUBZone price evaluation preference regardless of dollar value, unless the offeror waives the price evaluation preference; or

(iii)Is an 8(a), HUBZone, service-disabled veteran-owned, economically disadvantaged women-owned, or women-owned small business set-aside or sole-source award regardless of dollar value.

(b)

(1) If the provision at 52.204-7, System for Award Management, is included in this solicitation, paragraph (d) of this provision applies.

(2) If the provision at 52.204-7, System for Award Management, is not included in this solicitation, and the Offeror has an active registration in the System for Award Management (SAM), the Offeror may choose to use paragraph (d) of this provision instead of completing the corresponding individual representations and certifications in the solicitation. The Offeror shall indicate which option applies by checking one of the following boxes:

https://www.acquisition.gov/far/52.204-7#FAR_52_204_7 https://www.acquisition.gov/far/52.204-7#FAR_52_204_7

PAGE K - 2

(i) □ Paragraph (d) applies.

(ii) □ Paragraph (d) does not apply and the offeror has completed the individual representations and certifications in the solicitation.

(c)

(1) The following representations or certifications in SAM are applicable to this solicitation as indicated:

(i) 52.203-2, Certificate of Independent Price Determination. This provision applies to solicitations when a firm-fixed-price contract or fixed-price contract with economic price adjustment is contemplated, unless–

(A) The acquisition is to be made under the simplified acquisition procedures in part 13;

(B) The solicitation is a request for technical proposals under two-step sealed bidding procedures;

or

(C) The solicitation is for utility services for which rates are set by law or regulation.

(ii) 52.203-11, Certification and Disclosure Regarding Payments to Influence Certain Federal Transactions. This provision applies to solicitations expected to exceed $150,000.

(iii) 52.203-18, Prohibition on Contracting with Entities that Require Certain Internal Confidentiality Agreements or Statements-Representation. This provision applies to all solicitations.

(iv) 52.204-3, Taxpayer Identification. This provision applies to solicitations that do not include the provision at 52.204-7, System for Award Management.

(v) 52.204-5, Women-Owned Business (Other Than Small Business). This provision applies to solicitations that-

(A) Are not set aside for small business concerns;

(B) Exceed the simplified acquisition threshold; and

(C) Are for contracts that will be performed in the United States or its outlying areas.

(vi) 52.204-26, Covered Telecommunications Equipment or Services-Representation. This provision applies to all solicitations.

(vii) 52.209-2, Prohibition on Contracting with Inverted Domestic Corporations-Representation.

(viii) 52.209-5, CertificationRegarding Responsibility Matters. This provision applies to solicitations where the contract value is expected to exceed the simplified acquisition threshold.

(ix) 52.209-11, Representation by Corporations Regarding Delinquent Tax Liability or a Felony Conviction under any Federal Law. This provision applies to all solicitations.

(x) 52.214-14, Place of Performance-Sealed Bidding. This provision applies to invitations for bids except those in which the place of performance is specified by the Government.

(xi) 52.215-6, Place of Performance. This provision applies to solicitations unless the place of performance is specified by the Government.

https://www.acquisition.gov/far/52.203-2#FAR_52_203_2 https://www.acquisition.gov/far/part-13#FAR_Part_13 https://www.acquisition.gov/far/52.203-11#FAR_52_203_11 https://www.acquisition.gov/far/52.203-18#FAR_52_203_18 https://www.acquisition.gov/far/52.204-3#FAR_52_204_3 https://www.acquisition.gov/far/52.204-7#FAR_52_204_7 https://www.acquisition.gov/far/52.204-5#FAR_52_204_5 https://www.acquisition.gov/far/52.204-26#FAR_52_204_26 https://www.acquisition.gov/far/52.209-2#FAR_52_209_2 https://www.acquisition.gov/far/52.209-5#FAR_52_209_5 https://www.acquisition.gov/far/52.209-11#FAR_52_209_11 https://www.acquisition.gov/far/52.214-14#FAR_52_214_14 https://www.acquisition.gov/far/52.215-6#FAR_52_215_6

PAGE K - 3

(xii) 52.219-1, Small Business Program Representations (Basic, Alternates I, and II). This provision applies to solicitations when the contract will be performed in the United States or its outlying areas.

(A) The basic provision applies when the solicitations are issued by other than DoD, NASA, and the Coast Guard.

(B) The provision with its Alternate I applies to solicitations issued by DoD, NASA, or the Coast Guard.

(C) The provision with its Alternate II applies to solicitations that will result in a multiple-award contract with more than one NAICS code assigned.

(xiii) 52.219-2, Equal Low Bids. This provision applies to solicitations when contracting by sealed bidding and the contract will be performed in the United States or its outlying areas.

(xiv) 52.222-22, Previous Contracts and Compliance Reports. This provision applies to solicitations that include the clause at 52.222-26, Equal Opportunity.

(xv) 52.222-25, Affirmative Action Compliance. This provision applies to solicitations, other than those for construction, when the solicitation includes the clause at 52.222-26, Equal Opportunity.

(xvi) 52.222-38, Compliance with Veterans’ Employment Reporting Requirements. This provision applies to solicitations when it is anticipated the contract award will exceed the simplified acquisition threshold and the contract is not for acquisition of commercial products or commercial services.

(xvii) 52.223-1, Biobased Product Certification. This provision applies to solicitations that require the delivery or specify the use of USDA–designated items; or include the clause at 52.223-2, Affirmative Procurement of Biobased Products Under Service and Construction Contracts.

(xviii) 52.223-4, Recovered Material Certification. This provision applies to solicitations that are for, or specify the use of, EPA–designated items.

(xix) 52.223-22, Public Disclosure of Greenhouse Gas Emissions and Reduction Goals- Representation. This provision applies to solicitations that include the clause at 52.204-7.)

(xx) 52.225-2, Buy American Certificate. This provision applies to solicitations containing the clause at 52.225-1.

(xxi) 52.225-4, Buy American-Free Trade Agreements-Israeli Trade Act Certificate. (Basic, Alternates I, II, and III.) This provision applies to solicitations containing the clause at 52.225-3.

(A) If the acquisition value is less than $25,000, the basic provision applies.

(B) If the acquisition value is $25,000 or more but is less than $50,000, the provision with its Alternate I applies.

(C) If the acquisition value is $50,000 or more but is less than $92,319, the provision with its Alternate II applies.

(D) If the acquisition value is $92,319 or more but is less than $100,000, the provision with its Alternate III applies.

(xxii) 52.225-6, Trade Agreements Certificate. This provision applies to solicitations containing the clause at 52.225-5.

https://www.acquisition.gov/far/52.219-1#FAR_52_219_1 https://www.acquisition.gov/far/52.219-2#FAR_52_219_2 https://www.acquisition.gov/far/52.222-22#FAR_52_222_22 https://www.acquisition.gov/far/52.222-26#FAR_52_222_26 https://www.acquisition.gov/far/52.222-25#FAR_52_222_25 https://www.acquisition.gov/far/52.222-26#FAR_52_222_26 https://www.acquisition.gov/far/52.222-38#FAR_52_222_38 https://www.acquisition.gov/far/52.223-1#FAR_52_223_1 https://www.acquisition.gov/far/52.223-2#FAR_52_223_2 https://www.acquisition.gov/far/52.223-4#FAR_52_223_4 https://www.acquisition.gov/far/52.223-22#FAR_52_223_22 https://www.acquisition.gov/far/52.204-7#FAR_52_204_7 https://www.acquisition.gov/far/52.225-2#FAR_52_225_2 https://www.acquisition.gov/far/52.225-1#FAR_52_225_1 https://www.acquisition.gov/far/52.225-4#FAR_52_225_4 https://www.acquisition.gov/far/52.225-3#FAR_52_225_3 https://www.acquisition.gov/far/52.225-6#FAR_52_225_6 https://www.acquisition.gov/far/52.225-5#FAR_52_225_5

PAGE K - 4

(xxiii) 52.225-20, Prohibition on Conducting Restricted Business Operations in Sudan-Certification.

This provision applies to all solicitations.

(xxiv) 52.225-25, Prohibition on Contracting with Entities Engaging in Certain Activities or Transactions Relating to Iran-Representation and Certifications. This provision applies to all solicitations.

(xxv) 52.226-2, Historically Black College or University and Minority Institution Representation. This provision applies to solicitations for research, studies, supplies, or services of the type normally acquired from higher educational institutions.

(2) The following representations or certifications are applicable as indicated by the Contracting Officer:

[Contracting Officer check as appropriate.]

__ (i) 52.204-17, Ownership or Control of Offeror.

__ (ii) 52.204-20, Predecessor of Offeror.

__ (iii) 52.222-18, Certification Regarding Knowledge of Child Labor for Listed End Products.

__ (iv) 52.222-48, Exemption from Application of the Service Contract Labor Standards to Contracts for Maintenance, Calibration, or Repair of Certain Equipment- Certification.

__ (v) 52.222-52, Exemption from Application of the Service Contract Labor Standards to Contracts for Certain Services-Certification.

__ (vi) 52.223-9, with its Alternate I, Estimate of Percentage of Recovered Material Content for EPA–Designated Products (Alternate I only).

__ (vii) 52.227-6, Royalty Information.

__ (A) Basic.

__ (B) Alternate I.

__ (viii) 52.227-15, Representation of Limited Rights Data and Restricted Computer Software.

(d) The offeror has completed the annual representations and certifications electronically in SAM website accessed through https://www.sam.gov. After reviewing the SAM information, the offeror verifies by submission of the offer that the representations and certifications currently posted electronically that apply to this solicitation as indicated in paragraph (c) of this provision have been entered or updated within the last 12 months, are current, accurate, complete, and applicable to this solicitation (including the business size standard applicable to the NAICS code referenced for this solicitation), as of the date of this offer and are incorporated in this offer by reference (see FAR 4.1201); except for the changes identified below [offeror to insert changes, identifying change by clause number, title, date]. These amended representation(s) and/or certification(s) are also incorporated in this offer and are current, accurate, and complete as of the date of this offer.

FAR Clause Title Date Change

Any changes provided by the offeror are applicable to this solicitation only, and do not result in an update to the representations and certifications posted on SAM.

https://www.acquisition.gov/far/52.225-20#FAR_52_225_20 https://www.acquisition.gov/far/52.225-25#FAR_52_225_25 https://www.acquisition.gov/far/52.226-2#FAR_52_226_2 https://www.acquisition.gov/far/52.204-17#FAR_52_204_17 https://www.acquisition.gov/far/52.204-20#FAR_52_204_20 https://www.acquisition.gov/far/52.222-18#FAR_52_222_18 https://www.acquisition.gov/far/52.222-48#FAR_52_222_48 https://www.acquisition.gov/far/52.222-52#FAR_52_222_52 https://www.acquisition.gov/far/52.223-9#FAR_52_223_9 https://www.acquisition.gov/far/52.227-6#FAR_52_227_6 https://www.acquisition.gov/far/52.227-15#FAR_52_227_15 https://www.sam.gov/ https://www.acquisition.gov/far/4.1201#FAR_4_1201

PAGE K - 5

(End of provision)

52.204-24 REPRESENTATION REGARDING CERTAIN TELECOMMUNICATIONS AND VIDEO

SURVEILLANCE SERVICES OR EQUIPMENT (NOV 2021)

The Offeror shall not complete the representation at paragraph (d)(1) of this provision if the Offeror has represented that it "does not provide covered telecommunications equipment or services as a part of its offered products or services to the Government in the performance of any contract , subcontract , or other contractual instrument" in paragraph (c)(1) in the provision at 52.204-26, Covered Telecommunications Equipment or Services —Representation, or in paragraph (v)(2)(i) of the provision at 52.212- 3, Offeror Representations and Certifications-Commercial Products or Commercial Services. The Offeror shall not complete the representation in paragraph (d)(2) of this provision if the Offeror has represented that it "does not use covered telecommunications equipment or services , or any equipment , system, or service that uses covered telecommunications equipment or services " in paragraph (c)(2) of the provision at 52.204-26, or in paragraph (v)(2)(ii) of the provision at 52.212-3.

(a) Definitions . As used in this provision—

Backhaul , covered telecommunications equipment or services , critical technology , interconnection arrangements , reasonable inquiry , roaming , and substantial or essential component have the meanings provided in the clause 52.204-25, Prohibition on Contracting for Certain Telecommunications and Video Surveillance Services or Equipment .

(b) Prohibition.

(1) Section 889(a)(1)(A) of the John S. McCain National Defense Authorization Act for Fiscal Year 2019 (Pub. L.

115-232) prohibits the head of an executive agency on or after August 13, 2019, from procuring or obtaining, or extending or renewing a contract to procure or obtain, any equipment , system, or service that uses covered telecommunications equipment or services as a substantial or essential component of any system, or as critical technology as part of any system. Nothing in the prohibition shall be construed to—

(i) Prohibit the head of an executive agency from procuring with an entity to provide a service that connects to the facilities of a third-party, such as backhaul , roaming , or interconnection arrangements ; or

(ii) Cover telecommunications equipment that cannot route or redirect user data traffic or cannot permit visibility into any user data or packets that such equipment transmits or otherwise handles.

(2) Section 889(a)(1)(B) of the John S. McCain National Defense Authorization Act for Fiscal Year 2019 (Pub. L. 115-232) prohibits the head of an executive agency on or after August 13, 2020, from entering into a contract or extending or renewing a contract with an entity that uses any equipment , system, or service that uses covered telecommunications equipment or services as a substantial or essential component of any system, or as critical technology as part of any system. This prohibition applies to the use of covered telecommunications equipment or services , regardless of whether that use is in performance of work under a Federal contract .

Nothing in the prohibition shall be construed to—

(i) Prohibit the head of an executive agency from procuring with an entity to provide a service that connects to the facilities of a third-party, such as backhaul , roaming , or interconnection arrangements ; or

(ii) Cover telecommunications equipment that cannot route or redirect user data traffic or cannot permit visibility into any user data or packets that such equipment transmits or otherwise handles.

(c) Procedures. The Offeror shall review the list of excluded parties in the System for Award Management (SAM) ( https://www.sam.gov) for entities excluded from receiving federal awards for "covered telecommunications equipment or services ".

https://www.acquisition.gov/far/52.204-26#FAR_52_204_26 https://www.acquisition.gov/far/52.212-3#FAR_52_212_3 https://www.acquisition.gov/far/52.212-3#FAR_52_212_3 https://www.acquisition.gov/far/52.204-26#FAR_52_204_26 https://www.acquisition.gov/far/52.212-3#FAR_52_212_3 https://www.acquisition.gov/far/52.204-25#FAR_52_204_25 https://www.sam.gov/

PAGE K - 6

(d) Representation. The Offeror represents that—

(1) It □ will, □ will not provide covered telecommunications equipment or services to the Government in the performance of any contract , subcontract or other contractual instrument resulting from this solicitation .

The Offeror shall provide the additional disclosure information required at paragraph (e)(1) of this section if the Offeror responds "will" in paragraph (d)(1) of this section; and

(2) After conducting a reasonable inquiry , for purposes of this representation, the Offeror represents that—

It □ does, □ does not use covered telecommunications equipment or services , or use any equipment , system, or service that uses covered telecommunications equipment or services . The Offeror shall provide the additional disclosure information required at paragraph (e)(2) of this section if the Offeror responds "does" in paragraph (d)(2) of this section.

(e) Disclosures.

(1) Disclosure for the representation in paragraph (d)(1) of this provision. If the Offeror has responded "will" in the representation in paragraph (d)(1) of this provision, the Offeror shall provide the following information as part of the offer :

(i) For covered equipment —

(A) The entity that produced the covered telecommunications equipment (include entity name, unique entity identifier , CAGE code, and whether the entity was the original equipment manufacturer (OEM) or a distributor, if known);

(B) A description of all covered telecommunications equipment offered (include brand; model number, such as OEM number, manufacturer part number, or wholesaler number; and item description, as applicable); and

(C) Explanation of the proposed use of covered telecommunications equipment and any factors relevant to determining if such use would be permissible under the prohibition in paragraph (b)(1) of this provision.

(ii) For covered services—

(A) If the service is related to item maintenance: A description of all covered telecommunications services offered (include on the item being maintained: Brand; model number, such as OEM number, manufacturer part number, or wholesaler number; and item description, as applicable); or

(B) If not associated with maintenance, the Product Service Code (PSC) of the service being provided; and explanation of the proposed use of covered telecommunications services and any factors relevant to determining if such use would be permissible under the prohibition in paragraph (b)(1) of this provision.

(2) Disclosure for the representation in paragraph (d)(2) of this provision. If the Offeror has responded "does" in the representation in paragraph (d)(2) of this provision, the Offeror shall provide the following information as part of the offer :

(i) For covered equipment —

(A) The entity that produced the covered telecommunications equipment (include entity name, unique entity identifier , CAGE code, and whether the entity was the OEM or a distributor, if known);

PAGE K - 7

(B) A description of all covered telecommunications equipment offered (include brand; model number, such as OEM number, manufacturer part number, or wholesaler number; and item description, as applicable); and

(C) Explanation of the proposed use of covered telecommunications equipment and any factors relevant to determining if such use would be permissible under the prohibition in paragraph (b)(2) of this provision.

(ii) For covered services—

(A) If the service is related to item maintenance: A description of all covered telecommunications services offered (include on the item being maintained: Brand; model number, such as OEM number, manufacturer part number, or wholesaler number; and item description, as applicable); or

(B) If not associated with maintenance, the PSC of the service being provided; and explanation of the proposed use of covered telecommunications services and any factors relevant to determining if such use would be permissible under the prohibition in paragraph (b)(2) of this provision.

52.225-25 PROHIBITION ON CONTRACTING WITH ENTITIES ENGAGING IN CERTAIN ACTIVITIES OR

TRANSACTIONS RELATING TO IRAN--REPRESENTATION AND CERTIFICATIONS (JUN 2020)

(a) Definitions. As used in this provision-

Person—

(1) Means–

(i) A natural person;

(ii) A corporation, business association, partnership, society, trust, financial institution, insurer, underwriter, guarantor, and any other business organization, any other nongovernmental entity, organization, or group, and any governmental entity operating as a business enterprise; and

(iii) Any successor to any entity described in paragraph (1)(ii) of this definition; and

(2) Does not include a government or governmental entity that is not operating as a business enterprise.

Sensitive technology-

(1) Means hardware, software, telecommunications equipment, or any other technology that is to be used specifically-

(i) To restrict the free flow of unbiased information in Iran; or

(ii) To disrupt, monitor, or otherwise restrict speech of the people of Iran; and

(2) Does not include information or informational materials the export of which the President does not have the authority to regulate or prohibit pursuant to section 203(b)(3) of the International Emergency Economic Powers Act (50 U.S.C. 1702(b)(3)).

(b) The offeror shall e-mail questions concerning sensitive technology to the Department of State at CISADA106@state.gov.

(c) Except as provided in paragraph (d) of this provision or if a waiver has been granted in accordance with Federal Acquisition Regulation (FAR) 25.703-4, by submission of its offer, the offeror— http://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title50-section1702&num=0&edition=prelim https://acquisition.gov/content/part-9-contractor-qualifications https://acquisition.gov/content/part-25-foreign-acquisition#i1091310

PAGE K - 8

(1) Represents, to the best of its knowledge and belief, that the offeror does not export any sensitive technology to the government of Iran or any entities or individuals owned or controlled by, or acting on behalf or at the direction of, the government of Iran;

(2) Certifies that the offeror, or any person owned or controlled by the offeror, does not engage in any activities for which sanctions may be imposed under section 5 of the Iran Sanctions Act. These sanctioned activities are in the areas of development of the petroleum resources of Iran, production of refined petroleum products in Iran, sale and provision of refined petroleum products to Iran, and contributing to Iran's ability to acquire or develop certain weapons or technologies; and

(3) Certifies that the offeror, and any person owned or controlled by the offeror, does not knowingly engage in any transaction that exceeds the threshold at FAR 25.703-2(a)(2) with Iran's Revolutionary Guard Corps or any of its officials, agents, or affiliates, the property and interests in property of which are blocked pursuant to the International Emergency Economic Powers Act (50 U.S.C. 1701 et seq.) (see OFAC's Specially Designated Nationals and Blocked Persons List at https://www.treasury.gov/resource-center/sanctions/SDN- List/Pages/default.aspx).

(d) Exception for trade agreements. The representation requirement of paragraph (c)(1) and the certification requirements of paragraphs (c)(2) and (c)(3) of this provision do not apply if-

(1) This solicitation includes a trade agreements notice or certification (e.g., 52.225-4, 52.225-6, 52.225- 12, 52.225-24, or comparable agency provision); and

(2) The offeror has certified that all the offered products to be supplied are designated country end products or designated country construction material.

(End of provision)

B. DEFENSE FEDERAL ACQUISITION REGULATION SUPPLEMENT SOLICITATION PROVISIONS

252.203-7005 REPRESENTATION RELATING TO COMPENSATION OF FORMER DOD OFFICIALS (NOV 2011)

(a) Definition. “Covered DoD official” is defined in the clause at 252.203-7000 , Requirements Relating to Compensation of Former DoD Officials.

(b) By submission of this offer, the offeror represents, to the best of its knowledge and belief, that all covered DoD officials employed by or otherwise receiving compensation from the offeror, and who are expected to undertake activities on behalf of the offeror for any resulting contract, are presently in compliance with all post-employment restrictions covered by 18 U.S.C. 207, 41 U.S.C. 2101-2107, and 5 CFR parts 2637 and 2641, including Federal Acquisition Regulation 3.104-2.

252.204-7019 NIST SP 800-171 DOD ASSESSMENT REQUIRMENTS (NOV 2020)

(a) Definitions.

“Basic Assessment”, “Medium Assessment”, and “High Assessment” have the meaning given in the clause 252.204-7020, NIST SP 800-171 DoD Assessments.

“Covered contractor information system” has the meaning given in the clause 252.204-7012, Safeguarding Covered Defense Information and Cyber Incident Reporting, of this solicitation.

https://acquisition.gov/content/part-25-foreign-acquisition#i1091276 https://www.treasury.gov/resource-center/sanctions/SDN-List/Pages/default.aspx https://www.treasury.gov/resource-center/sanctions/SDN-List/Pages/default.aspx https://acquisition.gov/content/part-52-solicitation-provisions-and-contract-clauses#i1053526 https://acquisition.gov/content/part-52-solicitation-provisions-and-contract-clauses#i1053693 https://acquisition.gov/content/part-52-solicitation-provisions-and-contract-clauses#i1054180 https://acquisition.gov/content/part-52-solicitation-provisions-and-contract-clauses#i1054180 https://acquisition.gov/content/part-52-solicitation-provisions-and-contract-clauses#i1054813 https://www.acquisition.gov/dfars/252.203-7000-requirements-relating-compensation-former-dod-officials.#DFARS-252.203-7000

PAGE K - 9

(b) Requirement. In order to be considered for award, if the Offeror is required to implement NIST SP 800- 171, the Offeror shall have a current assessment (i.e., not more than 3 years old unless a lesser time is specified in the solicitation) (see 252.204-7020) for each covered contractor information system that is relevant to the offer, contract, task order, or delivery order. The Basic, Medium, and High NIST SP 800-171 DoD Assessments are described in the NIST SP 800-171 DoD Assessment Methodology located at https://www.acq.osd.mil/dpap/pdi/cyber/strategically_assessing_contractor_implementation_of_NIST_SP_800- 171.html.

(c) Procedures.

(1) The Offeror shall verify that summary level scores of a current NIST SP 800-171 DoD Assessment (i.e., not more than 3 years old unless a lesser time is specified in the solicitation) are posted in the Supplier Performance Risk System (SPRS) ( https://www.sprs.csd.disa.mil/) for all covered contractor information systems relevant to the offer.

(2) If the Offeror does not have summary level scores of a current NIST SP 800-171 DoD Assessment (i.e., not more than 3 years old unless a lesser time is specified in the solicitation) posted in SPRS, the Offeror may conduct and submit a Basic Assessment to mailto:webptsmh@navy.mil for posting to SPRS in the format identified in paragraph (d) of this provision.

(d) Summary level scores. Summary level scores for all assessments will be posted 30 days post-assessment in SPRS to provide DoD Components visibility into the summary level scores of strategic assessments.

(1) Basic Assessments. An Offeror may follow the procedures in paragraph (c)(2) of this provision for posting Basic Assessments to SPRS.

(i) The email shall include the following information:

(A) Cybersecurity standard assessed (e.g., NIST SP 800-171 Rev 1).

(B) Organization conducting the assessment (e.g., Contractor self-assessment).

(C) For each system security plan (security requirement 3.12.4) supporting the performance of a DoD contract—

(1) All industry Commercial and Government Entity (CAGE) code(s) associated with the information system(s) addressed by the system security plan; and

(2) A brief description of the system security plan architecture, if more than one plan exists.

(D) Date the assessment was completed.

(E) Summary level score (e.g., 95 out of 110, NOT the individual value for each requirement).

(F) Date that all requirements are expected to be implemented (i.e., a score of 110 is expected to be achieved) based on information gathered from associated plan(s) of action developed in accordance with NIST

SP 800-171.

(ii) If multiple system security plans are addressed in the email described at paragraph (d)(1)(i) of this section, the Offeror shall use the following format for the report:

System Security Plan

CAGE Codes supported by this plan

Brief description of the plan architecture

Dater of assessment

Total Score Date score of 110 will be achieved https://www.acq.osd.mil/dpap/pdi/cyber/strategically_assessing_contractor_implementation_of_NIST_SP_800-171.html https://www.acq.osd.mil/dpap/pdi/cyber/strategically_assessing_contractor_implementation_of_NIST_SP_800-171.html https://www.sprs.csd.disa.mil/ mailto:webptsmh@navy.mil

PAGE K - 10

(2) Medium and High Assessments. DoD will post the following Medium and/or High Assessment summary level scores to SPRS for each system assessed:

(i) The standard assessed (e.g., NIST SP 800-171 Rev 1).

(ii) Organization conducting the assessment, e.g., DCMA, or a specific organization (identified by Department of Defense Activity Address Code (DoDAAC)).

(iii) All industry CAGE code(s) associated with the information system(s) addressed by the system security plan.

(iv) A brief description of the system security plan architecture, if more than one system security plan exists.

(v) Date and level of the assessment, i.e., medium or high.

(vi) Summary level score (e.g., 105 out of 110, not the individual value assigned for each requirement).

(vii) Date that all requirements are expected to be implemented (i.e., a score of 110 is expected to be achieved) based on information gathered from associated plan(s) of action developed in accordance with NIST

SP 800-171.

(3) Accessibility.

(i) Assessment summary level scores posted in SPRS are available to DoD personnel, and are protected, in accordance with the standards set forth in DoD Instruction 5000.79, Defense-wide Sharing and Use of Supplier and Product Performance Information (PI).

(ii) Authorized representatives of the Offeror for which the assessment was conducted may access SPRS to view their own summary level scores, in accordance with the SPRS Software User’s Guide for Awardees/Contractors available at https://www.sprs.csd.disa.mil/pdf/SPRS_Awardee.pdf.

(iii) A High NIST SP 800-171 DoD Assessment may result in documentation in addition to that listed in this section. DoD will retain and protect any such documentation as “Controlled Unclassified Information (CUI)” and intended for internal DoD use only. The information will be protected against unauthorized use and release, including through the exercise of applicable exemptions under the Freedom of Information Act (e.g., Exemption 4 covers trade secrets and commercial or financial information obtained from a contractor that is privileged or confidential).

252.227-7017 IDENTIFICATION AND ASSERTION OF USE, RELEASE, OR DISCLOSURE

RESTRICTIONS (JAN 2011)

(a) The terms used in this provision are defined in following clause or clauses contained in this solicitation—

(1) If a successful offeror will be required to deliver technical data, the Rights in Technical Data-- Noncommercial Items clause, or, if this solicitation contemplates a contract under the Small Business Innovation Research Program, the Rights in Noncommercial Technical Data and Computer Software--Small Business Innovation Research (SBIR) Program clause.

https://www.sprs.csd.disa.mil/pdf/SPRS_Awardee.pdf

PAGE K - 11

(2) If a successful offeror will not be required to deliver technical data, the Rights in Noncommercial Computer Software and Noncommercial Computer Software Documentation clause, or, if this solicitation contemplates a contract under the Small Business Innovation Research Program, the Rights in Noncommercial Technical Data and Computer Software--Small Business Innovation Research (SBIR) Program clause.

(b) The identification and assertion requirements in this provision apply only to technical data, including computer software documentation, or computer software to be delivered with other than unlimited rights. For contracts to be awarded under the Small Business Innovation Research Program, the notification and identification requirements do not apply to technical data or computer software that will be generated under the resulting contract. Notification and identification is not required for restrictions based solely on copyright.

(c) Offers submitted in response to this solicitation shall identify, to the extent known at the time an offer is submitted to the Government, the technical data or computer software that the Offeror, its subcontractors or suppliers, or potential subcontractors or suppliers, assert should be furnished to the Government with restrictions on use, release, or disclosure.

(d) The Offeror's assertions, including the assertions of its subcontractors or suppliers or potential subcontractors or suppliers, shall be submitted as an attachment to its offer in the following format, dated and signed by an official authorized to contractually obligate the Offeror:

Identification and Assertion of Restrictions on the Government's Use, Release, or Disclosure of Technical Data or Computer Software.

The Offeror asserts for itself, or the persons identified below, that the Government's rights to use, release, or disclose the following technical data or computer software should be restricted:

Technical Data or

Computer Software

Name of Person to be Furnished Basis for Asserted Rights Asserting

With Restrictions* Assertion** Category*** Restrictions****

(LIST)***** (LIST) (LIST) (LIST)

*For technical data (other than computer software documentation) pertaining to items, components, or processes developed at private expense, identify both the deliverable technical data and each such item, component, or process. For computer software or computer software documentation identify the software or documentation.

**Generally, development at private expense, either exclusively or partially, is the only basis for asserting restrictions. For technical data, other than computer software documentation, development refers to development of the item, component, or process to which the data pertain.

The Government's rights in computer software documentation generally may not be restricted.

For computer software, development refers to the software. Indicate whether development was accomplished exclusively or partially at private expense. If development was not accomplished at private expense, or for computer software documentation, enter the specific basis for asserting restrictions.

***Enter asserted rights category (e.g., government purpose license rights from a prior contract, rights in SBIR data generated under another contract, limited, restricted, or government purpose rights under this or a prior contract, or specially negotiated licenses).

PAGE K - 12

****Corporation, individual, or other person, as appropriate.

*****Enter “none” when all data or software will be submitted without restrictions.

Date _________________________________ Printed Name and Title _________________________________

Signature _________________________________

(End of identification and assertion)

(e) An offeror's failure to submit, complete, or sign the notification and identification required by paragraph (d) of this provision with its offer may render the offer ineligible for award.

(f) If the Offeror is awarded a contract, the assertions identified in paragraph (d) of this provision shall be listed in an attachment to that contract. Upon request by the Contracting Officer, the Offeror shall provide sufficient information to enable the Contracting Officer to evaluate any listed assertion.