FY23 NOFO Responsible State Behavior in Cyberspace Capacity Building FINAL.pdf

U.S. DEPARTMENT OF STATE

BUREAU OF CYBERSPACE AND DIGITAL POLICY (CDP)

Notice of Funding Opportunity (NOFO): Responsible State Behavior in Cyberspace Capacity Building

This is the announcement of funding opportunity number SFOP0009899

Federal Assistance Listing/Catalog of Federal Domestic Assistance Number: 19.665

Type of Solicitation: Open Competition

Deadline for Applications: 11:59 PM EDT on 4 August 2023

Total Funding: $1,500,000 USD

In funds appropriated under Title III of the Department of State, Foreign Operations, and Related Programs Appropriations Act (Div. K. P.L. 117-103 (FY 2022 SFOAA) under the headings “Economic Support Fund”.

FY22 Economic Support Funds (ESF)/Global/P.S.4: $1,500,000

Anticipated Number of Awards: 1 or 2 ($500,000 to $1,500,000)

Type of Award: Cooperative Agreement

Period of Performance: 18 months

Anticipated Time to Award: September 2023 (Pending availability of funds)

Deadline for Questions: 11:59 PM EST on 24 July 2023

Eligibility Category:

• U.S.- based non-profit/non-governmental organizations subject to sections 501 (c)(3) and 501 (c)(6) of the U.S. tax code

• Foreign based non-profit/non-governmental organizations (NGO)

• Public International Organizations (PIOs)

• Private, public, or state institutions of higher education (universities and colleges)

• For-profit organizations or businesses.

Type of Applicant: Organizations only. Individuals not eligible to apply.

Number of Applications: No more than one (1) application per organization.

This notice is subject to availability of funding.

Section A: Project Description

A.1 Executive Summary

The U.S. Department of State, Bureau of Cyberspace and Digital Policy (CDP) announces an open competition for organizations interested in submitting applications that seek to improve international stability in cyberspace.

CDP seeks to partner with a capable organization(s) to develop curriculum and provide capacity building for two complementary, yet distinct, focal areas that seek to improve international stability in cyberspace. In particular, the UN’s framework of responsible state behavior in cyberspace and how international law applies to state conduct in cyberspace.

Pending the availability of funds, CDP anticipates awarding 1-2 cooperative agreements, totaling $1,500,000. If one award, the cooperative agreement must address both Project Objectives 1 and 2. If two awards, each cooperative agreement would address either Project Objective 1 OR Project Objective 2. See Section A3: Project Objectives, Outcomes, Suggested Activities, and Indicators.

The capacity building is intended to provide specialized and technical in-person programming to primarily but not limited to government officials from partner countries. Participants and audiences will be key stakeholders in cybersecurity and digital policy in their respective countries, regional or multilateral institutions.

Capacity building activities are intended to take place globally, convening 8 events per objective throughout the project period. Activities should offer a mix of in-person and virtual attendance. CDP will coordinate with award recipient to identify specific participating countries.

The capacity building may take place in the United States and/or in other countries.

Background

Recognizing the growing role of technology as a cross-cutting national security issue, the State

Department created the Bureau of Cyberspace and Digital Policy (CDP) in April 2022 to lead and coordinate U.S. diplomacy on cyber and digital policy. The bureau addresses the national security challenges and economic opportunities presented by cyberspace and digital technologies and promotes standards and norms that are fair, transparent, and support the rights-respecting use of technology. Through robust engagement in multilateral organizations, bilateral diplomacy with partners round the world, and encouragement of responsible state behavior in cyberspace, CDP empowers U.S. leadership in cyber, digital, and technology diplomacy.

CDP deploys foreign assistance to strengthen international cooperation, create new partnerships, promote economic growth and development, and assist in the defense of our foreign partners to uphold an open, interoperable, secure, and reliable Internet.

Calibrated cyber and digital policies help form the backbone of our deeply interconnected world, are vital to U.S. national and economic security, and are required to fully harness the transformative power of technology. As citizens around the world eagerly seek increased Internet connectivity to access the tremendous opportunities afforded by digital transformation, the United States is working to ensure this connectivity is secure, meaningful, governed fairly, and serves the interests of its users. Foreign assistance programs aim to advance an affirmative vision of technology as a tool that supports collective security, prosperity, and democratic values.

More information on CDP is available at https://www.state.gov/bureaus-offices/deputy-secretary-of-state/bureau-of-cyberspace-and-digital-policy/.

The Digital Connectivity and Cybersecurity Partnership (DCCP) is a global, interagency initiative led by CDP and the U.S. Department of State to promote an open, interoperable, secure, and reliable internet. DCCP provides foreign assistance to partner nations to promote investments in secure, diverse, and resilient information and communication technologies (ICT) infrastructure; support the adoption of inclusive, rights-respecting, multi-stakeholder models of internet governance; grow global markets for trusted ICT goods and services; and enhance cybersecurity. CDP foreign assistance programming follows these core tenets of DCCP. More information on DCCP is available at https://www.state.gov/digital-connectivity-and-cybersecurity-partnership/.

The United States seeks common understanding on critical cyber issues of national and international significance. For over a decade, the United States and partner nations have worked to develop and coalesce around a non-binding framework of responsible state behavior in cyberspace that promotes international stability and transparency. The framework affirms that existing international law applies to state behavior in cyberspace and includes certain voluntary norms of state behavior and implementation of practical confidence building measures to help reduce the risk of conflict stemming from cyber incidents. Many countries, particularly those unfamiliar with previous UN discussions on responsible state behavior in cyberspace, would benefit from being better informed and engaged in the implementation of https://www.state.gov/bureaus-offices/deputy-secretary-of-state/bureau-of-cyberspace-and-digital-policy/ https://www.state.gov/bureaus-offices/deputy-secretary-of-state/bureau-of-cyberspace-and-digital-policy/ https://www.state.gov/digital-connectivity-and-cybersecurity-partnership/ https://www.state.gov/digital-connectivity-and-cybersecurity-partnership/ the framework. All UN member countries have endorsed the framework multiple times, most recently in 2021 (found here).

Given the importance of implementing the framework for the maintenance of international peace and security in cyberspace, there is a pressing need for outreach and training for a broader array of civilian government officials to ensure that they can effectively participate in the OEWG and contribute to discussions about implementing the framework.

Separately, but relatedly, many countries emphasized the need for capacity building on international law at recent meetings of the UN OEWG. Many countries, particularly from developing economies, also expressed interest in further exploring how existing international law applies to state conduct in cyberspace. Certain countries continue to push for a comprehensive cyber treaty to address gaps that they claim existing international law inadequately addresses. The United States and other likeminded countries believe that existing international law is adequate to regulate state behavior in cyberspace and that there are no known gaps that need to be filled by new rules.

To create common understandings on how international law applies to state conduct in cyberspace, the United States and likeminded countries have encouraged other countries to develop and articulate national positions on this issue. With that in mind, many countries, particularly from developing economies, lack adequate legal resources and capacities to easily engage in the development of their views on how international law applies in cyberspace.

A2. Program Goals and Objectives

Program Goals and Objectives

This project should contribute to the following CDP strategic goal and objectives, and DCCP pillar four (4).

CDP Strategic Goals and Objectives:

Bureau Goal 1: Advance cyber and digital policies that align with U.S. national interests and foreign policy objectives.

Objective 1.1: Deepen relationships with existing U.S. partners, forge new partnerships, and engage with a range of countries to advance a common vision for the Internet and digital technologies.

Objective 1.3: Identify, enhance, cultivate, and develop strategic engagements across the private sector and multistakeholder communities.

Objective 1.4: Increase secure and open digital connectivity and access to the Internet.

DCCP Pillars:

Pillar 4: Enhance Cybersecurity by increasing adoption and implementation of cybersecurity best practices.

https://front.un-arm.org/wp-content/uploads/2021/08/A_76_135-2104030E-1.pdf

A3. Project Objectives, Outcomes, Activities, and Indicators

Project Objective 1:

• Raise awareness and deepen understanding of the global framework of responsible state behavior in cyberspace, which supports the application of existing international law, adherence to certain voluntary norms of state behavior, and the development, and implementation of the framework.

Target audience: Foreign diplomats and national government policy makers and leaders that participate in UN First Committee cyber processes from foreign assistance eligible countries.

Expected Outcomes:

• 1.1 Increased awareness on each component of the framework of responsible state behavior in cyberspace.

• 1.2 Increased holistic understanding of the framework and how it fits into international negotiations of what constitutes responsible state behavior in cyberspace.

• 1.3 Increased ability of civilian government officials to articulate and implement all or part of the framework within their own national contexts.

Project Objective 2:

• Assist countries, particularly from developing economies, to develop and articulate national positions on how international law applies to state conduct in cyberspace.

Target audience: Foreign diplomats, legal experts, national government policy makers that participate in UN First Committee cyber processes from foreign assistance eligible countries.

Expected Outcomes:

• 2.1 Increased ability to develop and defend a national position on cybersecurity relative to the framework.

• 2.2 Increased awareness of how international law applies to state conduct in cyberspace.

Project Activities

The project activities must include, but not limited to, the following:

• Facilitating delivery mechanisms to directly engage civilian government officials, including but limited to, face-to-face workshops, scenario-based exercises, virtual education, facilitated peer-to-peer learning, etc.

• Fostering connections and exchanges between foreign government counterparts to exchange views and information on processes to implement the framework and/or national positions on how existing international law applies to state conduct in cyberspace; and promote continued engagement and collaboration in cyber policy issues.

• Equipping civilian government officials with the knowledge and resources to become more competent advocates in promoting international stability, confidence, and transparency in cyberspace.

Performance Indicators

If an award is issued, the U.S. government will work with the final selected applicant to develop a holistic set of qualitative and quantitative indicators to measure project performance. For an indicator to be useful it must be specific and unambiguous, observable, measurable, and linked to an outcome/output achievement. Some indicators will be provided by the USG; others may be suggested by the award recipient.

Indicators from the U.S. government that are potentially relevant to this project could include:

• 1.3 Number of countries that take steps to adopt or implement the Framework for Responsible State Behavior in Cyberspace.

• 1.4 Number of countries whose attendance in key multilateral fora is enabled through project activities.

• 2.1 Number of countries that develop a plan for the adoption of, or begin implementing, one or more aspect of the Framework for Responsible State Behavior in Cyberspace with USG support.

• 2.2 Number of instances of U.S. cyberspace policy positions presented in international or regional fora by the U.S. or DCCP partner countries.

• 2.3 Number of countries that develop and deliver independent public statements on how international law applies in cyberspace.

• DCCP 4.1 Number of people trained in international cyberspace security with USG support.

• DCCP 4.2 Number of people trained in international cyberspace security by the USG who demonstrate improved knowledge or skill.

A4. Key Considerations

The following list of program considerations is provided to help applicant(s) develop a responsive, robust proposals. Strong preference will be given to applicant(s) that:

• Demonstrate a track record in delivering effective education and trainings, especially to civilian government audiences from foreign assistance eligible countries. Applicants are strongly encouraged to think imaginatively about the combination of delivery mechanisms that will deliver the best learning outcomes.

• Demonstrate strong international understanding of cyber-related discussions that have occurred in key multilateral venues including the OEWG and the United Nations First Committee. Applicants must remain up-to date with current themes and discussions surrounding the framework and meaningfully integrate them into design and delivery of capacity building courses, as relevant.

• Demonstrate strong understanding of international law and cyber policy.

• Proven access to an international cadre of cyber policy experts on the framework of responsible state behavior and the ability to engage regional experts to adapt content to address regional contexts/issues.

• Demonstrate thoughtful monitoring and evaluation and report results.

• Prove existing, collaborative, and successful partnerships with U.S. and foreign partners on issues and engagements related to cyber policy and international law.

• Demonstrate experience in building an active network of alumni.

• Demonstrate adherence to ethical best practices including “do no harm” and gender equity.

• As appropriate, applicants are strongly encouraged to form consortia that leverages each organization’s respective resources and expertise when submitting a combined proposal.

All applicants will also be required to address the entirety of Section A.3 within this NOFO in their completion of the Draft Scope of Work attached to this NOFO (see Section D.2.1, item #5).

Section B: Federal Award Information

Organizations may submit no more than one (1) application per organization in response to this

NOFO.

The U.S. government may make award(s) based on initial applications received, without discussions or negotiations. Therefore, each application should contain the applicant's best terms from a cost and technical standpoint. The U.S. government reserves the right (though it is under no obligation to do so), to enter discussions with one or more applicants in order to obtain clarifications, additional detail, or to suggest refinements in the project description, budget, or other aspects of an application.

CDP anticipates awarding one or two cooperative agreements. The final determination on award mechanism will be made by the Grants Officer.

The authority for this funding opportunity is found in the Foreign Assistance Act of 1961 (FAA), as amended. In funds appropriated under Title III of the Department of State, Foreign Operations, and Related Programs Appropriations Act (Div. K. P.L. 117-103 (FY 2022 SFOAA) under the headings “Economic Support Fund” and “Development Assistance.” The countries for the benefit of which appropriated funds are authorized to be expended may vary from year to year.

To maximize the impact and sustainability of the award(s) that result(s) from this NOFO, CDP reserves the right to execute a non-competitive continuation amendment(s). The total duration of any award, including potential non-competitive continuation amendments, shall not exceed 54 months, or four (4) and a half years. Any non-competitive continuation is contingent on availability of funds, and satisfactory performance of the program. A non-competitive continuation is not guaranteed, and the Department of State reserves the right to exercise or not exercise this option.

The distinction between grants and cooperative agreements revolves around the existence of “substantial involvement.” Cooperative agreements require greater federal government participation in the project. If a cooperative agreement is awarded, CDP will undertake reasonable and programmatically necessary substantial involvement. Examples of substantial involvement could include but are not limited to:

• Active participation and collaboration with the recipient in the implementation of the award.

• Review and approval of one stage of work before another can begin.

• Collaboration on selection and/or review and approval of sub-award partnerships or sub-contracts beyond existing federal policy.

• Review and final approval of course curricula and associated documents.

• Review participant training acceptance and rejection letters.

Note: All products in support of DCCP-funded projects developed by the award recipient must be appropriately branded in accordance with the DCCP Message Manual unless specific waivers are requested and approved by CDP. See Section H: Other Information for more details.

Section C: Eligibility Information

C1. Eligible Applicants

CDP welcomes applications from U.S.- based non-profit/non-governmental organizations subject to sections 501 (c)(3) and 501 (c)(6) of the U.S. tax code; Foreign based non-profit/non-governmental organizations (NGO); Public International Organizations (PIOs); Private, public, or state institutions of higher education (universities and colleges); and For-profit organizations or businesses.

C2. Cost Sharing or Matching

Providing cost sharing, matching, or cost participation is not an eligibility factor or requirement for this NOFO and providing cost share will not result in a more favorable competitive ranking.

Per 2 CFR §200.306, items that are proposed for cost share must be allowable per 2 CFR §200, Subpart E—Costs Principles.

C3. Other

To be eligible to receive an award, all organizations must have a unique entity identifier (UEI), as well as a valid registration on SAM.gov. Please see Section D3.2 for information on how to obtain these registrations.

Applicants must be organizations, and only one application will be considered for each applicant organization. If more than one application is submitted by the same organization, only the first received will be reviewed for eligibility and funding.

Please note, any applicant listed on the Excluded Parties List System in the System for Award Management (SAM.gov) and/or has a current debt to the U.S. government is not eligible to apply for an assistance award in accordance with the OMB guidelines at 2 CFR 180 that implement Executive Orders 12549 (3 CFR,1986 Comp., p. 189) and 12689 (3 CFR,1989 Comp.,

p. 235), “Debarment and Suspension.” Additionally, no entity or person listed on the Excluded Parties List System in SAM.gov can participate in any activities under an award. All applicants are strongly encouraged to review the Excluded Parties List System in SAM.gov to ensure that no ineligible entity or person is included in their application.

Section D: Application and Submission Information

D1. Address to Request Application Package

Application forms, and other required materials are available at Grants.gov (http://www.grants.gov) and SAMS Domestic (https://mygrants.servicenowservices.com) under the announcement title “Responsible State Behavior in Cyberspace Capacity Building” and funding opportunity number “SFOP0009899”. Once the NOFO deadline has passed, the Department of State may not discuss this competition with any applicant until the proposal review process has been completed. If requesting reasonable accommodations for persons with disabilities or for security reasons, please contact the CDP point of contact listed in Section G. Please note that reasonable accommodations do not include deadline extensions.

D2. Content and Form of Application Submission

For all application documents, please ensure:

• The proposal clearly addresses the goals and objectives of this funding opportunity.

• All documents are in English.

• All budgets are in U.S. dollars.

• All pages are numbered.

• All documents are formatted to 8 ½ x 11 paper.

• All Microsoft Word documents are single-spaced, 12-point Calibri font, with a minimum of 1-inch margins.

• Captions and footnotes may be 10-point Calibri font.

http://www.sam.gov/ https://sam.gov/ https://sam.gov/ http://www.grants.gov/ https://mygrants.servicenowservices.com/

Any prospective applicant who has questions concerning the contents of this NOFO should submit them by email to the contacts listed in Section G. Any updates about this NOFO will also be posted on Grants.gov.

D2.1 Application Requirements

Complete applications must include the following:

1) Completed and signed SF-424, SF-424A, and SF-424B forms.

2) Organizations that engage in lobbying the U.S. government, including Congress, or pay for another entity to lobby on their behalf, are also required to complete the SF-LLL “Disclosure of Lobbying Activities” form (only if applicable).

3) Cover Page/Executive Summary (not to exceed three (3) pages, preferably as a Word Document). Includes the organization name, project title, target country/countries, and name and contact information for the application’s main point of contact and brief section that clearly outlines the (1) the problem statement addressed by the project (2) research-based evidence justifying the applicant’s approach, and (3) quantifiable project outcomes and impacts.

4) Proposal Narrative (not to exceed ten (10) pages, preferably as a Word Document).

Please note the ten-page limit does not include the following:

• SF-forms listed above

• Cover Page/Executive Summary

• Scope of Work

• Project Design and Logic Model

• Performance Monitoring & Evaluation Narrative and Plan

• Detailed Budget

• Budget Narrative – If the Budget includes subawards, please include a separate Budget Narrative for each organization.

• Timeline

• Key Personnel Summary, CVs or Resumes (per person)

• Contingency Plan

• Additional Attachments (Audit, NICRA, etc.)

Applicants are encouraged to combine multiple documents into a single Word Document or PDF (Cover Page, Executive Summary, and Proposal Narrative in one file).

The Proposal Narrative must include the following:

• Introduction to the Organization: Description of past and present operations, showing ability to carry out the project, including information on all relevant or similar type projects from previous grants from the Bureau and/or U.S.

government agencies.

http://www.grants.gov./

• Problem Statement: Clear, concise, and well-supported statement that summarizes the problem and how the applicant’s unique project/approach will address it and support CDP’s Strategic Goals and Objectives.

• Project Goal: The “goal” describes the larger outcomes intended.

• Project Objectives: The intermediate accomplishments and measurable targets to achieve a goal. Objectives of the project should be SMART:

▪ Specific: Detailed and specifies what will be achieved

▪ Measurable: Has associated metrics or measurements of success

▪ Attainable: Appropriately challenging, objectives can be reasonably attained given the available resources

▪ Relevant: Aligns with the policy/program goal and is appropriate for the country or beneficiary audience

▪ Time-Bound: Achievable within the timeframe of the project

• Project Activities: Specific actions taken to achieve Project Objectives. All activities should be clearly developed and sufficiently explain the resource and time requirements (inputs) and things done or produced (outputs). Activities should detail target areas participant groups or selection criteria for participants;

how relevant stakeholders will be engaged; actions taken by local partners as appropriate/relevant.

• Future Funding or Sustainability: Applicant’s plan for continuing the project beyond the grant period, or the availability of other resources, if applicable.

Include ways project activities will ensure sustainability.

• Risk Analysis: Internal and external risks associated with the proposed project, rate the likelihood of the risks, rate the potential impact of the risks on the project, and identify actions that could help mitigate the risks.

5) Scope of Work (SOW). Applicants should use the Responsible State Behavior in

Cyberspace Capacity Building Draft Scope of Work Template provided and attached to this NOFO. The SOW should provide a summary of the applicant’s unique approach to the following as indicated in Section 4) Proposal Narrative:

• Project Objectives

• Project Activities

• Project Indicators: Applicants should also identify key indicators and milestones to measure progress towards project objectives. Methods for collecting and monitoring project indicators should be described and those responsible for doing so identified.

• Sustainability

6) Project Design and Logic Model (preferably as a Word Document). Building out a logic model with an accompanying theory of change can be helpful when planning and designing a program, project or activity. These tools can be used to visually depict or outline how and why a project will work (i.e., the rationale behind your project approach). Detailing how a project’s planned activities lead to certain outcomes can often help applicants understand the assumptions within the approach. Detailing factors outside your control, such as policy shifts, within a logic model can identify areas that should be included within your project’s risk analysis. It details planned activities, the immediate services or product of project activities (outputs), and the expected changes or benefits that occur after activities have been implemented (outcomes).

Applicants should specify objectives, identify what resources (inputs) are needed, outline proposed activities (outputs) and beneficiaries, and illustrate how activities lead to desired results in the theory of change. Applicants are encouraged to use the attached Project Design and Logic Model Template but are welcome to use their own templates so long as they provide the requisite information for thorough review of the proposed project. See Attachment 2) Project Design and Logic Model template.

7) Project Performance Monitoring and Evaluation Plan (preferably as a Word Document). This document details how a project’s performance monitoring and evaluation system will be carried out and by whom. It:

Explains how the project’s performance toward its objectives will be tracked over time.

Identifies which performance indicators the project will report against, the indicator type, baseline values, performance targets, and data sources or collection methods.

Provides a clear description of the approach and data collection strategies and tools to be employed (e.g., pre- and post-test surveys, interviews, focus groups).

Identifies what, if any, external evaluations will be conducted.

A sample Responsible State Behavior in Cyberspace Capacity Building Project

Performance Monitoring and Evaluation Plan Template is provided as an attachment to this NOFO. Applicants are encouraged to refer to the Defining M&E Terms in the Project

Design and Logic Model template for concise explanations of M&E terms and definitions used by the Department of State.

8) Detailed Budget (preferably as an Excel workbook). Include three (3) columns containing the request to CDP, any cost sharing contribution, and the total budget.

A Summary Budget should also be included using the OMB-approved budget categories (see SF-424A as a sample) in a separate tab. Costs must be in U.S. dollars. Detailed line-item budgets for sub-grantees should be included as additional tabs within the Excel workbook (if available at the time of submission). See Responsible State Behavior in Cyberspace Capacity Building Detailed Budget Template for more information.

Applicants should use the following budget assumptions when preparing the budget to accompany their application:

The budget submission should be illustrative of the personnel, fringe benefit and administrative costs specifically associated with the project. Travel and related costs should assume the design and delivery of 6 convening events per objective throughout the project period. Courses should be in person (and hybrid, as appropriate) and other activities should offer a mix of in-person and virtual attendance.

9) Budget Narrative (preferably as a Word Document). Justify each line-item in the budget and explain how the amounts were derived, consistency with the applicants’ documented policies, as well as the source and description of all proposed costs (and cost-share, if applicable). The narrative should complement the budget rather than repeat information provided in the budget. For example, the narrative should provide details on the purpose of costs, reasonability of costs, cost price analysis, explain allocations, explain any yearly variances, and tie expenses to project activities and/or objectives where appropriate. Sources of all cost-share offered in the application should be identified and explained in the budget narrative. See Tab 1 of Responsible State Behavior in Cyberspace Capacity Building Detailed Budget Template and Responsible State Behavior in Cyberspace Capacity Building Budget Narrative Template for more information.

10) Timeline (not to exceed one (1) page, preferably as a Word Document or Excel Sheet).

The timeline of the overall proposal should include activities and monitoring and evaluation efforts outlined in either a monthly or quarterly format. It should also include sufficient time for project closeout to conduct and finalize internal/external evaluations and allow any sub-recipients time for final reporting.

11) Key Personnel and Subject Matter Experts (not to exceed two (2) pages, limited to 3-5 individuals, preferably as a Word Document). This can represent staff within your organization or outside of your organization (subgrantee, consultants, contractors), carrying out administrative or technical responsibilities, who are integral to the success of the project. Provides names, titles, roles, and bios that highlight relevant experience/qualifications of key personnel involved in the project. Resumes/CVs (not to exceed 3 pages per person) should be included in the application and do not count toward the page limit.

12) Contingency Plan (not to exceed three (3) pages) for proposed activities should the originally planned activities not be able to be implemented. The Contingency Plan should be submitted as an additional annex. Applicants should demonstrate consideration of the risks identified in the submitted risk assessment and include specific alternative activities or locations as part of the Contingency Plan. Any proposed “plan” must comply with 2CFR200.433 – Contingency provisions. Plans must not include un-allocable or unallowable expenses and must not result in a larger Total Award Value than the identified as the total funding. CDP/SPC requires prior approval by the Grants Officer of the “plan” before any activities can take place, or costs can be incurred against the “plan.”

13) Additional Attachments:

• Audit (Single/Independent Financial Audit). A PDF file copy of your organization’s most recent single audit is required, if your organization meets the threshold as defined in 2 CFR 200 Subpart F. If your organization has not had a recent single audit (within your organization’s previous three (3) fiscal years), you must submit your organization’s most recent independent financial audit.

• NICRA If your organization has a Negotiated Indirect Cost Rate Agreement (NICRA) and includes NICRA charges in the budget, your latest NICRA letter should be included as a PDF file. This document will not be reviewed by the Merit Review Panel but will be used by project and grant team if the submission is recommended for funding. Organizations that have previously established indirect cost rates must submit timely indirect cost proposals to their cognizant agency as required by Appendix III & IV of 2 CFR 200. If indirect cost proposals have not been submitted for re-negotiation, as required, out-of-date NICRAs may not be considered. If your proposal involves subawards to organizations charging indirect costs, please submit their NICRA, if applicable.

• Letters of support from project partners describing the roles and responsibilities of each partner, if applicable/pre-identified.

• Official permission letters, if required for project activities.

Applications that do not include the elements listed above will be deemed technically ineligible. To ensure that all applications receive a balanced evaluation, the review panel will review from the first page of each section up to the page limit and no further.

D.2.2 Additional Information Requested for Those Receiving Notification of Intent

Successful applicants must submit, after notification of intent to make a federal award, but prior to issuance of a federal award:

● Written responses and revised application documents addressing conditions and recommendations from the review panel.

● A copy of the applicant’s latest NICRA as a PDF file, if the applicant has a NICRA and includes NICRA charges in the budget.

● A completed copy of the Department’s Financial Management Survey, if receiving U.S.

government funding for the first time.

● Submission of required documents to register in the Payment Management System managed by the Department of Health and Human Services, if receiving CDP funding for the first time (unless an exemption is provided).

● Other requested information or documents included in the notification of intent to make a federal award or subsequent communications prior to issuance of a federal award.

● Applicants who submit their applications through Grants.gov will be required to create a SAMS Domestic account in order to accept the final award. Accounts must be logged into to every 60 days in order to maintain an active account.

D3. Unique Entity Identifier (UEI) and System for Award Management (SAM)

All organizations, whether based in the United States or in another country, must have a Unique Entity Identifier (UEI) and an active registration with SAM.gov. A UEI is one of the data elements mandated by Public Law 109-282, the Federal Funding Accountability and Transparency Act (FFATA), for all federal awards.

Note: As of April 2022, a DUNS number is no longer required for federal assistance applications.

The 2 CFR 200 requires that sub-grantees obtain a UEI number. Please note the UEI for sub-grantees is not required at the time of application but will be required before an award is processed and/or directed to a sub-grantee.

Note: The process of obtaining or renewing a SAM.gov registration may take anywhere from

4-8 weeks. Please begin your registration as early as possible.

● Organizations based in the United States or that pay employees within the United

States will need an Employer Identification Number (EIN) from the Internal Revenue Service (IRS) and a UEI number issued through SAM.gov. Once the UEI number is received continue with the remainder of the SAM.gov registration.

● Organizations based outside of the United States that do not pay employees within the United States do not need an EIN from the IRS but do need a UEI number – obtained by registering as an entity in SAM.gov.

● Please note that as of November 2022 and February 2022 respectively, organizations based outside of the United States that do not intend to apply for U.S. Department of Defense (DoD) awards are no longer required to have a NATO Commercial and Government Entity (NCAGE) code or CAGE code to apply for non-DoD foreign assistance funding opportunities.

● If an applicant organization is mid-registration and wishes to remove a CAGE or NCAGE code from their SAM.gov registration, the applicant should submit a help desk ticket (“incident”) with the Federal Service Desk (FSD) online at www.fsd.gov using the following language: “I do not intend to seek financial assistance from the Department of Defense. I do not wish to obtain a CAGE or NCAGE code. I understand that I will need to submit my registration after this incident is resolved in order to have my registration activated.”

Organizations based outside of the United States and that DO NOT plan to do business with the DoD should follow the below instructions:

Step 1: Proceed to SAM.gov to obtain a UEI and complete the SAM.gov registration process. SAM.gov registration must be renewed annually.

All prime organizations must also continue to maintain active SAM.gov registration with current information at all times during which they have an active federal award or application under consideration by a federal award agency. SAM.gov requires all entities to https://usg02.safelinks.protection.office365.us/?url=https%3A%2F%2Fwww.fsd.gov%2Fgsafsd_sp%3Fid%3Dgsafsd_kb_articles%26sys_id%3Dc81018e71b1601d0937fa64ce54bcb57&data=05%7C01%7Carichardson%40guidehousefederal.com%7C78cee3cc704f48fee1b508db0f6cc096%7C8a628aaf2f064dc5a00733a134d5e988%7C1%7C0%7C638120733344255669%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=ayerbxBQalx3edzK86ZVynOhlbhOZLdZJVNjgawR7Ps%3D&reserved=0 http://www.fsd.gov/ renew their registration once a year in order to maintain an active registration status in SAM. It is the responsibility of the applicant to ensure it has an active registration in SAM.gov and to maintain that active registration. If an applicant has not fully complied with the requirements at the time of application, the applicant may be deemed technically ineligible to receive an award and use that determination as a basis for making an award to another applicant.

Note: SAM.gov is not the same as SAMS Domestic. It is free to register in both systems, but the registration processes are different.

Information is included on the SAM.gov website to help international registrations:

https://www.fsd.gov/gsafsd_sp?id=kb_article_view&sysparm_article=KB0016380&sys_kb_i d=194695221bfe4d983565ed3ce54bcbbb&spa=1

Please note, guidance on SAM.gov and the guidance on GSA’s website about requirement for registering in SAM.gov is subject to change and currently being updated. Applicants should review the website frequently for the most up-to-date guidance.

Organizations based outside of the United States and that DO plan to do business with the DoD in addition to Department of State should follow the below instructions:

Step 1: Apply for an NCAGE code by following the instructions on the NSPA NATO website linked below:

NCAGE Homepage:

https://eportal.nspa.nato.int/AC135Public/sc/CageList.aspx NCAGE Code Request Tool (NCRT):

https://eportal.nspa.nato.int/Codification/CageTool/home

D3.1 SAM.gov and UEI Exemptions

An exemption from the UEI and sam.gov registration requirements may be permitted on a case-by-case basis if:

• An applicant’s identity must be protected due to potential endangerment of their mission, their organization’s status, their employees, or individuals being served by the applicant.

• For an applicant, if the federal awarding agency makes a determination that there are exigent circumstances that prohibit the applicant from receiving a unique entity identifier and completing SAM.gov registration prior to receiving a federal award. In these instances, federal awarding agencies must require the recipient to obtain a unique entity identifier and complete SAM.gov registration within 30 days of the federal award date.

https://www.fsd.gov/gsafsd_sp?id=kb_article_view&sysparm_article=KB0016380&sys_kb_id=194695221bfe4d983565ed3ce54bcbbb&spa=1 https://www.fsd.gov/gsafsd_sp?id=kb_article_view&sysparm_article=KB0016380&sys_kb_id=194695221bfe4d983565ed3ce54bcbbb&spa=1 https://usg02.safelinks.protection.office365.us/?url=https%3A%2F%2Feportal.nspa.nato.int%2FAC135Public%2Fscage%2FCageList.aspx&data=05%7C01%7Carichardson%40guidehousefederal.com%7C78cee3cc704f48fee1b508db0f6cc096%7C8a628aaf2f064dc5a00733a134d5e988%7C1%7C0%7C638120733344255669%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=RzF60kwplVm%2BMPTs3Bu8PTNOnfBZmHdcN063KiLE1y8%3D&reserved=0 https://eportal.nspa.nato.int/Codification/CageTool/home

Organizations requesting exemption from UEI or SAM.gov requirements must email the point of contact listed in Section G of the NOFO at least two (2) weeks prior to the deadline in the NOFO providing a justification of their request. Approval for a SAM.gov exemption must come from the warranted Grants Officer before the application can be deemed eligible for review.

D3.2 Registering in SAMS Domestic and SAM.gov

All application submissions must be made electronically via Grants.gov or SAMS Domestic (https://mygrants.servicenowservices.com/ilms/). Both systems require registration by the applying organization. Please note that the Grants.gov registration process can take ten (10) business days or longer, even if all registration steps are completed in a timely manner.

Instructions for registering and submitting applications in each system are provided below.

SAMS Domestic:

Applicants using SAMS Domestic for the first time should complete their “New Organization Registration.” To register with SAMS Domestic, go to:

https://mygrants.servicenowservices.com and click “create an account”.

Please note that establishing an account in SAMS Domestic may require the use of smartphone for multi-factor authentication (MFA). If an applicant does not have accessibility to a smartphone during the time of creating an account, please contact the helpdesk and request instructions on MFA for Windows PC.

Organizations must remember to save a screen shot of the checklist showing all documents submitted in case any document fails to upload successfully.

SAMS Domestic Help Desk:

For assistance with SAMS Domestic accounts and technical issues related to the system, please contact the ILMS help desk by phone at +1 (888) 313-4567 (toll charges apply for international callers) or through the Self Service online portal that can be accessed from https://mygrants.servicenowservices.com/ilms/. Customer support is available 24/7.

Grants.gov:

Applicants who do not submit applications via SAMS Domestic may submit via Grants.gov.

Please be advised that completing all the necessary registration steps for obtaining a username and password from Grants.gov can take ten (10) business days or longer.

Please refer to the Grants.gov website for definitions of various “application statuses” and the difference between a submission receipt and a submission validation. Applicants will receive a validation e-mail from Grants.gov upon the successful submission of an application. Validation of an electronic submission via Grants.gov can take up to two (2) business days. Additionally, organizations must remember to save a screenshot of the checklist showing all documents submitted in case any document fails to upload successfully.

Grants.gov Helpdesk:

https://guidehouse.sharepoint.us/sites/EBDCCPSupport/Shared%20Documents/General/06.%20Guides%20&%20Tools%20for%20EB%20&%20Implementers/Award%20Management%20Toolkit/Grants%20&%20Co-Ags/02%20CDP%20Grants%20SOP/Tools%20and%20Templates/Phase%201%20Pre-Award/Grants.gov https://mygrants.servicenowservices.com/ilms/ https://mygrants.service-now.com/ https://mygrants.servicenowservices.com/ilms/ https://www.grants.gov/

For assistance with Grants.gov, please call the Contact Center at +1 (800) 518-4726 or email support@grants.gov. The Contact Center is available 24 hours a day, seven days a week, except federal holidays. A full list of federal holidays can be found here.

D4. Submission Dates and Times

Applications are due no later than 11:59 PM Eastern Standard Time (EST), on 4 August 2023 on Grants.gov (https://www.grants.gov/), or SAMS Domestic (https://mygrants.servicenowservices.com), under the announcement title “Responsible State Behavior in Cyberspace Capacity Building”, and funding opportunity number “SFOP0009899”.

Grants.gov and SAMS Domestic automatically log the date and time an application submission is made, and the Department of State will use this information to determine whether an application has been submitted on time. Late applications are neither reviewed nor considered. Known system errors caused by Grants.gov or SAMS Domestic (https://mygrants.service-now.com) that are outside of the applicant’s control will be reviewed on a case-by-case basis. Applicants should not expect a notification upon CDP receiving their application.

D5. Funding Limitations, Restrictions, and other Considerations

CDP will not consider applications that reflect any type of support for any member, affiliate, or representative of a designated terrorist organization. Please refer the link for Foreign Terrorist Organizations: https://www.state.gov/foreign-terrorist-organizations/

Project activities whose direct beneficiaries are foreign militaries or paramilitary groups, or individuals will not be considered for CDP funding given purpose limitations on funding.

The Leahy Law prohibits Department foreign assistance funds from supporting foreign security force units if the Secretary of State has credible information that the unit has committed a gross violation of human rights. Per 22 USC §2378d(a) (2017), “No assistance shall be furnished under this chapter [FOREIGN ASSISTANCE] or the Arms Export Control Act [22 USC 2751 et seq.] to any unit of the security forces of a foreign country if the Secretary of State has credible information that such unit has committed a gross violation of human rights.” Restrictions may apply to any proposed assistance to police or other law enforcement. Among these, pursuant to section 620M of the Foreign Assistance Act of 1961, as amended (FAA), no assistance provided through this funding opportunity may be furnished to any unit of the security forces of a foreign country when there is credible information that such unit has committed a gross violation of human rights. In accordance with the requirements of section 620M of the FAA, also known as the Leahy Law, project beneficiaries or participants from a foreign government’s security forces may need to be vetted by the Department before the provision of any assistance. If a proposed grant or cooperative agreement will provide assistance to foreign security forces or personnel, compliance with the Leahy Law is required.

mailto:support@grants.gov https://www.opm.gov/policy-data-oversight/pay-leave/federal-holidays/ https://www.grants.gov/ file://///washdc.state.sbu/Stateshares/oesdrlpublic$/DRL/Private/PRU/6.%20Office%20Guidance%20&%20Templates/Solicitation%20Templates%20&%20Negotiation%20Rejection%20Letters/Invitation%20letter%20for%20Full%20Proposals/SAM https://mygrants.service-now.com/grants/portal_login.do https://mygrants.service-now.com/grants/portal_login.do https://www.state.gov/foreign-terrorist-organizations/ https://www.govinfo.gov/content/pkg/USCODE-2017-title22/html/USCODE-2017-title22-chap32-subchapIII-partI-sec2378d.htm

Organizations should be cognizant of these restrictions when developing project proposals as these restrictions will require appropriate due diligence of project beneficiaries and collaboration with CDP to ensure compliance with these restrictions. Project beneficiaries subject to due diligence vetting will include any individuals or entities that are beneficiaries of foreign assistance funding or support. Due diligence vetting will include a review of open-source materials.

D6. Other Submission Requirements

It is the responsibility of the applicant to ensure that it has an active registration in SAMS Domestic or Grants.gov. Applicants are required to document that the application has been received by SAMS Domestic or Grants.gov in its entirety. CDP bears no responsibility for disqualification that result from applicants not being registered before the due date, for system errors in either SAMS Domestic or Grants.gov, or other errors in the application process.

Additionally, applicants must save a screen shot of the checklist showing all documents submitted in case any document fails to upload successfully.

Faxed, couriered, or emailed documents will not be accepted. Reasonable accommodations may, in appropriate circumstances, be provided to applicants with disabilities or for security reasons. Applicants must follow all formatting instructions in the applicable NOFO and these instructions.

CDP encourages organizations to submit applications during normal business hours (Monday – Friday, 9:00AM-5:00PM Eastern Daylight Time (EDT)). If an applicant experiences technical difficulties and has contacted the appropriate helpdesk but is not receiving timely assistance (i.e., if you have not received a response within 48 hours of contacting the helpdesk), you may contact the CDP point of contact listed in in Section G for further assistance.

Section E: Application Review Information

E1. Proposal Review…