C_201_REVISED_080317_SSA_E-Vault_Solicitation.pdf

GSA Solicitation No. GS-08-P-17-JA-C-0005

Document C201/Solicitation – REVISED 08/03/17 Pages 1 of 30

Construction Contract for Electronic Vault (E-Vault) in Building 94 at the Denver Federal Center in Lakewood, Colorado The Solicitation

REVISED 08/03/2017 – Changes are in Red

552.219-71 Notice to Offerors of Subcontracting Plan Requirements (MAR 2012)

The General Services Administration (GSA) is committed to assuring that maximum practicable opportunity is provided to small, HUBZone small, small disadvantaged, women-owned, veteran-owned, and service-disabled veteran owned small business concerns to participate in the performance of this contract consistent with its efficient performance. GSA expects any subcontracting plan submitted pursuant to FAR 52.219-9, Small Business Subcontracting Plan, to reflect this commitment. Consequently, an offeror, other than a small business concern, before being awarded a contract exceeding $700,000 ($1,500,000 for construction), must demonstrate that its subcontracting plan represents a creative and innovative program for involving small, HUBZone small, small disadvantaged, women-owned, veteran-owned, and service-disabled veteran owned small business concerns as subcontractors in the performance of this contract.

Document C201/Solicitation – REVISED 08/03/17 Pages 2 of 30

Table of Contents

I. General Information A. The Solicitation and Contract B. List of Solicitation Documents C. Authorized Representatives D. Pre-Proposal Conference E. Estimated Price Range F. FAR 52.228-1 Bid Guarantee G. FAR 52.236-27 Site Visit – Construction H. Receipt of Offers

II. Proposals A. Proposal Contents B. Proposal Format C. Price Proposal D. Technical Proposal E. Other Information to Submit with Proposal F. Requirements for Joint Venture Offerors

III. General Provisions

A. Availability of Funds B. Requests for Clarification or Interpretation C. Notice to Small Business Firms D. Information Concerning the Disclosure of Solicitation Results E. Affirmative Procurement Program F. Notice Concerning Preparation of Proposals G. Contractor Performance Information H. Safeguarding Documents Designated as Sensitive But Unclassified I. Additional Security Requirements

IV. FAR/GSAR Solicitation Provisions

A. FAR 52.215-1 Instructions to Offerors—Competitive Acquisition B. FAR 52.216-1 Type of Contract C. FAR 52.222-5 Construction Wage Rate Requirements—Secondary Site of the Work D. FAR 52.222-23 Notice of Requirement for Affirmative Action to Ensure Equal

Employment Opportunity for Construction E. FAR 52.233-2 Service of Protest F. Buy American G. Buy American Exceptions H. Small Business Subcontracting Plan I. GSAR 552.252-5 Authorized Deviations in Provisions J. FAR 52.252-1 Solicitation Provisions Incorporated by Reference K. GSAR 552.102 Incorporating Provisions and Clauses by Reference

Document C201/Solicitation – REVISED 08/03/17 Pages 3 of 30

V. Additional Instructions

A. Specifications and Drawings B. Proposal Requirements

VI. Method of Award

A. Evaluation of Offers B. Determination of Responsibility C. Price Reasonableness / Price Realism D. Unbalanced Prices E. Total Evaluated Price F. Non-Price Factors G. Evaluation of Joint Venture Offerors

Document C201/Solicitation – REVISED 08/03/17 Pages 4 of 30

I. General Information

I.A. The Solicitation and Contract

(1) This Solicitation sets forth requirements for proposals for a Contract to construct the Project described in the Solicitation Documents. Proposals conforming to the Solicitation requirements will be evaluated in accordance with the Method of Award set forth herein. The Government will award the Contract to the selected Offeror, subject to the conditions set forth herein.

(2) Neither the Solicitation nor any part of an Offeror's proposal shall be part of the Contract except to the extent expressly incorporated therein by the Contracting Officer.

(3) The Offeror's proposal submitted in response to this Solicitation shall constitute a firm offer.

No contract shall be formed unless and until the Contracting Officer has countersigned the SF 1442 submitted by an Offeror, and delivered to the Contractor a copy of the SF 1442 with original signatures together with the Agreement reflecting the Offeror's proposed prices.

I.B. List of Solicitation Documents

The Solicitation Documents are comprised of:

(1) C201, The Solicitation

(2) C301, Offeror Representations and Certifications Form

(3) Standard Form (SF) 1442 – Solicitation Offer and Award

(4) C101, The Agreement

(5) Other Attachments

a) Attachment 0001 – SBU Form

b) Attachment 0002 – Request for Solicitation Documents

c) Attachment 0003 – Offeror Experience Information

d) Attachment 0004 – Offeror Past Performance Information

e) Attachment 0005 – Small Business Subcontracting Plan Template

f) Attachment 0006 – Wage Determination CO33 – Building

g) Attachment 0007 – Scope of Work – Dated May 10, 2017

h) Attachment 0008 – Price Proposal Worksheet

I.C. Authorized Representatives

The following individuals are designated as the authorized GSA representatives under this Solicitation:

(1) Point of Contact

Name: Sarah Callies Address: One Denver Federal Center Building 41

P.O. Box 25546 Lakewood, CO 80225-0546

Telephone: 303-880-5133 Email: sarah.callies@gsa.gov mailto:sarah.callies@gsa.gov

Document C201/Solicitation – REVISED 08/03/17 Pages 5 of 30

(2) Contracting Officer

Name: Kelly Rima Address: One Denver Federal Center Building 41

P.O. Box 25546 Lakewood, CO 80225-0546

Telephone: 303-236-1790 Email: kelly.rima@gsa.gov

I.D. Pre-Proposal Conference N/A

I.E. Estimated Price Range

The estimated price range for the Project is more than$10,000,000.00

I.F. FAR 52.228-1 Bid Guarantee (SEP 96)

(a) Failure to furnish a bid guarantee in the proper form and amount, by the time set for opening of bids, may be cause for rejection of the bid.

(b) The bidder shall furnish a bid guarantee in the form of a firm commitment, e.g., bid bond supported by good and sufficient surety or sureties acceptable to the Government, postal money order, certified check, cashier’s check, irrevocable letter of credit, or, under Treasury Department regulations, certain bonds or notes of the United States. The Contracting Officer will return bid guarantees, other than bid bonds—

(1) To unsuccessful bidders as soon as practicable after the opening of bids; and

(2) To the successful bidder upon execution of contractual documents and bonds (including any necessary coinsurance or reinsurance agreements), as required by the bid as accepted.

(c) The amount of the bid guarantee shall be 20 percent of the bid price or $3,000,000, whichever is less.

(d) If the successful bidder, upon acceptance of its bid by the Government within the period specified for acceptance, fails to execute all contractual documents or furnish executed bond(s) within 10 days after receipt of the forms by the bidder, the Contracting Officer may terminate the contract for default.

(e) In the event the contract is terminated for default, the bidder is liable for any cost of acquiring the work that exceeds the amount of its bid, and the bid guarantee is available to offset the difference.

I.G. FAR 52.236-27 Site Visit - Construction (FEB 95)

(1) The clauses at FAR 52.236-2, Differing Site Conditions, and FAR 52.236-3, Site Investigations and Conditions Affecting the Work, will be included in any contract awarded as a result of this solicitation and are in the attached Agreement. Accordingly, Offerors are urged and expected to inspect the site where the work will be performed.

mailto:kelly.rima@gsa.gov http://www.acquisition.gov/far/current/html/52_233_240.html#wp1113365 http://www.acquisition.gov/far/current/html/52_233_240.html#wp1113375

Document C201/Solicitation – REVISED 08/03/17 Pages 6 of 30

(2) A site visit will be held on the following date and time:

Date: July 19, 2017 Time: 10:00AM

Location: One Denver Federal Center, Building 94 Southeast corner by loading dock

Request For Information (RFI’s) - The cutoff date for submission of RFI’s is Friday, September 8, 2017 at Noon, Mountain time. Answers to all RFI’s will be published in FBO on a weekly basis, beginning August 14, 2017. The full list of questions and answers published by September 15, 2017.

I.H. Receipt of Offers

(1) In order to be considered for award, offers conforming to the requirements of the solicitation must be received at the following office no later than 2:00 pm local time on the following date and at the following address:

Date: September 20, 2017 Address: One Denver Federal Center, Building 41

P.O. Box 25546 Lakewood, CO 80225-0546

(2) Offers sent by commercial package delivery and hand delivery shall be deemed received as of the date and time of delivery to the office designated for receipt of offers.

(3) Offers sent by United States Mail shall be deemed timely if delivered to the address of the government installation designated for receipt of offers on or before the date established for receipt of offers.

II. Proposals

II.A. Proposal Contents

Proposals shall consist of the following documents, completed and executed in accordance with this Solicitation:

(1) Price Proposal

(2) Technical Proposal

(3) Representations and Certifications – C301

(4) Bid Guarantee, using Standard Form 24

(5) Subcontracting Plan (Attachment 0005)

II.B. Proposal Format

Firms responding to this solicitation notice shall submit two separate proposals. Proposal One shall contain the Technical Proposal, and Proposal Two shall contain the Price Proposal. Both proposals shall contain one (1) original hardcopy and one (1) electronic copy in PDF format (on compact disc or USB flash drive).

Document C201/Solicitation – REVISED 08/03/17 Pages 7 of 30

The hardcopy proposal submissions should be in an 8-1/2” x 11” bound format and should be organized to correspond with the order listed below. In the event of a discrepancy, the PDF copy on the compact disc or USB flash drive shall be the controlling document. Please ensure that the PDF file is a “read only” document. The total submission of should not exceed 40 single sided or 20 double sided 8-1/2” x 11” pages (not including Cover Letter, Table of Contents, or Section Separators), with one-inch margins, and in a font not less than 10-point in size.

Additional pages will not be evaluated. All proposals must be current. GSA shall evaluate all responses in accordance with the criteria stated in the Federal Business Opportunity (FedBizOpps) website.

REQUIRED FORMAT:

Proposal One The Technical Proposal Format shall be labeled and consist of the following:

1) Technical Approach

a. Organizational Approach and Coordination

b. Schedule

2) Past Experience

a. Complete Attachment 0003 – Offeror Experience Information

3) Past Performance

Proposal Two

The Price Proposal Format shall be labeled and consist of the following:

1) Signed Standard Form 1442, including acknowledgement of all amendments (if any).

2) Attachment 0008, Price Proposal Worksheet

3) Bid Guarantee, using SF24.

4) Subcontracting Plan using Attachment 0005 (Not required for Small Business Offerors)

5) Representations and Certifications, using the attached C301.

II.C. Price Proposal

(1) Contents

The Price Proposal shall consist of the SF 1442 and the Agreement, with prices and/or rates indicated for each price element shown on the pricing form included in Section II of the Agreement. Indicate the Base Contract Price, or if no such distinction is made, the Contract Price, in Block 17 of the SF 1442, which must be fully executed by the Offeror.

(2) Qualifications, Exclusions and Conditions

If the Offeror communicates in its proposal any qualifications, exclusions, or conditions to the proposed prices not provided for in the Contract Documents, the Contracting Officer may reject the proposal and exclude the Offeror from further discussions.

Document C201/Solicitation – REVISED 08/03/17 Pages 8 of 30

II.D. Technical Proposal The Technical Proposal shall include the information requested below for the non-price factors described in Section VI.

Factor 1 – Technical Approach This factor considers the Offeror’s technical approach to manage the project, perform the project and successfully complete all construction requirements.

The organizational approach will be evaluated to assess the Offeror’s understanding of the project requirements, ability to complete the project within the estimated 425 calendar day contract duration, and demonstration of organized management, coordination, and communication between the prime contractor and its subcontractors. Offerors will be evaluated on ability to effectively prepare and execute a critical path method (CPM) schedule for this type and size project and ability to assure efficient scheduling of the work by its own forces, subcontractors, and material suppliers to meet the scheduled completion date. The Offeror will be evaluated on the reasonableness and comprehensiveness of the proposed project schedule.

The preliminary schedule shall reflect an understanding of the required sequencing, must comply with the anticipated project duration (or the Offeror’s proposed compressed schedule), and shall include projected dates for completion. Offerors will be evaluated on their ability to schedule and perform in construction sequence.

Offerors shall submit the following:

a) Provide a brief narrative of your overall organizational approach for managing the project. Explain how you will maintain schedule, cost, and quality control. Describe your QA/QC process. Provide a brief narrative describing the coordination of effort between the prime and subcontractors and indicate the allocation of work quantity between the general contractor and subcontractors. Examples of disciplines that may be required but are not limited to, for the construction project include the following:

i) structural, ii) mechanical, iii) plumbing, iv) electrical, v) fire life safety, vi) security, vii) data, viii) telecommunications and ix) civil exterior improvements.

b) Submit the proposed construction schedule for THIS SPECIFIC PROJECT showing completion within the period of performance (425 calendar days from Notice to Proceed), or less calendar days if applicable. Assume approximate date for Notice to Proceed of December 15, 2017. The schedule shall be specific to the activities required for this project and shall include major milestones with applicable predecessor activities, and contain a clear critical path.

Standard for Evaluation: The standard for this factor is met when the offeror provides a detailed organizational approach addressing all of the key elements identified above and demonstrates a workable schedule which successfully meets all of the contract requirements, including completion within 425 calendar days. Attainable schedules with a period of performance of less than 425 calendar days shall be scored more favorably than offers meeting the 425 day schedule. Realistic and supported schedules with a period of performance of 364 days or less shall be scored more favorably than offers meeting a schedule less than 425 days to 365 days.

Document C201/Solicitation – REVISED 08/03/17 Pages 9 of 30

Factor 2 - Past Experience This factor evaluates the extent to which the Offeror as the Prime Contractor has performed on similar contracts/task orders. The Offeror should have performed as the Prime Contractor on at least two Similar Contracts/Task Orders substantially completed within the past seven (7) years prior to the issuance of the solicitation. Offerors must submit a narrative description for at least two (2) Similar Projects/Task Orders and may submit up to a total of four (4) Similar Projects/Task Orders. The narrative must include: Project name, description of the scope of work to include whether initial construction or retrofit of an existing building, duration of work, project completion date, and contract value. A more favorable evaluation may be provided for data center retrofit experience versus data center initial construction and for Tier III Data Center experience.

Similar Projects/Task Orders is defined as Data Center building construction with both 10,000 GSF or more and a total project construction cost exceeding $10,000,000.00.

Note: The Government will only consider past performance for work performed by the Offerors as prime contractors; however, in the case of Offerors that are Joint Ventures (JV), work performed as the prime contractor by the JV or either entity comprising a member the JV will be considered and evaluated as work performed by the Offerors as the prime contractor.

Offeror shall submit, with its proposal, one completed Attachment 3 - “Offeror Experience Information” document for each contract submitted for Factor 2. Offeror shall also provide the completed Attachment 3 – “Offeror Experience Information” document to its reference submitting the Attachment 4 – “Offeror Past Performance Survey”. (See Factor 3)

Standard for Evaluation: The standard for this factor has been met when the Offeror demonstrates that it has performed as the Prime Contractor on at least two (2) Similar Contracts/Task Orders for Data Center building construction within the last seven (7) years with both 10,000 GSF or more and a total project construction cost exceeding $10,000,000.

A more favorable rating may be given to offerors with experience on more than two Similar Projects/Task Orders, retrofit construction versus initial construction, or Tier III Data Center projects.

Factor 3 - Past Performance This factor considers the quality of the Offeror’s past performance as the Prime Contractor on at least two (2), but no more than four (4), Similar Contracts/Task Orders substantially completed within the past seven (7) years prior to the issuance of the solicitation. A more favorable evaluation will be provided for references rated higher than average. A more favorable evaluation may be provided for reference ratings exceeding an “average” rating.

Note: The Government will only consider past performance for work performed by the Offerors as prime contractors; however, in the case of Offerors that are Joint Ventures (JV), work performed as the prime contractor by the JV or either entity comprising a member the JV will be considered and evaluated as work performed by the Offerors as the prime contractor.

For each Offeror reference, the Offeror shall provide its completed Attachment 0003 and a blank Attachment 0004 – “Offeror Past Performance Survey” to its reference for completion

Document C201/Solicitation – REVISED 08/03/17 Pages 10 of 30 and submission directly to the government point of contact. The reference must complete the Attachment 0004 and send it directly to the Government to Sarah Callies at sarah.callies@gsa.gov . Past Performance Surveys are due as provided in the solicitation, but no later than the proposal due date in the solicitation.

The Government reserves the right to contact references or use sources other than those provided by the offeror to obtain information related to past performance. Other sources include, but are not limited to, the Past Performance Information Retrieval System; Federal, State or local governmental agencies; and private sector businesses. Limited exchanges between the Government and an offeror may occur to clarify the relevance of an offeror's past performance information and adverse past performance information to which the offeror has not previously had an opportunity to respond.

Offeror shall provide a completed Attachment 0003 – “Offeror Experience Information” document and a blank Attachment 0004 - “Offeror Past Performance Survey” document to the reference for confirmation of the information provided in Attachment 0003. References will provide responses on Attachment 0004 and submit the completed Attachment 0004 directly to the Contract Specialist.

Standard for Evaluation: The standard for this factor is met when none of the references when the combined score is below “Average” rating for the Offeror’s past performance as the Prime Contractor on Similar Contracts/Task Orders performed within the last seven (7) years.

II.E. Other Information to Submit with Proposal

(1) Representations and Certifications

Offerors submitting a proposal in response to this Solicitation shall complete electronic Annual Representations and Certifications in conjunction with required Entity registration in the System for Award Management accessed via https://www.sam.gov. Offerors shall also submit with their proposal, the Annual Representations and Certifications (FAR 52.204-8), using the attached Offeror’s Representations and Certifications (C301).

II.F. Requirements for Joint Venture Offerors

(1) All offers submitted by joint ventures must include a copy of an executed joint venture agreement (with original signatures) which fully discloses the legal identity of each member of the joint venture, the relationship between the members, the form of ownership of each member, and any limitations on liability or authority for each member.

(2) An authorized representative of each member of the joint venture must sign the SF 1442 accompanying an offer regardless of any agency relationship established between the members.

(3) In the case of corporations that are joint venture members, the corporation secretary must certify that the corporation is authorized to participate in the joint venture, either by so certifying in the joint venture agreement, or by submitting a separate certification to the Government. The joint venture must also provide a certificate that identifies a principal representative of the joint venture with full authority to bind the joint venture.

(4) Representations and certifications, financial information, and past performance information must be submitted for each member of the joint venture.

mailto:sarah.callies@gsa.gov https://www.sam.gov/

Document C201/Solicitation – REVISED 08/03/17 Pages 11 of 30

III. General Provisions

III.A. Availability of Funds

Issuance of this Solicitation does not warrant that funds are presently available for award of a Contract.

Award of the contract shall be subject to the availability of appropriated funds, and the Government shall incur no obligation under this Solicitation in advance of such time as funds are made available to the Contracting Officer for the purpose of contract award.

III.B. Requests for Clarification or Interpretation

The Government will attempt to answer all requests for clarifications or interpretations of the Solicitation Documents prior to the date set for receipt of offers, but does not warrant that all such requests will be answered within 15 calendar days. Therefore, prospective offerors should make such requests not less than 15 calendar days prior to the date set for receipt of offers.

III.C. Notice to Small Business Firms

A program for the purpose of assisting qualified small business concerns in obtaining certain bid, payment, or performance bonds that are otherwise not obtainable is available through the Small Business Administration (SBA) (www.sba.gov). For information concerning SBA's surety bond guarantee assistance, contact your SBA District Office.

III.D. Information Concerning the Disclosure of Solicitation Results

This acquisition is being conducted under the provisions of FAR Part 15 as a negotiated procurement. In accordance with FAR 3.104 and FAR 15.207, after receipt of proposals, no information regarding the identity of those submitting offers, the number of offers received, or the information contained in such offers will be made available until after award except as provided by FAR 15.503.

III.E. Affirmative Procurement Program

GSA has implemented an Affirmative Procurement Program (APP) intended to maximize the use of recovered materials, environmentally preferable, and bio-based products. Offerors should familiarize themselves with the requirements for using and reporting on the use of such materials in performance as set forth in the Agreement. Refer to clauses FAR 52.204-4 requiring double sided printing on recycled paper for all reports and FAR 52.223-10 encouraging vendors to practice waste reduction.

III.F. Notice Concerning Preparation of Proposals

Offerors are cautioned to carefully read the entire Solicitation and the Agreement to be included in the Contract contemplated by the Solicitation in order to be fully aware of all requirements and clauses in the contemplated Contract. Verify that all blanks requiring information to be supplied in an Offer have been properly filled out; that all pricing and other numerical data is accurately calculated; and that all copies of the Offer contain the same information.

http://www.sba.gov/

Document C201/Solicitation – REVISED 08/03/17 Pages 12 of 30

III.G. Contractor Performance Information

(1) Evaluating Contractor Performance: The General Services Administration is using the Contractor Performance Assessment Reporting System (CPARS) module as the secure, confidential, information management tool to facilitate the performance evaluation process.

CPARS enables a comprehensive evaluation by capturing comments from both GSA and the contractor. The website for CPARS is http://www.cpars.gov

Completed CPARS evaluations are sent to the Past Performance Information Retrieval System (PPIRS) which may then be used by Federal acquisition community for use in making source selection decisions. PPIRS assists acquisition officials by serving as the single source for contractor past performance data.

(2) CPARS Registration: Each award requiring an evaluation must be registered in CPARS.

The contractor will receive several automated emails. Within thirty days of award, the contractor will receive an e-mail that contains user account information, as well as the applicable contract and order number(s) assigned. Contractors will be granted one user account to access all evaluations.

(3) Contractor CPARS Training: Contractors may sign up for CPARS training. A schedule of classes will be posted to the CPARS training site (http://www.cpars.gov/allapps/cpcbtdlf.htm) and updated as needed.

(4) Contractor Representative (CR) Role: All evaluations will be sent the Contractor Representative (CR) named on your award. The CR will be able to access CPARS to review and comment on the evaluation. If your CR is not already in the CPARS system, the contracting officer will request the name and email address of the person that will be responsible for the CR role on your award.

Once an evaluation is ready to be released the CR will receive an email alerting them the evaluation is ready for their review and comment. The email will indicate the time frame the CR has to respond to the evaluation; however, the CR may return the evaluation earlier than this date.

GSA shall provide for review at a level above the contracting officer (i.e., contracting director) to consider any disagreement between GSA and the contractor regarding GSA’s evaluation of the contractor. Based on the review, the individual at a level above the contracting officer will issue the ultimate conclusion on the performance evaluation.

Copies of the evaluations, contractor responses, and review comments, if any, will be retained as part of the contract file.

III.H. Safeguarding Documents Designated as Sensitive But Unclassified

Certain information contained in the Solicitation Documents may have been designated as Sensitive but Unclassified (SBU) building information. With respect to such information, Offerors shall agree to the terms for receipt of such information, as set forth in the provision “Administrative Matters” in Section III of the Agreement, as a condition of receipt of such information.

SAFEGUARDING AND DISSEMINATION OF SENSITIVE BUT UNCLASSIFIED (SBU)

BUILDING INFORMATION

http://www.cpars.gov/ http://www.cpars.gov/allapps/cpcbtdlf.htm

Document C201/Solicitation – REVISED 08/03/17 Pages 13 of 30

This clause applies to all recipients of SBU building information, including offerors, bidders, awardees, contractors, subcontractors, lessors, suppliers, and manufacturers.

(a) Marking SBU. Contractor-generated documents that contain building information must be reviewed by GSA to identify any SBU content, before the original or any copies are disseminated to any other parties. If SBU content is identified, the contracting officer may direct the contractor, as specified elsewhere in this contract, to imprint or affix SBU document markings to the original documents and all copies, before any dissemination.

(b) Authorized recipients. Building information considered SBU must be protected with access strictly controlled and limited to those individuals having a need to know such information.

Those with a need to know may include Federal, State, and local government entities, and nongovernmental entities engaged in the conduct of business on behalf of or with GSA.

Nongovernmental entities may include architects, engineers, consultants, contractors, subcontractors, suppliers, and others submitting an offer or bid to GSA or performing work under a GSA contract or subcontract. Contractors must provide SBU building information when needed for the performance of official Federal, State, and local government functions, such as for code compliance reviews and for the issuance of building permits. Public safety entities such as fire and utility departments may require access to SBU building information on a need to know basis. This clause must not prevent or encumber the dissemination of SBU building information to public safety entities.

(c) Dissemination of SBU building information:

(1) By electronic transmission. Electronic transmission of SBU information outside of the GSA firewall and network must use session (or alternatively file encryption).

Sessions (or files) must be encrypted with an approved NIST algorithm, such as Advanced Encryption Standard (AES) or Triple Data Encryption Standard (3DES), in accordance with the Federal Information Processing Standards Publication (FIPS PUB) 140-2, Security Requirements for Cryptographic Modules. Encryption tools that meet FIPS 140-2 are referenced on the NIST web page found at the following URL:

http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/1401vend.htm. All encryption products used to satisfy the FIPS 140-2 requirement should have a validation certificate that can be verified at the following URL:

http://csrc.nist.gov/groups/STM/cmvp/validation.html#02. (Not all vendors of security products that claim conformance with FIPS 140-2 have validation certificates.)

Contractors must provide SBU building information only to authorized representatives of State, Federal, and local government entities and firms currently registered as “active” in the Central Contractor Registration (CCR) database at www.ccr.gov that have a need to know such information. If a subcontractor is not registered in the CCR and has a need to possess SBU building information, the subcontractor shall provide to the contractor its DUNS number or its tax ID number and a copy of its business license.

(2) By nonelectronic form or on portable electronic data storage devices. Portable electronic data storage devices include but are not limited to CDs, DVDs, and USB drives. Nonelectronic forms of SBU building information include paper documents.

(i) By mail. Utilize only methods of shipping that provide services for monitoring receipt such as track and confirm, proof of delivery, signature confirmation, or return receipt.

http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/1401vend.htm http://csrc.nist.gov/groups/STM/cmvp/validation.html#02 http://www.ccr.gov/

Document C201/Solicitation – REVISED 08/03/17 Pages 14 of 30

(ii) In person. Contractors must provide SBU building information only to authorized representatives of State, Federal, and local government entities and firms currently registered as “active” in the CCR database that have a need to know such information.

(3) Record Keeping. Contractors must maintain a list of State, Federal, and local government entities and the firms to which SBU is disseminated under sections (c) (1), and (c) (2) of this clause. The list must include at a minimum (1) the name of the State, Federal, or local government entity or firm to which SBU has been disseminated; (2) the name of the individual at the entity or firm who is responsible for protecting the SBU building information, with access strictly controlled and limited to those individuals having a need to know such information; (3) contact information for the named individual; and

(4) a description of the SBU building information provided. Once work is completed, or for leased space with the submission of the “as built” drawings, the contractor must collect all lists maintained in accordance with this clause, including those maintained by any subcontractors and/or suppliers, and submit them to the contracting officer. For federal buildings, final payment may be withheld until the lists are received.

(d) Retaining SBU documents. SBU building information (both electronic and paper formats) must be protected, with access strictly controlled and limited to those individuals having a need to know such information.

(e) Destroying SBU building information. SBU building information must be destroyed such that the marked information is rendered unreadable and incapable of being restored, or returned to the contracting officer, when no longer needed, in accordance with guidelines provided for media sanitization within Appendix A of NIST Special Publication 800-88, Guidelines for Media Sanitization, available at http://csrc.nist.gov/publications/nistpubs/800-88/NISTSP800- 88_rev1.pdf. Examples of acceptable destruction methods for SBU building information are burning or shredding hardcopy; physically destroying portable electronic storage devices such as CDs, DVDs, and USB drives; deleting and removing files form electronic recycling bins; and removing material from computer hard drives using a permanent-erase utility such as bit wiping software or disk crushers.

(f) Notice of disposal. The contractor must notify the contracting officer that all SBU building information has been destroyed, or returned to the contracting officer, by the contractor and its subcontractors or suppliers in accordance with section (e) of this clause, with the exception of the contractor’s record copy. This notice must be submitted to the contracting officer at the completion of the contract in order to receive final payment. For leases, this notice must be submitted to the contracting officer at the completion of the lease term.

(g) Incidents. All improper disclosures of SBU building information must be immediately reported to the contracting officer at One Denver Federal Center Building 41, Denver, Colorado 80225-0546. If the contract provides for progress payments, the contracting officer may withhold approval of progress payments until the contractor provides a corrective action plan explaining how the contractor will prevent future improper disclosures of SBU building information. Progress payments may also be withheld for failure to comply with any provision of this clause until the contractor provides a written corrective action plan explaining how the contractor will rectify any noncompliance and comply with the clause in the future.

(h) Subcontracts. The Contractor must insert the substance of this clause in all subcontracts.

http://csrc.nist.gov/publications/nistpubs/800-88/NISTSP800-88_rev1.pdf http://csrc.nist.gov/publications/nistpubs/800-88/NISTSP800-88_rev1.pdf

Document C201/Solicitation – REVISED 08/03/17 Pages 15 of 30

III.I. Additional Security Requirements

(1) FAR 52.204-9, Personal Identity Verification of Contractor Personnel, January 2011

(2) GSAR Clause 552.204-9, Personal Identity Verification Requirements, October 2012

(3) FAR 52.204-21, Basic Safeguarding of Covered Contractor Information Systems, Jun 2016.

As prescribed in 4.1903, insert the following clause:

BASIC SAFEGUARDING OF COVERED CONTRACTOR INFORMATION SYSTEMS (JUN 2016)

(a) Definitions. As used in this clause– “Covered contractor information system” means an information system that is owned or operated by a contractor that processes, stores, or transmits Federal contract information.

“Federal contract information” means information, not intended for public release, that is provided by or generated for the Government under a contract to develop or deliver a product or service to the Government, but not including information provided by the Government to the public (such as on public websites) or simple transactional information, such as necessary to process payments.

“Information” means any communication or representation of knowledge such as facts, data, or opinions, in any medium or form, including textual, numerical, graphic, cartographic, narrative, or audiovisual (Committee on National Security Systems Instruction (CNSSI) 4009).

“Information system” means a discrete set of information resources organized for the collection, processing, maintenance, use, sharing, dissemination, or disposition of information (44 U.S.C. 3502).

“Safeguarding” means measures or controls that are prescribed to protect information systems.

(b) Safeguarding requirements and procedures.

(1) The Contractor shall apply the following basic safeguarding requirements and procedures to protect covered contractor information systems. Requirements and procedures for basic safeguarding of covered contractor information systems shall include, at a minimum, the following security controls:

(i) Limit information system access to authorized users, processes acting on behalf of authorized users, or devices (including other information systems).

(ii) Limit information system access to the types of transactions and functions that authorized users are permitted to execute.

(iii) Verify and control/limit connections to and use of external information systems.

(iv) Control information posted or processed on publicly accessible information systems.

(v) Identify information system users, processes acting on behalf of users, or devices.

(vi) Authenticate (or verify) the identities of those users, processes, or devices, as a prerequisite to allowing access to organizational information systems.

(vii) Sanitize or destroy information system media containing Federal Contract

Information before disposal or release for reuse.

http://uscode.house.gov/

Document C201/Solicitation – REVISED 08/03/17 Pages 16 of 30

(viii) Limit physical access to organizational information systems, equipment, and the respective operating environments to authorized individuals.

(ix) Escort visitors and monitor visitor activity; maintain audit logs of physical access; and control and manage physical access devices.

(x) Monitor, control, and protect organizational communications (i.e., information transmitted or received by organizational information systems) at the external boundaries and key internal boundaries of the information systems.

(xi) Implement subnetworks for publicly accessible system components that are physically or logically separated from internal networks.

(xii) Identify, report, and correct information and information system flaws in a timely manner.

(xiii) Provide protection from malicious code at appropriate locations within organizational information systems.

(xiv) Update malicious code protection mechanisms when new releases are available.

(xv) Perform periodic scans of the information system and real-time scans of files from external sources as files are downloaded, opened, or executed.

(2) Other requirements. This clause does not relieve the Contractor of any other specific safeguarding requirements specified by Federal agencies and departments relating to covered contractor information systems generally or other Federal safeguarding requirements for controlled unclassified information (CUI) as established by Executive Order 13556.

(c) Subcontracts. The Contractor shall include the substance of this clause, including this paragraph (c), in subcontracts under this contract (including subcontracts for the acquisition of commercial items, other than commercially available off-the-shelf items), in which the subcontractor may have Federal contract information residing in or transiting through its information system.

SECURITY CLEARANCE REQUIREMENTS (NONCLASSIFIED CONTRACT)

(NOTE: DOES NOT INCLUDE LEASED SPACE)

1) Introduction

a) Homeland Security Presidential Directive 12 (HSPD-12) “Policy for a Common Identification Standard for Federal Employees and Contractors” mandated the implementation of a government-wide standard for secure and reliable forms of identification, also known as security credentials.

b) All contractor employees who require routine access to GSA-controlled facilities or its Information Technology (IT) infrastructure are required to be issued this type of credential. Routine access is defined as regularly scheduled access to Government facilities for a period greater than six (6) months.

c) Prior to being issued this form of identification, each individual must have both their identity and trustworthiness proven. This is accomplished by conducting a personnel security

Document C201/Solicitation – REVISED 08/03/17 Pages 17 of 30 investigation (Tier 1) and a Federal Bureau of Investigation (FBI) Criminal History Fingerprint check.

All contractors seeking to conduct business on or within federal facilities that are controlled and operated by the Federal Government are required to have a personnel security investigation conducted.

d) Contractors require a favorable initial suitability determination based off the submission of a Tier 1 to receive an identification credential meeting HSPD-12 requirements.

e) The Contractor is responsible for returning all HSPD-12 badges to GSA upon project completion.

2) Clearance Type

a) Long-Term Contractor Clearance Tier 1

i) This section covers the procedures for obtaining a security clearance for contractors working on GSA-controlled facilities.

ii) The Tier 1 clearance is required for contractors who require access for more than six (6) months and those who need Information Technology (IT) access (regardless of how long they will be working on a GSA-controlled facility).

iii) Procedures for each Tier 1 applicant to be cleared:

a. The prime contractor will submit to the Contracting Officer and then maintain throughout the course of the contract, a list of all prime contractor employees (applicant) and subcontractor employees (applicant) who are required on the project using the form: Requesting Official (RO) Contractor Approval List. (Note: Submission of the RO list will trigger GSA to provide HSPD-12 and e-Qip training for the prime contractor.)

b. The Contractor Information Worksheet (CIW) (form GSA850) will be submitted by GSA to the prime contractor after prime contractor has received HSPD-12 and e-Qip training. (Note: The prime contractor must designate a Point of Contact (POC) on the

CIW.)

c. Each applicant for the HSPD-12 compliant Tier 1 credential will complete section 1 of the CIW and return the CIW to the POC. The POC is responsible to submit all completed CIW's via email to zonec-hspd12@gsa.gov. (Note: applicants for the Tier 1 credential will not be eligible for escort during credential processing.)

d. The applicant will then receive an email that will invite them to apply to e-QIP, and they will also receive an email with an invite to an enrollment appointment.

e. The applicant must complete the enrollment appointment before completing e-Qip.

f. Following the instructions in the invitation to apply to e-Qip email, the applicant will log into e-Qip and complete a background history questionnaire.

mailto:zonec-hspd12@gsa.gov

Document C201/Solicitation – REVISED 08/03/17 Pages 18 of 30

g. As per the instructions in the invitation to apply to e-Qip email, the applicant is also required to complete the Declaration for Federal Employment OF-306.

(Note: Digital signatures are not accepted, all questions must be checked, answered, or marked NA. The completed OF-306 must be signed, scanned into a PDF and uploaded to E-Qip.)

h. As per the instructions in the invitation to apply to e-Qip email, the applicant is also required to complete the Authorization to Obtain Credit Report 3665.

(Note: Digital signatures are not accepted. The completed 3665 must be signed, scanned into a PDF and uploaded to E-Qip.)

i. After completing steps e-h above, the applicant is required to certify that their answers are true, electronically sign and submit the e-QIP application.

j. Office of Mission Assurance (OMA) will notify the applicant directly if any errors occurred when completing the e-QIP application.

(Note: Failure to respond to these messages will result in delay of their Tier 1 or termination of e-Qip.)

k. A contractor Enter on Duty (EOD) email will be received by POC and applicant upon clearance adjudication.

l. Upon completion of HSPD-12 credential processing, the applicant will be notified by email that an appointment will need to be scheduled for the HSPD-12 credential pick up and activation.

b) Escort Procedures

i) A HSPD-12 credentialed contractor may escort up to five (5) non-cleared individuals to access GSA-controlled facilities.

ii) Escort procedures are limited to individuals needing site access for no more than fifteen (15) consecutive days.

iii) A contractor may be escorted for a total of fifteen (15) cumulative days, on either a single day or multiple day escort, per six (6) month interval, per escorted individual.

iv) Individuals in the process of obtaining the HSPD-12 credential will not be eligible for escort during the HSPD-12 adjudication period.

v) Procedures:

a. Persons being escorted must be added to the Requesting Official (RO) Contractor Approval List.

b. A current CIW for the escortee must be submitted with the updated Requesting Official (RO) Contractor Approval List by the POC.

c. The POC is responsible to submit changes to the Requesting (RO) Official Contractor List to the Requesting Official (GSA POC).

Document C201/Solicitation – REVISED 08/03/17 Pages 19 of 30

d. The POC is responsible to submit the escortee CIW no later than three (3) business days in advance of the escort date, via email to zonec-hspd12@gsa.gov.

IV. FAR/GSAR Solicitation Provisions

IV.A. FAR 52.215-1 Instructions to Offerors—Competitive Acquisition (JAN 04)

(a) Definitions. As used in this provision— “Discussions” are negotiations that occur after establishment of the competitive range that may, at the Contracting Officer’s discretion, result in the offeror being allowed to revise its proposal.

“In writing,” “writing,” or “written” means any worded or numbered expression that can be read, reproduced, and later communicated, and includes electronically transmitted and stored information.

“Proposal modification” is a change made to a proposal before the solicitation’s closing date and time, or made in response to an amendment, or made to correct a mistake at any time before award.

“Proposal revision” is a change to a proposal made after the solicitation closing date, at the request of or as allowed by a Contracting Officer as the result of negotiations.

“Time,” if stated as a number of days, is calculated using calendar days, unless otherwise specified, and will include Saturdays, Sundays, and legal holidays. However, if the last day falls on a Saturday, Sunday, or legal holiday, then the period shall include the next working day.

(b) Amendments to solicitations. If this solicitation is amended, all terms and conditions that are not amended remain unchanged. Offerors shall acknowledge receipt of any amendment to this solicitation by the date and time specified in the amendment(s).

(c) Submission, modification, revision, and withdrawal of proposals.

(1) Unless other methods (e.g., electronic commerce or facsimile) are permitted in the solicitation, proposals and modifications to proposals shall be submitted in paper media in sealed envelopes or packages (i) addressed to the office specified in the solicitation, and

(ii) showing the time and date specified for receipt, the solicitation number, and the name and address of the offeror. Offerors using commercial carriers should ensure that the proposal is marked on the outermost wrapper with the information in paragraphs (c)(1)(i) and (c)(1)(ii) of this provision.

(2) The first page of the proposal must show—

(i) The solicitation number;

(ii) The name, address, and telephone and facsimile numbers of the offeror (and electronic address if available);

(iii) A statement specifying the extent of agreement with all terms, conditions, and provisions included in the solicitation and agreement to furnish any or all items upon which prices are offered at the price set opposite each item;

(iv) Names, titles, and telephone and facsimile numbers (and electronic addresses if available) of persons authorized to negotiate on the offeror’s behalf with the Government in connection with this solicitation; and

(v) Name, title, and signature of person authorized to sign the proposal.

Proposals signed by an agent shall be accompanied by evidence of that agent’s authority, unless that evidence has been previously furnished to the issuing office.

mailto:zonec-hspd12@gsa.gov

Document C201/Solicitation – REVISED 08/03/17 Pages 20 of 30

(3) Submission, modification, revision, and withdrawal of proposals.

(i) Offerors are responsible for submitting proposals, and any modifications or revisions, so as to reach the Government office designated in the solicitation by the time specified in the solicitation. If no time is specified in the solicitation, the time for receipt is 4:30 p.m., local time, for the designated Government office on the date that proposal or revision is due.

(ii)(A) Any proposal, modification, or revision received at the Government office designated in the solicitation after the exact time specified for receipt of offers is “late” and will not be considered unless it is received before award is made, the Contracting Officer determines that accepting the late offer would not unduly delay the acquisition; and—

(1) If it was transmitted through an electronic…