READ_FIRST_Notification_of_Solicitation.pdf

U.S. General Services Administration Public Building Service, Region 10

Southeast Service Center 904 W. Riverside Ave, Room 135

Spokane, Wa 99201

July 12, 2016

Potential Offeror, SUBJECT: Notice of Available Solicitation Solicitation Number: GS-10-P-16-XC-C-7014 Project Title: ADA Employee Entrance, Lewsiston, ID

This notice is to inform you that a solicitation is currently available to small businesses. The solicitation is for a contractor to utilize a design-build (D-B) project delivery system to provide all labor, materials, tools, and equipment necessary to design and install a new employee entrance and sidewalk with ABA compliant exterior vestibule on the south face of the Lewiston SSA Office Building located in Lewiston, Idaho.

This solicitation contains Sensitive but Unclassified (SBU) building information that will only be disseminated to authorized users. In order to receive the SBU information (Drawings), the attached agreement must be completed, signed and returned to the undeersigned. Upon receipt of the acknowledgement the SBU material will be provided to your company via an encrypted WinZip file.

GSA Directive PBS 3490.1A clause, Safeguarding and Dissemination of Sensitive But Unclassified (SBU) Building Information, is attached for your information and is also incorporated into the available solicitation.

Please submit all questions and/or concerns regarding this notice to my attention at the email address shown below.

Thank you for your interest in this General Services Administration requirement.

Dan Kenison Contract Specialist Ph: (509) 353-0783 Email: Daniel.kenison@gsa.gov

Attachment :

1. Clause - Documentation Security for Sensitive but Unclassified Building Information mailto:mackenzie.weiss@gsa.gov

Safeguarding and Dissemination of Sensitive But Unclassified (SBU) Building Information

This clause applies to all recipients of SBU building information, including offerors, bidders, awardees, contractors, subcontractors, lessors, suppliers and manufacturers.

1. Marking SBU. Contractor-generated documents that contain building information must be reviewed by GSA to identify any SBU content, before the original or any copies are disseminated to any other parties.

If SBU content is identified, the Contracting Officer (CO) may direct the contractor, as specified elsewhere in this contract, to imprint or affix SBU document markings to the original documents and all copies, before any dissemination.

2. Authorized recipients.

a. Building information designated SBU must be protected with access strictly controlled and limited to those individuals having a legitimate business need to know such information. Those with a need to know may include Federal, State and local government entities, and nongovernment entities engaged in the conduct of business on behalf of or with GSA. Nongovernment entities may include architects, engineers, consultants, contractors, subcontractors, suppliers, utilities, and others submitting an offer or bid to GSA, or performing work under a GSA contract or subcontract. Recipient contractors must be registered as “active” in the System for Award Management (SAM) database at www.sam.gov and have a legitimate business need to know such information. If a subcontractor is not registered in the SAM and has a need to possess SBU building information, the subcontractor shall provide to the contractor its DUNS number or its tax ID number and a copy of its business license. The contractor shall keep this information related to the subcontractor for the duration of the contract and subcontract.

b. All GSA personnel and Contractors must be provided SBU building information when needed for the performance of official Federal, State, and local government functions, such as for code compliance reviews and for the issuance of building permits. Public safety entities such as fire and utility departments may require access to SBU building information on a need to know basis. This clause must C-2 not prevent or encumber the dissemination of SBU building information to public safety entities.

3. Dissemination of SBU building information.

a. By electronic transmission. Electronic transmission of SBU information outside of the GSA network must use session encryption (or alternatively, file encryption). Encryption must be via an approved NIST algorithm with a valid certification, such as Advanced Encryption Standard (AES) or Triple Data Encryption Standard (3DES), in accordance with Federal Information Processing Standards Publication (FIPS PUB) 140-2, Security Requirements for Cryptographic Modules per GSA policy.

b. By non-electronic form or on portable electronic data storage devices. Portable electronic data storage devices include, but are not limited to CDs, DVDs, and USB drives. Non-electronic forms of SBU building information include paper documents, among other formats.

i. By mail. Contractors must utilize only methods of shipping that provide services for monitoring receipt such as track and confirm, proof of delivery, signature confirmation, or return receipt.

ii. In person. Contractors must provide SBU building information only to authorized recipients with a need to know such information. Further information on authorized recipients is found in Section 2 of this clause.

4. Record keeping. Contractors must maintain a list of all entities to which SBU is disseminated, in accordance with sections 2 and 3 of this clause. This list must include at a minimum: (1) the name of the State, Federal, or local government entity, utility, or firm to which SBU has been disseminated; (2) the name of the individual at the entity or firm who is responsible for protecting the SBU building information, with access strictly controlled and limited to those individuals having a legitimate business need to know such information; (3) contact information for the named individual; and (4) a description of the SBU building information provided. Once “as built” drawings are submitted, the contractor must collect all lists maintained in accordance with this clause, including those maintained by any subcontractors and/or suppliers, and submit them to the CO. For Federal buildings, final payment may be withheld until the lists are received.

5. Safeguarding SBU documents. SBU building information (both electronic and paper formats) must be protected, with access strictly controlled and limited to those individuals having a legitimate business need to know such information. GSA contractors and subcontractors must not take SBU building information outside of GSA or their own facilities or network, except as necessary for the performance of that C-3 contract. Access to the information must be limited to those with a legitimate business need to know.

6. Destroying SBU building information. When no longer needed, SBU building information must be destroyed so that marked information is rendered unreadable and incapable of being restored, in accordance with guidelines provided for media sanitization within GSA CIO IT Security 06-32, Media Sanitization Guide and Appendix A of NIST Special Publication 800-88, Guidelines for Media Sanitization.

Alternatively, SBU building information may be returned to the CO.

7. Notice of disposal. The contractor must notify the CO that all SBU building information has been returned or destroyed by the contractor and its subcontractors or suppliers in accordance with paragraphs 4 and 6 of this clause, with the exception of the contractor's record copy. This notice must be submitted to the CO at the completion of the contract to receive final payment. For leases, this notice must be submitted to the CO at the completion of the lease term. The contractor may return the SBU documents to the CO rather than destroying them.

8. Incidents. All improper disclosures of SBU building information must be immediately reported to the CO at General Services Administration, Public Building Service, Southeastern Service Center, 620 SW Main Street, Portland OR 97205, Attn: MacKenzie Weiss, Contracting Officer, (503) 353-2450 or mackenzie.weiss@gsa.gov. If the contract provides for progress payments, the CO may withhold approval of progress payments until the contractor provides a corrective action plan explaining how the contractor will prevent future improper disclosures of SBU building information. Progress payments may also be withheld for failure to comply with any provision in this clause until the contractor provides a corrective action plan explaining how the contractor will rectify any noncompliance and comply with the clause in the future.

9. Subcontracts. The contractor and subcontractors must insert the substance of this clause in all subcontracts.

[End of clause]

SOLICITATION NUMBER: GS-10-P-16-XC-P-7014

The recipient acknowledges the requirement to use reasonable care, as outlined above, to safeguard the documents and, if not awarded, the contract (and at the completion of any protect/appeal process) will make every reasonable and prudent effort to destroy or render useless all SBU information received during the solicitation.

I agree that I will abide by this agreement and will only disseminate Sensitive but Unclassified (SBU) building information to other authorized users under the conditions set forth above.

Signature: ____________________________________________________________

Printed Name: _________________________________________________________

Title: _________________________________________________________________

Address: _____________________________________________________________

City / State: ___________________________________________________________

DUNS Number: ________________________________________________________

SAM Verification: ACTIVE: ________________ INACTIVE: __________________

Phone: _______________________________________________________________

Email: ________________________________________________________________

Date: _________________________________________________________________