HS002121R7234 - PAEI Combined Synopsis-Solicitation.pdf

Defense Counterintelligence and Security Agency Defense Insider Threat Management Analysis Center

COMBINED SYNOPSIS/SOLICITATION FOR COMMERCIAL ITEMS

A. General Information

Document Type: Combined Solicitation/Synopsis

Solicitation Number: HS002121R7234 Posting Date: September 10, 2021 Deadline for Submission of Industry Questions:

September 14, 2020 at 2:00 PM Eastern Time

Deadline for Submission of Proposals:

September 20, 2021 at 2:00 PM Eastern Time

Product or Service Code: DA10 (IT and Telecom – Business Application/Application Development Software as a Service)

Set Aside: Total Small Business

NAICS Code: 519130 (Internet Publishing and Broadcasting and Web Search Portals)

Small Business Size Standard: 1,000 employees Contemplated Contract Type: Firm Fixed Price Anticipated Period of Performance:

0001 - Base Year: September 30, 2021-September 29, 2022 1001 - Option Year: September 30, 2022-September 29, 2023

Place of Performance: Defense Counterintelligence and Security Agency 1550 Crystal Lane Arlington, VA 22202

Contracting Office Address: Defense Counterintelligence and Security Agency Acquisition and Contracting Russell-Knox Building 27130 Telegraph Road Quantico, VA 22134-2253

Points of Contact: Ms. Salima M. Iskra Contract Specialist 571-305-6143 Salima.M.Iskra.civ@mail.mil

Ms. Shelly L. Thieme Contract Specialist 724-794-7194 Shelly.L.Thieme.civ@mail.mil mailto:Salima.M.Iskra.civ@mail.mil mailto:Shelly.L.Thieme.civ@mail.mil

DCSA Solicitation No. HS002121R7234 - PAEI

B. Description

1. This is a combined synopsis/solicitation for commercial items prepared in accordance with the format in Federal Acquisition Regulation (FAR) subpart 12.6, as supplemented with additional information included in this notice. This announcement constitutes the only solicitation; proposals are being requested and a written solicitation will not be issued.

2. This solicitation, HS002121R7234, is a request for proposals (RFP). The solicitation document and incorporated provisions and clauses are those in effect through Federal Acquisition Circular 2021-06 dated July 12, 2021.

3. The associated North American Industrial Classification System (NAICS) code for this procurement is

519130, Internet Publishing and Broadcasting and Web Services Portals, with a small business size standard of 1,000 employees. This is a 100% small business set-aside. Any offers received from concerns other than small businesses will not be considered for award.

4. The Government intends to award a single firm-fixed-price contract, on a lowest price technically acceptable (LPTA) basis, for access to publicly available electronic information (PAEI) and social media data in accordance with the salient characteristics listed below.

5. The anticipated period of performance is September 30, 2021-September 29, 2023, which includes one (1) 12-month Base Period and one (1) 12-month Option Period. Acceptance and delivery will be FOB destination.

C. Background

In December 2014, DCSA was appointed by the Secretary of Defense to incubate the Department of Defense (DoD) Insider Threat Management and Analysis Center (DITMAC) program, affirmed in January 2017 via DoD Directive 5205.16, Change 1. The mission of the DITMAC is to provide the DoD enterprise a capability to identify, assess and mitigate risk from insiders, to oversee and manage unauthorized disclosures, and to integrate, manage, mature, and professionalize insider threat (InT) capabilities. It fills a critical gap within the DoD by empowering and entrusting a single senior Defense official with the task of working with all DoD Component InT programs to promote best practices, drive innovation, promulgate a fundamental set of standards, and provide resource and policy advocacy to senior decision makers, and through an enterprise-level analytic function, close seams between Components that are potentially exploitable by insiders.

Following recent activities, and in line with the Secretary of Defense’s counter-extremism strategy, there is an increased emphasis on ensuring security and safety of members of the Department from potential negative actors within the force. The DITMAC’s effort to contextualize behaviors by individuals reported through insider threat channels will be enhanced through access to PAEI and social media data.

D. Objective

The DCSA’s Department of Defense (DoD) Insider Threat Management and Analysis Center (DITMAC) provides an enterprise-wide capability to identify, assess, and mitigate risk from insiders; to oversee and manage unauthorized disclosures; and to integrate, manage, mature, and professionalize insider-threat capabilities.

The purpose of this solicitation is to identify contractors capable of providing DITMAC analysts with an automated capability to receive PAEI inclusive of (but not limited to) social media and other online behavior that is publicly available that a primary actor may undertake, from posting on public webpages (such as responding to news articles) to dark web activity data on referred individuals in an effort to contextualize behavior that may be indicative of a potential insider threat.

E. Salient Characteristics

1. Access to PAEI and Social Media Data

1.1. The Contractor shall provide automated reports of activity and behavior through PAEI, particularly social media, on known primary actors to help contextualize reported behaviors potentially indicative of insider threats. Specifically, the Government requires the following:

Solution/Capability Quantity

Government licenses/user accounts 30 PAEI searches/reports Approx.

6,000/yr.

1.2. The Contractor shall provide a tool or technical solution that meets all Federal and DoD technological requirements for access and use on Government systems and complies with privacy and civil liberties requirements and protections.

1.3. The Contractor’s technological solution shall include customizable capabilities to adapt search parameters and results in a report that allows for search of photos, text, and actions (such as likes or retweets) taken by the primary actor(s) online without requiring DITMAC analysts to visit the social media site themselves. These search capabilities shall be automated and shall have modifiable query capabilities to refine search criteria based on requirements, and shall provide information to include but not limited to, photos, original posts, shared posts, comments on threads or postings, and actions such as “likes” or other demonstrated action toward something that has been posted and is publicly available to view.

1.4. The Contractor shall deliver an automated report of data meeting the search criteria for the primary actor(s) searched. The Contractor shall supply the report for each query to the analyst who enters the query in the Contractor’s technological solution. One report shall be provided to the insider threat investigative analyst who enters the search. The information will be presented through PDF, MS Word, as JPGs, or other appropriate medium as approved by the technical point of contact (TPOC) identified in the contract.

1.5. The Contractor’s tool shall meet the following criteria:

1.5.1. The capability to broadly scan the internet based on a known primary actor;

1.5.2. The capability to conduct extremely accurate identity resolution based on initially limited data sets to validate that the results truly belong to the primary actor;

1.5.3. The capability to scan the internet not only for text but for photos and videos containing images related to the primary actor and behaviors of concern;

1.5.4. The capability to deliver both screen shots of relevant materials and the ability to view more broadly the information surrounding it to ensure appropriate context is captured;

1.5.5. The capability to not only conduct a single check on an individual for existing information but to maintain continuous checks with frequency no less than weekly on a known actor during the period of time the individual’s case remains open;

1.5.6. The existing capability to meet all DoD and Federal information technology standards to ensure use and capability on DCSA networks (see section H. Provisions and Clauses); and

1.5.7. The ability to access all data without creating a fake user account or creating affiliations with the known primary actors, which is strictly prohibited.

1.5.8. The Contractor shall provide the resulting data to the Government, and any user account used by the Contractor shall not be attributed to Government organizations.

1.6. This information shall only be information that is available to the public, under privacy settings set to “public,” after creating a user login for the social media site.

1.7. The Contractor shall provide licenses or user accounts through initial setup and subsequent staffing changes, and process any necessary changes for existing accounts, within one (1) business day.

1.8. The Contractor shall support the office in establishing initial capabilities in the development of search criteria.

1.9. The Contractor shall provide technical support as required to ensure sustained capabilities, with same-day support if services shut down for any reason.

1.10. The Contractor shall abide by the terms of service as established by individual web sites and social media sites.

1.11. The Contractor’s technical solution shall be available to DCSA DITMAC analysts 24/7/365 and offer same-day resolution of any technical issues that may impair the ability of use.

1.12. The Contractor’s technical solution shall be Cloud-hosted.

1.13. The Contractor’s technical solution shall have the capabilities outlined and therefore should not require customization in regards to professional services.

1.14. Within one (1) business day, the Contractor shall provide licenses and/or username and passwords to required users for initial accounts and manage them through completion/deletion upon departure or transfer.

2. Audits and Reporting

2.1. The Contractor shall provide monthly written updates to the TPOC on the number and status of licenses or accounts and the users affiliated with them.

2.2. The Contractor shall provide to the TPOC a monthly audit report for each end-user that includes the names of the primary actors run through the tool or technical capability. Primary actors are defined as DoD-affiliated personnel with access to military installations.

2.3. The Contractor’s technical solution shall possess the capability to generate reports with the ability download reports and associated necessary data.

3. Training

3.1. The Contractor shall provide initial training and an after-action review (AAR) to the TPOC upon completion.

3.2. The Contractor shall provide training to the DITMAC analytic workforce on setup and use of the automated tool or technical capability.

3.3. The Contractor shall provide training within one (1) week of request.

3.4. The initial training will include a more significant number (15-20) of participants and subsequent training will be limited to new DITMAC analysts. Thereafter, the Contractor shall provide training no more than quarterly.

3.5. The Contractor shall provide AARs for any training provided on the tools.

3.6. The Contractor shall provide technical support as required (i.e., when the tool or application is not performing as expected).

4. Security Requirements

4.1. All data is assumed to be highly sensitive, including raw/derived data, multimedia, and the collection and analytic configuration. Online persona details are assumed to be highly sensitive and have additional security controls applied; therefore, additional security measures must be adhered to in order to protect data and users.

4.1.1. All data is assumed to be Controlled Unclassified Information (CUI) and must be protected in accordance with DoDI 5200.48.

4.2. All data shall be routed through a virtual private network provider to obfuscate the source internet protocol. Each analyst shall use dedicated data stores and disks to prevent data leakage between teams or other organizations by using firewall rules that block all network traffic between instances.

4.3. All data and online personal details (name, email, and passwords) shall be stored with encryption to protect user data.

4.4. The tool/technical capability shall operate on NIPR.

4.5. The tool/technical capability will be accessed centralized CONUS on normal unclassified fiber.

4.6. The Contractor must adhere to applicable cybersecurity contract clauses referenced below.

F. Evaluation Factors for Award

Award shall be made to a single responsible party with the lowest priced technically acceptable (LPTA) offer. Technical acceptability will be based on an offeror’s ability to meet all aspects of the Government’s requirement as described under Section E of this document. The Government will proceed with evaluation by ordering the proposals from lowest- to highest-priced, and begin by reviewing the lowest-priced proposal. If the lowest-priced proposal is deemed technically acceptable and the price is fair and reasonable, the Government will make award to that offeror as long as the offeror is otherwise deemed responsible. If award is not made to the lowest-priced offeror, the Government will evaluate the next-lowest-priced offeror in the same manner, and continue with this process until an awardee is determined. Once an awardee is determined, the Government will not evaluate any additional higher-priced proposals.

G. Instructions to Offerors

1. To aid in evaluation, all proposals shall contain:

• An administrative cover page;

• A table of contents (if the technical narrative is greater than three (3) pages long);

• A technical narrative; and

• The completed attached pricing worksheet (which offerors may modify to accord with their unique pricing and solutions).

2. Proposals shall be no longer than five (5) pages long (excluding the cover page, table of contents, and pricing worksheet).

3. Proposals shall use Times New Roman or Calibri 11-point (or higher) font. All margins shall be set to 1”.

4. Proposals shall include the offeror’s company name and address, point of contact, telephone number, email address, and System for Award Management (SAM) information (CAGE Code, DUNS number).

5. Technical narratives shall illustrate the offeror’s understanding of the requirement and its ability to satisfy all aspects of the requirement. Offerors may include appropriate professional documentation and artifacts, such as screen captures or samples, which demonstrate the capabilities being described.

6. Offerors shall complete the attached pricing worksheet and submit it as part of their proposals.

7. All submissions shall be unclassified and reference “HS002121R7234 – PAEI” in the subject line.

8. Offerors must be registered in SAM at http://sam.gov prior to the RFP closing date. Failure to maintain a current/active account may render your offer non-responsive.

9. Offerors must complete annual representations and certifications online at http://sam.gov. If paragraph (j) of the provision is applicable, a written submission is required.

10. To facilitate the award process, all proposals must include a statement regarding the terms and conditions herein as follows:

"The terms and conditions in the solicitation are acceptable to be included in the award document without modification, deletion, or addition”; or

"The terms and conditions in the solicitation are acceptable to be included in the award document with the exception, deletion, or addition of the following:", in which case offerors shall list exception(s) and rationale for the exception(s).

11. Any questions or concerns regarding this solicitation may be submitted in writing via e-mail to Ms.

Salima M. Iskra at Salima.M.Iskra.civ@mail.mil and must be received not later than September 14, 2021 at 2:00 PM.

12. All questions and answers and any subsequent resultant amendments will be posted at http://sam.gov to allow equal access by all potential offerors. Inquiries will not be attributable to the offeror that submits the question(s).

13. Proposals shall be submitted to Ms. Salima M. Iskra at Salima.M.Iskra.civ@mail.mil and received not later than September 20, 2021 at 2:00 PM Eastern Time. Offerors are encouraged to submit their proposals earlier than the aforementioned time, if possible, to avoid any potential IT problems that could render their submission late.

14. Any questions or proposals not received by the dates and times specified in this combined synopsis/solicitation may be rejected. Additionally, incomplete proposals that do not contain the required information as stated in the solicitation may also be rejected.

15. The Government is not liable for any costs incurred by the Vendor in submitting a quote in response to the request for quote.

H. Provisions and Clauses

1. The full text of FAR and Defense Federal Acquisition Regulation Supplement (DFARS) provisions and clauses may be accessed electronically at http://acquisition.gov.

http://sam.gov/ http://acquisition.gov/

2. The following provisions and clauses are applicable to this RFP:

52.212-1 Instructions to Offerors—Commercial Items JUL 2021

52.212-2 Evaluation—Commercial Items OCT 2014

(a) The Government will award a contract resulting from this solicitation to the responsible offeror whose offer conforming to the solicitation will be most advantageous to the Government, price and other factors considered. The following factors shall be evaluated:

(i) Technical – An offer can either be technically acceptable or technically unacceptable. An offer is technically acceptable when the quote’s technical approach clearly meets all solicitation requirements. An offer is technically unacceptable when it does not clearly meet all solicitation requirements.

(ii) Price – A price analysis will be used to determine the evaluated price to support the selection of the lowest price technically acceptable offer. Offers that contain materially unbalanced proposed prices may be rejected by the Government.

The Government intends to award based on initial quotes; therefore, offerors are encouraged to submit their best offer from both a technical and price aspect. However, the Government reserves the right to hold discussions if the Contracting Officer deems it’s in the Government’s best interest.

An offeror will not be eligible for award if the Contracting Officer determines it is not a responsible company in accordance with FAR 9.104-1.

The Government reserves the right at its sole discretion to award one contract or no contract at all depending on the quality of the offers received.

(b) Options. The Government will evaluate offers for award purposes by adding the total price for all options to the total price for the basic requirement. The Government may determine that an offer is unacceptable if the option prices are significantly unbalanced. Evaluation of options shall not obligate the Government to exercise the option(s).

(c) A written notice of award or acceptance of an offer, mailed or otherwise furnished to the successful offeror within the time for acceptance specified in the offer, shall result in a binding contract without further action by either party. Before the offer’s specified expiration time, the Government may accept an offer (or part of an offer), whether or not there are negotiations after its receipt, unless a written notice of withdrawal is received before award.

(End of provision)

52.212-3 Offerors Representations and Certifications–Commercial Items

Offerors must complete annual representations and certifications online at http://sam.gov. If paragraph (j) of the provision is applicable, a written submission is required.

FEB 2021

http://sam.gov/

52.212-4 Contract Terms and Conditions–Commercial Items

FEB 2018

52.212-5 Contract Terms and Conditions Required to Implement Statutes or Executive Orders—Commercial Items

JUL 2021

In addition to all required clauses found at FAR 52.212-5, the following clauses at FAR 52.212-5(b) also apply to this acquisition and are incorporated by reference:

(1) 52.203-6, Restrictions on Subcontractor Sales to the Government (JUN 2020), with Alternate I (Oct 1995) (41 U.S.C. 4704 and 10 U.S.C. 2402).

(2) 52.203-13, Contractor Code of Business Ethics and Conduct (JUN 2020) (41 U.S.C. 3509).

(4) 52.204-10, Reporting Executive Compensation and First-Tier Subcontract Awards (JUN 2020) (Pub.

L. 109-282) (31 U.S.C. 6101 note).

(8) 52.209-6, Protecting the Government's Interest When Subcontracting with Contractors Debarred, Suspended, or Proposed for Debarment. (JUN 2020) (31 U.S.C. 6101 note).

(9) 52.209-9, Updates of Publicly Available Information Regarding Responsibility Matters (OCT 2018) (41 U.S.C. 2313).

(16) 52.219-8, Utilization of Small Business Concerns (OCT 2018) (15 U.S.C. 637(d)(2) and (3)).

(19) 52.219-14, Limitations on Subcontracting (MAR 2020) (15 U.S.C. 637(a)(14)).

(34) 52.222-40, Notification of Employee Rights Under the National Labor Relations Act (DEC 2010) (E.O. 13496).

(35)(i) 52.222-50, Combating Trafficking in Persons (OCT 2020) (22 U.S.C. chapter 78 and E.O. 13627).

(44) 52.223-18, Encouraging Contractor Policies to Ban Text Messaging While Driving (JUN 2020) (E.O.

13513).

(58) 52.232-33, Payment by Electronic Funds Transfer—System for Award Management (OCT 2018) (31 U.S.C. 3332).

(61) 52.239-1, Privacy or Security Safeguards (AUG 1996) (5 U.S.C. 552a).

(62) 52.242-5, Payments to Small Business Subcontractors (JAN 2017)(15 U.S.C. 637(d)(13)).

3. The following FAR and DFARS provisions and clauses apply to this solicitation and are incorporated by reference:

52.203-3 Gratuities APR 1984 52.203-12 Limitation On Payments To Influence Certain Federal Transactions JUN 2020

52.204-7 System for Award Management OCT 2018 52.204-13 System for Award Management Maintenance OCT 2018 52.204-16 Commercial and Government Entity Code Reporting AUG 2020 52.204-18 Commercial and Government Entity Code Maintenance AUG 2020 52.204-21 Basic Safeguarding of Covered Contractor Information Systems JUN 2016 52.204-22 Alternative Line Item Proposal JAN 2017 52.209-7 Information Regarding Responsibility Matters OCT 2018 52.217-9 Option to Extend the Term of the Contract MAR 2000 52.232-39 Unenforceability of Unauthorized Obligations JUN 2013 52.232-40 Providing Accelerated Payments to Small Business Subcontractors DEC 2013 252.203-7000 Requirements Relating to Compensation of Former DoD Officials SEP 2011 252.203-7002 Requirement to Inform Employees of Whistleblower Rights SEP 2013 252.203-7005 Representation Relating to Compensation of Former DoD Officials NOV 2011 252.203-7006 Wide Area Workflow Payment Instructions DEC 2018 252.204-7000 Disclosure of Information OCT 2016 252.204-7003 Control of Government Personnel Work Product APR 1992 252.204-7008 Compliance With Safeguarding Covered Defense Information Controls OCT 2016 252.204-7009 Limitations on the Use or Disclosure of Third-Party Contractor

Reported Cyber Incident Information

OCT 2016

252.204-7012 Safeguarding Covered Defense Information and Cyber Incident Reporting

DEC 2019

252.204-7015 Notice of Authorized Disclosure of Information for Litigation Support MAY 2016 252.204-7016 Covered Defense Telecommunications Equipment or Services--

Representation

DEC 2019

252.204-7017 Prohibition on the Acquisition of Covered Defense Telecommunications Equipment or Services--Representation

MAY 2021

252.204-7018 Prohibition on the Acquisition of Covered Defense Telecommunications Equipment or Services

JAN 2021

252.204-7019 Notice of NIST SP 800-171 DoD Assessment Requirements NOV 2020 252.204-7020 NIST SP 800-171 DoD Assessment Requirements NOV 2020 252.204-7021 Contractor Compliance with the Cybersecurity Maturity Model

Certification Level Requirement

NOV 2020

252.204-7022 Expediting Contract Closeout MAY 2021 252.215-7008 Only One Offer JUL 2019 252.215-7010 Requirements for Certified Cost or Pricing Data and Data Other Than

Certified Cost or Pricing Data

JUL 2019

252.219-7000 Advancing Small Business Growth SEP 2016 252.219-7003 Small Business Subcontracting Plan (DOD Contracts) DEC 2019 252.225-7048 Export-Controlled Items JUNE 2013 252.225-7050 (Dev)

Disclosure of Ownership or Control by the Government of a Country that is a State Sponsor of Terrorism. (DEVIATION 2021-O0006)

JUN 2021

252.225-7974 (Dev)

Representation Regarding Business Operations with the Maduro Regime (DEVIATION 2020-O0005)

FEB 2020

252.226-7001 Utilization of Indian Organizations and Indian-Owned Economic Enterprises, and Native Hawaiian Small Business Concerns

APR 2019

252.232-7010 Levies on Contract Payments DEC 2006

252.232-7017 Accelerating Payments to Small Business Subcontractors--Prohibition on Fees and Consideration

APR 2020

252.237-7010 Prohibition on Interrogation of Detainees by Contractor Personnel JUN 2013 252.239-7009 Representation of Use of Cloud Computing SEP 2015 252.239-7010 Cloud Computing Services OCT 2016 252.239-7017 Notice of Supply Chain Risk FEB 2019 252.239-7018 Supply Chain Risk FEB 2019 252.243-7002 Requests for Equitable Adjustment DEC 2012 252.244-7000 Subcontracts for Commercial Items JAN 2021 252.246-7007 Contractor Counterfeit Electronic Part Detection and Avoidance

System

AUG 2016

252.246-7008 Sources of Electronic Parts MAY 2018 252.247-7022 Representation of Extent of Transportation by Sea JUN 2019 252.247-7023 Transportation of Supplies by Sea FEB 2019

4. The following FAR and DFARS provisions and clauses apply to this solicitation and are incorporated by reference:

52.204-24 Representation Regarding Certain Telecommunications and Video Surveillance Services or Equipment

OCT 2020

The Offeror shall not complete the representation at paragraph (d)(1) of this provision if the Offeror has represented that it "does not provide covered telecommunications equipment or services as a part of its offered products or services to the Government in the performance of any contract, subcontract, or other contractual instrument" in paragraph (c)(1) in the provision at 52.204-26, Covered Telecommunications Equipment or Services—Representation, or in paragraph (v)(2)(i) of the provision at 52.212-3, Offeror Representations and Certifications-Commercial Items. The Offeror shall not complete the representation in paragraph (d)(2) of this provision if the Offeror has represented that it "does not use covered telecommunications equipment or services, or any equipment, system, or service that uses covered telecommunications equipment or services" in paragraph (c)(2) of the provision at 52.204-26, or in paragraph (v)(2)(ii) of the provision at 52.212-3.

(a) Definitions. As used in this provision—

Backhaul, covered telecommunications equipment or services, critical technology, interconnection arrangements, reasonable inquiry, roaming, and substantial or essential component have the meanings provided in the clause 52.204-25, Prohibition on Contracting for Certain Telecommunications and Video Surveillance Services or Equipment.

(b) Prohibition. (1) Section 889(a)(1)(A) of the John S. McCain National Defense Authorization Act for Fiscal Year 2019 (Pub. L. 115-232) prohibits the head of an executive agency on or after August 13, 2019, from procuring or obtaining, or extending or renewing a contract to procure or obtain, any equipment, system, or service that uses covered telecommunications equipment or services as a substantial or essential component of any system, or as critical technology as part of any system.

Nothing in the prohibition shall be construed to—

(i) Prohibit the head of an executive agency from procuring with an entity to provide a service that connects to the facilities of a third-party, such as backhaul, roaming, or interconnection arrangements; or

(ii) Cover telecommunications equipment that cannot route or redirect user data traffic or cannot permit visibility into any user data or packets that such equipment transmits or otherwise handles.

(2) Section 889(a)(1)(B) of the John S. McCain National Defense Authorization Act for Fiscal Year 2019 (Pub. L. 115-232) prohibits the head of an executive agency on or after August 13, 2020, from entering into a contract or extending or renewing a contract with an entity that uses any equipment, system, or service that uses covered telecommunications equipment or services as a substantial or essential component of any system, or as critical technology as part of any system. This prohibition applies to the use of covered telecommunications equipment or services, regardless of whether that use is in performance of work under a Federal contract. Nothing in the prohibition shall be construed to—

(i) Prohibit the head of an executive agency from procuring with an entity to provide a service that connects to the facilities of a third-party, such as backhaul, roaming, or interconnection arrangements; or

(ii) Cover telecommunications equipment that cannot route or redirect user data traffic or cannot permit visibility into any user data or packets that such equipment transmits or otherwise handles.

(c) Procedures. The Offeror shall review the list of excluded parties in the System for Award Management (SAM) (https://www.sam.gov) for entities excluded from receiving federal awards for "covered telecommunications equipment or services".

(d) Representation. The Offeror represents that—

(1) It □ will, □ will not provide covered telecommunications equipment or services to the Government in the performance of any contract, subcontract or other contractual instrument resulting from this solicitation. The Offeror shall provide the additional disclosure information required at paragraph (e)(1) of this section if the Offeror responds "will" in paragraph (d)(1) of this section; and

(2) After conducting a reasonable inquiry, for purposes of this representation, the Offeror represents that—

It □ does, □ does not use covered telecommunications equipment or services, or use any equipment, system, or service that uses covered telecommunications equipment or services. The Offeror shall provide the additional disclosure information required at paragraph (e)(2) of this section if the Offeror responds "does" in paragraph (d)(2) of this section.

(e) Disclosures. (1) Disclosure for the representation in paragraph (d)(1) of this provision. If the Offeror has responded "will" in the representation in paragraph (d)(1) of this provision, the Offeror shall provide the following information as part of the offer:

(i) For covered equipment—

(A) The entity that produced the covered telecommunications equipment (include entity name, unique entity identifier, CAGE code, and whether the entity was the original equipment manufacturer (OEM) or a distributor, if known);

(B) A description of all covered telecommunications equipment offered (include brand;

model number, such as OEM number, manufacturer part number, or wholesaler number; and item description, as applicable); and

(C) Explanation of the proposed use of covered telecommunications equipment and any factors relevant to determining if such use would be permissible under the prohibition in paragraph (b)(1) of this provision.

(ii) For covered services—

(A) If the service is related to item maintenance: A description of all covered telecommunications services offered (include on the item being maintained: Brand; model number, such as OEM number, manufacturer part number, or wholesaler number; and item description, as applicable); or

(B) If not associated with maintenance, the Product Service Code (PSC) of the service being provided; and explanation of the proposed use of covered telecommunications services and any factors relevant to determining if such use would be permissible under the prohibition in paragraph (b)(1) of this provision.

(2) Disclosure for the representation in paragraph (d)(2) of this provision. If the Offeror has responded "does" in the representation in paragraph (d)(2) of this provision, the Offeror shall provide the following information as part of the offer:

(i) For covered equipment—

(A) The entity that produced the covered telecommunications equipment (include entity name, unique entity identifier, CAGE code, and whether the entity was the OEM or a distributor, if known);

(B) A description of all covered telecommunications equipment offered (include brand;

model number, such as OEM number, manufacturer part number, or wholesaler number; and item description, as applicable); and

(C) Explanation of the proposed use of covered telecommunications equipment and any factors relevant to determining if such use would be permissible under the prohibition in paragraph (b)(2) of this provision.

(ii) For covered services—

(A) If the service is related to item maintenance: A description of all covered telecommunications services offered (include on the item being maintained: Brand; model number, such as OEM number, manufacturer part number, or wholesaler number; and item description, as applicable); or

(B) If not associated with maintenance, the PSC of the service being provided; and explanation of the proposed use of covered telecommunications services and any factors relevant to determining if such use would be permissible under the prohibition in paragraph (b)(2) of this provision.

(End of provision)

52.217-9 Option to Extend the Term of the Contract MAR 2000

(a) The Government may extend the term of this contract by written notice to the Contractor within 60 days; provided that the Government gives the Contractor a preliminary written notice of its intent to extend at least 30 days before the contract expires. The preliminary notice does not commit the Government to an extension.

(b) If the Government exercises this option, the extended contract shall be considered to include this option clause.

(c) The total duration of this contract, including the exercise of any options under this clause, shall not exceed 24 months.

(End of clause)

52.252-5 Authorized Deviations in Provisions NOV 2020

(a) The use in this solicitation of any Federal Acquisition Regulation (48 CFR Chapter 1) provision with an authorized deviation is indicated by the addition of "(DEVIATION)" after the date of the provision.

(b) The use in this solicitation of any Defense Federal Acquisition Regulation Supplement (48 CFR Chapter 2) provision with an authorized deviation is indicated by the addition of "(DEVIATION)" after the name of the regulation.

52.252-6 Authorized Deviations in Clauses NOV 2020

(a) The use in this solicitation or contract of any Federal Acquisition Regulation (48 CFR Chapter 1) clause with an authorized deviation is indicated by the addition of "(DEVIATION)" after the date of the clause.

(b) The use in this solicitation or contract of any Defense Federal Acquisition Regulation Supplement (48 CFR Chapter 2) clause with an authorized deviation is indicated by the addition of "(DEVIATION)" after the name of the regulation.

5. Additional cyber requirements include compliance with documents below, which may be reviewed online at http://acquisition.gov, https://public.cyber.mil/dccs/, https://dodcio.defense.gov/library/, and https://csrc.nist.gov/publications.

• DFARS 231.205-71, Counterfeit Electronic Parts

• DFARS 239.73, Requirements for Information Relating to Supply Chain Risk

• DFARS 239.7602-1, Cloud Computing

• DoD Cloud Computing Security Requirements Guide

• DoDI 8510.01, Risk Management Framework

• DoDI 8530.01, Cybersecurity Activities Support to DoD Information Operations

• NIST SP 800-171 (security requirements)

I. Attachment(s)

• Pricing Worksheet

• Section 508 Requirements http://acquisition.gov/ https://public.cyber.mil/dccs/ https://dodcio.defense.gov/library/ https://csrc.nist.gov/publications