IDIQ Statement of Work.docx

Statement of Work (SOW) Independent Nuclear Consultant Services

1. BACKGROUND

The National Institute of Standards and Technology (NIST) Center for Neutron Research (NCNR) owns and operates a heavy water-moderated nuclear test reactor and associated neutron beam research facility. The NCNR’s reactor is licensed by the Nuclear Regulatory Commission (NRC) under the name National Bureau of Standards Reactor (NBSR).

On February 3, 2021, The National Institute of Standards and Technology (NIST) notified the Nuclear Regulatory Commission (NRC) (event notification EN 55094) of an alert concerning elevated radiation levels at the NIST Reactor. Pursuant to the event notification received from NCNR staff on February 3, 2021, the NRC initiated a special inspection at the NCNR. On April 14, 2021, the NRC staff issued an interim special inspection report to provide an initial assessment of their understanding of the event sequence, consequences, and the NCNR’s response to the event (ADAMS Accession No. ML21077A094) . On March 16, 2022, the NRC released a final report of its initial conclusion from its special inspection report. The final report confirms and expands on many aspects of NIST’s analysis of the incident, pointing to deficiencies in policies, procedures, training and safety culture as contributing to the incident.

In addition to the NRC special inspection, NIST conducted an internal root cause analysis and invited four outside experts to review the NIST analyses and planned corrective actions, as well as the organizational response to the February 2021 event. Links to NIST’s press releases and reports can be found on the NIST website.

NIST takes very seriously the findings of the NRC Special Inspection and is committed to ensuring that an incident like that of February 3, 2021, never reoccurs. The corrective actions developed in response to this incident are designed not only to prevent this type of incident recurring in the future but also to improve all aspects of reactor operations and nuclear safety at the NCNR. This comprehensive set of corrective actions broadly address improvements in safety culture and management systems, as well as specific aspects of operations.

On August 1, 2022, a Confirmatory Order Modifying License No. TR-5 was issued by the U.S. Nuclear Regulatory Commission (NRC). The issued Confirmatory Order documents the NIST Center for Neutron Research (NCNR) completed and planned actions, as well as the commitments made by the U.S. Department of Commerce’s National Institute of Standards and Technology (NIST) to ensure the safe operation of the research reactor in the NCNR, which experienced an unplanned shutdown on Feb. 3, 2021.

2. OBJECTIVE

The primary objective of this request is to provide NCNR with access to independent nuclear consultant (s) to conduct comprehensive independent third-part assessments of the following Program Areas outlined below; to provide a separate report detailing the findings of regulatory or programmatic non-compliance (internal NCNR procedures and/or license), recommendations for improvement, and noteworthy practices; and to assist NCNR in the identification and implementation of the recommendations and corrective actions identified in the assessment(s), and program improvement initiatives to prevent recurrence of the February 3, 2021 event or similar events at the NBSR.

NCNR Program Areas to be Assessed:

1. Nuclear Safety Culture

2. Problem Identification and Resolution (PI&R)

3. Event Root Cause

4. Training

5. Procedures

6. Design and function of Safety Assessment Committee (SAC) and Safety Evaluation Committee (SEC)

3. TASK OVERVIEW

The government is considering utilizing a single award indefinite delivery indefinite quantity type contract (IDIQ).

Task Orders are the individual contract actions to perform the work within the structure of this contract. A specific Scope of Work (SOW) will be issued for each Task Order.

The SOW for each task order will include documentation specifying the general and specific requirements of the particular task. Where specific scope details cannot be provided, the Contractor and Government will reach an agreement on scope, quantity, and the period of performance to fulfill the intent of the task order.

4. SCOPE

The Government intends to order from a predefined schedule of tasks, examples of which are below. To meet the documented timeline established by the NRC issued Confirmatory Order it is anticipated that we will be requiring multiple task orders of similar scope (up to 7) to be conducted simultaneously with concurrent periods of performance and approximate deadlines.

NOTE The Final Assessment Report will be submitted to the NRC and made publicly available.

The list is intended to define – at a high level – Areas under which the Government intends to issue Task Orders authorized under an indefinite delivery indefinite quantity (IDIQ) type contract and provides Activity examples for each Area. This list is not intended to be inclusive of all potential Activities under each Area.

4.1. Area 1: Nuclear Safety Culture

4.1.1. Activity 1: Nuclear Safety Culture Monitoring

4.1.1.1. Establish site-specific, measurable, and verifiable monitoring metrics and data sources for safety culture at the NCNR. This would include both leading (prospective) and lagging (retrospective) indicators.

4.1.1.2. Development and implementation of new process inputs/data sources to ensure that they are collected in a manner that can be properly mined and distilled to provide insight to management regarding nuclear safety culture changes.

Note: the input/data sources are in reference to the process inputs described in NEI 09-07, Fostering a Healthy Safety Culture.

4.1.1.3. Evaluate the current process inputs/data sources to ensure that they are collected in a manner that can be properly mined and distilled to provide insight to management regarding nuclear safety culture changes

Note: the input/data sources are in reference to the process inputs described in NEI 09-07, Fostering a Healthy Safety Culture.

4.1.1.4. Development and implementation of a Nuclear Safety Culture Monitoring Process in alignment with NEI 09-07, Fostering a Healthy Safety Culture.

4.1.1.5. Conduct analysis and research related to safety culture at the NCNR. Analysis may include but is not limited to past safety incidents, results of assessments, external and internal audits or other documentation that may assist with the improvement of safety culture at the NCNR.

4.1.1.6. Develop a data collection plan.

4.1.2. Activity 2: Nuclear Safety Culture Assessment

4.1.2.1. Perform a completely tailored comprehensive nuclear safety culture program assessment to ensure the effectiveness of the nuclear safety culture program and recommend improvements to maintain the effectiveness of the nuclear safety culture program.

4.1.2.2. Develop an assessment plan.

4.1.2.3. Provide senior leadership with a summary on safety culture status based on the periodic reviews, data and surveys coupled with their own field observations, and communicate their conclusions.

4.1.2.4. Perform quantitative and qualitative analysis of monitoring data to identify both process problems and underlying behavior of culture problems.

4.1.3. Activity 3: Nuclear Safety Culture Training

4.1.3.1. Develop and/or conduct training on nuclear safety culture and nuclear safety culture-related issues at the NCNR. This would include training designed for both leaders and workers.

4.1.3.2. Assess and evaluate current training programs and determine areas of improvement from a nuclear safety culture training perspective.

4.1.4. Activity 4: Nuclear Safety Culture Communication Plan

4.1.4.1. Develop Communication Plan. The plan shall specify how NCNR should project safety culture information, results, and outcomes internally and externally. The plan also shall include a communication strategy for NCNR stakeholders to increase engagement among NCNR supervisors and staff to promote transparency of nuclear safety culture change initiatives.

4.1.4.2. Develop multiple channels of communication such as in-person meetings, email and newsletters, videos, and digital platforms to ensure rapid and wide distribution of nuclear safety culture change initiative results.

4.1.5. Activity 5: Nuclear Safety Culture Strategy Development

4.1.5.1. Assist with initial revisions/updates to NCNR’s nuclear safety culture policy to ensure consistency with NRC and industry guidance.

4.1.5.2. Assist with development and implementation of the NCNR’s Nuclear Safety Culture Improvement Program (NSCIP).

4.1.5.3. Develop and author documents such as plans, programs, and procedures in support of nuclear safety culture at the NCNR

4.1.5.4. Provide consulting and advice to NCNR leadership on improving safety culture at the NCNR. This may include meetings, written correspondence, or answering safety culture related questions.

4.1.5.5. Evaluate major policy and programmatic changes for their potential impact on NCNR’s nuclear safety culture, as requested.

4.2. Area 2: Problem Identification and Resolution (PI&R)

4.2.1. Activity 1: PI&R Program Assessment

4.2.1.1. Perform a completely tailored comprehensive assessment of the PI&R program and provide recommendations on actions to address any weaknesses and opportunities for improvement identified through assessment of the program.

4.2.2. Activity 2: Assistance with Development and Implementation of the PI&R Program

4.2.2.1. Provide recommendations on resources to implement and/or strengthen the PI&R programs including but not limited to industry best practices, fillable forms, software, training media, potential certifications.

4.2.2.2. Conduct analysis and research related to Problem Identification and Resolution at the NCNR. Analysis should consider current active programs as well as those in development. Specific focus shall be given to the Corrective Action Program, Observation Program, System Review Teams, and Trouble Ticket systems.

4.2.2.3. Additional research may include but is not limited to other PI&R programs of similar scope and complexity, dealing with similar resource limitations, and audits of such programs or other available material that will assist with the improvement of PI&R at the NCNR

4.2.3. Activity 3: PI&R Program Strategy Development

4.2.3.1. Review and provide recommendation on the long-term programmatic goals and mindset in order to further develop the Learning Organization mindset of continuous improvement.

4.2.3.2. Assist with establishing site-specific, measurable, and verifiable monitoring metrics and data sources for PI&R programs at the NCNR. This would include both leading (prospective) and lagging (retrospective) indicators.

4.3. Area 3: Event Root Cause

4.3.1. Activity 1: Event Root Cause Analysis

4.3.1.1. Review NIST root cause analysis reports related to February 3, 2021, incident to determine whether the analysis conducted was complete and comprehensive and to identify whether any additional root causes or contributing factor(s) should be investigated or addressed.

4.4. Area 4: Training

4.4.1. Activity 1: Training Program Assessment

4.4.1.1. Perform a completely tailored comprehensive assessment of the training program and provide recommendations on actions to address any weaknesses and opportunities for improvement identified.

4.4.1.2. Perform an audit of NBSR training program documentation and implementation. Compare application of training program to ANSI/ANS-15.4-2007 and similar facilities.

4.4.1.3. Conduct analysis of training program efficacy to include metrics such as NRC license application and exam success, internal requalification success, timely maintenance of required proficiency trainings, and robust engagement of continuous learning.

4.4.1.4. Perform independent audit of on-the-job training conducted from crew to crew to ensure that consistency and quality are maintained in accordance with training program documentation.

4.4.1.5. Perform independent audit of training provided by training program staff to ensure that consistency and quality are maintained in accordance with training program documentation

4.4.1.6. Perform independent audit of supervisory oversight and leadership training. Ensure that supervisors are meeting oversight requirements as required by facility policy.

4.4.2. Activity 2: Assistance with Development and Implementation of the Training Program

4.4.2.1. Assist with the development of a technical training program for robust qualification and training of supervisors, operators, and license candidates.

4.4.2.2. Assist with the development of training materials such as: lessons plans, online modules, and classroom lectures.

4.4.2.3. Assist with developing a continuous formal operator training program to provide ongoing training to ensure adequate proficiency in the presence of personnel attrition.

4.4.2.4. Assist developing a continuous formal operator training specific to the requirements of the NRC approved requalification plan and the requirements of 10 CFR 55.59.

4.4.2.5. Assist with developing of formal proficiency trainings for identified critical tasks such as reactor refueling, reactor startup, and reactor transients.

4.4.3. Activity 3: Training Program Strategy Development

4.4.3.1. Assist with developing of formal proficiency trainings for identified critical tasks such as reactor refueling, reactor startup, and reactor transients.

4.4.3.2. Assist with developing a strategy to employ the use of outside agencies or contracts to provide regular leadership and personal development trainings.

4.4.3.3. Assist with develop a training strategy consistent with nuclear industry standards such as ANSI/ANS-15.4-2007.

4.4.3.4. Assist with identifying specific training practices and human performance tools to aid in the successful training of supervisors, operators, and license candidates.

4.5. Area 5: Procedures

4.5.1. Activity 1: Procedure Assessment

4.5.1.1. Conduct analysis and research related to policy for creating and use of documents giving formal written instruction at the NCNR. Analysis should consider current active programs, interaction with other programs for improvement/corrective action and implementation. Specific focus shall be given to incorporation of industry standards for procedural use and adherence such as INPO 11-003, “Guideline for Excellence in Procedure and Work Instruction Use and Adherence,” and the most recent version of PPA AP-907-005, “Procedure Writers’ Manual”.

4.5.1.2. Review effectiveness/quality of existing documents, formal written instructions, policies, and procedures to propose potential improvements and provide recommendations on actions to address any weaknesses and opportunities for improvement identified through assessment of the program. This review must include but not be limited to:

· Administrative Rules

· Operating Instructions

· Technical Specification Procedures

· Maintenance Procedures

· Instrument and Control Procedures

· Health Physics Instructions

· Training Procedures

· Annunciator Procedures

· Emergency Instructions

· Shift Supervisor Instructions

4.5.1.3. Assess NCNR management and Supervisor Oversight for Procedure Use and Adherence against internal policy and industry standards and provide recommendations on actions to address any weaknesses and opportunities for improvement identified through assessment of the program.

4.5.1.4. Review the process for modification to procedures that involve the use of engineered items and how those changes are communicated throughout the organization and provide recommendations on actions to address any weaknesses and opportunities for improvement identified through the assessment.

4.5.2. Activity 2: Process Improvement and Sustainability

4.5.2.1. Assist NCNR in developing metrics and identifying data sources that provide leading and lagging indicators of procedure process health in support of sustainability and continuous improvement

4.5.2.2. Assist in developing and reviewing of processes for procedure use and adherence specific to license requirements and the requirements of 10 CFR 50.59.

4.6. Area 6: Design and function of Safety Assessment Committee (SAC) and Safety Evaluation Committee (SEC)

4.6.1. Activity 1: SAC and SEC Program Assessment

4.6.1.1. Assist with assessment of SEC/SAC functions, scope of reviews, required expertise, required reports to identify weaknesses and areas for improvement.

4.6.1.2. Assist with assessment of the SEC structure (subcommittees), organization (membership expertise) and functions (activities) of the NBSR SEC as they apply to effective safety oversight of National Bureau of Standards Reactor (NBSR) operation.

4.6.1.3. Perform a gap analysis of SEC and subcommittee charters against requirements of the Technical Specifications and applicable ANSI standard(s).

4.6.1.4. Perform a benchmarking study of analogous internal and external oversight committees at nuclear reactor facilities of similar size and public safety risk exposure.

4.6.1.5. Assess SEC and subcommittee charters, processes used to perform audits and reviews, and reports issued.

4.6.2. Activity 2: Assistance with the SAC and SEC

4.6.2.1. Provide recommendations on actions to address any weaknesses and opportunities for improvement identified through assessment of SAC (scope, membership, functions) and the reports issued.

4.6.2.2. Provide recommendations on actions to strengthen the SEC and address weaknesses and opportunities for improvement identified through assessment, gap analysis and benchmarking study; recommendations for improvements may address changes to:

· SEC charter

· Scope of Oversight

· Subject matter expertise in membership (full SEC and subcommittees)

· Impartiality of membership

· Frequency and depth of audits

· Format and content of reports

· Communications with the SEC and between SEC and the licensee, reactor chiefs, ROE, other internal and external stakeholders, NRC, etc.

4.6.2.3. Provide recommendations to strengthen SEC subcommittees based on review of charters and reports issued, e.g., recommendations for improvement may address changes to scope, roles, functions, processes, reports, and other aspects.

4.6.2.4. Assist with development of audit processes for subcommittees based on each specific functional area, including, e.g.,

· Conduct of audit (interviews, observations, document review, other)

· Sampling

· Frequency

· Criteria for evaluation (standards)

· Report format

4.6.3. Activity 3: SAC and SEC Strategy Development

4.6.3.1. Assist with developing a strategy to define the scope of annual external (SAC) assessments, including e.g., development of targeted or focus areas, frequency of reviews, assessment of efficacy of corrective actions.

4.6.3.2. Assist with developing a strategy to ensure corrective actions are tracked as necessary, evaluated for efficacy as necessary

4.6.3.3. Assist with developing a strategy for SEC self-assessment and quality assurance practices

5. CONTRACTOR QUALIFICATIONS & EXPERTISE

The contractor shall be responsible for employing technically qualified personnel to perform the work specified under this requirement.

Examples of the desired expertise and qualifications for each of the high-level Areas identified in section 4 are provided below.

5.1. Area 1: Nuclear Safety Culture

5.1.1. Experience in building, implementing, and maintaining a mature and healthy nuclear safety culture preferably in federal scientific laboratory environments/research and test reactors similar to NBSR. Evidence of this experience includes peer-reviewed publications, presentations at professional meetings, case studies or other statements of applicable technical and managerial experience that address the various scope elements and illustrate capabilities in addressing them.

5.1.2. Experience administering and assessing nuclear safety culture data.

5.1.3. Knowledge and experience equivalent to those described in NRC Inspection Procedure 95003, which includes the following:

· Knowledge of appropriate methods for gathering safety culture data and their strengths and weaknesses, including: (1) individual and group interviews, (2) structured and unstructured interviews, (3) surveys, (4) behavioral observations and checklists, and (5) case studies.

· Ability to determine the applicability and likely usefulness of various data-gathering methods under different circumstances.

· Ability to implement the different methods correctly, including, but not limited to (1) conducting focus groups and interviews in a manner that elicits the desired information while reducing potential biases in the responses, (2) conducting reliable (i.e., repeatable) structured behavioral observations, and (3) collecting insights from written documentation and verbal communications.

· Knowledge of the requirements for developing, administering, and analyzing the results of surveys and questionnaires, including: (1) strengths and weaknesses of different item types (Likert, BARS, forced-choice, etc.); (2) requirements for administering a survey to reduce potential biases in the responses; (3) behavioral statistics and the appropriate methods, and their constraints, for analyzing survey data; and (4) statistical requirements for the different types of validity and reliability, and appropriate techniques to assess/measure/establish them;

· Knowledge of the rationale for a multiple-measures approach and ability to assess the limitations of a single-method safety culture assessment.

· Knowledge of statistical and conceptual constraints on determining appropriate sample sizes for each method.

· Knowledge of the alternatives for selecting samples for the assessment and the biases introduced by different sample selection strategies.

· Knowledge of theories and research in organizational and human behavior.

· Ability to integrate results from applying the different methods to arrive at defensible conclusions.

· Knowledge of the Reactor Oversight Process (ROP) and applicable inspection requirements and techniques.

· Knowledge of theory and research in safety culture.

5.1.4. Knowledge and experience in the practical application of the following industry standards for building, implementing, and maintaining a mature and healthy nuclear safety culture:

· INPO 20-004: Nuclear Safety Culture - Industry Best Practices

· INPO 19-003: Staying on Top-Advancing a Culture of Continuous Improvement

· INPO 12-012: Traits of a Healthy Nuclear Safety Culture

· NEI 09-07: Fostering a Healthy Nuclear Safety Culture

· INPO Organizational Effectiveness Roadmap

· INPO 20-001: Gaps, Drivers, Actions that get Results (GDAR)

· RC Safety Culture Policy Statement 76 FR 34773; June 14, 2011

· Safety Culture Common Language (NUREG-2165)

· NRC Inspection Procedure 95003.

5.2. Area 2: Problem Identification and Resolution

5.2.1. Working knowledge and experience to verify that licensees are identifying and placing potential 10 CFR 21—REPORTING OF DEFECTS AND NON-COMPLIANCE issues into the corrective action program (CAP) and appropriately evaluating such issues.

5.2.2. Working knowledge and experience evaluating that licensee have established a safety conscious work environment (SCWE).

5.2.3. Working knowledge of applicable regulatory requirements regarding corrective action programs (CAPs).

5.2.4. Experience evaluating the effectiveness of licensee audits and self-assessments and processes and programs to track, trend, and correct failures and deficiencies to prevent recurrence.

5.3. Area 3: Event Root Cause

5.3.1. Experience in conducting root cause analysis and investigation at nuclear reactor facilities.

5.3.2. Expertise in nuclear safety culture and its application to root cause analysis.

5.4. Area 4: Training

5.4.1. Working knowledge and experience assisting in the development and implementation of a nuclear training program in accordance with ANSI 15.4 guidelines.

5.4.2. Experience with nuclear reactor operations to apply specific operating and maintenance procedures.

5.4.3. Experience interpreting and applying guidelines and requirements of the Nuclear Regulatory Commission to obtain reactor operator licensing and maintain compliance.

5.4.4. Experience drafting and developing lecture content and administering formal lectures on nuclear principles and technical topics.

5.5. Area 5: Procedures

5.5.1. Experience evaluating whether a licensee's administrative procedural controls are consistent with the Technical Specifications (TS), the license requirements, and licensee commitments.

5.5.2. Experience evaluating whether operating and maintenance procedures meet TS requirements and the licensee's administrative controls.

5.5.3. Experience assessing the effectiveness of corrective actions for deficiencies involving procedure quality.

5.5.4. Experience evaluating a licensee’s implementation of administrative guidance on use and adherence to procedures.

5.5.5. Working knowledge of relevant industry standards including INPO 11-003 and the most recent version of PPA AP-907-005, “Procedures Writer’s Manual”.

5.6. Area 6: Design and function of Safety Assessment Committee (SAC) and Safety Evaluation Committee (SEC)

5.6.1. Experience developing strategies for nuclear safety oversight committees.

5.6.2. Experience performing audits, assessments, reviews in nuclear facilities (including power, test, research, or training reactors) of nuclear and radiation safety, quality assurance programs, and operations.

5.6.3. Working knowledge of applicable regulatory requirements including 10 CFR 50, 10 CFR 55, 10 CFR 20

6. REFERENCES

6.1. NRC EVENT NOTIFICATION EN 55094: https://www.nrc.gov/reading-rm/doc-collections/event-status/event/2021/20210204en.html#en55094

6.2. NATIONAL INSTITUTE OF STANDARDS AND TECHNOLOGY – U.S. NUCLEAR REGULATORY COMMISSION INTERIM SPECIAL INSPECTION REPORT NO. 05000184/2021201 ADAMS Accession NO. ML21077A094: https://www.nrc.gov/docs/ML2107/ML21077A094.pdf

6.3. NATIONAL INSTITUTE OF STANDARDS AND TECHNOLOGY – U.S. NUCLEAR REGULATORY COMMISSION SPECIAL INSPECTION REPORT NO. 05000184/2022201: https://nrcpublicblog.files.wordpress.com/2022/03/ml22056a361-nist-sit-inspection-report.pdf

6.4. NBSR REPORT ON FEBRUARY 3, 2021 FUEL FAILURE EVENT, ROOT CAUSES, CORRECTIVE ACTIONS, AND RESTART READINESS: https://www.nrc.gov/docs/ML2127/ML21274A018.html

6.5. Q&A ABOUT THE FEBRUARY 3 NCNR ALERT: https://www.nist.gov/director/pao/community-relations/qa-about-feb-3-ncnr-alert

6.6. NATIONAL INSTITUTE OF STANDARDS AND TECHNOLOGY, CENTER FOR NEUTRON RESEARCH – CONFIRMATORY ORDER ADAMS ACESSSION NO.ML22206A213 https://www.nrc.gov/docs/ML2220/ML22206A213.pdf

7. TRAVEL

No travel beyond the limits of Montgomery County, Maryland is required for this SOW

8. PLACE OF PERFORMANCE

The services required for this contract will support NCNR on the NIST Campus within Montgomery County Maryland. NIST is NOT providing any office or related support services for the Contractor at NIST facilities or any other facility for the purpose of the base IDIQ, however office space may be required and made available based on the needs of any issued Task Orders issued from the IDIQ contract.

9. SECURITY

Contractor shall follow badging procedures noted in the solicitation for Foreign Nationals. All other contractor personnel shall follow HSPD-12 https://www.dhs.gov/homeland-security-presidentialdirective-12 and NIST Directive PR 2401.01 ver 2 (Dated 06/08/2016).

NCNR has additional access requirements. NCNR Orange Badge is required for unescorted access in Building 235 and for access to Building 235 for more than 10 days. For additional information and requirements to obtain a NCNR Orange badge: https://www.nist.gov/ncnr/arrange-visit-ncnr/obtaining-access-ncnr

Required training with required Health Physics tour for an Orange Badge averages 4 hours for each individual acquiring the badge. A NIST Site Access (Green Badge) is required prior to obtaining an Orange Badge.

10. DATA

10.1. Proprietary Data: This work does not involve proprietary data

10.2. Rights in Data: The Government and the Contractor shall have data rights consistent with Federal Acquisition Regulation (FAR) 52.227-17, Rights in Data - Special Works, and Commerce Acquisition Regulation (CAR) 1352.227-70, Rights in Data Assignment of Copyright.

11. INFORMATION TECHNOLOGY SECURITY

To ensure the privacy and security of all data and data computations, the Contractor shall treat all data and data computations in accordance with FAR 52.239-1, Privacy or Security Safeguards, and CAR 1352.239-72, Security Requirements for Information Technology Resources. In the event the work includes access to data not intended for public release, the Contractor shall adhere to FAR 52.204-21.

12. GENERAL INFORMATION

12.1. All deliverables including data, reports, presentation, and all documents provided to the Government in the performance of the contract shall not contain any proprietary markings or any company identification markings in any form.

12.2. Personnel Identifiable Information (PII): The Contractor will not be provided with access to Government data containing PII unless authorized in writing by the Contracting Officer. If the Contractor collects or is provided access to Government data containing PII, the Contractor shall identify and safeguard all PII in accordance with the Federal Information Security Management Act, Public Law 107.347, as implemented by NIST Special Publication 800-122, Guide to Protecting the Confidentiality of Personally Identifiable Information. In addition, all Contractor personnel involved with the execution of this study shall be required to sign and submit to NIST a PII non-disclosure agreement. NIST employees will provide and collect the agreement from Contractor personnel at a time to be determined by NIST, the Contract shall also adhere to the following Privacy clauses, FAR 52.224- 1 and 52.224-2

13. PERIOD OF PERFORMANCE

Four (4) years from date of award

Rev.02 Page 2 of 2