M67854-14-R-4805_Solicitation_for_HP_Fortify_Amendment_1.doc
DOC document 708 KB Posted
- Attached to
- HP Fortify Code Review Software
- Solicitation number
- M67854-14-R-4805
- Issued by
-
United States Marine Corps
About this file
Amendment One. This amendment updates Attachment 1 and additionally incorporates all questions and answers as Exhibit 3. All other terms and conditions remain unchanged.
View the file
Other files
| File | Type | Posted |
|---|---|---|
| Attachment_1_M67854-14-R-4805_Pricing_Workbook_amended_due_to_Q A_Amendment_2.xlsx | XLSX spreadsheet | |
| Exhibit_3_M67854-14-P-4805_Questions_and_Answers.xlsx | XLSX spreadsheet | |
| Attachment_1_M67854-14-R-4805_Pricing_Workbook_amended_due_to_Q A.xlsx | XLSX spreadsheet | |
| M67854-14-R-4805_Solicitation_for_HP_Fortify.doc | DOC document | |
| Exhibit_2_J A.pdf | ||
| Attachment_1_M67854-14-R-4805_Pricing_Workbook.xlsx | XLSX spreadsheet | |
| Attachment_3_M67854-14-R-4805_DD_254_Security_Classification.pdf | ||
| Exhibit_1__Cumulative_Total_Pricing_Discount_Table.xlsx | XLSX spreadsheet | |
| Attachment_2___DO_PWS_for_Evaluation_of_DOs_-final_29_Aug_2014.docx | DOCX document |
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
SOLICITATION NO: M67854-14-R-4805
TITLE: Brand Name procurement for Hewlett Packard’s (HP) Fortify suite of application cyber security testing software, maintenance support, training, and implementation services.
M67854-14-R-4805 Amendment one updates Attachment 1 and, additionally incorporates all questions and answers as Exhibit 3. All other terms and conditions remain unchanged.
This is a combined synopsis/solicitation for commercial items prepared in accordance with the format in FAR Subpart 12.6 as supplemented with additional information included in this notice. This announcement constitutes the only solicitation being issued. Proposals are being requested, and a written solicitation will not be issued. M67854-14-P-4805 is issued as a Request for Proposal (RFP). The proposed contract is for a Firm Fixed Price, single award, Indefinite Delivery Indefinite Quantity (ID/IQ) contract not to exceed 5.2 million dollars with a three (3) year ordering period. The minimum the Government will acquire under this contract is $500,000.00. The solicitation document and incorporated provisions and clauses are those in effect through Federal Acquisition Circular FAC 2005-76, effective 25 July 2014 and DFARS DPN 20140731. The associated North American Industrial Classification System code and applicable size standard for this procurement are 511210 and 3.5 Million, respectively. A previous sources sought notice was posted on April 11, 2014 as M67854-14-Q-4805. This requirement is not set aside for small business and the small business office concurs with the decision.
This Request for Proposal #M67854-14-R-4805 is for the procurement of Brand Name Hewlett Packard’s (HP) Fortify suite of application cyber security testing software, maintenance support, training, and implementation services. The procurement is for the United States Marine Corps Systems Command, 2200 Lester Street, Quantico, VA 22134. Proposals are being solicited. All questions should be directed to Penny O’Neil at Penny.Oneil@usmc.mil by 9 am EST 05 September 2014 local time Quantico, VA.
The posting date for this combined synopsis/solicitation is 02 September 2014. The closing date for this solicitation is Monday, 08 September 2014 at 8:00 AM EST local time Quantico, VA. Offerors are responsible for ensuring that their submitted proposals are complete, legible, and received by the closing date/time. Late proposals will be handled in accordance with FAR 52.212-1. Proposals shall be e-mailed to Penny.Oneil@usmc.mil.
Section SF 1449 - CONTINUATION SHEET
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
UNDEFINED
Fortify Build to Order (B2O)/Audit
FFP
FOB: Destination
MAX
NET AMT
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
0001AA
| 10 |
| Each |
TF307AAE
FSCA B2O Starter Edition (includes 30 projects, 1 power user)
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
0001AB
| 30 |
| Each |
HM611A1
Annual Software Maintenance FSCA B2O Starter Edition (includes 30 projects, 1 power user)
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
0001AC
| 20 |
| Each |
TF310AAE
FSCA B2O Scanning Machine
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
0001AD
| 60 |
| Each |
HM611A1
Annual Software Maintenance FSCA B2O Scanning Machine
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
0001AE
| 40 |
| Each |
TF311AAE
FSCA B2O Power User, Named
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
0001AF
| 120 |
| Each |
HM611A1
Annual Software Maintenance FSCA B2O Power User, Named
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
0001AG
| 1,000 |
| Each |
TF312AAE
FSCA B2O Regular User, Named
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
0001AH
| 3,000 |
| Each |
HM611A1
Annual Software Maintenance FSCA B2O Regular User, Named
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
0001AJ
| 200 |
| Each |
TF313AAE
FSCA B2O Project (additional projects to Starter Edition)
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
0001AK
| 600 |
| Each |
HM611A1
Annual Software Maintenance FSCA B2O Project (additional projects to Starter Edition)
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
0001AL
| 10 |
| Each |
TF333AAE
FSCA B2O Upgrade to Cold Fusion
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
0001AM
| 30 |
| Each |
HM611A1
Annual Software Maintenance FSCA B2O Upgrade to Cold Fusion
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
0001AN
| 10 |
| Each |
TF334AAE
FSCA B2O Upgrade to COBOL
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
0001AP
| 30 |
| Each |
HM611A1
Annual Software Maintenance FSCA B2O Upgrade to COBOL
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
0001AQ
| 5 |
| Each |
TF335AAE
FSCA B2O Upgrade to Python
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
0001AR
| 15 |
| Each |
HM611A1
Annual Software Maintenance FSCA B2O Upgrade to Python
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
0001AS
| 10 |
| Each |
TF337AAE
FSCA B2O Upgrade to ABAP (SAP)
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
0001AT
| 30 |
| Each |
HM611A1
Annual Software Maintenance FSCA B2O Upgrade to ABAP (SAP)
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
UNDEFINED
WebInspect/Penetration Testing
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
0002AA
| 10 |
| Each |
T9584AAE
WebInspect Named User (node and named locked)
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
0002AB
| 30 |
| Each |
HM611A1
WebInspect Named User, 12 Month Maintenance
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
0002AC
| 20 |
| Each |
TA579AAE
WebInspect Concurrent User
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
0002AD
| 60 |
| Each |
HM611A1
Annual Software Maintenance WebInspect Concurrent User
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
UNDEFINED
WebInspect Enterprise/Production
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
0003AA
| 10 |
| Each |
TF286AAE
SSC B2O WebInspect Enterprise Starter Edition (for new SSC instance). Includes one (1) Starter Edition license consisting of one (1) Software Security Center, one (1) WebInspect Enterprise (module), one (1) WebInspect Enterprise Sensor, one (1) WebInspect Named User, and five (5) Software Security Center Regular Users Named Licenses.
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
0003AB
| 30 |
| Each |
HM611A1
Annual Software Maintenance SSC B2O WebInspect Enterprise Starter Edition (for new SSC instance)
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
0003AC
| 10 |
| Each |
TF288AAE
WebInspect Enterprise Module (for existing SSC instance)
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
0003AD
| 30 |
| Each |
HM611A1
Annual Software Maintenance WebInspect Enterprise Module (for existing SSC instance)
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
0003AE
| 30 |
| Each |
TF290AAE
WebInspect Enterprise Sensor, Server License includes one year Annual Software Maintenance
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
0003AF
| 90 |
| Each |
HM611A1
Annual Software Maintenance WebInspect Enterprise Sensor, Server License
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
UNDEFINED
Fortify Runtime/Application Protection
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
0004AA
| 250 |
| Each |
TF583AAE
Fortify Runtime Suite, Server License. The Suite license includes (1) Fortify Runtime Platform Server license, (1) Fortify Runtime Application Protection Server license, (1) Fortify Application Logging Server license, and (1) Fortify Runtime User license.
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
0004AB
| 750 |
| Each |
HM611A1
Annual Software Maintenance Fortify Runtime Suite, Server License
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
0004AC
| 20 |
| Each |
TF622AAE
Fortify Runtime, User License
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
0004AD
| 60 |
| Each |
HM611A1
Annual Software Maintenance Fortify Runtime, User License
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
UNDEFINED
On-Site Professional Services
On-Site Professional Services in accordance with Section 2.1 of the PWS.
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
0005AA
| 100 |
| Days |
HP131A1
HP Fortify SSC Consultant - DAILY RATE
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
0005AB
| 50 |
| Week |
HZ935A1
SCA QuickStart Basic (5 Days) - WEEKLY RATE (includes travel)
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
0005AC
| 25 |
| Week |
HL885A1
WI QuickStart Basic (5 Days) - WEEKLY RATE (includes travel)
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
0005AD
| 60 |
| Months |
HP134A1
HP Fortify SSC Tech Consultant III SVC - MONTHLY RATE (can be broken up into weeks)
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
0005AE
| 1 |
| Lot |
HP130A1 Travel
HP Fortify SSC Travel & Expense (T&E) SVC (standard not to exceed $2,000 week) for non-DC Areas only. No travel will be reimbursed for services performed in the DC area. To be negotiated on each Delivery Order.
All travel outside the Washington DC area will be reimbursed after reviewing receipts of the contractor’s actual expenses to ensure the claimed travel expenses are fair and reasonable. Costs for transportation, lodging, meals and incidental expenses incurred by the contractor are allowable subject to the limitations contained in the Federal Travel Regulations and/or Joint Travel Regulations.
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
UNDEFINED
Bundled Role Based eLearning Curriculum
Application Security Bundled Role Based eLearning Curriculum- Computer Based Trainings (CBT).
Architect Curriculum eLearning Per Seat/13 Hours/2.5 Training Units;
.NET Developer Curriculum eLearning Per Seat/15 hours/2.00 Training Units;
C/C++ Developer Curriculum eLearning Per Seat/ 12 hours /2.50 Training Units;
Java Developer Curriculum eLearning Per Seat/ 10 hours/ 1.50 Training Units;
Mobile Developer Curriculum eLearning Per Seat/ 8 hours/ 2.00 Training Units;
PHP Developer Curriculum eLearning Per Seat/ 8 hours /1.50 Training Units;
Application Security Manager Curriculum eLearning Per Seat/ 8 hours/ 2.00 Training Units;
Quality Assurance & Test teams Curriculum eLearning Per Seat/10 hours/ 2.25 Training Units
CBTs are valid for three years from date of purchase. The POP for each class is 12 months.
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
0006AA
| 24 |
| Each |
0006AA
HP Enterprise Security Edu 1-24 Trng Units. Valid for up to three years from date of purchase.
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
0006AB
| 25 |
| Each |
HL161AS
HP Enterprise Security Edu 25-49 Trng Units. Valid for uo to three years from date of purchase.
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
0006AC
| 50 |
| Each |
HL162AS
HP Enterprise Security 50-99 Edu Trng Units. Valid for up to three years from date of purchase.
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
0006AD
| 50 |
| Each |
HL163AS
HP Enterprise Security Edu 100-149 Trng Units. Valid for up to three years from date of purchase.
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
0006AE
| 2,000 |
| Each |
HL164AS
HP Enterprise Security Edu 150 or More Trng Units. Valid for up to three years from date of purchase.
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
UNDEFINED
Application Security A la Carte Role Bas
POP is one year from date of purchase.
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
0007AA
| 20 |
| Each |
Anyone in Application Security
Anyone in Application Security/ Application Security Fundamentals ala carte eLearning Per Seat eLearning /1 hour/ 0.25 Training Units.
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
0007AB
| 20 |
| Each |
Application Security for Managers
Application Security for Managers/ Application Security Fundamentals for Managers eLearning Per Seat eLearning 30 min /.25 Training Units.
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
0007AC
| 20 |
| Each |
Anyone with Access to a Computer
Anyone with Access to a Computer/ Information Security & Privacy Awareness eLearning Per Seat/1.5 hours/ 0.25 Training Units
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
0007AD
| 20 |
| Each |
All IT Staff It Security
All IT Staff It Security/ Fundamentals eLearning Per Seat/ 2 hours /0.25 Training Units
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
0007AE
| 20 |
| Each |
Java Developer
Java Developer/ Secure Coding in Java eLearning Per Seat/ 1 hour/ 0.25 Training Units
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
0007AF
| 20 |
| Each |
.Net Developer/ Secure Coding in .NET e
.Net Developer/ Secure Coding in .NET eLearning Per Seat/ 2 hours /0.25 Training Units
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
0007AG
| 20 |
| Each |
C/C++ Developer
C/C++ Developer/ Secure Coding in C/C++ eLearning Per Seat/ 30 min /0.25 Training Units
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
0007AH
| 20 |
| Each |
PHP Developer
PHP Developer/ Secure Coding in PHP eLearning Per Seat/ 2 hours/ 0.25 Training Units
MAX
| ITEM NO |
| SUPPLIES/SERVICES |
| MAX QUANTITY |
| UNIT |
| UNIT PRICE |
| MAX AMOUNT |
0007AJ
| 20 |
| Each |
Developers
Developers, Leads and QA/ Security Testing Principles eLearning Per Seat/ 1.25 hours/ 0.25 Training Units
MAX
PERFORMANCE WORK STATEMENT
PERFORMANCE WORK STATEMENT
1. Performance Work Statement For HP Code Review Software Training and On-Site Professional Services
1. Objectives and Scope
The purpose of the Code Review capability is to support the United States Marine Corps (USMC), Space and Naval Warfare Systems Command (SPAWAR), and Information Systems and Infrastructure (IS&I), Product Manager (PdM) Total Force Information Technology Systems (TFITS) Information Assurance (IA) programs by increasing the existing cybersecurity capabilities in order to comply with Federal, Department of Defense (DoD), and USMC Application Security Policies, Directives, and Guidelines i.e. the Application Security and Development Security Technical Implementation Guide (STIG), Headquarters United States Marine Corps (HQMC),Command, Control, Communications and Computers (C4) memorandum dated 20 November 2012. The contractor shall provide the software licenses, Computer Based Training (CBT), maintenance, classroom-based training, and Subject Matter Expertise (SME) to work with USMC/SPAWAR/IS&I/PDM TFITS designated point of contact(s). The contractor shall assist USMC/SPAWAR/IS&I/PDM TFITS SMEs and developers with the setup and implementation of the static and dynamic code review and Runtime Web Application Protection capability and processes.
For IS&I, the code review capability will be hosted at the IA/Cyber Range. The IA/Cyber Range is a Comprehensive National Cybersecurity Initiative (CNCI) sponsored, Office of Secretary of Defense (OSD) directed, and Defense Information Systems Agency (DISA) governed project. The IA/Cyber Range is chartered to provide the DoD Cyber/IA Community with a realistic replica of the production networks to support testing, training, and exercising of the Cyber/IA Workforce.
Delivery and/or task orders issued by activities other than IS&I, may require performance outside of the Washington, DC area.
2. Requirements
2.1. Scope Definition
The contractor shall provide support to implement and train HP Fortify, WebInspect, and Runtime software in a USMC Nonsecure Internet Protocol (IP) Router Network (NIPRNet) and Secret Internet Protocol Router Network (SIPRNet) and TS/Sensitive Compartmented Information (TS/SCI) environment. Support shall consist one or more of the following, and will be order specific:
2.1.1. The contractor shall install and configure of HP product suite with Government personnel.
2.1.2. The contractor shall develop software security scanning standard operating procedures with Government personnel.
2.1.3. The contractor shall install, configure and integrate HP Fortify Static Code Analyzer (SCA) into targeted application build/development environments with Government personnel.
2.1.4. The contractor shall use Static and Dynamic Code Analysis to produce scans of USMC/SPAWAR/IS&I/PdM TFITS applications with Government personnel.
2.1.5. The contractor shall install, configure and integrate HP Runtime onto targeted servers with Government personnel.
2.1.6. The contractor shall perform triage and analysis of USMC/SPAWAR/IS&I/PdM TFITS scan results with Government personnel.
2.1.7. The contractor shall provide advice and guidance on how to remediate security vulnerabilities.
2.1.8. The contractor shall implement secure development techniques with Government personnel.
2.1.9. The contractor shall provide metrics and develop reports in HP Fortify Software Security Center with Government personnel.
2.1.10. The contractor shall administer and troubleshoot the HP product suite with Government personnel.
2.1.11. The contractor shall provide all training and services in English.
2.1.12. The contractor shall report contractor labor hours (including subcontractor labor hours) required for performance of services provided under this contract for the HP Code Review Software, Training, and On-Site Professional Services via a secure data collection site. Contracted services excluded from reporting are based on Product Service Codes (PSCs). The excluded PSCs are:
(1) W, Lease/Rental of Equipment;
(2) X, Lease/Rental of Facilities;
(3) Y, Construction of Structures and Facilities;
(4) S, Utilities ONLY;
(5) V, Freight and Shipping ONLY.
The contractor is required to completely fill in all required data fields using the following web address https://doncmra.nmci.navy.mil.
Reporting inputs will be for the labor executed during the period of performance during each Government fiscal year (FY), which runs October 1 through September 30. While inputs may be reported any time during the FY, all data shall be reported no later than October 31 of each calendar year. Contractors may direct questions to the help desk, linked at https://doncmra.nmci.navy.mil.
4. Facilities, Other Direct Charges (ODCs), and Travel Requirements
Travel expenses for work performed in the DC, and Virginia area will not be allowed. Laptops, cellular equipment/services, and other items of convenience are not reimbursable as ODCs. All travel outside the Washington DC and Virginia area will be placed on a Firm Fixed Price NTE CLIN and reimbursed after reviewing receipts of the contractor’s actual expenses to ensure the claimed travel expenses are fair and reasonable. Costs for transportation, lodging, meals and incidental expenses incurred by the contractor are allowable subject to the limitations contained in the Federal Travel Regulations and/or Joint Travel Regulations.
All Government printing requirements MUST be done by or through the local Document Automation and Production Service (DAPS, now called DLA Document Services) http://www.daps.dla.mil/dapsonline.html.
The expected locations (may not be all inclusive) of travel outside the Washington DC area are estimated below. Each individual Task Order will definitize travel as needed.
Location
MCEITS, Kansas City, MO
Marine Corps Base Camp Lejeune, NC
Marine Corps Base Camp Pendleton, CA
Marine Corps Support Facility New Orleans, LA
Marine Corps Logistics Base Albany, GA
Marine Corps Base Camp Smedley D. Butler, Okinawa, Japan
Marine Corps Base Hawaii
Space and Naval Warfare Systems Center Atlantic, Charleston, SC
Space and Naval Warfare Systems Center, Norfolk, VA
Space and Naval Warfare Systems Center Pacific, San Diego, CA
5.
Security
Contractors assigned to this contract will be required to obtain and maintain access to Top Secret/Sensitive Compartmented Information (TS/SCI). The majority of the work will be conducted at the Joint IA/Cyber Range located at the Quantico Corporate Center, 925 Corporate Drive, Stafford VA 22554 with other work locations as outlined in section 4 of this PWS. Individuals will be indoctrinated in order to perform their daily work inside the aforementioned SCIFs. SCI involvement entails unescorted access into SCI spaces, and access to SCI materials and/or systems. The MARCORSYSCOM SSO provides SCI contract support (JPAS SCI SMO Ownership) for required contractor employees. The contractors requiring access to SCI will require DCID 6/4 eligibility determination made by the DODCAF.
A finalized DD254 will be incorporated into the contract.
See Attachment 3- Draft DD 254
6. Performance Requirements SUMMAR (PRS)
PERFORMANCE REQUIREMENTS SUMMARY (PRS)
| PWS Paragraph |
| Desired Outcomes |
(What do you want to accomplish as the end result of this contract?)
Required Service
(What task must be accomplished to give you the desired result?)
Performance Standard
(What should the standards for completeness, reliability, accuracy, timeliness, quality and/or cost be?)
Acceptable Quality Level (AQL)
(How much error will you accept?)
Monitoring Method
(How will you determine that success has been achieved?)
| 2.1. |
| Training provided is appropriate for the users’ needs, ranging from system developers, system administrators, DBAs, to Information Assurance professionals, etc. |
| Upon completion of training, each user is proficient in the learning objectives |
| User is able to function at not less than 95% proficiency level |
| Users trained can perform at the 90% proficiency level |
| User Surveys; responses from trainees; audit of training course(s) by government Information Assurance Managers |
| 2.1.1 |
| Install and configure HP product to enable the utilization of the HP product suite. |
| Work with SMEs to install and configure HP product suite (including Software Security Center) |
| Successfully install and configure HP product suite to meet 100% of the USMC configuration requirements |
| Successfully install and configure HP product suite to meet 95% of the USMC configuration requirements |
| Demonstration |
| 2.1.2 |
| Develop software security scanning standard operating procedures (SOPs) |
| Creation of code review SOPs the government and system developers can follow when submitting code for review or conducting self-scanning activities |
| User is able to follow the SOP and completely understand 100% of the process |
| User is able to follow the SOP after asking questions and understands 100% of the process |
| Demonstration |
| 2.13 |
| Install, configure and integrate HP Static Code Analyzer into targeted application build environments |
| Work with SMEs with the system development teams to install, configure and integrate HP Fortify SCA into targeted application build/development environments |
| Successfully install, configure and integrate HP Fortify SCA into 100% of targeted application build/development environments |
| Successfully install, configure and integrate HP Fortify SCA into 97% of targeted application build/development environments |
| Demonstration |
| 2.1.4 |
| Process all the targeted applications through the static and dynamic code review process |
| Work with each application’s developer/SMEs to set up and implement static and dynamic code review |
| Successfully scan 100% of the applicable systems |
| Successfully scan 97% of the applicable systems |
| Demonstration |
| 2.1.5 |
| Setup Runtime capability to protect the most vulnerable USMC systems |
| Work with SMEs to set up and implement Runtime. |
| Successfully implement Runtime on 100% of the applicable servers. |
| Successfully implement Runtime on 97% of the applicable servers. |
| Demonstration |
| 2.1.6 |
| Contractor perform triage and analysis of static and dynamic code review results |
| Work with each application’s developer/SMEs to assist with the triage and analysis of static and dynamic code review results |
| Successfully triage and analyze 100% of the applicable systems’ scan results |
| Successfully triage and analyze 97% of the applicable systems’ scan results |
| Demonstration |
| 2.1.7 |
| Contractor shall provide advice and guidance on how to remediate security vulnerabilities |
| Work with each application’s developer/SMEs to provide advice and guidance on how to remediate security vulnerabilities |
| Successfully provide remediation advice and guidance on 100% of the security vulnerabilities identified by scans |
| Successfully provide remediation advice and guidance on 97% of the security vulnerabilities identified by scans |
| Demonstration |
| 2.1.8 |
| Contractor shall assist implementing secure development techniques |
| Work with each application’s developer/SMEs to provide advice and guidance on how to implement secure development techniques |
| Successfully provide remediation advice and guidance on 100% of the security vulnerabilities identified by scans |
| Successfully provide remediation advice and guidance on 97% of the security vulnerabilities identified by scans |
| Demonstration |
| 2.1.9 |
| Set up Software Security Center to be able to standardize the reporting of code review result, trend the status of an application’s code and generate reports |
| Work with SMEs to set up and implement Software Security Center and be able to demonstrate trending of applications code review results and generate applicable reports |
| Successfully implement Software Security Center and trend 100% of the applicable systems and generate applicable reports. |
| Successfully implement Software Security Center and trend 97% of the applicable systems and generate applicable reports. |
| Demonstration |
| 2.1.10 |
| Administer and troubleshoot HP product suite |
| Work with onsite system administrator and database administrator to ensure the HP product suite runs smoothly and efficiently |
| Successfully maintain HP product suite at 95% availability |
| Successfully maintain HP product suite at 85% availability |
| Demonstration |
| 2.1.11 |
| Provide training and services in English |
| Provide training and services in English |
| Provide 100% training and services in English |
| Provide training 100% and services in English |
| Demonstration |
| 2.1.12 |
| Provide contractor labor hours required for performance of services via secure data collection site |
| Provide contractor labor hours required for performance of services via secure data collection site |
| Provide 100% contractor labor hours required for performance of services via secure data collection site |
| Provide 100% contractor labor hours required for performance of services via secure data collection site |
| Demonstration |
INSPECTION AND ACCEPTANCE TERMS
Supplies/services will be inspected/accepted at:
| CLIN |
| INSPECT AT |
| INSPECT BY |
| ACCEPT AT |
| ACCEPT BY |
| 0001 |
| Destination |
| Government |
| Destination |
| N/A |
| 0001AA |
| Destination |
| Government |
| Destination |
| Government |
| 0001AB |
| Destination |
| Government |
| Destination |
| Government |
| 0001AC |
| Destination |
| Government |
| Destination |
| Government |
| 0001AD |
| Destination |
| Government |
| Destination |
| Government |
| 0001AE |
| Destination |
| Government |
| Destination |
| Government |
| 0001AF |
| Destination |
| Government |
| Destination |
| Government |
| 0001AG |
| Destination |
| Government |
| Destination |
| Government |
| 0001AH |
| Destination |
| Government |
| Destination |
| Government |
| 0001AJ |
| Destination |
| Government |
| Destination |
| Government |
| 0001AK |
| Destination |
| Government |
| Destination |
| Government |
| 0001AL |
| Destination |
| Government |
| Destination |
| Government |
| 0001AM |
| Destination |
| Government |
| Destination |
| Government |
| 0001AN |
| Destination |
| Government |
| Destination |
| Government |
| 0001AP |
| Destination |
| Government |
| Destination |
| Government |
| 0001AQ |
| Destination |
| Government |
| Destination |
| Government |
| 0001AR |
| Destination |
| Government |
| Destination |
| Government |
| 0001AS |
| Destination |
| Government |
| Destination |
| Government |
| 0001AT |
| Destination |
| Government |
| Destination |
| Government |
| 0002 |
| Destination |
| Government |
| Destination |
| N/A |
| 0002AA |
| Destination |
| Government |
| Destination |
| Government |
| 0002AB |
| Destination |
| Government |
| Destination |
| Government |
| 0002AC |
| Destination |
| Government |
| Destination |
| Government |
| 0002AD |
| Destination |
| Government |
| Destination |
| Government |
| 0003 |
| Destination |
| Government |
| Destination |
| N/A |
| 0003AA |
| Destination |
| Government |
| Destination |
| Government |
| 0003AB |
| Destination |
| Government |
| Destination |
| Government |
| 0003AC |
| Destination |
| Government |
| Destination |
| Government |
| 0003AD |
| Destination |
| Government |
| Destination |
| Government |
| 0003AE |
| Destination |
| Government |
| Destination |
| Government |
| 0003AF |
| Destination |
| Government |
| Destination |
| Government |
| 0004 |
| Destination |
| Government |
| Destination |
| N/A |
| 0004AA |
| Destination |
| Government |
| Destination |
| Government |
| 0004AB |
| Destination |
| Government |
| Destination |
| Government |
| 0004AC |
| Destination |
| Government |
| Destination |
| Government |
| 0004AD |
| Destination |
| Government |
| Destination |
| Government |
| 0005 |
| Destination |
| Government |
| Destination |
| Government |
| 0005AA |
| Destination |
| Government |
| Destination |
| Government |
| 0005AB |
| Destination |
| Government |
| Destination |
| Government |
| 0005AC |
| Destination |
| Government |
| Destination |
| Government |
| 0005AD |
| Destination |
| Government |
| Destination |
| Government |
| 0005AE |
| Destination |
| Government |
| Destination |
| Government |
| 0006 |
| Destination |
| Government |
| Destination |
| N/A |
| 0006AA |
| Destination |
| Government |
| Destination |
| Government |
| 0006AB |
| Destination |
| Government |
| Destination |
| Government |
| 0006AC |
| Destination |
| Government |
| Destination |
| Government |
| 0006AD |
| Destination |
| Government |
| Destination |
| Government |
| 0006AE |
| Destination |
| Government |
| Destination |
| Government |
| 0007 |
| Destination |
| Government |
| Destination |
| Government |
| 0007AA |
| Destination |
| Government |
| Destination |
| Government |
| 0007AB |
| Destination |
| Government |
| Destination |
| Government |
| 0007AC |
| Destination |
| Government |
| Destination |
| Government |
| 0007AD |
| Destination |
| Government |
| Destination |
| Government |
| 0007AE |
| Destination |
| Government |
| Destination |
| Government |
| 0007AF |
| Destination |
| Government |
| Destination |
| Government |
| 0007AG |
| Destination |
| Government |
| Destination |
| Government |
| 0007AH |
| Destination |
| Government |
| Destination |
| Government |
| 0007AJ |
| Destination |
| Government |
| Destination |
| Government |
DELIVERY INFORMATION
| CLIN |
| DELIVERY DATE |
| QUANTITY |
| SHIP TO ADDRESS |
| UIC |
| 0001 |
| N/A |
| N/A |
| N/A |
| N/A |
| 0001AA |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
| 0001AB |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
| 0001AC |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
| 0001AD |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
| 0001AE |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
| 0001AF |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
| 0001AG |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
| 0001AH |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
| 0001AJ |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
| 0001AK |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
| 0001AL |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
| 0001AM |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
| 0001AN |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
| 0001AP |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
| 0001AQ |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
| 0001AR |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
| 0001AS |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
| 0001AT |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
| 0002 |
| N/A |
| N/A |
| N/A |
| N/A |
| 0002AA |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
| 0002AB |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
| 0002AC |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
| 0002AD |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
| 0003 |
| N/A |
| N/A |
| N/A |
| N/A |
| 0003AA |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
| 0003AB |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
| 0003AC |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
| 0003AD |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
| 0003AE |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
| 0003AF |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
| 0004 |
| N/A |
| N/A |
| N/A |
| N/A |
| 0004AA |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
| 0004AB |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
| 0004AC |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
| 0004AD |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
| 0005 |
| N/A |
| N/A |
| N/A |
| N/A |
| 0005AA |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
| 0005AB |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
| 0005AC |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
| 0005AD |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
| 0005AE |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
| 0006 |
| N/A |
| N/A |
| N/A |
| N/A |
| 0006AA |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
| 0006AB |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
| 0006AC |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
| 0006AD |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
| 0006AE |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
| 0007 |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
| 0007AA |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
| 0007AB |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
| 0007AC |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
| 0007AD |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
| 0007AE |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
| 0007AF |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
| 0007AG |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
| 0007AH |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
| 0007AJ |
| POP 20-SEP-2014 TO |
19-SEP-2017
| N/A |
| N/A |
CLAUSES INCORPORATED BY REFERENCE
| 52.204-2 |
| Security Requirements |
| AUG 1996 |
| 52.209-7 |
| Information Regarding Responsibility Matters |
| JUL 2013 |
| 52.209-10 |
| Prohibition on Contracting With Inverted Domestic Corporations |
| MAY 2012 |
| 52.212-1 |
| Instructions to Offerors--Commercial Items |
| APR 2014 |
| 52.212-4 |
| Contract Terms and Conditions--Commercial Items |
| MAY 2014 |
| 52.225-25 |
| Prohibition on Contracting with Entities Engaging in Certain Activities or Transactions Relating to Iran-- Representation and Certifications. |
| DEC 2012 |
| 52.228-8 |
| Liability and Insurance - Leased Motor Vehicles |
| MAY 1999 |
| 252.203-7000 |
| Requirements Relating to Compensation of Former DoD Officials |
| SEP 2011 |
| 252.203-7005 |
| Representation Relating to Compensation of Former DoD Officials |
| NOV 2011 |
| 252.204-7012 |
| Safeguarding of unclassified controlled technical information |
| NOV 2013 |
| 252.205-7000 |
| Provision Of Information To Cooperative Agreement Holders |
| DEC 1991 |
| 252.209-7001 |
| Disclosure of Ownership or Control by the Government of a Terrorist Country |
| JAN 2009 |
| 252.227-7015 |
| Technical Data--Commercial Items |
| FEB 2014 |
| 252.227-7037 |
| Validation of Restrictive Markings on Technical Data |
| JUN 2013 |
| 252.232-7003 |
| Electronic Submission of Payment Requests and Receiving Reports |
| JUN 2012 |
| 252.232-7010 |
| Levies on Contract Payments |
| DEC 2006 |
| 252.243-7002 |
| Requests for Equitable Adjustment |
| DEC 2012 |
| 252.244-7000 |
| Subcontracts for Commercial Items |
| JUN 2013 |
| 52.212-2 |
| Evaluation - Commercial Items |
| JAN 1999 |
CLAUSES INCORPORATED BY FULL TEXT
52.212-3 OFFEROR REPRESENTATIONS AND CERTIFICATIONS--COMMERCIAL ITEMS (MAY 2014)
An offeror shall complete only paragraph (b) of this provision if the offeror has completed the annual representations and certifications electronically via http://www.acquisition.gov. If an offeror has not completed the annual representations and certifications electronically at the System for Award Management (SAM) website, the offeror shall complete only paragraphs (c) through (o) of this provision.
(a) Definitions. As used in this provision --
“Economically disadvantaged women-owned small business (EDWOSB) Concern” means a small business concern that is at least 51 percent directly and unconditionally owned by, and the management and daily business operations of which are controlled by, one or more women who are citizens of the United States and who are economically disadvantaged in accordance with 13 CFR part 127. It automatically qualifies as a women-owned small business eligible under the WOSB Program.
"Forced or indentured child labor" means all work or service-
(1) Exacted from any person under the age of 18 under the menace of any penalty for its nonperformance and for which the worker does not offer himself voluntarily; or
(2) Performed by any person under the age of 18 pursuant to a contract the enforcement of which can be accomplished by process or penalties.
Inverted domestic corporation, as used in this section, means a foreign incorporated entity which is treated as an inverted domestic corporation under 6 U.S.C. 395(b), i.e., a corporation that used to be incorporated in the United States, or used to be a partnership in the United States, but now is incorporated in a foreign country, or is a subsidiary whose parent corporation is incorporated in a foreign country, that meets the criteria specified in 6 U.S.C. 395(b), applied in accordance with the rules and definitions of 6 U.S.C. 395(c). An inverted domestic corporation as herein defined does not meet the definition of an inverted domestic corporation as defined by the Internal Revenue Code at 26 U.S.C. 7874.
Manufactured end product means any end product in Federal Supply Classes (FSC) 1000-9999, except--
(1) FSC 5510, Lumber and Related Basic Wood Materials;
(2) Federal Supply Group (FSG) 87, Agricultural Supplies;
(3) FSG 88, Live Animals;
(4) FSG 89, Food and Related Consumables;
(5) FSC 9410, Crude Grades of Plant Materials;
(6) FSC 9430, Miscellaneous Crude Animal Products, Inedible;
(7) FSC 9440, Miscellaneous Crude Agricultural and Forestry Products;
(8) FSC 9610, Ores;
(9) FSC 9620, Minerals, Natural and Synthetic; and
(10) FSC 9630, Additive Metal Materials.
Place of manufacture means the place where an end product is assembled out of components, or otherwise made or processed from raw materials into the finished product that is to be provided to the Government. If a product is disassembled and reassembled, the place of reassembly is not the place of manufacture.
Restricted business operations means business operations in Sudan that include power production activities, mineral extraction activities, oil-related activities, or the production of military equipment, as those terms are defined in the Sudan Accountability and Divestment Act of 2007 (Pub. L. 110-174). Restricted business operations do not include business operations that the person (as that term is defined in Section 2 of the Sudan Accountability and Divestment Act of 2007) conducting the business can demonstrate--
(1) Are conducted under contract directly and exclusively with the regional government of southern Sudan;
(2) Are conducted pursuant to specific authorization from the Office of Foreign Assets Control in the Department of the Treasury, or are expressly exempted under Federal law from the requirement to be conducted under such authorization;
(3) Consist of providing goods or services to marginalized populations of Sudan;
(4) Consist of providing goods or services to an internationally recognized peacekeeping force or humanitarian organization;
(5) Consist of providing goods or services that are used only to promote health or education; or
(6) Have been voluntarily suspended.
Sensitive technology--
(1) Means hardware, software, telecommunications equipment, or any other technology that is to be used specifically--
(i) To restrict the free flow of unbiased information in Iran; or
(ii) To disrupt, monitor, or otherwise restrict speech of the people of Iran; and
(2) Does not include information or informational materials the export of which the President does not have the authority to regulate or prohibit pursuant to section 203(b)(3) of the International Emergency Economic Powers Act (50 U.S.C. 1702(b)(3)).
Service-disabled veteran-owned small business concern--
(1) Means a small business concern--
(i) Not less than 51 percent of which is owned by one or more service-disabled veterans or, in the case of any publicly owned business, not less than 51 percent of the stock of which is owned by one or more service-disabled veterans; and
(ii) The management and daily business operations of which are controlled by one or more service-disabled veterans or, in the case of a service-disabled veteran with permanent and severe disability, the spouse or permanent caregiver of such veteran.
(2) Service-disabled veteran means a veteran, as defined in 38 U.S.C. 101(2), with a disability that is service-connected, as defined in 38 U.S.C. 101(16).
"Small business concern" means a concern, including its affiliates, that is independently owned and operated, not dominant in the field of operation in which it is bidding on Government contracts, and qualified as a small business under the criteria in 13 CFR Part 121 and size standards in this solicitation.
Subsidiary means an entity in which more than 50 percent of the entity is owned--
(1) Directly by a parent corporation; or
(2) Through another subsidiary of a parent corporation.
Veteran-owned small business concern means a small business concern--
(1) Not less than 51 percent of which is owned by one or more veterans (as defined at 38 U.S.C. 101(2)) or, in the case of any publicly owned business, not less than 51 percent of the stock of which is owned by one or more veterans; and
(2) The management and daily business operations of which are controlled by one or more veterans.
"Women-owned business concern" means a concern which is at least 51 percent owned by one or more women; or in the case of any publicly owned business, at least 51 percent of the stock of which is owned by one or more women; and whose management and daily business operations are controlled by one or more women.
"Women-owned small business concern" means a small business concern--
(1) That is at least 51 percent owned by one or more women or, in the case of any publicly owned business, at least 51 percent of its stock is owned by one or more women; or
(2) Whose management and daily business operations are controlled by one or more women.
Women-owned small business (WOSB) concern eligible under the WOSB Program (in accordance with 13 CFR part 127)”, means a small business concern that is at least 51 percent directly and unconditionally owned by, and the management and daily business operations of which are controlled by, one or more women who are citizens of the United States.
(b) (1) Annual Representations and Certifications. Any changes provided by the offeror in paragraph (b)(2) of this provision do not automatically change the representations and certifications posted electronically on the SAM website.
(2) The offeror has completed the annual representations and certifications electronically via the SAM website accessed through https://www.acquisition.gov. After reviewing the SAM database information, the offeror verifies by submission of this offer that the representations and certifications currently posted electronically at FAR 52.212-3, Offeror Representations and Certifications--Commercial Items, have been entered or updated in the last 12 months, are current, accurate, complete, and applicable to this solicitation (including the business size standard applicable to the NAICS code referenced for this solicitation), as of the date of this offer and are incorporated in this offer by reference (see FAR 4.1201), except for paragraphs ----------.
[Offeror to identify the applicable paragraphs at (c) through (o) of this provision that the offeror has completed for the purposes of this solicitation only, if any.) These amended representation(s) and/or certification(s) are also incorporated in this offer and are current, accurate, and complete as of the date of this offer. Any changes provided by the offeror are applicable to this solicitation only, and do not result in an update to the representations and certifications posted electronically on ORCA.]
(c) Offerors must complete the following representations when the resulting contract will be performed in the United States or its outlying areas. Check all that apply.
(1) Small business concern. The offeror represents as part of its offer that it ( ) is, ( ) is not a small business concern.
(2) Veteran-owned small business concern. (Complete only if the offeror represented itself as a small business concern in paragraph (c)(1) of this provision.) The offeror represents as part of its offer that it ( ___ ) is, ( ___ ) is not a veteran-owned small business concern.
(3) Service-disabled veteran-owned small business concern. (Complete only if the offeror represented itself as a veteran-owned small business concern in paragraph (c)(2) of this provision.) The offeror represents as part of its offer that it ( ___ ) is, ( ___ ) is not a service-disabled veteran-owned small business concern.
(4) Small disadvantaged business concern. (Complete only if the offeror represented itself as a small business concern in paragraph (c)(1) of this provision.) The offeror represents, for general statistical purposes, that it ( ___ ) is, ( ___ ) is not a small disadvantaged business concern as defined in 13 CFR 124.1002.
(5) Women-owned small business concern. (Complete only if the offeror represented itself as a small business concern in paragraph (c)(1) of this provision.) The offeror represents that it ( ) is, ( ) is not a women-owned small business concern.
Note to paragraphs (c)(8) and (9): Complete paragraphs (c)(8) and (c)(9) only if this solicitation is expected to exceed the simplified acquisition threshold.
(6) WOSB concern eligible under the WOSB Program. [Complete only if the offeror represented itself as a women-owned small business concern in paragraph (c)(5) of this provision.] The offeror represents that--
(i) It [ ___ ] is, [ ___ ] is not a WOSB concern eligible under the WOSB Program, has provided all the required documents to the WOSB Repository, and no change in circumstances or adverse decisions have been issued that affects its eligibility; and
(ii) It [ ___ ] is, [ ___ ] is not a joint venture that complies with the requirements of 13 CFR part 127, and the representation in paragraph (c)(6)(i) of this provision is accurate for each WOSB concern eligible under the WOSB Program participating in the joint venture. [The offeror shall enter the name or names of the WOSB concern eligible under the WOSB Program and other small businesses that are participating in the joint venture: ----------.] Each WOSB concern eligible under the WOSB Program participating in the joint venture shall submit a separate signed copy of the WOSB representation.
(7) Economically disadvantaged women-owned small business (EDWOSB) concern. [Complete only if the offeror represented itself as a WOSB concern eligible under the WOSB Program in (c)(6) of this provision.] The offeror represents that--
(i) It [ ___ ] is, [ ___ ] is not an EDWOSB concern, has provided all the required documents to the WOSB Repository, and no change in circumstances or adverse decisions have been issued that affects its eligibility; and
(ii) It [ ___ ] is, [ ___ ] is not a joint venture that complies with the requirements of 13 CFR part 127, and the representation in paragraph (c)(7)(i) of this provision is accurate for each EDWOSB concern participating in the joint venture. [The offeror shall enter the name or names of the EDWOSB concern and other small businesses that are participating in the joint venture: ----------.] Each EDWOSB concern participating in the joint venture shall submit a separate signed copy of the EDWOSB representation.
(8) Women-owned business concern (other than small business concern). (Complete only if the offeror is a women-owned business concern and did not represent itself as a small business concern in paragraph (c)(1) of this provision.) The offeror represents that it ( ___ ) is, a women-owned business concern.
(9) Tie bid priority for labor surplus area concerns. If this is an invitation for bid, small business offerors may identify the labor surplus areas in which costs to be incurred on account of manufacturing or production (by offeror or first-tier subcontractors) amount to more than 50 percent of the contract price:
(10) (Complete only if the solicitation contains the clause at FAR 52.219-23, Notice of Price Evaluation Adjustment for Small Disadvantaged Business Concerns or FAR 52.219-25, Small Disadvantaged Business Participation Program-Disadvantaged Status and Reporting, and the offeror desires a benefit based on its disadvantaged status.)
(i) General. The offeror represents that either--
(A) It ( ___ ) is, ( ___ ) is not certified by the Small Business Administration as a small disadvantaged business concern and identified, on the date of this representation, as a certified small disadvantaged business concern in the SAM Dynamic Small Business Search database maintained by the Small Business Administration, and that no material change in disadvantaged ownership and control has occurred since its certification, and, where the concern is owned by one or more individuals claiming disadvantaged status, the net worth of each individual upon whom the certification is based does not exceed $750,000 after taking into account the applicable exclusions set forth at 13 CFR 124.104(c)(2); or
(B) It ( ___ ) has, ( ___ ) has not submitted a completed application to the Small Business Administration or a Private Certifier to be certified as a small disadvantaged business concern in accordance with 13 CFR 124, Subpart B, and a decision on that application is pending, and that no material change in disadvantaged ownership and control has occurred since its application was submitted.
(ii) Joint Ventures under the Price Evaluation Adjustment for Small Disadvantaged Business Concerns. The offeror represents, as part of its offer, that it is a joint venture that complies with the requirements in 13 CFR 124.1002(f) and that the representation in paragraph (c)(10)(i) of this provision is accurate for the small disadvantaged business concern that is participating in the joint venture. (The offeror shall enter the name of the small disadvantaged business concern that is participating in the joint venture: ____________.)
(11) HUBZone small business concern. (Complete only if the offeror represented itself as a small business concern in paragraph (c)(1) of this provision.) The offeror represents, as part of its offer, that--
(i) It [ ___ ] is, [ ___ ] is not a HUBZone small business concern listed, on the date of this representation, on the List of Qualified HUBZone Small Business Concerns maintained by the Small Business Administration, and no material changes in ownership and control, principal office, or HUBZone employee percentage have occurred since it was certified in accordance with 13 CFR Part 126; and
(ii) It [ ___ ] is, [ ___ ] is not a HUBZone joint venture that complies with the requirements of 13 CFR Part 126, and the representation in paragraph (c)(11)(i) of this provision is accurate for each HUBZone small business concern participating in the HUBZone joint venture. [The offeror shall enter the names of each of the HUBZone small business concerns participating in the HUBZone joint venture: _______.] Each HUBZone small business concern participating in the HUBZone joint venture shall submit a separate signed copy of the HUBZone representation.
(d) Certifications and representations required to implement provisions of Executive Order 11246--
(1) Previous Contracts and Compliance. The offeror represents that--
(i) It ( ___ ) has, ( ___ ) has not, participated in a previous contract or subcontract subject either to the Equal Opportunity clause of this solicitation, the and
(ii) It ( ___ ) has, ( ___ ) has not, filed all required compliance reports.
(2) Affirmative Action Compliance. The offeror represents that--
(i) It ( ___ ) has developed and has on file, ( ___ ) has not developed and does not have on file, at each establishment, affirmative action programs required by rules and regulations of the Secretary of Labor (41 CFR Subparts 60-1 and 60-2), or
(ii) It ( ___ ) has not previously had contracts subject to the written affirmative action programs requirement of the rules and regulations of the Secretary of Labor.
(e) Certification Regarding Payments to Influence Federal Transactions (31 U.S.C. 1352). (Applies only if the contract is expected to exceed $150,000.) By submission of its offer, the offeror certifies to the best of its knowledge and belief that no Federal appropriated funds have been paid or will be paid to any person for influencing or attempting to influence an officer or employee of any agency, a Member of Congress, an officer or employee of Congress or an employee of a Member of Congress on his or her behalf in connection with the award of any resultant contract.
This is the start of the file's text. The full file is on GovTribe.
File details come from the government source that posted it. Updated .