3.03_Amendment0002_23229-0025.PDF

NSN 7540-01-152-8070

PREVIOUS EDITION UNUSABLE Prescribed by GSA

FAR (48 CFR) 53.243

STANDARD FORM 30 (REV. 10-83)

(a) By completing Items 8 and 15, and returning ____ copies of the amendment; (b) By acknowledging receipt of this amendment on each copy of the offer submitted; or (c) By separate letter or telegram which includes a reference to the solicitation and amendment numbers. FAILURE OF YOUR ACKNOWLEDG- MENT TO BE RECEIVED AT THE PLACE DESIGNATED FOR THE RECEIPT OF OFFERS PRIOR TO THE HOUR AND DATE SPECIFIED MAY RESULT IN REJECTION OF YOUR OFFER. If by virtue of this amendment you desire to change an offer already submitted, such change may be made by telegram or letter, provided each telegram or letter makes reference to the solicitation and this amendment, and is received prior to the opening hour and date specified.

30-105

(If required)

Offers must acknowledge receipt of this amendment prior to the hour and date specified in the solicitation or as amended, by one of the following methods:

tended.

is not ex-is extended,

12. ACCOUNTING AND APPROPRIATION DATA

(Organized by UCF section headings, including solicitation/contract subject matter where feasible.)14. DESCRIPTION OF AMENDMENT/MODIFICATION appropriation date, etc.)

The above numbered solicitation is amended as set forth in Item 14. The hour and date specified for receipt of Offers

(Signature of Contracting Officer)

(Specify authority)

B. THE ABOVE NUMBERED CONTRACT/ORDER IS MODIFIED TO REFLECT THE ADMINISTRATIVE CHANGES

10A. MODIFICATION OF CONTRACT/ORDER NO.

(SEE ITEM 11)

9A. AMENDMENT OF SOLICITATION NO.(No., street, county, State and Zip Code)8. NAME AND ADDRESS OF CONTRACTOR

6. ISSUED BY

PAGE OF PAGES1. CONTRACT ID CODE

3. EFFECTIVE DATE2. AMENDMENT/MODIFICATION NO.

13. THIS ITEM APPLIES ONLY TO MODIFICATIONS OF CONTRACTS/ORDERS,

IT MODIFIES THE CONTRACT/ORDER NO. AS DESCRIBED IN ITEM 14.

IN ITEM 10A.

THE CHANGES SET FORTH IN ITEM 14 ARE MADE IN THE CONTRACT ORDER NO.

A. THIS CHANGE ORDER IS ISSUED PURSUANT TO:

SET FORTH IN ITEM 14, PURSUANT TO THE AUTHORITY OF FAR 43.103(b).

(such as changes in paying office, C. THIS SUPPLEMENTAL AGREEMENT IS ENTERED INTO PURSUANT TO AUTHORITY OF:

(Specify type of modification and authority)D. OTHER

BY(Signature of person authorized to sign)

Except as provided herein, all terms and conditions of the document referenced in Item 9A or 10A, as heretofore changed, remains unchanged and in full force and effect.

CODE FACILITY CODE

CODECODE

(Type or print)16A. NAME AND TITLE OF CONTRACTING OFFICER

16B. UNITED STATES OF AMERICA

AMENDMENT OF SOLICITATION/MODIFICATION OF CONTRACT

11. THIS ITEM ONLY APPLIES TO AMENDMENTS OF SOLICITATIONS

15B. CONTRACTOR/OFFEROR

15A. NAME AND TITLE OF SIGNER (Type or print)

(SEE ITEM 13)

(If applicable)5. PROJECT NO.4. REQUISITION/PURCHASE REQ. NO.

7. ADMINISTERED BY (If other than Item 6)

16C. DATE SIGNED15C. DATE SIGNED

Contractor is not, is required to sign this document and return ____ copies to the issuing office.

10B. DATED

9B. DATED

E. IMPORTANT:

1 14

0002 2026 APR 20 23229-0025 (* )

N00104

NAVSUP WEAPON SYSTEMS SUPPORT MECH

5450 CARLISLE PIKE

MECHANICSBURG, PA 17050-2411

CREATOR OFC CD: N771.6

N00104-24-Q-CD07

X

2024 MAY 15

X X

THE HOUR AND DATE SPECIFIED FOR RECEIPT OF OFFERS IS EXTENDED TO 4:30 PM LOCAL TIME ON 2026 MAY 01.

SEE NEXT PAGE

N00104-24-Q-CD07 AMEND: 0002 PAGE 2 OF 14

NOTE:

The reason for this amendment is to:

1. Extend solicitation close date to 1 May 2026.

2. Updated solicitation clauses per Revolutionary FAR Overhaul.

This amendment makes no other changes.

N00104-24-Q-CD07 AMEND: 0002 PAGE 3 OF 14

PART I - THE SCHEDULE

SECTION D

PACKAGING AND MARKING

CLAUSE WSSTERMDZ03 IS REVISED AS FOLLOWS:

WSSTERMDZ03

PRESERVATION, PACKAGING, PACKING AND MARKING

The contractor shall preserve, package, pack and mark all items as cited below. Where specifications or standards are cited herein the latest revision of that specification or standard shall apply.

1. PRESERVATION REQUIREMENTS

a. SYSTEM STOCK SHIPMENTS - The contractor shall preserve all items intended to enter the military distribution system for stock in accordance with the MIL-STD-2073-1, "Standard Practice for Military Packaging", Packaging Requirements Code specified in the Section B, Part I of the Schedule. When a Specialized Preservation Code/Method of Preservation (MOP) (Table J-Ia) is specified, and one or more of the following packaging fields (WM, CUD, CT, UC) value is a 00 (numeric), the Specialized Preservation/MOP procedure and materials takes precedence. Contractors should disregard the LP field and third digit of the PACK field and use the Unit Container Level (UCL) to identify the level of packing protection the unit container meets for packing requirements. When HM = D, the item is regulated in accordance with Title 49 Code of Federal Regulations (CFR); when HM = N the item is not regulated for transportation.

1) When a specified packaging material has an associated Qualified Products List (QPL), the contractor shall use only packaging materials produced by a manufacturer listed on the applicable QPL. Barrier materials that have QPLs are MIL-PRF-131, MIL-PRF-81705, MIL-PRF-22191, MIL-PRF-3420 and MIL-PRF-22019. Sources for QPL material can be obtained from the Qualified Products Database at http://qpldocs.dla.mil/.

b. IMMEDIATE USE/INSTALLATION AND PART NUMBER BUY SHIPMENTS - Government PCO or ACO approval is required to use the packaging standards outlined in this paragraph. Any national stock numbered (NSN) item required for immediate use (used or consumed within 7 days of receipt) or direct installation, or part numbered item (authority granted to ship without NSN) shall be preserved and packed in accordance with ASTM D3951-18 (2023), "Standard Practice for Commercial Packaging", for all shipments to a Continental United States (CONUS) government activity or contractor-owned facility. All material destined for overseas shipment (OCONUS) shall be preserved in accordance with MIL-STD-2073-1.

c. GOVERNMENT-OWNED MATERIAL - In the event that the contract expires, is terminated, or completed, and Government-owned material is to be returned to the supply system, the contractor shall preserve and package this material in accordance with the requirements of paragraph 1.a.

2. PROTECTION FROM DEGRADATION DUE TO ELECTROSTATIC (ES)/ELECTROMAGNETIC (EM) FORCES

a. When ASTM D3951-18 (2023) is authorized for packaging and the item is considered Electrostatic Discharge sensitive (ESDS), protection shall be in accordance with ANSI/ESD S20.20-2021, "For the Development of an ESD Control Program for - Protection of Electrical and Electronic Parts, Assemblies and Equipment (Excluding Electrically Initiated Explosive Devices)."

b. When MIL-STD-2073-1 is specified and the preservation method code (PMT) in the solicitation does not specify ESD/EM protection (PMT = GX) and the contractor's proposed item of supply is subject to degradation from ES/EM forces, contractors shall provide recommended packaging data with their proposals/quotes.

3. PACKING REQUIREMENTS - The contractor shall pack as follows:

Domestic Shipments (CONUS): Level B

Overseas Shipments (OCONUS) (including Navy ships at sea):

Via air, FPO, APO Level B Via freight forwarder Level B Via surface Level A

Exterior shipping containers for Packing Levels A and B are listed in MIL-STD-2073-1, Appendix C, Table C.II.

Long-life reusable containers and wood containers are shipping containers which do not require overpacking for shipment.

4. MARKING REQUIREMENTS - All unit, intermediate and shipping containers shall be marked in accordance with MIL-STD-129. In addition, the following specific requirements apply:

a. ADDITIONAL MARKING FOR SPARES ONLY - Each MIL-STD-129 label shall also include the following:

1) Procurement Instrument Identifier (PIID) - the 13-digit contract order number,

2) Contract Line Item Number (CLIN) - the 4-digit individual line item number (e.g. 0001, 0002, etc.), and

3) SubCLIN - the 6-digit sub line item number (e.g. 0001AA, 0001AB, 0002AA, 0002AB, etc.).

N00104-24-Q-CD07 AMEND: 0002 PAGE 4 OF 14

WSSTERMDZ03 (CONT)

PRESERVATION, PACKAGING, PACKING AND MARKING

b. DEPOT LEVEL REPAIRABLE (DLR) LABELS

1) Items identified with a Cognizance (COG) Code of either "7" or an even number preceding the NSN, excluding

6A, 6H and 6X COGs (e.g. 7RH 5826-014289999), are defined as Depot Level Repairable (DLR) items. DLR items require that a DLR label be placed on the outside of the unit, intermediate and shipping containers as close to the bar code label as possible.

EXCEPTION: When a DLR item requires use of both a reusable inner unit container and a reusable outer shipping and storage container (excluding wood and fiberboard), only the inner unit container shall be affixed with a DLR label. In these cases only, DLR labels shall NOT be placed on the outer reusable container.

2) Labels are available via the Naval Forms Online website: https://forms.documentservices.dla.mil/order/.

The website will advise the procedures for ordering and establishing an account.

3) NAVSUP WSS authorizes contractors to create and print their own DLR labels. Labels shall follow the standard size and font options listed in below chart. Text shall be in all upper case letters of the same style font. The label used shall be sized proportionate to the size of the container. Labels shall be horizontally printed and consist of yellow "DLR" text font on a solid blue background. Labels shall meet requirements of MIL-STD-129 section 4.2.2. Labels shall be of a water-resistant grade of paper, film, or plastic, coated on one side with water-insoluble, permanent type adhesive. The adhesive shall adhere to metal, plastic, aluminum or fiberboard surfaces under high and low temperatures. Labels shall have a finish suitable for printing and writing on with ink without feathering or spreading, be capable of withstanding normal handling and storage conditions, and remain securely in position. Application specific performance criteria and durability requirements to ensure functionality in various climatic environments should be tailored, if required, using MIL-PRF-61002. MIL-PRF-61002 can be used as an acquisition tool when labels presently being used are not performing satisfactorily or when new conditions or applications require special label stock for those particular situations.

NSN DESCRIPTION QUANTITY APPLICATION FORM NUMBER

PER UNIT

PACKAGE

0108LF5055300 DLR Label 100 Unit NAVSUP 1397-1

2in.x3in. Container 0108LF5055000 DLR Label 100 Intermediate NAVSUP 1397

3inx5in. Shipping Container

c. SPECIAL MATERIAL IDENTIFICATION CODE (SMIC) FOR NAVSUP WSS MARITIME REQUIREMENTS ONLY

1) Certain Program related items are identified by a two-position SMIC, which appears as a suffix to the NSN

(e.g. 1H 4730 009001317 L1), and require special markings. Containers shall be marked or labeled with letters, maximum two inches high on two (2) sides and two (2) ends as follows:

SMIC MARKINGS COLOR TYPE CONTAINER

L1 LEVEL 1 RED Unit, intermediate and shipping

(size permitting) S1 SURFACE RED Unit, intermediate and shipping

LEVEL 1 (size permitting) D4/D5/D7 DSS-SOC RED Unit, intermediate and shipping

(size permitting) C1* LEVEL 1 SPECIAL Green Unit, intermediate and shipping

CLEAN 02-N2

CP/VG* SPECIAL CLEAN GREEN Unit, intermediate and shipping

02-N2 D0/D6/D8* DSS-SOC Green Unit, intermediate and shipping

SPECIAL CLEAN

O2-N2

VU FBW SFCC VU BLUE Unit, intermediate and shipping

(size permitting) SW FBW SFCC SW BLUE Unit, intermediate and shipping

(size permitting)

N00104-24-Q-CD07 AMEND: 0002 PAGE 5 OF 14

PRESERVATION, PACKAGING, PACKING AND MARKING

Q3/Q5 Q3 or Q5 RED Unit, intermediate and shipping *denotes Oxygen Clean requirements in accordance with MIL-STD-1330 "Precision Cleaning and Testing of Shipboard Oxygen, Helium, Helium-Oxygen, Nitrogen, and Hydrogen Systems."

5. PALLETIZATION. Palletization of shipments shall be accomplished in accordance with MIL-STD-147 "DOD Standard Practice: Palletized Unit Loads." Failure to meet these palletization/packaging requirements and measures, without a written waiver from the PCO or ACO, may result in charges back to the contractor for repalletization and/or repackaging of items. Pallets shall conform to the requirements of American National Standards Institute, Material Handling-MH1-2016, Pallets, Slip Sheets, and Other Bases for Unit Loads. MH1-2016 may be obtained at the following website: http://www.mhi.org.

a. General Purpose Unit Loads - When shipping directly to a Navy afloat unit, pallets meeting MH1-2016, Part No.

MH1/9-02SW4048 or MH1/9-10BW4048 for unit loads under 1,500 pounds and MH1/9-03SW4048 for unit loads over 1,500 pounds shall be used.

b. Hazardous Material Unit Loads - Unless otherwise specified in the contract or purchase order hazardous material containers, except cylinders and 55 gallon drums, shall be palletized utilizing MH1-2016 Part No. MH1/9-07SW4848 pallets.

c. Use of nonstandard commercial pallets is prohibited.

6. WOOD PACKAGING MATERIAL (WPM). All shipments destined to the DOD must be treated and marked in accordance with the International Standards for Phytosanitary Measures Guidelines for Regulating Wood Packaging Material in International Trade (ISPM 15).

a. For all WPM furnished under this contract the contractor shall ensure the American Lumber Standards Committee (ALSC) approved mark is applied to every shipment regardless of destination.

b. Failure to comply with the requirements of ISPM 15 may result in refusal of the shipment, destruction or corrective treatment of WPM at the point of receipt and the associated costs charged back to the contractor.

7. NAVY SHELF-LIFE PROGRAM. Navy shelf-life requirements are listed under the item description in a 3-digit alpha/numeric code. Position one (1) is the DOD shelf-life code, defining the type of shelf-life for an item (Type I, non -extendible or Type II, extendible), and the number of months an item can remain ready for issue in a Navy specified package. Positions two (2) and three (3) combined form the Navy-unique shelf-life action codes used by storage activities, and do not impose any requirements on the contractor. The contractor shall use the applicable shelf-life paragraphs and table in MIL-STD-129 to apply either Type I or Type II shelf-life markings to an item's unit, intermediate and shipping containers. Contractors will ensure that at least eighty-five percent (85%) of the Navy shelf-life requirement is remaining when received by the first government activity.

8. REUSABLE NSN CONTAINERS. An item that has an NSN assigned in the "Container NSN" field (e.g . 8145 012622982) requires shipment in a reusable shipping and storage container.

a. REUSABLE CONTAINERS FOR NAVSUP WSS, MARITIME REQUIREMENTS - Reusable NSN containers for maritime material (designated by a COG Code of "7E", "7G" and "7H") shall be provided as contractor-furnished material (CFM).

b. REUSABLE CONTAINERS FOR NAVSUP WSS, AVIATION REQUIREMENTS - Reusable NSN containers (excluding fiberboard and most wood) for aviation material (designated by a COG Code of "7R", "6K" or "0R") shall be provided as government-furnished material (GFM). Fast pack containers will not be provided as GFM. To obtain GFM reusable containers, the contractor must request via email usn.philadelphia.navsupwssphil.mbx.navsupcrf@us.navy.mil at least 90 days prior to the anticipated shipping date, 30 days prior for repair contracts. If the Navy's Container Management Area (CMA) informs the contractor that containers are unavailable, the following alternate packaging requirements apply. The unavailability of reusable containers shall not be an excusable delivery delay.

ALTERNATE PACKAGING REQUIREMENTS FOR ITEMS ASSIGNED THE FOLLOWING CONTAINERS

Container Container Alternate Packaging Code NSN Part Number (80132) IAW MIL-STD-2073-1 8145 002609548 P069-2 }

8145 002609556 P069-1 } N 001 000 GX 1 00 K3 LT B ED

8145 002609559 P069-3 } UCL = B

8145 002609562 P069-4 } SPMK = 39

8145 010124088 P069-6 } PACK = QFF

8145 010140440 P069-5 }

N00104-24-Q-CD07 AMEND: 0002 PAGE 6 OF 14

PRESERVATION, PACKAGING, PACKING AND MARKING

8145 011644073 P069-7 } 8145 012622982 15450-1 } If MOP/PMT = GX

--------------------------------------} N 001 000 GX 1 00 K3 GH Z ED

8145 012622983 15450-2 } Z= use 1.5" of "GH" cushioning --------------------------------------} between barrier bag and Unit Container

8145 012622984 15450-3 } UCL = B

--------------------------------------} SPMK = 39

8145 012622985 15450-4 } PACK = QFF

8145 012622986 15450-5 } For all other MOPs/PMTs

--------------------------------------} N 001 000 51 1 00 EA GH F ED

8145 012622987 15450-6 } UCL = B

--------------------------------------} SPMK = 03

8145 012622988 15450-7 } PACK = QFF

c. All excess empty reusable shipping and storage containers shall be turned-in to the nearest Container Reuse and Refurbishment Center (CRRC). CRRC locations/points of contact: Program Manager - 215-697-2063

Norfolk, VA-757-445-9099 ext.124 Yokosuka, Japan-011-81-46-816-6304 Cherry point, NC-252-466-2331 Lemoore, CA-559-998-0220 Jacksonville, FL-904-542-1014 Okinawa, JAPAN-011-81-46-816-6304 San Diego, CA-619-545-8360 Iwakuni, JAPAN-011-81-46-816-6304 Puget Sound, WA-360-476-9777 Bahrain-011-318-439-9553

d. The stock-numbered, long-life, reusable containers identified herein as GFM are property of the U.S. Navy and only shall be used to fulfill orders from the Navy and U.S. Marine Corps; these containers shall not be used to fulfill orders from the U.S. Army, U.S. Air Force, any other agency of the U.S. Government or Foreign Military Sales (FMS) customer.

9. REUSABLE NSN CONTAINERS FOR FOREIGN MILITARY SALES (FMS), JOINT PROGRAM OFFICE (JPO) OR OTHER FOREIGN FORCES

ACQUISITION

a. Reusable shipping and storage containers shall be provided as CONTRACTOR-FURNISHED MATERIAL (CFM), unless otherwise specified.

b. Contractors may tender offers including alternate, non-reusable, packaging methods and be considered responsive.

10. HAZARDOUS MATERIALS. This section applies when items to be delivered under this contract are considered hazardous materials as defined by 49 CFR, FED-STD-313, or by the Government's technical representative.

a. Packaging and marking for hazardous materials shall comply with applicable requirements for Performance Oriented Packaging (POP) contained in 49 CFR and the international modal regulations. All performance test requirements shall be supported by test certificates and reports attesting to the date and the results obtained from performance oriented packaging testing. The contractor shall be responsible for assuring that sources providing performance testing services are registered with the U.S. Department of Transportation (DOT). The contractor's signed certification that the packaged configuration meets the applicable modal regulation shall be incorporated on the Wide Area Workflow Receiving Report (WAWF RR), DD Form 250, Material Inspection and Receiving Report, or other related acceptance documents if a WAWF RR, DD Form 250 is not used. The Shipper's Declaration for Dangerous Goods (SDDG) must be included for all air shipments and uploaded to WAWF. All test certificates, reports and training records shall be available for inspection by authorized Government representatives for a period of three years.

b. When a contract/order for hazardous material requires shipment to a military aerial port or through a military container consolidation point including DODAACs SW3225, SW3123, SW3142, N45627, FB4427, FB9150, FB4497, FY8910, FY9125, FB4418, FY4462, FB4484, FY4494, those shipments shall comply with NAVSUP PUB 505/AFMAN 24-204, Preparing Hazardous Materials for Military Air Shipment.

11. SAFETY DATA SHEETS. As required by clauses FAR 52.223-3 "Hazardous Material Identification and Material Safety Data" and DFARS 252.223-7001 "Hazard Warning Labels" the contractor/offeror is required to list any hazardous material to be delivered under the resultant contract by the submission of Safety Data Sheets (SDSs) and Globally Harmonized System (GHS) compliant product label, when applicable, to the NAVSUP WSS or DLA Contracting Officer prior to award. An electronic copy in PDF format of the SDS and GHS product label must also be emailed to NAVSUP WSS Code N242 at NAVSUPWSSMECH.HAZMAT@US.NAVY.MIL. Please include the NSN, CAGE, Part Number, quantity of hazardous material, contract number, and point of contact for hazardous material questions in the body of the email.

N00104-24-Q-CD07 AMEND: 0002 PAGE 7 OF 14

PRESERVATION, PACKAGING, PACKING AND MARKING

12. REPACKAGING TO CORRECT PACKAGING DEFICIENCIES

a. Notwithstanding inspection and acceptance by the Government of items furnished under this contract, or any condition of this contract concerning the conclusiveness thereof, the contractor guarantees that the preservation, packaging, packing and marking (PPP&M), and the preparation of, and method of shipment of such items will conform to the requirements of this contract.

b. Items that do not conform to the PPP&M requirements of this contract may have a Supply Discrepancy Report (SDR, SF-364) written against the contractor at the time of receipt.

c. The Government may at the option of the PCO or ACO, correct PPP&M deficiencies, without prior contractor notification, and require an equitable adjustment in the contract price to cover labor and material when corrective actions are warranted, or return the non-conforming material to the contractor for repackaging at the contractor's expense.

(12-2025)

PART I - THE SCHEDULE

SECTION H

SPECIAL CONTRACT REQUIREMENTS

CLAUSE WSSTERMHZ02 IS REVISED AS FOLLOWS:

WSSTERMHZ02

QUALITY ASSURANCE REPRESENTATIVE (QAR)

The contractor shall provide to the Quality Assurance Representative (QAR) the Inventory Label which will be obtained by the QAR before signing for acceptance in WAWF DD250 Receiving Report. The QAR will validate the contract number, delivery order number, CLIN, shipping location, National Stock Numbers, Serial number and quantities, as applicable. The contractor shall provide the Inventory Label to the QAR as an attachment to the WAWF documentation.

The Inventory Label is also required for assets determined BR or BER.

(5/25)

PART II - CONTRACT CLAUSES

SECTION I

CONTRACT CLAUSES

CLAUSE 252.204-7012 IS REVISED AS FOLLOWS:

252.204-7012

SAFEGUARDING COVERED DEFENSE INFORMATION AND CYBER INCIDENT REPORTING (MAY 2024

)(DEVIATION 2024-O0013, REVISION 1)

(a) Definitions. As used in this clause-

"Adequate security" means protective measures that are commensurate with the consequences and probability of loss, misuse, or unauthorized access to, or modification of information.

"Compromise" means disclosure of information to unauthorized persons, or a violation of the security policy of a system, in which unauthorized intentional or unintentional disclosure, modification, destruction, or loss of an object, or the copying of information to unauthorized media may have occurred.

"Contractor attributional/proprietary information" means information that identifies the contractor(s), whether directly or indirectly, by the grouping of information that can be traced back to the contractor(s) (e.g., program description, facility locations), personally identifiable information, as well as trade secrets, commercial or financial information, or other commercially sensitive information that is not customarily shared outside of the company.

"Controlled technical information" means technical information with military or space application that is subject to controls on the access, use, reproduction, modification, performance, display, release, disclosure, or dissemination.

Controlled technical information would meet the criteria, if disseminated, for distribution statements B through F, using the criteria set forth in DoD Instruction 5230.24, Distribution Statements on Technical Documents. The term does not include information that is lawfully publicly available without restrictions.

"Covered contractor information system" means an unclassified information system that is owned, or operated by or for, a contractor and that processes, stores, or transmits covered defense information.

N00104-24-Q-CD07 AMEND: 0002 PAGE 8 OF 14

252.204-7012 (CONT)

SAFEGUARDING COVERED DEFENSE INFORMATION AND CYBER INCIDENT REPORTING (MAY 2024

)(DEVIATION 2024-O0013, REVISION 1)

"Covered defense information" means unclassified controlled technical information or other information, as described in the Controlled Unclassified Information (CUI) Registry at http://www.archives.gov/cui/registry/category-list.html, that requires safeguarding or dissemination controls pursuant to and consistent with law, regulations, and Governmentwide policies, and is-

(1) Marked or otherwise identified in the contract, task order, or delivery order and provided to the contractor by or on behalf of DoD in support of the performance of the contract; or

(2) Collected, developed, received, transmitted, used, or stored by or on behalf of the contractor in support of the performance of the contract.

"Cyber incident" means actions taken through the use of computer networks that result in a compromise or an actual or potentially adverse effect on an information system and/or the information residing therein.

"Forensic analysis" means the practice of gathering, retaining, and analyzing computer-related data for investigative purposes in a manner that maintains the integrity of the data.

"Information system" means a discrete set of information resources organized for the collection, processing, maintenance, use, sharing, dissemination, or disposition of information.

"Malicious software" means computer software or firmware intended to perform an unauthorized process that will have adverse impact on the confidentiality, integrity, or availability of an information system. This definition includes a virus, worm, Trojan horse, or other code-based entity that infects a host, as well as spyware and some forms of adware.

"Media" means physical devices or writing surfaces including, but is not limited to, magnetic tapes, optical disks, magnetic disks, large-scale integration memory chips, and printouts onto which covered defense information is recorded, stored, or printed within a covered contractor information system.

"Operationally critical support" means supplies or services designated by the Government as critical for airlift, sealift, intermodal transportation services, or logistical support that is essential to the mobilization, deployment, or sustainment of the Armed Forces in a contingency operation.

"Rapidly report" means within 72 hours of discovery of any cyber incident.

"Technical information" means technical data or computer software, as those terms are defined in the clause at DFARS 252.227-7013, Rights in Technical Data-Other Than Commercial Products and Commercial Services, regardless of whether or not the clause is incorporated in this solicitation or contract. Examples of technical information include research and engineering data, engineering drawings, and associated lists, specifications, standards, process sheets, manuals, technical reports, technical orders, catalog-item identifications, data sets, studies and analyses and related information, and computer software executable code and source code.

(b) Adequate security. The Contractor shall provide adequate security on all covered contractor information systems. To provide adequate security, the Contractor shall implement, at a minimum, the following information security protections:

(1) For covered contractor information systems that are part of an Information Technology (IT) service or system operated on behalf of the Government, the following security requirements apply:

(i) Cloud computing services shall be subject to the security requirements specified in the clause 252.239-7010, Cloud Computing Services, of this contract.

(ii) Any other such IT service or system (i.e., other than cloud computing) shall be subject to the security requirements specified elsewhere in this contract.

N00104-24-Q-CD07 AMEND: 0002 PAGE 9 OF 14

SAFEGUARDING COVERED DEFENSE INFORMATION AND CYBER INCIDENT REPORTING (MAY 2024

)(DEVIATION 2024-O0013, REVISION 1)

(2) For covered contractor information systems that are not part of an IT service or system operated on behalf of the Government and therefore are not subject to the security requirement specified at paragraph (b)(1) of this clause, the following security requirements apply:

(i) Except as provided in paragraph (b)(2)(ii) of this clause, the covered contractor information system shall be subject to the security requirements in National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171, "Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations", Revision 2 (available via the internet at https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-171r2.pdf).

(ii)(A) The Contractor shall implement NIST SP 800-171, as soon as practical, but not later than December 31, 2017. For all contracts awarded prior to October 1, 2017, the Contractor shall notify the DoD Chief Information Officer (CIO), via email at osd.dibcsia@mail.mil, within 30 days of contract award, of any security requirements specified by NIST SP 800-171 not implemented at the time of contract award.

(B) The Contractor shall submit requests to vary from NIST SP 800-171 in writing to the Contracting Officer, for consideration by the DoD CIO. The Contractor need not implement any security requirement adjudicated by an authorized representative of the DoD CIO to be nonapplicable or to have an alternative, but equally effective, security measure that may be implemented in its place.

(C) If the DoD CIO has previously adjudicated the contractor's requests indicating that a requirement is not applicable or that an alternative security measure is equally effective, a copy of that approval shall be provided to the Contracting Officer when requesting its recognition under this contract.

(D) If the Contractor intends to use an external cloud service provider to store, process, or transmit any covered defense information in performance of this contract, the Contractor shall require and ensure that the cloud service provider meets security requirements equivalent to those established by the Government for the Federal Risk and Authorization Management Program (FedRAMP) Moderate baseline (https://www.fedramp.gov/documents-templates/) and that the cloud service provider complies with requirements in paragraphs (c) through (g) of this clause for cyber incident reporting, malicious software, media preservation and protection, access to additional information and equipment necessary for forensic analysis, and cyber incident damage assessment.

(3) Apply other information systems security measures when the Contractor reasonably determines that information systems security measures, in addition to those identified in paragraphs (b)(1) and (2) of this clause, may be required to provide adequate security in a dynamic environment or to accommodate special circumstances (e.g., medical devices) and any individual, isolated, or temporary deficiencies based on an assessed risk or vulnerability.

These measures may be addressed in a system security plan.

(c) Cyber incident reporting requirement.

(1) When the Contractor discovers a cyber incident that affects a covered contractor information system or the covered defense information residing therein, or that affects the contractor's ability to perform the requirements of the contract that are designated as operationally critical support and identified in the contract, the Contractor shall--

(i) Conduct a review for evidence of compromise of covered defense information, including, but not limited to, identifying compromised computers, servers, specific data, and user accounts. This review shall also include analyzing covered contractor information system(s) that were part of the cyber incident, as well as other information systems on the Contractor's network(s), that may have been accessed as a result of the incident in order to identify compromised covered defense information, or that affect the Contractor's ability to provide operationally critical support; and

(ii) Rapidly report cyber incidents to DoD at https://dibnet.dod.mil.

(2) Cyber incident report. The cyber incident report shall be treated as information created by or for DoD and shall include, at a minimum, the required elements at https://dibnet.dod.mil.

(3) Medium assurance certificate requirement. In order to report cyber incidents in accordance with this clause, the Contractor or subcontractor shall have or acquire a DoD-approved medium assurance certificate to report cyber incidents. For information on obtaining a DoD-approved medium assurance certificate, see https://public.cyber.mil/eca/.

N00104-24-Q-CD07 AMEND: 0002 PAGE 10 OF 14

SAFEGUARDING COVERED DEFENSE INFORMATION AND CYBER INCIDENT REPORTING (MAY 2024

)(DEVIATION 2024-O0013, REVISION 1)

(d) Malicious software. When the Contractor or subcontractors discover and isolate malicious software in connection with a reported cyber incident, submit the malicious software to DoD Cyber Crime Center (DC3) in accordance with instructions provided by DC3 or the Contracting Officer. Do not send the malicious software to the Contracting Officer.

(e) Media preservation and protection. When a Contractor discovers a cyber incident has occurred, the Contractor shall preserve and protect images of all known affected information systems identified in paragraph (c)(1)(i) of this clause and all relevant monitoring/packet capture data for at least 90 days from the submission of the cyber incident report to allow DoD to request the media or decline interest.

(f) Access to additional information or equipment necessary for forensic analysis. Upon request by DoD, the Contractor shall provide DoD with access to additional information or equipment that is necessary to conduct a forensic analysis.

(g) Cyber incident damage assessment activities. If DoD elects to conduct a damage assessment, the Contracting Officer will request that the Contractor provide all of the damage assessment information gathered in accordance with paragraph (e) of this clause.

(h) DoD safeguarding and use of contractor attributional/proprietary information. The Government shall protect against the unauthorized use or release of information obtained from the contractor (or derived from information obtained from the contractor) under this clause that includes contractor attributional/proprietary information, including such information submitted in accordance with paragraph (c). To the maximum extent practicable, the Contractor shall identify and mark attributional/proprietary information. In making an authorized release of such information, the Government will implement appropriate procedures to minimize the contractor attributional/proprietary information that is included in such authorized release, seeking to include only that information that is necessary for the authorized purpose(s) for which the information is being released.

(i) Use and release of contractor attributional/proprietary information not created by or for DoD.

Information that is obtained from the contractor (or derived from information obtained from the contractor) under this clause that is not created by or for DoD is authorized to be released outside of DoD-

(1) To entities with missions that may be affected by such information;

(2) To entities that may be called upon to assist in the diagnosis, detection, or mitigation of cyber incidents;

(3) To Government entities that conduct counterintelligence or law enforcement investigations;

(4) For national security purposes, including cyber situational awareness and defense purposes (including with Defense Industrial Base (DIB) participants in the program at 32 CFR part 236); or

(5) To a support services contractor ("recipient") that is directly supporting Government activities under a contract that includes the clause at 252.204-7009, Limitations on the Use or Disclosure of Third-Party Contractor Reported Cyber Incident Information.

(j) Use and release of contractor attributional/proprietary information created by or for DoD. Information that is obtained from the contractor (or derived from information obtained from the contractor) under this clause that is created by or for DoD (including the information submitted pursuant to paragraph (c) of this clause) is authorized to be used and released outside of DoD for purposes and activities authorized by paragraph (i) of this clause, and for any other lawful Government purpose or activity, subject to all applicable statutory, regulatory, and policy based restrictions on the Government's use and release of such information.

(k) The Contractor shall conduct activities under this clause in accordance with applicable laws and regulations on the interception, monitoring, access, use, and disclosure of electronic communications and data.

(l) Other safeguarding or reporting requirements. The safeguarding and cyber incident reporting required by this clause in no way abrogates the Contractor's responsibility for other safeguarding or cyber incident reporting pertaining to its unclassified information systems as required by other applicable clauses of this contract, or as a result of other applicable U.S. Government statutory or regulatory requirements.

(m) Subcontracts. The Contractor shall-

(1) Include this clause, including this paragraph (m), in subcontracts, or similar contractual instruments, for operationally critical support, or for which subcontract performance will involve covered defense

N00104-24-Q-CD07 AMEND: 0002 PAGE 11 OF 14

SAFEGUARDING COVERED DEFENSE INFORMATION AND CYBER INCIDENT REPORTING (MAY 2024

)(DEVIATION 2024-O0013, REVISION 1)

information, including subcontracts for commercial products or commercial services, without alteration, except to identify the parties. The Contractor shall determine if the information required for subcontractor performance retains its identity as covered defense information and will require protection under this clause, and, if necessary, consult with the Contracting Officer; and

(2) Require subcontractors to--

(i) Notify the prime Contractor (or next higher-tier subcontractor) when submitting a request to vary from a NIST SP 800-171 security requirement to the Contracting Officer, in accordance with paragraph (b)(2)(ii)(B) of this clause; and

(ii) Provide the incident report number, automatically assigned by DoD, to the prime Contractor (or next higher-tier subcontractor) as soon as practicable, when reporting a cyber incident to DoD as required in paragraph (c) of this clause.

CLAUSE 252.225-7036 IS REVISED AS FOLLOWS:

252.225-7036

BUY AMERICAN-FREE TRADE AGREEMENTS-BALANCE OF PAYMENTS PROGRAM-BASIC (FEB 2024)

252.225-7036 is Incorporated by Reference (IBR)

If an alternate is checked it applies.

< > ALTERNATE I (FEB 2024)

< > ALTERNATE II (RESERVED)

< > ALTERNATE III (RESERVED)

< > ALTERNATE IV (FEB 2024)

< > ALTERNATE V (RESERVED)

< > ALTERNATE VI (FEB 2024)

< > ALTERNATE VII (FEB 2024)

< > ALTERNATE VIII (RESERVED)

< > ALTERNATE IX (RESERVED)

< > ALTERNATE X (FEB 2024)

< > ALTERNATE XI (RESERVED)

CLAUSE 252.225-7013 IS REVISED AS FOLLOWS:

252.225-7013

DUTY-FREE ENTRY (AUG 2025)

CLAUSE 252.204-7019 IS DELETED

CLAUSE 252.204-7021 IS REVISED AS FOLLOWS:

252.204-7021

CONTRACTOR COMPLIANCE WITH THE CYBERSECURITY MATURITY MODEL CERTIFICATION LEVEL

REQUIREMENTS (NOV 2025)

PART IV - REPRESENTATIONS AND INSTRUCTIONS

SECTION K

REPRESENTATIONS, CERTIFICATIONS, AND OTHER STATEMENTS OF OFFERORS OR QUOTERS

CLAUSE 252.204-7007 IS DELETED

CLAUSE 252.209-7999 IS DELETED

CLAUSE 252.225-7035 IS REVISED AS FOLLOWS:

252.225-7035

BUY AMERICAN-FREE TRADE AGREEMENTS-BALANCE OF PAYMENTS PROGRAM CERTIFICATE-BASI

C (FEB 2024)

N00104-24-Q-CD07 AMEND: 0002 PAGE 12 OF 14

252.225-7035 (CONT)

BUY AMERICAN-FREE TRADE AGREEMENTS-BALANCE OF PAYMENTS PROGRAM CERTIFICATE-BASI

C (FEB 2024)

(a) Definitions. "Bahraini end product," "commercially available off-the-shelf (COTS) item," "component," "critical component," "critical item," "domestic end product," "Free Trade Agreement country," "Free Trade Agreement country end product," "foreign end product," "Moroccan end product," "Panamanian end product," Peruvian end product," "qualifying country end product," and "United States," as used in this provision, have the meanings given in the 252.225-7036, Buy American-Free Trade Agreements-Balance of Payments Program-Basic clause of this solicitation.

(b) Evaluation. The Government-

(1) Will evaluate offers in accordance with the policies and procedures of part 225 of the Defense Federal

Acquisition Regulation Supplement; and

(2) For line items subject to the Buy American-Free Trade Agreements-Balance of Payments Program-Basic clause of this solicitation, will evaluate offers of qualifying country end products or Free Trade Agreement country end products other than Bahraini end products, Moroccan end products, Panamanian end products, or Peruvian end products without regard to the restrictions of the Buy American or the Balance of Payments Program.

(c) Certifications and identification of country of origin.

(1) For all line items subject to the Buy American-Free Trade Agreements-Balance of Payments Program-Basic clause of this solicitation, the offeror certifies that-

(i) Each end product, except the end products listed in paragraph (c)(2) of this provision, is a domestic end product;

(ii) Each domestic end product listed in paragraph (c)(3) of this provision contains a critical component or a critical item; and

(iii) Components of unknown origin are considered to have been mined, produced, or manufactured outside the United States or a qualifying country.

(2) The offeror shall identify all end products that are not domestic end products.

(i) The offeror certifies that the following supplies are qualifying country (except Australian) end products:

Line Item Number Country of Origin

(ii) The offeror certifies that the following supplies are Free Trade Agreement country end products other than Bahraini end products, Moroccan end products, Panamanian end products, or Peruvian end products:

Line Item Number Country of Origin

(iii) The following supplies are other foreign end products, including end products manufactured in the United States that do not qualify as domestic end products. For those foreign end products that do not consist wholly or predominantly of iron or steel or a combination of both, the Offeror shall also indicate whether these foreign end products exceed 55 percent domestic content, except those that are COTS items. If the percentage of the domestic content is unknown, select "no".

Line Item Number Country of Origin Exceeds 55% Domestic Content (If known) (Yes/No)

(3) The Offeror shall list the line item numbers of domestic end products that contain a critical component or a critical item (see section 25.105 of the Federal Acquisition Regulation).

N00104-24-Q-CD07 AMEND: 0002 PAGE 13 OF 14

252.225-7035 (CONT)

BUY AMERICAN-FREE TRADE AGREEMENTS-BALANCE OF PAYMENTS PROGRAM CERTIFICATE-BASI

C (FEB 2024)

Line Item Number:

(List as necessary)

(End of provision)

< > ALTERNATE I (FEB 2024)

< > ALTERNATE II (Reserved) < > ALTERNATE III (Reserved)

< > ALTERNATE IV (FEB 2024)

< > ALTERNATE V (Reserved)

CLAUSE 252.225-7000 IS REVISED AS FOLLOWS:

252.225-7000

BUY AMERICAN-BALANCE OF PAYMENTS PROGRAM CERTIFICATE-BASIC (FEB 2024)

(a) Definitions. "Commercially available off-the-shelf (COTS) item", "componet," "critical componet," "critical item," "domestic end product," "foreign end product," "qualifying country," "qualifying country end product," and "United States," as used in this provision, have the meanings given in the 252.225-7001, Buy American and Balance of Payments Program -- Basic clause of this solicitation.

(b) Evaluation. The Government --

(1) Will evaluate offers in accordance with the policies and procedures of Part 225 of the Defense Federal

Acquisition Regulation Supplement; and

(2) Will evaluate offers of qualifying country end products without regard to the restrictions of the Buy

American statute or the Balance of Payment Progam.

(c) Certifications and identification of country of origin.

(1) For all line items subject to the Buy American and Balance of Payments Program -- Basic clause of this solicitation, the offeror certifies that --

(i) Each end product, except those listed in paragraphs (c)(2) or (3) of this provision, is a domestic end product and that each domestic end product listed in paragraph (c)(4) of this provision contains a critical component or a critical item; and

(ii) For end products other than COTS items, components of unknown origin are considered to have been mined, produced, or manufactured outside the United States or a qualifying country. For those end products that do not consist wholly or predominantly of iron or steel or a combination of both, the Offeror shall also indicate whether these foreign end products exceed 55 percent domestic content, except for those that are COTS items. If the percentage of the domestic content is unknown, select ''no''.

(2) The offeror certifies that the following end products are qualifying country end products:

Line Item Number Country of Origin

(3) The following end products are other foreign end products, including end products manufactured in the United States that do not qualify as domestic end products. For those foreign end products that do not consist wholly or predominantly of iron or steel or a combination of both, the Offeror shall also indicate whether these foreign end products exceed 55 percent domestic content, except for those that are COTS items. If the percentage of the domestic content is unknown, select "no".

Line Item Number Country of Origin Exceeds 55% Domestic Content (If known) (Yes/No)

N00104-24-Q-CD07 AMEND: 0002 PAGE 14 OF 14

252.225-7000 (CONT)

BUY AMERICAN-BALANCE OF PAYMENTS PROGRAM CERTIFICATE-BASIC (FEB 2024)

(4) The Offeror shall separately list the line item numbers of domestic end products that contain a critical component or a critical item (see Federal Acquisition Regulation 25.105).

Domestic end products containing a critical component or a critical item:

Line Item Number

(List as necessary)

( < > ) ALTERNATE I (Reserved)

CLAUSE 252.223-7001 IS REVISED AS FOLLOWS:

252.223-7001

HAZARD WARNING LABELS (DEC 1991)

(a) "Hazardous material," as used in this clause, is defined in the Hazardous Material Identification and Material Safety Data clause of this contract.

(b) The Contractor shall label the item package (unit container) of any hazardous material to be delivered under this contract in accordance with the Hazard Communication Standard (29 CFR 1910.1200 et seq). The Standard required that the hazard warning label conform to the requirements of the standard unless the material is otherwise subject to the labelling requirements of one of the following statues:

(1) Federal Insecticide, Fungicide and Rodenticied Act;

(2) Federal Food, Drug and Cosmetics Act;

(3) Consumer Product Safety Act;

(4) Federal Hazardous Substances Act: or

(5) Federal Alcohol Administration Act.

(c) The Offeror shall list which hazardous material listed in theHazardous Material Identification and Material Safety Data clause of this contract will be labelled in accordance with one of the Acts in paragraphs (b)(1) through

(5) of this clause instead of the Hazard Communication Standard. Any hazardous material not listed will be interpreted to mean that a label is required in accordance with the Hazard Communication Standard.

MATERIAL (If None, Insert "NONE".) ACT

(d) The The apparently successful Offeror agrees to submit, before award, a copy of the hazard warning label for all hazardous materials not listedin paragraph (c) of this clause. The Offeror shall submit the label with the Material Safety Data Sheet being furnished under the Hazardous material Identification and Material Safety Data clause of this contract.

(e) The Contractor shall also comply with MIL-STD-129, Marking for Shipment and Storage (including revisions adopted during the term of this contract).