N00173-23-R-GF07.pdf

N0017323RGF07

Section B - Supplies or Services and Prices

ITEM NO SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

0001 12 Months IT Maintenance

FFP

Labor pursuant to Section C, Attachment 1 - Requirements for Onsite Contractors, Attachment 2 - Personnel Qualifications, Exhibit A - CDRLs, and Attachment 3 -

Quality Assurance Surveillance Plan.

FOB: Destination

PURCHASE REQUEST NUMBER: 1300988622

PSC CD: DF01

NET AMT

0002 1 Lot Materials

COST

Purchases related to CLIN 0001

FOB: Destination

ESTIMATED COST

0003 1 Lot Contract Data Requirements List

FFP

CDRL in accordance with Exhibit A

1001 12 Months OPTION IT Maintenance

FFP

Labor pursuant to Section C, Attachment 1 - Requirements for Onsite Contractors, Attachment 2 - Personnel Qualifications, Exhibit A - CDRLs, and Attachment 3 -

Quality Assurance Surveillance Plan.

1002 1 Lot OPTION Materials

COST

Purchases related to CLIN 1001

1003 1 Lot OPTION Contract Data Requirements List

FFP

2001 12 Months OPTION IT Maintenance

FFP

Labor pursuant to Section C, Attachment 1 - Requirements for Onsite Contractors, Attachment 2 - Personnel Qualifications, Exhibit A - CDRLs, and Attachment 3 -

Quality Assurance Surveillance Plan.

2002 1 Lot OPTION Materials

COST

Purchases related to CLIN 2001

2003 1 Lot OPTION Contract Data Requirements List

FFP

3001 12 Months OPTION IT Maintenance

FFP

Labor pursuant to Section C, Attachment 1 - Requirements for Onsite Contractors, Attachment 2 - Personnel Qualifications, Exhibit A - CDRLs, and Attachment 3 -

Quality Assurance Surveillance Plan.

3002 1 Lot OPTION Materials

COST

Purchases related to CLIN 3001

3003 1 Lot OPTION Contract Data Requirements List

FFP

4001 12 Months OPTION IT Maintenance

FFP

Labor pursuant to Section C, Attachment 1 - Requirements for Onsite Contractors, Attachment 2 - Personnel Qualifications, Exhibit A - CDRLs, and Attachment 3 -

Quality Assurance Surveillance Plan.

4002 1 Lot OPTION Materials

COST

Purchases related to CLIN 4001

4003 1 Lot OPTION Contract Data Requirements List

FFP

Section C - Descriptions and Specifications

PERFORMANCE WORK STATEMENT

Radar Division Information Technology Support

1.0 Introduction

1.1 This Statement of Work describes the Information Technology support requirements for the Radar Division of the Naval Research Laboratory (NRL), Washington, DC.

The mission of the Radar Division is to conceive, develop, demonstrate, document, and transition RF sensing concepts, technologies, and intellectual property that provide technological advantage for the US military. This is accomplished through basic research, exploratory development, and advanced technology demonstrations in partnerships across the laboratory, with Warfare Centers, FFRDCs, UARCs, academia, and industry, and in support to the requirements and acquisition communities. Fundamental to the mission is the performance of high quality forward-leaning research and engineering that is rigorous, complete, and detailed, and performed with consideration of the Navy and Marine tactical operating environments.

The Radar Division consists of three branches and administrative staff that share a

Division-level IT infrastructure. The Division infrastructure is based on the

Microsoft Active Directory and also includes Linux systems. External communication and networking is provided by NRL and the Division is responsible for supporting Division IT users, equipment, and specialized networking. The

Division maintains unclassified and Collateral Secret IT equipment.

1.2 Background

The Radar Division has approximately 125 government and contractor IT users, many with multiple unclassified and collateral Secret systems. The division maintains

Microsoft Exchange Servers for staff at both classification levels. At present, the unclassified Microsoft Exchange domain is internet routable, but it will be limited to internal access in the near future. Unfortunately, a specific data for this transition is not yet defined. A closed-network collateral Secret Microsoft Exchange domain

(REDNET), and multiple stand-alone unclassified and collateral Secret systems are also maintained.

Division IT users have migrated external email services to the unclassified NRL

Enterprise network (G-Net) Outlook Exchange Server but will require continued support maintaining email accounts and data and maintaining Outlook clients on

Division-maintained computers. At a future date, all users will receive an NRL

Enterprise-provided computer for internet access, email, and other services. While minimal user support for the NRL enterprise equipment is expected to be necessary, it will be necessary of Division IT staff to assist users to identify and resolve issues with the NRL Enterprise equipment.

The current Radar Division Collateral Secret internal REDNET network and all standalone systems will be unaffected by the migration to the NRL enterprise solution. Current Radar Division unclassified servers and desktops will be maintained for continued use, but will not route to the internet once the migration to the NRL enterprise system is complete. The internal network will be referred to as the Radar Research Net (R-Net).

The Radar Division maintains a CISCO CODEC-based Video TeleConference (VTC) facility operating at the unclassified and Collateral Secret level and has other IT equipment such as multi-function printers/copiers, meeting room computers and projectors, and other similar items that require IT support services.

1.3 Scope

The scope of this effort encompasses technical, administrative, and user (customer) support on Unclassified and Collateral Secret systems and networks for the Naval

Research Laboratory Radar Division as well as user assistance for NRL Enterprise and Navy Enterprise IT services (i.e. Flank Speed). Current equipment includes:

Windows and Linux clients and servers, Operating Systems include Windows:

Exchange 2012 R2, Exchange 2016, Exchange 2019, Linux Cent OS7, AlmaLinux 8, Windows 10 SHB, Linux CentOS 7, Debian, and Ubuntu Fedora.

2.0 Applicable Documents

2.1 Department of Defense

2.1.1 DODD 8500.1 – Cybersecurity

2.1.2 DOD 5220.22 – National Industrial Security Program

2.1.3 DOD Directive 8570.01M - Information Assurance Workforce

Improvement Program

2.1.4 DoD 5200.01 Vol. 4 - DoD Information Security Program: Controlled

Unclassified Information (CUI)

2.2 Navy

2.2.1 SECNAV M-5239.3 DON Cybersecurity Manual

2.3 NRL

2.3.1 NRLINST 5510.40E – NRL Security Manual

2.3.2 NRLINST 5211.2F – Privacy Act Policy and Responsibilities

2.3.3 NRLINST 5239.4A – NRL Cybersecurity Workforce Program

2.3.4 NRL M-5239.5 – Naval Research Laboratory Cyber Incident Response

Manual

2.3.5 NRL5239.5A – Cyber Incident Response Policy

3.0 General Requirements:

The Contractor shall provide comprehensive IT technical, administrative, and user services in support of an enterprise infrastructure of systems that meet appropriate DoD and Navy accreditation and inspection parameters in support of the Radar Division mission. Services shall be provided in-person, remotely and by telephone.

3.1 The Contractor shall have its support team in place and fully functioning at the time of the base-period contract award or exercise of contract option(s).

3.2 On-site staff is required on all Government workdays.

3.3 The contractor will execute the technical requirements in a manner that provides for high quality, timely, equipment and user support while incorporating the proper mix and the most effective use of personnel and skills.

3.4 Code 5300 is responsible for 2 networks. The classified network will require maintaining Zone D accreditation. The unclassified network will require maintaining at least a Zone B or C accreditation.

3.5 Tasking

3.5.1 Design, Development, and Administration of Radar Division Unclassified and

Classified Microsoft Windows Based Computer Systems and Services

3.5.1.1 The Contractor shall provide technical and engineering support toward the design, development, installation, test, and operation of Microsoft

Windows systems and services in the Radar Division enterprise environment (accommodating up to 125 users) in accordance with appropriate DoD/USN/NRL security practices and reporting requirements. Performance of this task includes the requirements analysis for, and design and development of, Windows Active

Directory environments and all component systems, including, but not limited to: Domain Controllers; DNS servers, file, print, patch management, database, and email; administrative and user workstations for system administrative personnel; and PKI support for servers and applications.

3.5.1.2 The Contractor will support the management of a Windows Server system supporting workstations for up to 125 users utilizing industry standard tools. Experience with Microsoft Endpoint Configuration

Manager (MECM), Windows Server Update Services (WSUS), Group

Policy and other tools selected for use within the environment is required on both unclassified and classified networks. All hardware and software configurations will comply with DoD Standard Technical

Implementation Guides (STIGs) and any applicable DoD/Navy standards. Demonstrated knowledge of and experience applying

STIGs, creating STIG checklists and documentation in support of

Navy accreditation, and providing Standard Operating Procedures

(SOPs) is required.

3.5.1.3 The Contractor will support Radar Division staff with the use of the

Navy’s approved Flank Speed environment(s). The Contractor is expected to have experience and knowledge of the requirements of the

Flank Speed and will assist Division users to identify and resolve issues with the Flank Speed environment and the installation and configuration of the Flank Speed application on Division computers.

Support will include collaboration with tier 1/2 support personnel, when needed, to ensure swift resolution of issues affecting user access that may require action at the server or individual user computer level.

3.5.1.4 All systems will be documented and tracked in an inventory control system used for configuration control and verification of compliance with relevant NRL/Navy/DoD security requirements. Familiarity and experience with software and configuration management systems such as Belarcs BelManage and BelSecure is required.

3.5.1.5 The Contractor shall implement and maintain an online trouble ticketing system to keep track of requests for assistance, to document resolution of issues, and to communicate issue status with users requesting assistance. Assistance shall be provided in a timely and courteous manner.

3.5.1.6 The Contractor shall provide user support to all users of Radar

Division IT equipment to address hardware, software, configuration, and compatibility issues in a timely manner.

3.5.1.7 The contractor shall configure all systems and services to meet

Information Assurance Vulnerability Alert Bulletin (IAVA/B) compliance requirements as well as all applicable Standard Technical

Implementation Guide (STIG) requirements and compliance with all

Navy Communications Tasking Orders (CTO), Operations Orders

(OPORD) and other Navy and/or DoD Directives as applicable to the subject SOW. All compatible systems currently have the Symantec

Security System client installed and the Contractor shall have experience with configuring and using this software. The contractor shall support obtaining and installing DoD certificates to secure required systems and services. System scans will be reviewed for vulnerabilities and findings remediated in a timely fashion.

Experience in reviewing system logs to determine blocks and coordinating required settings with the NRL IA team is required. The contractor will have experience reviewing and remediating vulnerability findings from the Assured Compliance Assessment

Solution (ACAS), SCAP/SSC, Belarcs BelManage and BelSecure tools as well as from other DoD approved/required tools and applications.

3.5.1.8 The contractor shall provide support to research and test new hardware and software products to assure compatibility with current and future information systems environments. The contractor, in support of this requirement, shall provide support in the requirements definition and procurement of supplies and equipment, to include evaluation hardware and software. The contractor shall maintain documentation on the design, performance and configuration of all servers, networks, services, and database products in support of Navy Certification and

Accreditation requirements. Documentation includes, but is not limited to, Standard Operating Procedures (SOPs), Configuration Management

Guides, diagrams and flow charts depicting system architecture, STIG checklists, responses to Risk Management Framework (RMF) controls, and creation of Plan of Action and Milestone (POA&M) entries. The contractor will have demonstrated experience in the creation and management of accreditation packages for system.

3.5.1.9 The Contractor shall provide support for the automated management and maintenance of service accounts in an enterprise level IT environment. Service account management and maintenance tasks that are expected to be automated via scripting or other tools include, but are not limited to, password control and service configuration.

3.5.1.10 The Contractor shall maintain the login and networking configuration of the four current Xerox AltaLink C8035 Multifunction Printers and monitor their maintenance and supply status. When necessary, interface with Xerox to obtain supplies and services. Supplies and services of the devices are provided via a separate Radar Division support contract with Xerox.

3.5.1.11 The Contractor shall maintain the login and networking configuration of the two current Cisco SX80 CODECs that are part of the unclassified and Secure VTC facility maintained by the Radar

Division. The Contractor shall interface with the VTC support contractor for required maintenance and service of the VTC equipment and CODECs. The VTC equipment is supported via a separate Radar

Division support contract and the CODECs are supported via the DON

JELA contract.

3.5.1.12 The contractor shall design, implement and provide Division-wide backup services for all production services in accordance with NRL, STIG, and RMF guidance. This service shall provide for continuity of operations for critical server-based enterprise data. Such as critical server infrastructure imagery with product such a Veratas System

Recovery and Data Duplication.

3.5.1.13 Support configuration and maintenance of storage systems such as

Promise Technology and Dell Scalable Storage System.

3.5.2 Design, Development and Administration of Division Level Unclassified and

Classified Linux-Based Computer Systems and Services

3.5.2.1 The contractor shall provide technical and engineering support toward the design, development, installation, test, and operation of Linux-based systems and IT services for the Division environment.

Performance of this task includes the design and deployment of both physical and virtual servers providing a variety of IT services and running Alma Linux, CentOS, Ubuntu and other enterprise Linux OS variants. Experience in the architecture, installation, configuration and management of Linux servers is required.

3.5.2.2 Familiar with Centrify for management and integration of Linux

Systems into a Windows Domain on Classified and Unclassified networks.

3.5.2.3 The contractor shall provide user support to the user base supported by the Linux systems and services. This support includes in-person support, configuration and troubleshooting, assistance via telephone and email, as well as the creation of documentation and help guides.

3.5.2.4 The contractor shall configure all systems and services to meet

Information Assurance Vulnerability Alert Bulletin (IAVA/B) compliance requirements as well as all applicable and appropriate

Standard Technical Implementation Guide (STIG) requirements and compliance with all Navy Communications Tasking Orders (CTO), Operations Orders (OPORD) and other Navy and/or DoD Directives as applicable to the subject SOW. All compatible systems currently have the Symantec Security System client installed. The contractor shall support obtaining and installing DoD certificates to secure the required systems and services. System scans shall be reviewed for vulnerabilities and findings remediated in a timely fashion.

Experience reviewing system logs to determine blocks and coordinating required settings with the NRL IA team is required. The contractor will have experience reviewing and remediating vulnerability findings from the Assured Compliance Assessment

Solution (ACAS), SCAP/SSC, Belarcs BelManage, and BelSecure tools as well as from other DoD approved/required tools and applications.

3.5.2.5 The contractor shall provide support in researching and testing new hardware and software products to assure compatibility with current and future information systems environments. The contractor, in support of this requirement, shall provide support procuring supplies and equipment, to include evaluation hardware and software.

3.5.2.6 The contractor shall maintain documentation on the design, performance and implementation of all servers, networks, services, and database products in support of Navy Certification and

Accreditation requirements. Documentation shall include, but is not limited to, Standard Operating Procedures (SOPs), Configuration

Management Guides, diagrams and flow charts depicting system architecture, STIG checklists, responses to Risk Management

Framework (RMF) controls, and creation of Plan of Action and

Milestone (POA&M) entries. The contractor will have demonstrated experience in the creation and management of accreditation packages.

3.5.2.7 Support configuration and maintenance of storage systems such as

OSNexus Scalable Storage System.

3.5.3 Computer Cybersecurity (CS) and Information Assurance (IA)

3.5.3.1 The contractor shall provide technical and engineering support toward the design, development, installation, test, and operation of

Cybersecurity (CS) and Information Assurance (IA) systems and services. Performance of this task shall include the design, development, and implementation of DoD-mandated CS/IA products.

These products include, but are not limited to: Assured Compliance

Assessment Solution (ACAS), and other information Assurance Tools.

This task will also include the testing and installation of all mandated software modules associated with these products, as well as the creation of mandatory reports and data sets required for Certification and Accreditation.

3.5.3.2 The contractor shall participate in the Navy Certification and

Accreditation process for Radar Division equipment, assisting with all facets of the accreditation review and documentation process. The contractor will engage with other NRL information assurance personnel for the purpose of providing necessary reports and data to meet mandated accreditation requirements. The Contractor must have experience in achieving Authorization to Operate under the

Department of Defense System Accreditation.

3.5.3.3 The contractor shall configure all systems and services to meet

Information Assurance Vulnerability Alert Bulletin (IAVA/B) compliance requirements as well as applicable Standard Technical

Implementation Guide (STIG) requirements and any relevant DoD or

Navy Directives.

3.5.4 Infrastructure & Facility Support

3.5.4.1 The contractor shall provide technical expertise and engineering support towards the design, installation, implementation and operation of Division-level storage and file server solutions.

3.5.4.2 The contractor shall provide support in managing computer room facilities at the infrastructure level, including but not limited to:

installation and management of equipment racks, power distribution, battery backup, and cabling within Radar Division computer rooms.

The contractor shall provide, in support of this requirement, mechanisms for facility monitoring, power monitoring and management, and environmental monitoring and management.

4.0 CERTIFICATIONS AND TRAINING:

4.1 In addition to all other required certifications, task areas 3.1, 3.2, 3.3, and 3.4 require that all personnel possess and maintain certifications as specified in DoD Directive

8570.01M (Information Assurance Workforce Improvement Program). The contractor shall ensure that all personnel assigned to this task are fully certified within

90 days of onboarding, are provided necessary ongoing training to retain certifications and are re-certified as specified by the certificate granting organization.

4.2 The contractor will arrange for and ensure that all personnel are trained as necessary on new hardware or software products as they are introduced into the environment.

Where required by vendors and DoD/DoN regulations, contractor will obtain certifications to ensure support contracts and compliance posture remain valid.

5.0 Security and Privacy Act Requirements

5.1 All contractors assigned to this contract must be U.S. Citizens. Contractor personnel requiring access to Secret information and/or systems must possess a final DoD-granted Secret security clearance, based on a completed and favorably adjudicated

DoD Tier 3 investigation. Access to unclassified information and/or systems at NRL or offsite at the Contractor facility requires, at a minimum, a favorably adjudicated

DoD Tier 3 investigation. Contractor personnel performing any function designated as a component of the Cyber Security Work Force (CSWF), and/or having privileged user access to NRL information systems will require background investigations and security clearances commensurate with the access level and security classification of the system being accessed as specified in DON 5239.2M (2009).

5.2 The contractor will NOT be required to generate, receive, or store CLASSIFIED material at the contractor’s facility.

5.3 A visit request is required for all personnel assigned to work on this contract. Visit requests must include full name, social security number, contract number and state if

Government furnished computer equipment will be required.

5.4 The Prime contractor will forward a copy of all subcontracts and task orders related to this contract, regardless of classification. All subcontracts and task orders must be approved in advance, in writing, by the Head of the Naval Research Laboratory’s

Information Security office. The prime contractor will coordinate the approval of all subcontracts and task orders with the Contracting Officer’s Representative (COR).

The COR will in turn, coordinate the approved paperwork with the Head of NRL’s

Information Security office. Prime contractor will provide the security classification guidance for classified work required under this contract to subcontractors.

5.5 Proprietary, Privacy Act, or Controlled Unclassified Information associated with this contract must be handled/controlled IAW DoD 5200.01 Vol. 4.

5.6 NATO briefings required. NATO access authorized at SECRET level only. Initial

NATO briefings must be within a 5 year scope of the completed investigation. Visit request and a copy of NATO indoctrination must be sent to NRL Code 1231 for all initial NATO briefings, prior to access. NATO briefings date must be within the current year. Annual refresher briefings for NATO access are required. A copy of the signed annual re-briefings must be forwarded to NRL Code 1231 annually.

5.7 All contractors (including subcontractors) identified in the Statement of Work shall supplement their current security practices by requiring any personnel involved in executing the contract to complete Government-sponsored and administered

Operations Security (OPSEC) training, OPSE-1301 and any other OPSEC guidance that may pertain to a project.

5.8 All classified work must be done at the Government facility. Unclassified work, identified in this SOW, may be done offsite at the contractor facility, utilizing

Government Furnished Equipment (GFE), at the discretion of the Radar Division and in coordination with the COR. Contractor personnel working offsite must be available for on-site technical meetings and work groups during normal business hours.

5.9 All NRL data must remain on NRL owned and operated systems and servers. No

NRL data, computer code, or details shall be stored on contractor or public servers.

Printed copies of Controlled Unclassified Information shall only be kept within Radar

Division spaces and shall not be kept in the contractor facility or elsewhere.

6.0 Deliverables

1) Monthly Progress Reports

2) Monthly Contractor On-Site Labor and Financial Reports

3) Hardware/Software Products & Documentation

4) Written Documentation

5) Certification Documentation & Reports

6) Personnel Training Plan

7) Technical Reports (Interim & Final)

Monthly Technical Progress Reports shall include the following information:

1) Description of the work accomplished,

2) Summary of issues or concerns, if any.

Monthly Financial reports shall include the following information:

1) Funding history, showing when and how much money was added to each ACRN for each person on the task, amounts allocated to labor and material, along with cumulative task funding for labor and material;

2) Funding balance for labor and materials in each ACRN and by person at the beginning of the monthly reporting period;

3) Labor hours and amounts expended for labor and materials in each ACRN and by person during the monthly reporting period;

4) Funding balance for labor and materials in each ACRN and by person at the end of the monthly reporting period.

7.0 Period of Performance

The period of performance for this effort is sixty (60) months from date of award

8.0 Additional Requirements

The contractor shall provide the above-stated services during NRL Radar Division normal core working hours, 0800-1700 Monday through Friday or during other agreed upon hours, except for Federal holidays. Flexible work hours may be used to ensure that some range of technical services are available during the time specified, taking into account the need for maximum support during NRL core work hours. Deviation from these support hours and any use of telework to meet local support requirements shall be proposed to and coordinated with the Contracting Officer's Representative (COR) in advance. On occasion, the Division may require after hours or weekend efforts, for example but not limited to, support of a scheduled outage or to react to an emergency or security situation. After hours support shall be coordinated between the COR and the

Contractor local site Program Manager (PM). The NRL COR shall provide the PM with advance notification and specific needs, if known in advance. Contractor personnel shall also investigate, provide recommendations for remedial action, and pursue corrective action in case of emergency situations.

The Contractor PM will ensure that the necessary support activities are adequately covered and communicate and coordinate any changes with the NRL COR.

Section D - Packaging and Marking

D 1 Unclassified Packaging and Marking

All unclassified data and deliverable contract line items shall be preserved, packaged, packed and marked and must conform to normal commercial packing standards to assure safe delivery at destination.

D 2 Classified Package and Marking

Classified reports, data, and documentation shall be prepared for shipment in accordance with National Industrial

Security Program Operating Manual (NISPOM), DOD 5220.22-M dated February 28, 2006 and the DD254 -

Contract Security Classification Specification.

D 3 Packaging Standards

The Contractor shall mark all shipments under this contract in accordance with the addition of ASTM-D-3951-90

"Standard Practice for Commercial Packaging" in effect on the date of the contract.

The Contractor shall comply with FED STD 313 (Symbols for Packages and Containers for Hazardous Industrial

Chemical and Materials) to the extent applicable.

Section E - Inspection and Acceptance

INSPECTION AND ACCEPTANCE TERMS

Supplies/services will be inspected/accepted at:

CLIN INSPECT AT INSPECT BY ACCEPT AT ACCEPT BY

0001 Destination Government Destination Government

0002 N/A Government Destination Government

0003 N/A Government Destination Government

1001 Destination Government Destination Government

1002 N/A Government Destination Government

1003 N/A Government Destination Government

2001 Destination Government Destination Government

2002 N/A Government Destination Government

2003 N/A Government Destination Government

3001 Destination Government Destination Government

3002 N/A Government Destination Government

3003 N/A Government Destination Government

4001 Destination Government Destination Government

4002 N/A Government Destination Government

4003 N/A Government Destination Government

E 1 Delivery Inspection and Acceptance

Inspection and acceptance of the final delivery will be accomplished by the Contracting Officer Representative

(COR) designated in Section G of this contract. Inspection and acceptance will be performed at the Naval Research

Laboratory, Washington DC 20375-5320.

Constructive acceptance, in accordance with FAR 32.904, shall be deemed to have occurred on the 14th day after the final delivery.

Section F - Deliveries or Performance

DELIVERY INFORMATION

CLIN DELIVERY DATE QUANTITY SHIP TO ADDRESS DODAAC /

CAGE

0001 POP 20-MAR-2023 TO

19-MAR-2024

N/A RADAR DIVISION

RICHARD MADDEN

4555 OVERLOOK AVE SW

WASHINGTON DC 20375

202-404-1971

N00173

0002 POP 20-MAR-2023 TO

N/A (SAME AS PREVIOUS LOCATION)

0003 POP 20-MAR-2023 TO

N/A (SAME AS PREVIOUS LOCATION)

1001 POP 20-MAR-2024 TO

19-MAR-2025

N/A (SAME AS PREVIOUS LOCATION)

1002 POP 20-MAR-2024 TO

N/A (SAME AS PREVIOUS LOCATION)

1003 POP 20-MAR-2024 TO

N/A (SAME AS PREVIOUS LOCATION)

2001 POP 20-MAR-2025 TO

19-MAR-2026

N/A (SAME AS PREVIOUS LOCATION)

2002 POP 20-MAR-2025 TO

N/A (SAME AS PREVIOUS LOCATION)

2003 POP 20-MAR-2025 TO

N/A (SAME AS PREVIOUS LOCATION)

3001 POP 20-MAR-2026 TO

19-MAR-2027

N/A (SAME AS PREVIOUS LOCATION)

3002 POP 20-MAR-2026 TO

N/A (SAME AS PREVIOUS LOCATION)

3003 POP 20-MAR-2026 TO

N/A (SAME AS PREVIOUS LOCATION)

4001 POP 20-MAR-2027 TO

19-MAR-2028

N/A (SAME AS PREVIOUS LOCATION)

4002 POP 20-MAR-2027 TO

N/A (SAME AS PREVIOUS LOCATION)

4003 POP 20-MAR-2027 TO

N/A (SAME AS PREVIOUS LOCATION)

CLAUSES INCORPORATED BY REFERENCE

52.242-15 Stop-Work Order AUG 1989

52.247-34 F.O.B. Destination NOV 1991

F 1 Place of Delivery – FOB Destination

The Contractor shall deliver supplies, all transportation charges paid, to destination in accordance with the clause in

Section F of the Schedule titled FAR 52.247-34 FOB Destination (NOV 1991).

Receiving Officer

Naval Research Laboratory

Contract Number: TBD

ATTN: TBD

CODE: TBD

LOCATION:

Bldg.207

4555 Overlook Avenue, SW

Washington DC 20375-5320

Section G - Contract Administration Data

252.204-7006 Billing Instructions OCT 2005

CLAUSES INCORPORATED BY FULL TEXT

252.232-7006 WIDE AREA WORKFLOW PAYMENT INSTRUCTIONS (DEC 2018)

(a) Definitions. As used in this clause—

“Department of Defense Activity Address Code (DoDAAC)” is a six position code that uniquely identifies a unit, activity, or organization.

“Document type” means the type of payment request or receiving report available for creation in Wide Area

WorkFlow (WAWF).

“Local processing office (LPO)” is the office responsible for payment certification when payment certification is done external to the entitlement system.

“Payment request” and “receiving report” are defined in the clause at 252.232-7003, Electronic Submission of

Payment Requests and Receiving Reports.

(b) Electronic invoicing. The WAWF system provides the method to electronically process vendor payment requests and receiving reports, as authorized by Defense Federal Acquisition Regulation Supplement (DFARS) 252.232-

7003, Electronic Submission of Payment Requests and Receiving Reports.

(c) WAWF access. To access WAWF, the Contractor shall—

(1) Have a designated electronic business point of contact in the System for Award Management at https://www.sam.gov; and

(2) Be registered to use WAWF at https://wawf.eb.mil/ following the step-by-step procedures for self-registration available at this web site.

(d) WAWF training. The Contractor should follow the training instructions of the WAWF Web-Based Training

Course and use the Practice Training Site before submitting payment requests through WAWF. Both can be accessed by selecting the “Web Based Training” link on the WAWF home page at https://wawf.eb.mil/.

(e) WAWF methods of document submission. Document submissions may be via web entry, Electronic Data

Interchange, or File Transfer Protocol.

(f) WAWF payment instructions. The Contractor shall use the following information when submitting payment requests and receiving reports in WAWF for this contract or task or delivery order:

(1) Document type. The Contractor shall submit payment requests using the following document type(s):

(i) For cost-type line items, including labor-hour or time-and-materials, submit a cost voucher.

https://www.sam.gov/ https://wawf.eb.mil/ https://wawf.eb.mil/

(ii) For fixed price line items—

(A) That require shipment of a deliverable, submit the invoice and receiving report specified by the Contracting

Officer.

N/A

(B) For services that do not require shipment of a deliverable, submit either the Invoice 2in1, which meets the requirements for the invoice and receiving report, or the applicable invoice and receiving report, as specified by the

Contracting Officer.

Invoice 2in1

(iii) For customary progress payments based on costs incurred, submit a progress payment request.

(iv) For performance based payments, submit a performance based payment request.

(v) For commercial item financing, submit a commercial item financing request.

(2) Fast Pay requests are only permitted when Federal Acquisition Regulation (FAR) 52.213-1 is included in the contract.

[Note: The Contractor may use a WAWF “combo” document type to create some combinations of invoice and receiving report in one step.]

(3) Document routing. The Contractor shall use the information in the Routing Data Table below only to fill in applicable fields in WAWF when creating payment requests and receiving reports in the system.

Routing Data Table*

Field Name in WAWF Data to be entered in WAWF

Pay Official DoDAAC *To be completed at award*

Issue By DoDAAC *To be completed at award*

Admin DoDAAC** *To be completed at award*

Inspect By DoDAAC *To be completed at award*

Ship To Code *To be completed at award*

Ship From Code *To be completed at award*

Mark For Code *To be completed at award*

Service Approver (DoDAAC) *To be completed at award*

Service Acceptor (DoDAAC) *To be completed at award*

Accept at Other DoDAAC *To be completed at award*

LPO DoDAAC *To be completed at award*

DCAA Auditor DoDAAC *To be completed at award*

Other DoDAAC(s) *To be completed at award*

(4) Payment request. The Contractor shall ensure a payment request includes documentation appropriate to the type of payment request in accordance with the payment clause, contract financing clause, or Federal Acquisition

Regulation 52.216-7, Allowable Cost and Payment, as applicable.

(5) Receiving report. The Contractor shall ensure a receiving report meets the requirements of DFARS Appendix F.

(g) WAWF point of contact.

(1) The Contractor may obtain clarification regarding invoicing in WAWF from the following contracting activity’s

WAWF point of contact.

*To be completed at award*

(2) Contact the WAWF helpdesk at 866-618-5988, if assistance is needed.

(End of clause)

G 1 Incremental Funding and Allotment of Funds

(a) Pursuant to the Limitation of Funds clause, FAR 52.232-22, the amounts presently available and allotted to this contract for payment of cost and fixed fee and the period covered by these amounts for incrementally funded

CLINs are set forth below:

* [To be provided at award]

G 2 Contract Administration

(a) In order to expedite administration of this contract, the following delineation of duties is provided, including the names and contact information, for each individual or office specified. Contact the individual/position designated as having responsibility for any questions, clarifications or information regarding the functions assigned herein.

Contracting Officer Tracie Rustin, Code 1340, (202) 923-1370, Email: tracie.rustin@nrl.navy.mil

Contract Specialist Graham Fisher, Code 1340, (202) 923-1344, Email: graham.fisher@nrl.navy.mil

Contracting Officer’s

Representative

[To be provided at award]

Email: [To be provided at award]

NRL Competition

Advocate

Craig Barton, Code 1300

Email: craig.barton@nrl.navy.mil

Security Matters [To be provided at award]

CLIN

ALLOTTED TO

COST

ESTIMATED PERIOD

COVERED TO

0002 * *

Email: [To be provided at award]

Safety Matters [To be provided at award]

Email: [To be provided at award]

Patent Matters [To be provided at award]

Email: [To be provided at award]

Release of Data [To be provided at award]

Email: [To be provided at award]

G 3 Contracting Officer’s Representative (COR) – Functions and Limitations

(a) [COR’s name and contact information to be provided at award] is hereby designated as the Contracting Officer's

Representative (COR). Unless terminated sooner, this appointment is effective for the period of performance of this contract including any options, if exercised. COR authority may not be re-delegated. No change in COR assignment shall be made without written notice by the Contracting Officer, who will modify the contract to reflect the change of COR assignment. The Contracting Officer may designate assistant or alternate COR(s) to act for the

COR by naming such assistant/alternate(s) in writing and transmitting a copy of such designation to the contractor via contract modification.

(b) COR’s responsibilities and limitations will be specifically listed in the COR Designation Letter to be provided to the Contractor by the Contracting Officer at or immediately after contract award.

(c) The COR is not authorized to take any action, either directly or indirectly, that could result in a change in the cost/price, quantity, quality, place of performance, delivery schedule, or any other terms or conditions of the contract. If, as a result of technical discussions, it is desirable to alter contract obligations or the statement of work/specifications, a modification must be issued in writing and signed by the Contracting Officer in order to effect such changes. No such changes shall be made without the express written prior authorization/direction of the

Contracting Officer.

G 4 Payment Instructions – Multiple Customer Funds (Government use only)

PAYMENT INSTRUCTIONS – OTHER (PGI 204-7.108(d)(12)

This contract is a cost-type contract funded by multiple funding types and/or customers, spanning several years. Funding for the CLINs contained in this contract are received from various funding sources and applied to specific tasking as defined in the funding modifications.

Based on the type of work contracted for on behalf of DOD/Navy customers, payment by

CLIN/SLIN/ACRN is significantly important and using any of the payment methods specified in the table identified in PGI 204.7108(b)(2) would result in the funding resources of one customer being paid for work received by another customer. The contractor completes the effort in a fluid environment; therefore, in order to accurately track and account for funding expenditures in accordance with the specific tasking associated with each funding line, payment instruction (d)(12) "Other" applies as expenditures must reflect the actual work performed, in alignment with the type of funding to avoid violations to the Anti-Deficiency

Act.

Payment shall be made in accordance with the Contracting Officer/DCAA approved billing whereby the contractor shall include identification of the CLIN, SLIN, and ACRN on each invoice. This will allow for appropriate contractor invoicing based on the unique customer requirement funding and Contracting

Officer’s instructions. This approach also allows for proper matching of the charge to the activity that have received the service/product with the application of the payment to the corresponding entity.

(End of text)

Section H - Special Contract Requirements

H 1 Type of Contract

This is a Firm Fixed-Price (FFP) Contract with some Cost Only line items.

H 2 Key Personnel

(a) The Contractor agrees to assign to this contract those persons whose resumes were submitted with its proposal and who are necessary to fulfill the requirements of the contract as "key personnel". No substitutions may be made except in accordance with this clause.

(b) The Contractor understands that during the first ninety (90) days of the contract performance period, no personnel substitutions will be permitted unless these substitutions are unavoidable because of the incumbent's sudden illness, death or termination of employment. In any of these events, the Contractor shall promptly notify the

Contracting Officer and provide the information described in paragraph (c) below. After the initial ninety (90) day period the Contractor must submit to the Contracting Officer all proposed substitutions, in writing, at least thirty

(30) days in advance (sixty (60) days if security clearance must be obtained) of any proposed substitution and provide the information required by paragraph (c) below.

(c) Any request for substitution must include a detailed explanation of the circumstances necessitating the proposed substitution, a resume for the proposed substitute, and any other information requested by the Contracting Officer.

Any proposed substitute must have qualifications equal to or superior to the qualifications of the incumbent. The

Contracting Officer or his/her authorized representative will evaluate such requests and promptly notify the

Contractor of his/her approval or disapproval thereof.

(d) In the event that any of the identified key personnel cease to perform under the contract and the substitute is disapproved, the contract may be immediately terminated in accordance with the Termination clause of the contract.

The following are identified as key personnel positions:

Labor Category

* - To be provided at award

H 3 Report Preparation

Scientific or technical reports prepared by the Contractor and deliverable under the terms of this contract will be prepared in accordance with format requirements contained in ANSI/NISO Z39 .18-2005, Scientific and Technical

Reports: Elements, Organization, and Design.

[NOTE: All NISO American National Standards are available as free, downloadable pdf(s) at http://www.niso.org/standards/index.html. NISO standards can also be purchased in hardcopy form from NISO

Press Fulfillment, P. 0. Box 451, Annapolis Junction, MD 20701-0451 USA. Telephone U.S. and Canada: (877)

736-6476; Outside the U.S. and Canada: 301-362-6904 fax: 301-206-9789.]

H 4 Organizational Conflict of Interest

(a) Definitions.

(1) The term “contractor” includes the Contractor and its employees, affiliates, marketing consultants (if any), consultants, and subcontractors at all tiers.

(2)“Organizational Conflict of Interest” (“OCI”) means that because of other activities or relationships with other persons, a person is unable or potentially unable to render impartial assistance or advice to the Government, or the person’s objectivity in performing the contract work is or might be otherwise impaired, or a person has an unfair competitive advantage. FAR 2.101. An OCI may result when (1) activities or relationships create an actual or potential conflict of interest related to the performance of the Statement of Work (SOW) of this Contract; or, (2) when the nature of the SOW on this Contract creates an actual or potential conflict of interest with respect to the

Contractor in relation to a future acquisition.

(3)“Marketing consultant,” means any independent contractor who furnishes advice, information, direction, or assistance to an offeror or any other contractor in support of the preparation or submission of an offer for a

Government contract by that offeror. An independent contractor is not a marketing consultant when rendering— (1)

Services excluded in FAR Subpart 37.2; (2) Routine engineering and technical services (such as installation, operation, or maintenance of systems, equipment, software, components, or facilities); (3) Routine legal, actuarial, auditing, and accounting services; and (4) Training services.

(b) In accordance with the guidance in FAR Subpart 9.5, the Contracting Officer has determined that potentially significant organizational conflicts of interest (OCIs) could result if the Contractor is allowed to participate (at any level) in future Federal Government acquisitions that include requirements that may be established or affected by the performance of the Statement of Work (SOW) by the Contractor under this Contract.

(c) It is understood and agreed that the Contractor may be ineligible (unless expressly exempted as provided in FAR

Part 9.5) to act as a prime contractor, subcontractor, or consultant or subcontractor to any prime contractor or subcontractor at any tier, for any future requirements (for services, systems, or components of systems) procured by any Federal Government activity where the Contractor, in performance of the SOW under this Contract, has provided or is providing support (as described in FAR 9.505-1 through 9.505-4) that establishes or affects future requirements or may affect the future competition.

(d) The contracting officer responsible for securing future requirements, in his/her sole discretion, may make a determination to exempt the Contractor from ineligibility as described in subparagraph (c) above provided the

Contractor submits an acceptable mitigation plan.

(1) Items for consideration in a mitigation plan include the following: identification of the organizational conflict(s) of interest; a reporting and tracking system; an organizational conflict of interest compliance/enforcement plan, to include employee training and sanctions, in the event of unauthorized disclosure of sensitive information; a plan for organizational segregation (e.g., separate reporting chains); data security measures; and, non-disclosure agreements.

(2) The Government's determination regarding the adequacy of the mitigation plan or the possibility of mitigation is a unilateral decision made solely at the discretion of the Government and is not subject to the Disputes clause of the contract. The Government may terminate the contract for default if the Contractor fails to implement and follow the procedures contained in any approved mitigation plan.

(3) Nothing contained herein shall preclude the contracting officer in future Federal Government acquisitions from making his/her own determination as to whether an OCI exists and whether any such OCI has been successfully mitigated.

(e) The Contractor shall apply this clause to any subcontractors or consultants who: have access to proprietary information received or generated in the performance of this Contract; and/or, who participate in the development of data, or participate in any other activity related to this Contract which is subject to the terms of this clause at the prime contractor level.

(f) The Contactor agrees that it and its subcontractors at all levels shall use reasonable diligence in protecting proprietary data/information that is received or generated in performance of this Contract in accordance with this clause and any other clause of this Contract pertaining to the nondisclosure of information. The Contractor further agrees that neither it nor its subcontractors will willfully disclose proprietary data/information that is received or generated in the performance of this Contract without the prior permission of the Contracting Officer, and that proprietary information shall not be duplicated, used or disclosed, in whole or part, for any purpose other than to accomplish the work required by the Contract.

(g) The Contractor and its Subcontractors at all levels shall inform their employees that they are required to comply with the applicable requirements and restrictions contained in: restrictive markings applicable to data/information that they receive or generate in the performance of this Contract; FAR Subpart 9.5 pertaining to actual or potential

OCIs; FAR 3.104 pertaining to requirements and restrictions under the Procurement Integrity Act; and, Defense

FAR Supplement (DFARS) 252.204-7000 pertaining to “Disclosure of Information.”

(h) The Contractor agrees to enter into written agreements with all companies whose proprietary data it shall have access to and to protect such data from unauthorized use or disclosure as long as it remains proprietary. The

Contractor shall furnish to the Contracting Officer copies of these written agreements. The Contractor agrees to protect the proprietary data and rights of other organizations disclosed to the Contractor during performance of this

Contract with the same caution that a reasonably prudent Contractor would use to safeguard its own highly valuable property. The Contractor agrees to refrain from using proprietary information for any purpose other than that for which it was furnished.

(i) The Contractor shall not distribute reports, data or information of any nature received or arising from its performance under this Contract, except as provided by this Contract or as may be directed by the Contracting

Officer.

(j) The Contractor agrees that if in the performance of this Contract it discovers a potential OCI, a prompt and full disclosure shall be made in writing to the Contracting Officer. This disclosure shall include a description of the actions the Contractor has taken, or proposes to take, to avoid or mitigate such conflicts.

H 5 Special Contract Requirement Regarding Non-Disclosure of Information

(a) Data includes all data, information and software, regardless of the medium (e.g. electronic or paper) and/or format in which the data exists, and includes data which is derived from, based on, incorporates, includes or refers to such data. In the course of performing this Contract, the Contractor may be or may have been given access to:

Source Selection Information [as defined in Federal Acquisition Regulation (FAR) 3.104]; data that has been assigned (or data that is generated by the Contractor that should be assigned) a…