N00421-15-T-0180_Soliciation_(Actual).doc

Section A - Solicitation/Contract Form

POC: AMY SCADUTO

Block 6, Issued by, to include the following information:

Francine Keys – Amy Scaduto

Phone: (301) 757-5210

Email: francine.keys@navy.mil Amy.scaduto@navy.mil Block 9, Contractor, to include the following information:

DUNS:

Company POC:

Phone:

Email:

Quote:

TPOC is: Catherine Fisher, (301) 995-6155, catherine.fisher@navy.mil

EARLY & PARTIAL SHIPMENTS ARE ACCEPTABLE

PAYMENT ISSUES: PLEASE CONTACT COMPTROLLER BELOW:

N64142 NAWCAD

COMPTROLLER NAWCAD

DISBURSING BLDG 438 ROOM 102

47096 LILJENCRANTZ ROAD

PATUXENT RIVER, MD 20670-1550

WAWF Invoicing Help & Instructions:

Visit the website at https://wawf.eb.mil/ and you can find help via the link "Vendors - Getting Started Help" under the New User section. The WAWF helpdesk for vendors is 1-866-618-5988 Section B - Supplies or Services and Prices

EDH-4, Rack, 13"

FFP

EDH-4 Dehydrators

FOB: Destination

NET AMT

Desiccant, Molecular Sieve, 32 oz

FFP

Desiccant, Molecular Sieve, 32 oz

NET AMT

Section E - Inspection and Acceptance

INSPECTION AND ACCEPTANCE TERMS

Supplies/services will be inspected/accepted at:

Section F - Deliveries or Performance

DELIVERY INFORMATION

CLAUSES INCORPORATED BY REFERENCE

Section G - Contract Administration Data

CLAUSES INCORPORATED BY FULL TEXT

252.232-7003

ELECTRONIC SUBMISSION OF PAYMENT REQUESTS AND RECEIVING REPORTS (JUN 2012)

(a) Definitions. As used in this clause--

(1) Contract financing payment and invoice payment have the meanings given in section 32.001 of the Federal Acquisition Regulation.

(2) Electronic form means any automated system that transmits information electronically from the initiating system to all affected systems. Facsimile, e-mail, and scanned documents are not acceptable electronic forms for submission of payment requests. However, scanned documents are acceptable when they are part of a submission of a payment request made using Wide Area WorkFlow (WAWF) or another electronic form authorized by the Contracting Officer.

(3) Payment request means any request for contract financing payment or invoice payment submitted by the Contractor under this contract.

(4) Receiving report means the data required by the clause at 252.246-7000, Material Inspection and Receiving Report.

(b) Except as provided in paragraph (c) of this clause, the Contractor shall submit payment requests and receiving reports using WAWF, in one of the following electronic formats that WAWF accepts: Electronic Data Interchange, Secure File Transfer Protocol, or World Wide Web input. Information regarding WAWF is available on the Internet at https://wawf.eb.mil/ .

(c) The Contractor may submit a payment request and receiving report using other than WAWF only when--

(1) The Contracting Officer administering the contract for payment has determined, in writing, that electronic submission would be unduly burdensome to the Contractor. In such cases, the Contractor shall include a copy of the Contracting Officer's determination with each request for payment;

(2) DoD makes payment for commercial transportation services provided under a Government rate tender or a contract for transportation services using a DoD-approved electronic third party payment system or other exempted vendor payment/invoicing system (e.g., PowerTrack, Transportation Financial Management System, and Cargo and Billing System);

(3) DoD makes payment for rendered health care services using TRICARE Encounter Data System (TEDS) as the electronic format; or

(4) When the Governmentwide commercial purchase card is used as the method of payment, only submission of the receiving report in electronic form is required.

(d) The Contractor shall submit any non-electronic payment requests using the method or methods specified in Section G of the contract.

(e) In addition to the requirements of this clause, the Contractor shall meet the requirements of the appropriate payment clauses in this contract when submitting payments requests.

252.232-7006

WIDE AREA WORKFLOW PAYMENT INSTRUCTIONS (MAY 2013)

(a) Definitions. as used in this clause--

"Department of Defense Activity Address Code (DoDAAC)" is a six position code that uniquely identifies a unit, activity, or organization.

"Document type" means the type of payment request or receiving report available for creation in Wide Area WorkFlow (WAWF).

"Local processing office (LPO)" is the office responsible for payment certification when payment certification is done external to the entitlement system.

(b) Electronic invoicing. The WAWF system is the method to electronically process vendor payment requests and receiving reports, as authorized by DFARS 252.232-7003, Electronic Submission of Payment Requests and Receiving Reports.

(c) WAWF access. To access WAWF, the Contractor shall--

(1) Have a designated electronic business point of contact in the System for Award Management at https://www.acquisition.gov; and

(2) Be registered to use WAWF at https://wawf.eb.mil/ following the step-by-step procedures for self-registration available at this Web site.

(d) WAWF training. The Contractor should follow the training instructions of the WAWF Web-Based Training Course and use the Practice Training Site before submitting payment requests through WAWF. Both can be accessed by selecting the "Web Based Training" link on the WAWF home page at https://wawf.eb.mil/.

(e) WAWF methods of document submission. Document submissions may be via Web entry, Electronic Data Interchange, or File Transfer Protocol.

(f) WAWF payment instructions. The Contractor must use the following information when submitting payment requests and receiving reports in WAWF for this contract/order:

(1) Document type. The Contractor shall use the following document type(s).

Combo

(Contracting Officer: Insert applicable document type(s). Note: If a "Combo" document type is identified but not supportable by the Contractor's business systems, an "Invoice" (stand-alone) and "Receiving Report" (stand-alone) document type may be used instead.)

(2) Inspection/acceptance location. The Contractor shall select the following inspection/acceptance location(s) in WAWF, as specified by the contracting officer.

See Section E

(Contracting Officer: Insert inspection and acceptance locations or "Not applicable.")

(3) Document routing. The Contractor shall use the information in the Routing Data Table below only to fill in applicable fields in WAWF when creating payment requests and receiving reports in the system.

Routing Data Table*

Field Name in WAWF

Data to be entered in WAWF

Pay Official DoDAAC:

N64142

Issue By DoDAAC:

N00421

Admin DoDAAC:

N00421

Inspect By DoDAAC:

N3555A

Ship To Code:

N3555A

Ship From Code:

N/A

Mark For Code:

Service Approver (DoDAAC):

Service Acceptor (DoDAAC):

Accept at Other DoDAAC:

LPO DoDAAC:

DCAA Auditor DoDAAC:

Other DoDAAC(s):

(*Contracting Officer: Insert applicable DoDAAC information or "See schedule" if multiple ship to/acceptance locations apply, or "Not applicable.")

(4) Payment request and supporting documentation. The Contractor shall ensure a payment request includes appropriate contract line item and subline item descriptions of the work performed or supplies delivered, unit price/cost per unit, fee (if applicable), and all relevant back-up documentation, as defined in DFARS Appendix F, (e.g. timesheets) in support of each payment request.

(5) WAWF email notifications. The Contractor shall enter the email address identified below in the "Send Additional Email Notifications" field of WAWF once a document is submitted in the system.

Mary.e.stone@navy.mil

(Contracting Officer: Insert applicable email addresses or "Not applicable.")

(g) WAWF point of contact. (1) The Contractor may obtain clarification regarding invoicing in WAWF from the following contracting activity's WAWF point of contact. For Navy WAWF questions call DFAS Customer Care 1-800-756-4571 option 6

(2) For technical WAWF help, contact the WAWF helpdesk at 866-618-5988.

Section I - Contract Clauses

CLAUSES INCORPORATED BY REFERENCE

CLAUSES INCORPORATED BY FULL TEXT

52.213-4 TERMS AND CONDITIONS -- SIMPLIFIED ACQUISITIONS (OTHER THAN COMMERCIAL ITEMS) (DEC 2014)

(a) The Contractor shall comply with the following Federal Acquisition Regulation (FAR) clauses that are incorporated by reference:

(1) The clauses listed below implement provisions of law or Executive order:

(i) 52.222-3, Convict Labor (Jun 2003) (E.O. 11755).

(ii) 52.222-21, Prohibition of Segregated Facilities (Feb 1999) (E.O. 11246).

(iii) 52.222-26, Equal Opportunity (Mar 2007) (E.O. 11246).

(iv) 52.222-50, Combating Trafficking in Persons (Feb 2009) (22 U.S.C. 7104(g)).

(v) 52.225-13, Restrictions on Certain Foreign Purchases (Jun 2008) (E.o.s, proclamations, and statutes administered by the Office of Foreign Assets Control of the Department of the Treasury).

(vi) 52.233-3, Protest After Award (Aug 1996) (31 U.S.C. 3553).

(vii) 52.233-4, Applicable Law for Breach of Contract Claim (Oct 2004)(Public Las 108-77 and 108-78(19 U.S.C. 3805 note)).

(2) Listed below are additional clauses that apply:

(i) 52.232-1, Payments (Apr 1984).

(ii) 52.232-8, Discounts for Prompt Payment (Feb 2002).

(iii) 52.232-11, Extras (Apr 1984).

(iv) 52.232-25, Prompt Payment (Jul 2013).

(v) 52.232-39, Unenforceability of Unauthorized Obligations (Jun 2013).

(vi) 52.232-40, Providing Accelerated Payments to Small Business Subcontractors (Dec 2013)

(vii) 52.233-1, Disputes (May 2014).

(viii) 52.244-6, Subcontracts for Commercial Items (July 2014).

(ix) 52.253-1, Computer Generated Forms (Jan 1991).

(b) The Contractor shall comply with the following FAR clauses, incorporated by reference, unless the circumstances do not apply:

(1) The clauses listed below implement provisions of law or Executive order:

(i) 52.204-10, Reporting Executive Compensation and First-Tier Subcontract Awards (Jul 2013)(Pub.L. 109-282)(31 U.S.C. 6101 note)(Applies to contracts valued at $25,000 or more).

(ii) 52.222-19, Child Labor-Cooperation with Authorities and Remedies (Jan 2014)(E.O. 13126). (Applies to contracts for supplies exceeding the micro-purchase threshold.)

(iii) 52.222-20, Contracts for Materials, Supplies, Articles, and Equipment Exceeding $15,000 (May 2014)(41 U.S.C. chapter 65)(Applies to supply contracts over $15,000 in the United States, Puerto Rico, or the U.S. Virgin Islands).

(iv) 52.222-35, Equal Opportunity for Veterans (July 2014) (38 U.S.C. 4212) (Applies to contracts of $100,000 or more).

(v) 52.222-36, Equal Opportunity for Workers with Disabilities (July 2014) (29 U.S.C. 793) (Applies to contracts over $15,000, unless the work is to be performed outside the United States by employees recruited outside the United States.)(For purposes of this clause, United States includes the 50 States, the District of Columbia, Puerto Rico, the Northern Mariana Islands, American Samoa, Guam, the U.S. Virgin Islands, and Wake Island.).

(vi) 52.222-37, Employment Reports on Veterans (July 2014)(38 U.S.C. 4212)(Applies to contracts of $100,000 or more).

(vii) 52.222-41, Service Contract Labor Standards, (May 2014)(41 U.S.C. chapter 67)(Applies to service contracts over $2,500 that are subject to the Service Contract Labor Standards statute and will be performed in the United States, District of Columbia, Puerto Rico, the Northern Mariana Islands, American Samoa, Guam, the U.S. Virgin Islands, Johnston Island, Wake Island, or the outer Continental Shelf).

(viii) 52.223-5, Pollution Prevention and Right-to-Know Information (May 2011)(E.O. 13423) (Applies to services performed on Federal facilities).

(ix) 52.223-15, Energy Efficiency in Energy-Consuming Products (Dec 2007)(42 U.S.C. 8259b)(Unless exempt pursuant to 23.204, applies to contracts when energy-consuming products listed in the ENERGY STAR® Program or Federal Energy Management Program (FEMP) will be--

(A) Delivered;

(B) Acquired by the Contractor for use in performing services at a Federally-controlled facility;

(C) Furnished by the Contractor for use by the Government; or

(D) Specified in the design of a building or work, or incorporated during its construction, renovation, or maintenance.)

(x) 52.225-1, Buy American--Supplies (May 2014)(41 U.S.C. chapter 83)(Applies to contracts for supplies, and to contracts for services involving the furnishing of supplies, for use in the United States or its outlying areas, if the value of the supply contract or supply portion of a service contract exceeds the micro-purchase threshold and the acquisition--

(A) Is set aside for small business concerns; or

(B) Cannot be set aside for small business concerns (see 19.502-2), and does not exceed $25,000.

(xi) 52.226-6, Promoting Excess Food Donation to Nonprofit Organizations (May 2014)(42 U.S.C. 1792)(Applies to contracts greater than $25,000 that provide for the provision, the service, or the sale of food in the United States.)

(xii) 52.232-33, Payment by Electronic Funds Transfer-System for Award Management (Jul 2013). (Applies when the payment will be made by electronic funds transfer (EFT) and the payment office uses the System for Award Management (SAM) database as its source of EFT information.).

(xiii) 52.232-34, Payment by Electronic Funds Transfer-Other than System for Award Management (Jul 2013). (Applies when the payment will be made by EFT and the payment office does not use the SAM database as its source of EFT information.).

(xiv) 52.247-64 Preference for Privately Owned U.S.-Flag Commercial Vessels (Feb 2006) (46 U.S.C. Appx 1241). Applies to supplies transported by ocean vessels (except for the types of subcontracts listed at 47.504(d).).

(xv) 52.222-55, Minimum Wages Under Executive Order 13658 (Dec 2014)(Executive Order 13658)(Applies when 52.222-6 or 52.222-41 are in the contract and performance in whole or in part is in the United States (the 50 States and the District of Columbia.)

(2) Listed below are additional clauses that may apply:

(i) 52.209-6, Protecting the Government's Interest When Subcontracting with Contractors Debarred, Suspended, or Proposed for Debarment (Aug 2013)(Applies to contracts over $30,000).

(ii) 52.211-17, Delivery of Excess Quantities (Sep 1989)(Applies to fixed-price supplies).

(iii) 52.247-29, F.o.b. Origin (Feb 2006) (Applies to supplies if delivery is f.o.b. origin).

(iv) 52.247-34, F.o.b. Destination (Nov 1991) (Applies to supplies if delivery is f.o.b. destination).

(c) FAR 52.252-2, Clauses Incorporated by Reference (Feb 1998). This contract incorporates one or more clauses by reference, with the same force and effect as if they were given in full text. Upon request, the Contracting Officer will make their full text available. Also, the full text of a clause may be accessed electronically at this/these address(es): http://farsite.hill.af.mil.

(d) Inspection/Acceptance. The Contractor shall tender for acceptance only those items that conform to the requirements of this contract. The Government reserves the right to inspect or test any supplies or services that have been tendered for acceptance. The Government may require repair or replacement of nonconforming supplies or reperformance of nonconforming services at no increase in contract price. The Government must exercise its postacceptance rights --

(1) Within a reasonable period of time after the defect was discovered or should have been discovered; and

(2) Before any substantial change occurs in the condition of the item, unless the change is due to the defect in the item.

(e) Excusable delays. The Contractor shall be liable for default unless nonperformance is caused by an occurrence beyond the reasonable control of the Contractor and without its fault or negligence, such as acts of God or the public enemy, acts of the Government in either its sovereign or contractual capacity, fires, floods, epidemics, quarantine restrictions, strikes, unusually severe weather, and delays of common carriers. The Contractor shall notify the Contracting Officer in writing as soon as it is reasonably possible after the commencement of any excusable delay, setting forth the full particulars in connection therewith, shall remedy such occurrence with all reasonable dispatch, and shall promptly give written notice to the Contracting Officer of the cessation of such occurrence.

(f) Termination for the Government's convenience. The Government reserves the right to terminate this contract, or any part hereof, for its sole convenience. In the event of such termination, the Contractor shall immediately stop all work hereunder and shall immediately cause any and all of its suppliers and subcontractors to cease work. Subject to the terms of this contract, the Contractor shall be paid a percentage of the contract price reflecting the percentage of the work performed prior to the notice of termination, plus reasonable charges that the Contractor can demonstrate to the satisfaction of the Government, using its standard record keeping system, have resulted from the termination. The Contractor shall not be required to comply with the cost accounting standards or contract cost principles for this purpose. This paragraph does not give the Government any right to audit the Contractor's records. The Contractor shall not be paid for any work performed or costs incurred that reasonably could have been avoided.

(g) Termination for cause. The Government may terminate this contract, or any part hereof, for cause in the event of any default by the Contractor, or if the Contractor fails to comply with any contract terms and conditions, or fails to provide the Government, upon request, with adequate assurances of future performance. In the event of termination for cause, the Government shall not be liable to the Contractor for any amount for supplies or services not accepted, and the Contractor shall be liable to the Government for any and all rights and remedies provided by law. If it is determined that the Government improperly terminated this contract for default, such termination shall be deemed a termination for convenience.

(h) Warranty. The Contractor warrants and implies that the items delivered hereunder are merchantable and fit for use for the particular purpose described in this contract.

52.252-2

CLAUSES INCORPORATED BY REFERENCE (FEB 1998)

This contract incorporates one or more clauses by reference, with the same force and effect as if they were given in full text. Upon request, the Contracting Officer will make their full text available. Also, the full text of a clause may be accessed electronically at this/these address(es): https://www.acquisition.gov/far/ or http://farsite.hill.af.mil.

252.204-7000

DISCLOSURE OF INFORMATION (AUG 2013)

(a) The Contractor shall not release to anyone outside the Contractor's organization any unclassified information, regardless of medium (e.g., film, tape, document), pertaining to any part of this contract or any program related to this contract, unless--

(1) The Contracting Officer has given prior written approval;

(2) The information is otherwise in the public domain before the date of release; or

(3) The information results from or arises during the performance of a project that has been scoped and negotiated by the contracting activity with the Contractor and research performer and determined in writing by the Contracting Officer to be fundamental research in accordance with National Security Decision Directive 189, National Policy on the Transfer of Scientific, Technical and Engineering Information, in effect on the date of contract award and the USD (AT&L) memoranda on Fundamental Research, dated May 24, 2010, and on Contracted Fundamental Research, dated June 26, 2008, (available at DFARS PGI 204.4).

(b) Requests for approval under paragraph (a)(1) shall identify the specific information to be released, the medium to be used, and the purpose for the release. The Contractor shall submit its request to the Contracting Officer at least 10 business days before the proposed date for release.

(c) The Contractor agrees to include a similar requirement, including this paragraph(c), in each subcontract under this contract. Subcontractors shall submit requests for authorization to release through the prime contractor to the Contracting Officer.

252.204-7012

SAFEGUARDING OF UNCLASSIFIED CONTROLLED TECHNICAL INFORMATION (NOV 2013)

(a) Definitions. As used in this clause --

"Adequate security" means protective measures that are commensurate with the consequences and probability of loss, misuse, or unauthorized access to, or modification of information.

"Attribution information" means information that identifies the Contractor, whether directly or indirectly, by the grouping of information that can be traced back to the Contractor (e.g., program description or facility locations).

"Compromise" means disclosure of information to unauthorized persons, or a violation of the security policy of a system, in which unauthorized intentional or unintentional disclosure, modification, destruction, or loss of an object, or the copying of information to unauthorized media may have occurred.

"Contractor information system" means an information system belonging to, or operated by or for, the Contractor.

"Controlled technical information" means technical information with military or space application that is subject to controls on the access, use, reproduction, modification, performance, display, release, disclosure, or dissemination. Controlled technical information is to be marked with one of the distribution statements B-through-F, in accordance with DoD Instruction 5230.24, Distribution Statements on Technical Documents. The term does not include information that is lawfully publicly available without restrictions.

"Cyber incident" means actions taken through the use of computer networks that result in an actual or potentially adverse effect on an information system and/or the information residing therein.

"Exfiltration" means any unauthorized release of data from within an information system. This includes copying the data through covert network channels or the copying of data to unauthorized media. "Media" means physical devices or writing surfaces including, but is not limited to, magnetic tapes, optical disks, magnetic disks, large-scale integration memory chips, and printouts onto which information is recorded, stored, or printed within any information system.

"Technical information" means technical data or computer software, as those terms are defined in the clause at DFARS 252.227-7013, Rights in Technical Data - Non Commercial Items, regardless of whether or not the clause is incorporated in this solicitation or contract. Examples of technical information include research and engineering data, engineering drawings, and associated lists, specifications, standards, process sheets, manuals, technical reports, technical orders, catalog-item identifications, data sets, studies and analyses and related information, and computer software executable code and source code.

(b) Safeguarding requirements and procedures for unclassified controlled technical information. The Contractor shall provide adequate security to safeguard unclassified controlled technical information from compromise. To provide adequate security, the Contractor shall-

(1) Implement information systems security in its project, enterprise, or company-wide unclassified information technology system(s) that may have unclassified controlled technical information resident on or transiting through them. The information systems security program shall implement, at a minimum-

(i) The specified National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53 security controls identified in the following table; or

(ii) If a NIST control is not implemented, the Contractor shall submit to the Contracting Officer a written explanation of how -

(A) The required security control identified in the following table is not applicable; or

(B) An alternative control or protective measure is used to achieve equivalent protection.

(2) Apply other information systems security requirements when the Contractor reasonably determines that information system security measures, in addition to those identified in paragraph (b)(1) of this clause, may be required to provide adequate security in a dynamic environment based on an assessed risk or vulnerability.

Table 1 -- Minimum Security Controls for Safeguarding

Minimum required security controls for unclassified controlled technical information requiring safeguarding in accordance with paragraph (d) of this clause. (A description of the security controls is in the NIST SP 800-53, "Security and Privacy Controls for Federal Information Systems and Organizations" (http://csrc.nist.gov/publications/PubsSPs.html).)

SC-7

AC-17(2)

SC-28

SI-2

Legend:

AC: Access Control MA: Maintenance

AT: Awareness and Training MP: Media Protection

AU: Auditing and Accountability PE: Physical & Environmental Protection

CM: Configuration Management PM: Program Management

CP: Contingency Planning RA: Risk Assessment

IA: Identification and Authentication SC: System & Communications Protection

IR: Incident Response SI: System & Information Integrity

(c) Other requirements. This clause does not relieve the Contractor of the requirements specified by applicable statutes or other Federal and DoD safeguarding requirements for Controlled Unclassified Information (CUI) as established by Executive Order 13556, as well as regulations and guidance established pursuant thereto.

(d) Cyber incident and compromise reporting.

(1) Reporting requirement. The Contractor shall report as much of the following information as can be obtained to the Department of Defense via (http://dibnet.dod.mil//) within 72 hours of discovery of any cyber incident, as described in paragraph (d)(2) of this clause, that affects unclassified controlled technical information resident on or transiting through the Contractor's unclassified information systems:

(i) Data Universal Numbering System (DUNS).

(ii) Contract numbers affected unless all contracts by the company are affected.

(iii) Facility CAGE code if the location of the event is different than the prime Contractor location.

(iv) Point of contact if different than the POC recorded in the System for Award Management (address, position, telephone, email).

(v) Contracting Officer point of contact (address, position, telephone, email).

(vi) Contract clearance level.

(vii) Name of subcontractor and CAGE code if this was an incident on a Sub-contractor network.

(viii) DoD programs, platforms or systems involved.

(ix) Location(s) of compromise.

(x) Date incident discovered.

(xi) Type of compromise (e.g., unauthorized access, inadvertent release, other).

(xii) Description of technical information compromised.

(xiii) Any additional information relevant to the information compromise.

(2) Reportable cyber incidents. Reportable cyber incidents include the following:

(i) A cyber incident involving possible exfiltration, manipulation, or other loss or compromise of any unclassified controlled technical information resident on or transiting through Contractor's, or it subcontractors', unclassified information systems.

(ii) Any other activities not included in paragraph (d)(2)(i) of this clause that allow unauthorized access to the Contractor's unclassified information system on which unclassified controlled technical information is resident on or transiting.

(3) Other reporting requirements. This reporting in no way abrogates the Contractor's responsibility for additional safeguarding any cyber incident reporting requirements pertaining to its unclassified information systems under other clauses that may apply to its contract, or as a result of other U.S. Government legislative and regulatory requirements that may apply (e.g., as cited in paragraph (c) of this clause).

(4) Contractor actions to support DoD damage assessment. In response to the reported cyber incident, the Contractor shall --

(i) Conduct further review of its unclassified network for evidence of compromise resulting from a cyber incident to include, but is not limited to, identifying compromised computers, servers, specific data and users accounts. This includes analyzing information systems that were part of the compromise, as well as other information systems on the network that were accessed as a result of the compromise.

(ii) Review the data accessed during the cyber incident to identify specific unclassified controlled technical information associated with DoD programs, systems or contracts, including military programs, systems and technology; and

(iii) Preserve and protect images of known affected information systems and all relevant monitoring/packet capture data for at least 90 days from the cyber incident to allow DoD to request information or decline interest.

(5) DoD damage assessment activities. If DoD elects to conduct a damage assessment, the Contracting Officer will request that the Contractor point of contact identified in the incident report at (d)(1) of this clause provide all of the damage assessment information gathered in accordance with paragraph (d)(4) of this clause. The Contractor shall comply with damage assessment information requests. The requirement to share files and images exists unless there are legal restrictions that limit a company's ability to share digital media. The Contractor shall inform the Contracting Officer of the source, nature, and prescription of such limitations and the authority responsible.

(e) Protection of reported information. Except to the extent that such information is lawfully publicly available without restrictions, the Government will protect information reported or otherwise provided to DoD under this clause in accordance with applicable statutes, regulations, and policies. The Contractor shall identify and mark attribution information reported or otherwise provided to the DoD. The Government may use information, including attribution information and disclose it only to authorized persons for purposes and activities consistent with this clause.

(f) Nothing in this clause limits the Government's ability to conduct law enforcement or counterintelligence activities, or other lawful activities in the interest of homeland security and national security. The results of the activities described in this clause may be used to support an investigation and prosecution of any person or entity, including those attempting to infiltrate or compromise information on a contractor information system in violation of any statute.

(g) Subcontracts. The Contractor shall include the substance of this clause, including this paragraph (g), in all subcontracts, including subcontracts for commercial items.