RFP N02PC25010-N3.pdf

- 1 -

SOLICITATION

SECTION A - SOLICITATION/CONTRACT FORM

1. Requisition or other Purchase Authority: Public Law 92-218 as amended

2. Request for Proposal (RFP) Number:

N02PC25010-N3

3. Issue Date:

August 17, 2012

4. Set Aside:

[ ] No

[X] Yes See Part IV Section L

5. Title : Technical and Logistical Support for Cancer Surveillance

6. ISSUED BY:

Office of Acquisitions National Cancer Institute National Institutes of Health Executive Plaza South, Room 6004 6120 Executive Blvd., MSC 7195 Bethesda, MD 20892-7195

7. SUBMIT OFFERS TO:

See Part III, Section J, "Packaging and Delivery of the Proposal," ATTACHMENT 1 of this Solicitation.

8. Proposals for furnishing the supplies and/or services in THE SCHEDULE will be received at the place specified in, and in the number of copies specified in Attachment 1, "Packaging and Delivery of the Proposal," until 2:00PM local time on September 19, 2012. Offers will be valid for 120 days unless a different period is specified by the offeror on the Attachment entitled, "Proposal Summary and Data Record, NIH 2043.

9. This solicitation requires delivery of proposals as stated in ATTACHMENT 1, "PACKAGING AND DELIVERY OF THE PROPOSAL." If proposals are required to be delivered to two different locations, the OFFICIAL POINT OF RECEIPT for determining TIMELY DELIVERY is the address provided for the OFFICE OF ACQUISITIONS.

IF YOUR PROPOSAL IS NOT RECEIVED BY THE CONTRACTING OFFICER OR HIS DESIGNEE AT THE PLACE AND TIME SPECIFIED FOR THE OFFICE OF ACQUISITIONS, THEN IT WILL BE CONSIDERED LATE AND HANDLED IN ACCORDANCE WITH subparagraph (c)(3) of FAR Clause 52.215-1, Instructions to Offerors--Competitive Acquisition," LOCATED IN SECTION L.1. OF THIS SOLICITATION.

10. Offeror must be registered in the Central Contractor Registry (CCR) prior to award of a contract. http:// www.ccr.gov

11. FOR INFORMATION CALL: Johnny Mack

PHONE: 301-435-3780

e-MAIL: mackj@mail.nih.gov

COLLECT CALLS WILL NOT BE ACCEPTED.

Jill Johnson Contracting Officer Office of Acquisitions National Cancer Institute http://www.ccr.gov http://www.ccr.gov

RFP Number : N02PC25010-N3

- 2 -

RFP TABLE OF CONTENTS

PART I - THE SCHEDULE

SECTION A - SOLICITATION/CONTRACT FORM

SECTION B - SUPPLIES OR SERVICES AND PRICES/COSTS

SECTION C - DESCRIPTION/SPECIFICATIONS/WORK STATEMENT

SECTION D - PACKAGING, MARKING AND SHIPPING

SECTION E - INSPECTION AND ACCEPTANCE

SECTION F - DELIVERIES OR PERFORMANCE

SECTION G - CONTRACT ADMINISTRATION DATA

SECTION H - SPECIAL CONTRACT REQUIREMENTS

PART II - CONTRACT CLAUSES

PART III - LIST OF DOCUMENTS, EXHIBITS AND OTHER ATTACHMENTS

SECTION J - LIST OF ATTACHMENTS

SOLICITATION ATTACHMENTS

TECHNICAL PROPOSAL ATTACHMENTS

BUSINESS PROPOSAL ATTACHMENTS

INFORMATIONAL ATTACHMENTS

PART IV - REPRESENTATIONS AND INSTRUCTIONS

SECTION K - REPRESENTATIONS, CERTIFICATIONS AND OTHER STATEMENTS OF OFFERORS

SECTION L - INSTRUCTIONS, CONDITIONS, AND NOTICES TO OFFERORS

1. GENERAL INFORMATION

a. INSTRUCTIONS TO OFFERORS--COMPETITIVE ACQUISITION

b. NOTICE OF SMALL BUSINESS SET-ASIDE

c. NAICS CODE AND SIZE STANDARD

d. TYPE OF CONTRACT AND NUMBER OF AWARDS

e. ESTIMATE OF EFFORT

f. COMMITMENT OF PUBLIC FUNDS

g. COMMUNICATIONS PRIOR TO CONTRACT AWARD

h. RELEASE OF INFORMATION

i. PREPARATION COSTS

j. SERVICE OF PROTEST

2. INSTRUCTIONS TO OFFERORS

GENERAL INSTRUCTIONS

1. Contract Type and General Clauses

2. Authorized Official and Submission of Proposal

3. Proposal Summary and Data Record (NIH-2043)

4. Separation of Technical and Business Proposals

5. Alternate Proposals

6. Evaluation of Proposals

7. Potential Award Without Discussions

8. Use of the Metric System of Measurement

9. Privacy Act - Treatment of Proposal Information

10. Selection of Offerors

- 3 -

11. Past Performance Information

12. Solicitation Provisions Incorporated by Reference

TECHNICAL PROPOSAL INSTRUCTIONS

1. Technical Discussions

2. Other Considerations

3. Technical Evaluation

4. Obtaining and Disseminating Biomedical Research Resources

5. Information and Physical Access Security

6. Electronic and Information Technology Accessibility, HHSAR 352.239-73(a)

BUSINESS PROPOSAL INSTRUCTIONS

1. Basic Cost/Price Information

2. Proposal Cover Sheet

3. Information Other than Cost or Pricing Data

4. Requirements for Cost or Pricing Data or Information Other than Cost and Pricing Data

5. Total Compensation Plan

6. Other Administrative Data

7. Qualifications of the Offeror

8. Subcontractors

9. Proposer's Annual Financial Report

10. Travel Costs/Travel Policy

SECTION M - EVALUATION FACTORS FOR AWARD

1. GENERAL

2. COST/PRICE EVALUATION

3. EVALUATION OF OPTIONS

4. EVALUATION OF DATA SHARING PLAN

5. TECHNICAL EVALUATION CRITERIA

6. EVALUATION OF ELECTRONIC AND INFORMATION TECHNOLOGY ACCESSIBILITY- SECTION

7. PAST PERFORMANCE FACTOR

- 4 -

PART I - THE SCHEDULE

THE INFORMATION SET FORTH IN SECTION A - SOLICITATION/CONTRACT FORM, HEREIN CONTAINS IMPORTANT INFORMATION FOR ANY OFFEROR INTERESTED IN RESPONDING TO THIS SOLICITATION.

ANY CONTRACT RESULTING FROM THIS SOLICITATION WILL INCLUDE IN ITS SECTION A - SOLICITATION/ CONTRACT FORM, ACCOUNTING, APPROPRIATION AND GENERAL INFORMATION APPLICABLE TO THE

CONTRACT AWARD.

THE CONTRACT SCHEDULE SET FORTH IN SECTIONS B THROUGH H, HEREIN, CONTAINS CONTRACTUAL INFORMATION PERTINENT TO THIS SOLICITATION. IT IS NOT AN EXACT REPRESENTATION OF THE CONTRACT DOCUMENT THAT WILL BE AWARDED AS A RESULT OF THIS SOLICITATION. THE CONTRACT COST OR PRICE AND OTHER CONTRACTUAL PROVISIONS PERTINENT TO THE OFFEROR (i.e., those relating to the organizational structure [e.g., Non-Profit, Commercial] and specific cost authorizations unique to the Offeror's proposal and requiring Contracting Officer Prior Approval) WILL BE DISCUSSED IN THE NEGOTIATION PROCESS AND WILL BE INCLUDED IN THE RESULTANT CONTRACT. THE ENCLOSED CONTRACT SCHEDULE IS

INTENDED TO PROVIDE THE OFFEROR WITH THE NECESSARY INFORMATION TO UNDERSTAND THE

TERMS AND CONDITIONS OF THE RESULTANT CONTRACT.

SECTION B - SUPPLIES OR SERVICES AND PRICES/COSTS

ARTICLE B.1. BRIEF DESCRIPTION OF SUPPLIES OR SERVICES

The Contractor shall work with the National Cancer Institute (NCI), Division of Cancer Control and Population Sciences (DCCPS), providing technical and logistical support to facilitate collaborative efforts in cancer surveillance, including cancer simulation modeling using a multi-cohort approach, flexible broad-based natural history models of cancer, and comparative modeling managed through a web-based knowledge management system with adaptable data structures.

ARTICLE B.2. PRICES

a. The total fixed price of this contract is $ .

b. Upon delivery and acceptance of the services described in SECTION C of this contract and identified in the schedule of charges below, the Government shall pay to the Contractor the unit price(s) set forth below:

SCHEDULE OF CHARGES FOR THE BASIC AWARD PERIOD

Description of Service Quantity (Units)

Price ($) Unit Price($) Total ($)

c. Payments will be made from the following PRISM/NBS Line Items as follows:

PRISM/NBS

Line Item No. Line Item Description

PRISM/NBS Line Item Period of Performance Funded Amount

- 5 -

ARTICLE B.3. OPTION PRICES

a. Unless the Government exercises its option pursuant to the option clause referenced in ARTICLE I.3.

ADDITIONAL CONTRACT CLAUSES, this contract consists only of the Base Period specified in the Statement of Work as defined in SECTIONS C and F, for the price set forth in ARTICLE B.2. of this contract.

b. Pursuant to FAR Clause 52.217-8 , Option to Extend Services, set forth in ARTICLE I.3. ADDITIONAL CONTRACT CLAUSES of this contract, the Government may, by unilateral contract modification, require the Contractor to perform the Option Periods specified in the Statement of Work as defined in SECTIONS C and F of this contract. If the Government exercises this/these options, notice must be given before the expiration date of the contract. Specific information regarding the time frame for this notice is set forth in the OPTION PROVISION Article in SECTION H of this contract. The fixed price of this contract will be increased as set forth in paragraph c., below.

c. Upon the delivery and acceptance of the Option Item described in SECTION C of the contract and identified in the schedule of charges below, the Government shall pay the Contractor the unit price(s) set forth below:

Option Period Description of Option Item(s) -or- Option Service(s)

Quantity (Units) -or- Minimum & Maximum

Unit Price Total Price of Option -or- Minimum & Maximum

d. Payments will be made from the following PRISM/NBS Line Items as follows:

PRISM/NBS

Line Item No.

Option/Increment Description

PRISM/NBS Line Item Period of Performance Funded Amount

ARTICLE B.4. PROVISIONS APPLICABLE TO DIRECT COSTS

This article will prohibit or restrict the use of contract funds, unless otherwise approved by the Contracting Officer. The following is a list of items that may be included in the resultant contract as applicable. 1) Conferences & Meetings, 2) Food for Meals, Light Refreshments & Beverages, 3) Promotional Items, 4) Acquisition, by purchase or lease, of any interest in real property; 5) Special rearrangement or alteration of facilities; 6) Purchase or lease of any item of general purpose office furniture or office equipment regardless of dollar value; 7) Travel Costs including Foreign Travel; 8) Consultant Costs; 9) Subcontract Costs; 10) Patient Care Costs; 11) Accountable Government Property; 12) Printing costs; and 13) Research Funding.

ARTICLE B.5. ADVANCE UNDERSTANDINGS

Specific elements of cost, which normally require prior written approval of the Contracting Officer before incurrence of the cost (e.g., foreign travel, consultant fees, subcontracts) will be included in this Article if the Contracting Officer has granted his/her approval prior to contract award.

- 6 -

SECTION C - DESCRIPTION/SPECIFICATIONS/WORK STATEMENT

ARTICLE C.1. STATEMENT OF WORK

a. Independently and not as an agent of the Government, the Contractor shall be required to furnish all the necessary services, qualified personnel, material, equipment, and facilities, not otherwise provided by the Government, as needed to perform the Statement of Work, dated May 30, 2012, attached hereto and made a part of this Solicitation (See SECTION J - List of Attachments).

ARTICLE C.2. REPORTING REQUIREMENTS

All reports required herein shall be submitted in electronic format. In addition, one hardcopy of each report shall be submitted to the Contracting Officer.

All electronic reports submitted shall be compliant with Section 508 of the Rehabilitation Act of 1973. Additional information about testing documents for Section 508 compliance, including specific checklists, by application, can be found at: http://www.hhs.gov/web/508/index.html under "Helpful Resources."

All paper/hardcopy documents/reports submitted under this contract shall be printed or copied, double-sided, on at least 30 percent post consumer fiber paper, whenever practicable, in accordance with FAR 4.302(b).

a. Technical Progress Reports

1. Transition Plans

a. Transition-In Plan

A final version of the draft Transition-In Plan submitted as part of the Offeror's proposal, shall be due to the Contracting Officer (CO) and the Contracting Officer's Representative (COR) within seven

(7) calendar days of contract award. The finalized Transition-In Plan shall include a detailed plan of how the Contractor will coordinate and implement an orderly, secure, and efficient transition of all activities, materials, data, and other documents from the incumbent contractor.

b. Transition-Out Plan

Six (6) months prior to the expiration date of the contract, the Contractor shall submit a draft Transition-Out Plan which shall include the plan for transfer of all contract materials, files, documents, newly developed programs, source and object codes, system documentation, working papers, and all related information gathered or developed during the contract period of performance. Within 30 calendar days of receipt of comments from the Government regarding the draft Transition-Out Plan, the Contractor shall submit a Final Transition-Out Plan.

2. Bi-Monthly Progress Report (every 2 months)

The Contractor shall provide technical bi-monthly progress reports. These reports shall include a summary of the progress in the Statement of Work items 1-8, including a description of work on each cancer surveillance project within each item. The report shall also include a description of any new features added to the Knowledge Management System, Project Profiler, Project Registration System and Model Interfaces.

The following format shall be used for each report:

1) A cover page containing the title of each of the Statement of Work items 1-8.

2) Narrative which states each Statement of Work item (1-8), along with the following for each item:

http://www.hhs.gov/web/508/index.html

- 7 -

a. Summary of progress/accomplishmentsduring this reporting period;

b. New features/updates on all systems during this reporting period;

Each Bi -Monthly Progress Report shall include a report of Vulnerability Scanning on all systems being used for this contract. Each reporting period shall consist of two (2) calendar months. An electronic copy of the report shall be delivered to the Contracting Officer's Representative (COR) and Contracting Officer within 15 calendar days of the end of each reporting period. The Bi-Monthly Progress Report is not required for the period that the Final Report is due.

3. Final Report

The Contractor shall provide a Final Report that includes a complete description of the final system including database schema, input and output interfaces and described models. The Contractor shall include all source code and object code for use of the Knowledge Management System, Project Profiler, Project Registration System, Model Interfaces, and any other code developed under this contract. The Contractor shall submit an electronic copy and a hard copy of the Final Report to the COR and the Contracting Officer.

b. Other Reports/Deliverables

1. Source Code and Object Code

Unless otherwise specified herein, the Contractor shall deliver to the Government, upon the expiration date of the contract, all source code and object code developed, modified, and/or enhanced under this contract.

2. Information Security and Physical Access Reporting Requirements

The Contractor shall submit the following reports as required by the INFORMATION AND PHYSICAL ACCESS SECURITY Article in SECTION H of this contract. Note: Each report listed below includes a reference to the appropriate subparagraph of this article.

a. Roster of Employees Requiring Suitability Investigations

The Contractor shall submit a roster, by name, position, e-mail address, phone number and responsibility, of all staff (including subcontractor staff) working under the contract who will develop, have the ability to access, or host and/or maintain a Federal information system(s). The roster shall be submitted to the Contracting Officer's Representative (COR), with a copy to the Contracting Officer, within 14 calendar days of the effective date of the contract. (Reference subparagraph A.d. of the INFORMATION AND PHYSICAL ACCESS SECURITY Article in SECTION H of this contract.)

b. IT Security Plan (IT-SP)

In accordance with HHSAR Clause 352.239-72, Security Requirements For Federal Information Technology Resources, the contractor shall submit the IT-SP within thirty

(30) days after contract award. The IT-SP shall be consistent with, and further detail the approach to, IT security contained in the Contractor's bid or proposal that resulted in the award of this contract. The IT-SP shall describe the processes and procedures that the Contractor will follow to ensure appropriate security of IT resources that are developed, processed, or used under this contract. If the IT-SP only applies to a portion

- 8 -of the contract, the Contractor shall specify those parts of the contract to which the IT-SP applies.

The Contractor shall review and update the IT-SP in accordance with NIST SP 800-53A, Guide for Assessing the Security Controls in Federal Information Systems and Organizations, on an annual basis.

(Reference subparagraph D.c.1. of the INFORMATION AND PHYSICAL ACCESS SECURITY Article in SECTION H of this contract.)

c. IT Risk Assessment (IT-RA)

In accordance with HHSAR Clause 352.239-72, Security Requirements For Federal Information Technology Resources, the contractor shall submit the IT-RA within thirty

(30) days after contract award. The IT-RA shall be consistent, in form and content, with NIST SP 800-30, Risk Management Guide for Information Technology Systems, and any additions or augmentations described in the HHS-OCIO Information Systems Security and Privacy Policy.

The Contractor shall update the IT-RA on an annual basis.

(Reference subparagraph D.c.2. of the INFORMATION AND PHYSICAL ACCESS SECURITY Article in SECTION H of this contract.)

d. FIPS 199 Assessment

In accordance with HHSAR Clause 352.239-72, Security Requirements For Federal Information Technology Resources, the Contractor shall submit a FIPS 199 Assessment within thirty (30) days after contract award. The FIPS 199 Assessment shall be consistent with the cited NIST standard.

(Reference subparagraph D.c.3. of the INFORMATION AND PHYSICAL ACCESS SECURITY Article in SECITON H of this contract.

e. IT Security Certification and Accreditation (IT-SC&A)

In accordance with HHSAR Clause 352.239-72, Security Requirements For Federal Information Technology Resources, the Contractor shall submit written proof to the Contracting Officer that an IT-SC&A was performed within three (3) months after contract award.

The Contractor shall perform an annual security control assessment and provide to the Contracting Officer verification that the IT-SC&A remains valid.

(Reference subparagraph D.c.4. of the INFORMATION AND PHYSICAL ACCESS SECURITY Article in SECTION H of this contract.)

f. Reporting of New and Departing Employees

The Contractor shall notify the Contracting Officer's Representative (COR) and Contracting Officer within five working days of staffing changes for positions that require suitability determinations as follows:

a. New Employees who have or will have access to HHS Information systems or data: Provide the name, position title, e-mail address, and phone number of the new employee. Provide the name, position title and suitability level held by the former

- 9 -incumbent. If the employee is filling a new position, provide a description of the position and the Government will determine the appropriate security level.

b. Departing Employees: 1) Provide the name, position title, and security clearance level held by or pending for the individual; and 2) Perform and document the actions identified in the "Employee Separation Checklist", attached in Section J, ATTACHMENTS of this contract, when a Contractor/Subcontractor employee terminates work under this contract. All documentation shall be made available to the COR and/or Contracting Officer upon request.

(Reference subparagraph E.2.a-c. of the INFORMATION AND PHYSICAL ACCESS SECURITY Article in SECTION H of this contract.)

g. Contractor - Employee Non-Disclosure Agreement(s)

The contractor shall complete and submit a signed and witnessed "Commitment to Protect Non-Public Information - Contractor Agreement" form for each contractor and subcontractor employee who may have access to non-public Department information under this contract. This form is located at: http://ocio.nih.gov/docs/public/ Nondisclosure.pdf.

(Reference subparagraph E.3.d. of the INFORMATION AND PHYSICAL ACCESS SECURITY Article in SECTION H of this contract.)

h. Vulnerability Scanning Reports

The Contractor shall report the results of the required monthly special vulnerability scans no later than 10 days following the end of each reporting period. If required monthly, this report may be included as part of the Technical Progress Report. Otherwise, this report shall be submitted under separate cover on a monthly basis.

(Reference subparagraph E.5. of the INFORMATION AND PHYSICAL ACCESS SECURITY Article in SECTION H of this contract.)

3. Section 508 Annual Report

The contractor shall submit an annual Section 508 report in accordance with the schedule set forth in the ELECTRONIC AND INFORMATION TECHNOLOGY ACCESSIBILITY Article in SECTION H of this contract. The Section 508 Report Template and Instructions for completing the report are available at: http://www.hhs.gov/od under "Vendor Information and Documents."

http://ocio.nih.gov/docs/public/Nondisclosure.pdf http://ocio.nih.gov/docs/public/Nondisclosure.pdf http://www.hhs.gov/od

- 10 -

SECTION D - PACKAGING, MARKING AND SHIPPING

All deliverables required under this contract shall be packaged, marked and shipped in accordance with Government specifications. At a minimum, all deliverables shall be marked with the contract number and Contractor name. The Contractor shall guarantee that all required materials shall be delivered in immediate usable and acceptable condition.

- 11 -

SECTION E - INSPECTION AND ACCEPTANCE

a. The Contracting Officer or the duly authorized representative will perform inspection and acceptance of materials and services to be provided.

b. For the purpose of this SECTION, the Contracting Officer's Representative (COR) is the authorized representative of the Contracting Officer.

c. Inspection and acceptance will be performed at:

National Cancer Institute 6116 Executive Blvd. Room 5041 Rockville, MD 20892

Acceptance may be presumed unless otherwise indicated in writing by the Contracting Officer or the duly authorized representative within 30 days of receipt.

d. This contract incorporates the following clause by reference, with the same force and effect as if it were given in full text. Upon request, the Contracting Officer will make its full text available.

FAR Clause 52.246-4, Inspection of Services - Fixed Price (August 1996).

- 12 -

SECTION F - DELIVERIES OR PERFORMANCE

ARTICLE F.1. PERIOD OF PERFORMANCE

a. The period of performance of this contract shall be from 01/01/2013 through 12/31/2017.

b. If the Government exercises its option(s) pursuant to the OPTION PROVISION Article in Section H of this contract, the period of performance will be increased as listed below:

Option Option Period Year 1

01/01/2017-12/31/2018

Year 2

01/01/2018-12/31/2019

Year 3

01/01/2019-12/31/20120

ARTICLE F.2. DELIVERIES

Satisfactory performance of the final contract shall be deemed to occur upon performance of the work described in the Statement of Work Article in SECTION C of this contract and upon delivery and acceptance by the Contracting Officer, or the duly authorized representative, of the following items in accordance with the stated delivery schedule:

a. The items specified below as described in the REPORTING REQUIREMENTS Article in SECTION C of this contract will be required to be delivered F.o.b. Destination as set forth in FAR 52.247-35, F.o.b. DESTINATION, WITHIN CONSIGNEES PREMISES (APRIL 1984), and in accordance with and by the date(s) specified below [and any specifications stated in SECTION D, PACKAGING, MARKING AND SHIPPING, of this contract]:

Item No.

Deliverable Quantity Due Date

1. Final Transition-In Plan One (1) electronic copy to Contracting Officer (CO) and Contracting Officer's Representative (COR)

Within 7 calendar days after contract award

2. Bi-Monthly Progress Report One (1) electronic copy to CO and COR

Within 15 calendar days after each two month reporting period

3.

Cross-Project Synthesis Presentations One (1) electronic copy to

COR

As directed by the COR

4.

IT Security Plan (IT-SP) One (1) electronic copy to CO and COR

Within 30 calendar days after contract award

5.

IT Risk Assessment (IT-RA) One (1) electronic copy to CO Within 30 calendar days after

6.

FIPS 199 Standards Assessment (FIPS 199 Assessment)

One (1) electronic copy to CO Within 30 calendar days after

7.

IT Security Certification and Accreditation (IT-SC&A)

One (1) electronic copy to CO Within 3 months after contract award

8.

Reporting of New and Departing Employees

One (1) electronic copy to

COR

Within 5 working days of staffing changes

9.

Contractor-Employee Non-Disclosure Agreements

One (1) electronic copy to

COR

Prior to staff commencing work on contract

10.

Roster of Employees Requiring Suitability Investigations

One (1) electronic copy to CO and COR

Within 14 calendar days of contract start date

- 13 -

Item No.

Deliverable Quantity Due Date

11.

Employee Separation Checklist One (1) electronic copy to

COR

Upon Employee termination of work under the contract

12.

List of Completion of Online Security Awareness Training

One (1) electronic copy to

COR

As requested

13.

Section 508 Annual Report One (1) electronic copy to CO 1 month after the end of each 12 month period

14.

Draft Transition-Out Plan One (1) electronic copy to CO

6 months prior to the contract expiration date

15.

Final Transition-Out Plan One (1) electronic copy to CO

30 calendar days after receipt of COR comments

16.

Final Report - including all source code and object code

One (1) electronic copy and one (1) hard copy to CO and

COR

On or before contract expiration date

- 14 -

b. The above items shall be addressed and delivered to:

Addressee

Deliverable

Item No.

Quantity

Contracting Officer's Representative (COR) [To be named]

Division of Cancer Control and Population Sciences

Statistical Methodology and Applications Branch

National Cancer Institute

6116 Executive Boulevard, Room _____

Bethesda, MD 20892

E-mail address to be provided

1 - 4, 8 - 12, 14 - 16

See quantity for each item above

Contracting Officer (CO) [To be named]

Office of Acquisitions (OA)

National Cancer Institute

Executive Plaza South, Suite 600, Room______

6120 Executive Boulevard, MSC 7195

Bethesda, MD 20892

E-mail address to be provided

1 - 2, 4 - 7, 10, 13 - 16

See quantity for each item above

ARTICLE F.3. CLAUSES INCORPORATED BY REFERENCE, FAR 52.252-2 (FEBRUARY

1998)

This contract incorporates the following clause(s) by reference, with the same force and effect as if it were given in full text. Upon request, the Contracting Officer will make its full text available. Also, the full text of a clause may be accessed electronically at this address: http://www.acquisition.gov/comp/far/index.html

FEDERAL ACQUISITION REGULATION (48 CFR CHAPTER 1) CLAUSE:

52.242-15, Stop Work Order (August 1989) with Alternate I (April 1984).

52.242-17, Government Delay of Work (April 1984).

http://www.acquisition.gov/comp/far/index.html

- 15 -

SECTION G - CONTRACT ADMINISTRATION DATA

ARTICLE G.1. CONTRACTING OFFICER'S REPRESENTATIVE (COR)

The following Contracting Officer's Representative (COR) will represent the Government for the purpose of this contract:

The COR is responsible for: (1) monitoring the Contractor's technical progress, including the surveillance and assessment of performance and recommending to the Contracting Officer changes in requirements; (2) interpreting the statement of work and any other technical performance requirements; (3) performing technical evaluation as required; (4) performing technical inspections and acceptances required by this contract; and (5) assisting in the resolution of technical problems encountered during performance.

The Contracting Officer is the only person with authority to act as agent of the Government under this contract. Only the Contracting Officer has authority to: (1) direct or negotiate any changes in the statement of work; (2) modify or extend the period of performance; (3) change the delivery schedule; (4) authorize reimbursement to the Contractor for any costs incurred during the performance of this contract; or (5) otherwise change any terms and conditions of this contract.

The Government may unilaterally change its COR designation.

ARTICLE G.2. KEY PERSONNEL, HHSAR 352.242-70 (January 2006)

The key personnel specified in this contract are considered to be essential to work performance. At least 30 days prior to diverting any of the specified individuals to other programs or contracts (or as soon as possible, if an individual must be replaced, for example, as a result of leaving the employ of the Contractor), the Contractor shall notify the Contracting Officer and shall submit comprehensive justification for the diversion or replacement request (including proposed substitutions for key personnel) to permit evaluation by the Government of the impact on performance under this contract. The Contractor shall not divert or otherwise replace any key personnel without the written consent of the Contracting Officer. The Government may modify the contract to add or delete key personnel at the request of the Contractor or Government.

(End of Clause)

The following individual(s) is/are considered to be essential to the work being performed hereunder:

Name Title

To be identified TBD

ARTICLE G.3. INVOICE SUBMISSION

a. Invoice Instructions for NIH Fixed-Price Type Contracts, NIH(RC)-2, are attached and made part of this contract.

The Contractor shall follow the attached instructions and submission procedures specified below to meet the requirements of a "proper invoice" pursuant to FAR Subpart 32.9, Prompt Payment.

1. Payment requests shall be submitted to the offices identified below. Do not submit supporting documentation (e.g., receipts, time sheets, vendor invoices, etc.) with your payment request unless specified elsewhere in the contract or requested by the Contracting Officer.

a. The original invoice shall be submitted to the following designated billing office:

- 16 -

National Institutes of Health Office of Financial Management Commercial Accounts 2115 East Jefferson Street, Room 4B-432, MSC 8500 Bethesda, MD 20892-8500

b. One copy of the invoice shall be submitted to the following approving official:

Contracting Officer Office of Acquisitions National Cancer Institute, NIH Executive Plaza South Room 6004

6120 EXECUTIVE BLVD. MSC 7195

BETHESDA, MD 20892- 7195

E-Mail: mackj@mail.nih.gov

The Contractor shall submit an electronic copy of the payment request to the approving official instead of a paper copy. The payment request shall be transmitted as an attachment via e-mail to the address listed above in one of the following formats: MSWord, MS Excel, or Adobe Portable Document Format (PDF). Only one payment request shall be submitted per e-mail and the subject line of the e-mail shall include the Contractor's name, contract number, and unique invoice number.

[Note: The original payment request must still be submitted in hard copy and mailed to the designated billing office to meet the requirements of a "proper invoice."]

2. In addition to the requirements specified in FAR 32.905 for a proper invoice, the Contractor shall include the following information on the face page of all payment requests:

a. Name of the Office of Acquisitions. The Office of Acquisitions for this contract is National Cancer Institute .

b. Central Point of Distribution. For the purpose of this contract, the Central Point of Distribution is NCI OA Branch B - ncibranchbinvoices@mail.nih.gov .

c. Federal Taxpayer Identification Number (TIN). If the Contractor does not have a valid TIN, it shall identify the Vendor Identification Number (VIN) on the payment request. The VIN is the number that appears after the Contractor's name on the face page of the contract. [Note: A VIN is assigned to new contracts awarded on or after June 4, 2007, and any existing contract modified to include the VIN number.] If the Contractor has neither a TIN, DUNS, or VIN, contact the Contracting Officer.

d. DUNS or DUNS+4 Number. The DUNS number must identify the Contractor's name and address exactly as stated in the contract and as registered in the Central Contractor Registration (CCR) database. If the Contractor does not have a valid DUNS number, it shall identify the Vendor Identification Number (VIN) on the payment request. The VIN is the number that appears after the Contractor's name on the face page of the contract. [ Note: A VIN is assigned to new contracts awarded on or after June 4, 2007, and any existing contract modified to include the VIN number.] If the Contractor has neither a TIN, DUNS, or VIN, contact the Contracting Officer.

e. Invoice Matching Option. This contract requires a two-way match.

- 17 -

f. Unique Invoice Number. Each payment request must be identified by a unique invoice number, which can only be used one time regardless of the number of contracts or orders held by an organization.

g. The contract title - Technical and Logistical Support for Cancer Surveillance.

b. Inquiries regarding payment of invoices shall be directed to the designated billing office, (301) 496-6088.

ARTICLE G.4. INDIRECT COST RATES

In accordance with Federal Acquisition Regulation (FAR) (48 CFR Chapter 1) Clause 52.216-7 (d)(2), Allowable Cost and Payment incorporated by reference in this contract in PART II, SECTION I, the cognizant Contracting Officer representative responsible for negotiating provisional and/or final indirect cost rates is identified as follows:

Director, Division of Financial Advisory Services Office of Acquisition Management and Policy National Institutes of Health

6011 EXECUTIVE BLVD, ROOM 549C, MSC-7663

BETHESDA MD 20892-7663

These rates are hereby incorporated without further action of the Contracting Officer.

ARTICLE G.5. GOVERNMENT PROPERTY

If this RFP will result in the acquisition or use of Government Property provided by the contracting agency or if the Contracting Officer authorizes in the preaward negotiation process, the acquisition of property (other than real property), this ARTICLE will include applicable provisions and incorporate the HHS Publication, entitled, "HHS Contracting Guide for Contract of Government Property," which can be found at:

http://www.hhs.gov/hhsmanuals/logisticsmanual/Appendix Q_HHS Contracting Guide.pdf.

ARTICLE G.6. POST AWARD EVALUATION OF CONTRACTOR PERFORMANCE

a. Contractor Performance Evaluations

Interim and final evaluations of Contractor performance will be prepared on this contract in accordance with FAR Subpart 42.15. The final performance evaluation will be prepared at the time of completion of work. In addition to the final evaluation, interim evaluation(s) will be prepared as determined by the Contracting Officer, but at least once during the contract.

Interim and final evaluations will be provided to the Contractor as soon as practicable after completion of the evaluation. The Contractor will be permitted thirty days to review the document and to submit additional information or a rebutting statement. If agreement cannot be reached between the parties, the matter will be referred to an individual one level above the Contracting Officer, whose decision will be final.

Copies of the evaluations, Contractor responses, and review comments, if any, will be retained as part of the contract file, and may be used to support future award decisions.

b. Electronic Access to Contractor Performance Evaluations

Contractors may access evaluations through a secure Web site for review and comment at the following address:

http://www.cpars.gov http://www.hhs.gov/hhsmanuals/logisticsmanual/Appendix%20Q_HHS%20Contracting%20Guide.pdf http://www.cpars.gov

- 18 -

SECTION H - SPECIAL CONTRACT REQUIREMENTS

ARTICLE H.1. HUMAN SUBJECTS

It is hereby understood and agreed that research involving human subjects shall not be conducted under this contract, and that no material developed, modified, or delivered by or to the Government under this contract, or any subsequent modification of such material, will be used by the Contractor or made available by the Contractor for use by anyone other than the Government, for experimental or therapeutic use involving humans without the prior written approval of the Contracting Officer.

ARTICLE H.2. NEEDLE DISTRIBUTION

The Contractor shall not use contract funds to carry out any program of distributing sterile needles or syringes for the hypodermic injection of any illegal drug.

ARTICLE H.3. ACKNOWLEDGEMENT OF FEDERAL FUNDING

The Contractor shall clearly state, when issuing statements, press releases, requests for proposals, bid solicitations and other documents describing projects or programs funded in whole or in part with Federal money: (1) the percentage of the total costs of the program or project which will be financed with Federal money; (2) the dollar amount of Federal funds for the project or program; and (3) the percentage and dollar amount of the total costs of the project or program that will be financed by nongovernmental sources.

ARTICLE H.4. DISSEMINATION OF FALSE OR DELIBERATELY MISLEADING INFORMATION

The Contractor shall not use contract funds to disseminate information that is deliberately false or misleading.

ARTICLE H.5. OPTION PROVISION

Unless the Government exercises its option pursuant to the Option Clause set forth in ARTICLE I.3., the contract will consist only of the Base Period of the Statement of Work as defined in Sections C and F of the contract. Pursuant to FAR Clause 52.217-8, Option to Extend Services set forth in ARTICLE I.3. of this contract, the Government may, by unilateral contract modification, require the Contractor to perform additional options set forth in the Statement of Work and also defined in Sections C and F of the contract. If the Government exercises this option, notice must be given at least 60 days prior to the expiration date of this contract, and the price of the contract will be increased as set forth in the OPTION PRICES Article in Section B of this contract.

ARTICLE H.6. INFORMATION AND PHYSICAL ACCESS SECURITY

A. HHS-Controlled Facilities and Information Systems Security

a. To perform the work specified herein, Contractor personnel are expected to have routine (1) physical access to an HHS-controlled facility; (2) physical access to an HHS-controlled information system; (3) access to sensitive HHS data or information, whether in an HHS-controlled information system or in hard copy; or (4) any combination of circumstances (1) through (3).

b. To gain routine physical access to an HHS-controlled information system, and/or access to sensitive data or information, the Contractor and its employees shall comply with Homeland Security Presidential Directive (HSPD)-12, Policy for a Common Identification Standard for Federal Employees and Contractors; Office of Management and Budget Memorandum (M-05-24); and Federal Information Processing Standards Publication (FIPS PUB) Number 201; and with the personal identity verification and investigations procedures contained in the following documents:

- 19 -

1. HHS Information Security Program Policy ( http://www.hhs.gov/read/irmpolicy/121504.html)

2. HHS Office of Security and Drug Testing, Personnel Security/Suitability Handbook, dated February 1, 2005 ( http://www.hhs.gov/ohr/manual/pssh.pdf)

3. HHS HSPD-12 Policy Document, v. 2.0 ( http://www.whitehouse.gov/sites/default/files/omb/assets/ omb/memoranda/fy2005/m05-24.pdf)

4. Information regarding background checks/badges ( http://idbadge.nih.gov/background/index.asp)

c. Position Sensitivity Levels:

This contract will entail the following position sensitivity levels:

[ ] Level 6: Public Trust - High Risk. Contractor/subcontractor employees assigned to Level 6 positions shall undergo a Suitability Determination and Background Investigation (MBI).

[X] Level 5: Public Trust - Moderate Risk. Contractor/subcontractor employees assigned to Level 5 positions with no previous investigation and approval shall undergo a Suitability Determination and a Minimum Background Investigation (MBI), or a Limited Background Investigation (LBI).

[X] Level 1: Non-Sensitive. Contractor/subcontractor employees assigned to Level 1 positions shall undergo a Suitability Determination and National Check and Inquiry Investigation (NACI).

d. The personnel investigation procedures for Contractor personnel require that the Contractor prepare and submit background check/investigation forms based on the type of investigation required. The minimum Government investigation for a non-sensitive position is a National Agency Check and Inquiries (NACI) with fingerprinting. More restricted positions - i.e., those above non-sensitive, require more extensive documentation and investigation.

The Contractor shall submit a roster, by name, position, e-mail address, phone number and responsibility, of all staff (including subcontractor staff) working under the contract who will develop, have the ability to access and/or maintain a Federal Information System(s). The roster shall be submitted to the Contracting Officer's Representative (COR), with a copy to the Contracting Officer, within 14 calendar days after the effective date of the contract. The Contracting Officer shall notify the Contractor of the appropriate level of suitability investigations to be performed. An electronic template, "Roster of Employees Requiring Suitability Investigations," is available for contractor use at: http://ocio.nih.gov/docs/public/Suitability-roster.xls.

Upon receipt of the Government's notification of applicable Suitability Investigations required, the Contractor shall complete and submit the required forms within 30 days of the notification.

The Contractor shall notify the Contracting Officer in advance when any new personnel, who are subject to a background check/investigation, will work under the contract and if they have previously been the subject of national agency checks or background investigations.

All contractor and subcontractor employees shall comply with the conditions established for their designated position sensitivity level prior to performing any work under this contract.

Contractors may begin work after the fingerprint check has been completed.

e. Investigations are expensive and may delay performance, regardless of the outcome of the investigation.

Delays associated with rejections and consequent re-investigations may not be excusable in accordance with the FAR clause, Excusable Delays - see FAR 52.249-14. Accordingly, the Contractor shall ensure that any additional employees whose names it submits for work under this contract have a reasonable chance for approval.

http://www.hhs.gov/read/irmpolicy/121504.html http://www.hhs.gov/ohr/manual/pssh.pdf http://www.whitehouse.gov/sites/default/files/omb/assets/omb/memoranda/fy2005/m05-24.pdf http://www.whitehouse.gov/sites/default/files/omb/assets/omb/memoranda/fy2005/m05-24.pdf http://idbadge.nih.gov/background/index.asp http://ocio.nih.gov/docs/public/Suitability-roster.xls http://ocio.nih.gov/docs/public/Suitability-roster.xls

- 20 -

f. Typically, the Government investigates personnel at no cost to the Contractor. However, multiple investigations for the same position may, at the Contracting Officer's discretion, justify reduction(s) in the contract price of no more that the cost of the additional investigation(s).

g. The Contractor shall include language similar to this "HHS Controlled Facilities and Information Systems Security" language in all subcontracts that require subcontractor personnel to have the same frequency and duration of (1) physical access to an HHS-controlled facility; (2) logical access to an HHS-controlled information system; (3) access to sensitive HHS data/information, whether in an HHS-controlled information system or in hard copy; or (4) any combination of circumstances (1) through (3).

h. The Contractor shall direct inquiries, including requests for forms and assistance, to the Contracting Officer or designee.

i. Within 7 calendar days after the Government's final acceptance of the work under this contract, or upon termination of the contract, the Contractor shall return all identification badges to the Contracting Officer or designee.

B. Standard for Security Configurations, HHSAR 352.239-70, (January 2010)

a. The Contractor shall configure its computers that contain HHS data with the applicable Federal Desktop Core Configuration (FDCC) (see http://nvd.nist.gov/fdcc/index.cfm) and ensure that its computers have and maintain the latest operating system patch level and anti-virus software level.

Note: FDCC is applicable to all computing systems using Windows XPTM and Windows VistaTM, including desktops and laptops - regardless of function - but not including servers.

b. The Contractor shall apply approved security configurations to information technology (IT) that is used to process information on behalf of HHS. The following security configuration requirements apply:

FDCC

c. The Contractor shall ensure IT applications operated on behalf of HHS are fully functional and operate correctly on systems configured in accordance with the above configuration requirements. The Contractor shall use Security Content Automation Protocol (SCAP)-validated tools with FDCC Scanner capability to ensure its products operate correctly with FDCC configurations and do not alter FDCC settings - see http://nvd.nist.gov/validation.cfm. The Contractor shall test applicable product versions with all relevant and current updates and patches installed. The Contractor shall ensure currently supported versions of information technology products met the latest FDCC major version and subsequent major versions.

d. The Contractor shall ensure IT applications designed for end users run in the standard user context without requiring elevated administrative privileges.

e. The Contractor shall ensure hardware and software installation, operation, maintenance, update, and patching will not alter the configuration settings or requirements specified above.

f. The Contractor shall (1) include Federal Information Processing Standard (FIPS) 201-compliant ( http:// csrc.nist.gov/publications/fips/fips201-1/FIPS-201-1-chng1.pdf), Homeland Security Presidential Directive 12 (HSPD-12) card readers with the purchase of servers, desktops, and laptops; and (2) comply with FAR Subpart 4.13, Personal Identity Verification.

g. The Contractor shall ensure that its subcontractors (at all tiers) which perform work under this contract comply with the requirements contained in this clause.

C. Standard for Encryption language, HHSAR 352.239-71, (January 2010) http://nvd.nist.gov/fdcc/index.cfm http://nvd.nist.gov/validation.cfm http://csrc.nist.gov/publications/fips/fips201-1/FIPS-201-1-chng1.pdf http://csrc.nist.gov/publications/fips/fips201-1/FIPS-201-1-chng1.pdf

- 21 -

a. The Contractor shall use Federal Information processing Standard (FIPS) 140-2-compliant encryption (Security) Requirements for Cryptographic Module, as amended) to protect all instances of HHS sensitive information during storage and transmission. (Note: The Government has determined that HHS information under this contract is considered "sensitive" in accordance with FIPS 199, Standards for Security Categorization of Federal Information and Information Systems, dated February 2004).

b. The Contractor shall verify that the selected encryption product has been validated under the Cryptographic Module Validation Program (see http://csrc.nist.gov/cryptval/) to confirm compliance with FIPS 140-2 (as amended). The Contractor shall provide a written copy of the validation documentation to the Contracting Officer and the Contracting Officer's Technical Representative.

c. The Contractor shall use the Key Management Key (see FIPS 201, Chapter 4, as amended) on the HHS personal identification verification (PIV) card; or alternatively, the Contractor shall establish and use a key recovery mechanism to ensure the ability for authorized personnel to decrypt and recover all encrypted information (see http://csrc.nist.gov/drivers/documents/ombencryption-guidance.pdf). The Contractor shall notify the Contracting Officer and the Contracting Officer's Technical Representative of personnel authorized to decrypt and recover all encrypted information.

d. The Contractor shall securely generate and manage encryption keys to prevent unauthorized decryption of information in accordance with FIPS 140-2 (as amended).

e. The Contractor shall ensure that this standard is incorporated into the Contractor's property management/ control system or establish a separate procedure to account for all laptop computers, desktop computers, and other mobile devices and portable media that store or process sensitive HHS information.

f. The Contractor shall ensure that its subcontractors (all all tiers) which perform work under this contract comply with the requirements contained in this clause.

D. Security Requirements For Federal Information Technology Resources, HHSAR 352.239-72, (January 2010)

a. Applicability. This clause applies whether the entire contract or order (hereafter "contract"), or portion thereof, includes information technology resources or services in which the Contractor has physical or logical (electronic) access to, or operates a Department of Health and Human Services (HHS) system containing, information that directly supports HHS' mission. The term "information technology (IT)", as used in this clause, includes computers, ancillary equipment (including imaging peripherals, input, output, and storage devices necessary for security and surveillance), peripheral equipment designed to be controlled by the central processing unit of a computer, software, firmware and similar procedures, services (including support services) and related resources. This clause does not apply to national security systems as defined in FISMA.

b. Contractor responsibilities. The Contractor is responsible for the following:

1. Protecting Federal information and Federal information systems in order to ensure their -

a. Integrity, which means guarding against improper information modification or destruction, and includes ensuring information non-repudiation and authenticity;

b. Confidentiality, which means preserving authorized restrictions on access and disclosure, including means for protecting personal privacy and proprietary information; and

c. Availability, which means ensuring timely and reliable access to and use of information.

2. Providing security of any Contractor systems, and information contained therein, connected to an HHS network or operated by the Contractor, regardless of location, on behalf of HHS.

3. Adopting, and implementing, at a minimum, the policies, procedures, controls and standards of the HHS Information Security…