N4215822PS066 AWARD.pdf

SEE ADDENDUM

(No Collect Calls)

N4215822QS009 27-Jan-2022

b. TELEPHONE NUMBER

757-396-2063

8. OFFER DUE DATE/LOCAL TIME

09:00 AM 15 Feb 2022

5. SOLICITATION NUMBER 6. SOLICITATION ISSUE DATE

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

STANDARD FORM 1449 (REV. 2/2012)

Prescribed by GSA – FAR (48 CFR) 53.212

(TYPE OR PRINT)

(SIGNATURE OF CONTRACTING OFFICER)

ADDENDA ARE

X

26. TOTAL AWARD AMOUNT (For Gov t. Use Only )

23.

CODE 10. THIS ACQUISITION IS

SUCH ADDRESS IN OFFER

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT

BELOW IS CHECKED

TELEPHONE NO.757-788-3031

N421589. ISSUED BY

18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a. UNLESS BLOCK

N4215822PS066 10-Mar-2022

7. FOR SOLICITATION

INFORMATION CALL:

a. NAME

JEREMY R WEIBLE

2. CONTRACT NO. 3. AWARD/EFFECTIVE DATE 4. ORDER NUMBER

(TYPE OR PRINT)

30b. NAME AND TITLE OF SIGNER 30c. DATE SIGNED 31b. NAME OF CONTRACTING OFFICER

30a. SIGNATURE OF OFFEROR/CONTRACTOR 31a.UNITED STATES OF AMERICA

27a. SOLICITATION INCORPORATES BY REFERENCE FAR 52.212-1. 52.212-4. FAR 52.212-3. 52.212-5 ARE ATTACHED.

X

25. ACCOUNTING AND APPROPRIATION DATA

1. REQUISITION NUMBER

20.

ADDITIONAL SHEETS SUBJECT TO THE TERMS AND CONDITIONS SPECIFIED.

OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, AND 30

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS

N4215822RC20320

ARE NOT ATTACHED

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA ARE ARE NOT ATTACHED

CHERYL A. COPELAND / CONTRACTING OFFICER

See Schedule $37,305.00

(BLOCK 5), INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE

SET FORTH HEREIN, IS ACCEPTED AS TO ITEMS: SEE SCHEDULE

. YOUR OFFER ON SOLICITATION

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN

% FOR:SET ASIDE:UNRESTRICTED OR X

SMALL BUSINESSX

17a.CONTRACTOR/ CODE 84UZ7 FACILITY

OFFEROR CODE

NORFOLK NAVAL SHIPYARD

ATTN: JEREMY WEIBLE

SUB & FLEET SUPPORT BRANCH

C452, BLDG 65, 2ND FL, RM 201

PORTSMOUTH VA 23709-1022

LOCKWOOD MARINE, INC.

JOHN SCHAFFNER

220 SALTERS CREEK RD

HAMPTON VA 23661-1909

DFAS CLEVELAND-NORFOLK ACCOUNTS PAYABLE

FOR PAYMENT INQUIRIES CALL 800-756-4571

P O BOX 998022

CLEVELAND OH 44199-8022

18a. PAYMENT WILL BE MADE BY CODE N68732

RATED ORDER UNDER

DPAS (15 CFR 700)

13a. THIS CONTRACT IS AX

13b. RATING

DO-C9

CODE

SEE ITEM 9

15. DELIVER TO CODE N42158 16. ADMINISTERED BY

NET 30 DAYS

12. DISCOUNT TERMS11. DELIVERY FOR FOB DESTINA-

TION UNLESS BLOCK IS

MARKED

SEE SCHEDULE

14. METHOD OF SOLICITATION

RFQ IFB RFPX

NORFOLK NAVAL SHIPYARD

SEE STATEMENT OF WORK

FOR DELIVERY AND CONTACT INFORMATION

PORTSMOUTH VA 23709

757-396-9797FAX:

TEL: 757-396-2063

SERVICE-DISABLED

VETERAN-OWNED

SMALL BUSINESS

8(A)

HUBZONE SMALL

BUSINESS

SIZE STANDARD:

$16,500,000

NAICS:

238910

OFFER DATED

29. AWARD OF CONTRACT: REF.

DELIVER ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND ON ANY

COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND

X

EMAIL: cheryl.copeland@navy.mil

757-396-1893TEL:

31c. DATE SIGNED

10-Mar-2022

SEE SCHEDULE

SCHEDULE OF SUPPLIES/ SERVICESITEM NO. QUANTITY UNIT UNIT PRICE AMOUNT

24.22.21.19.

WOMEN-OWNED SMALL BUSINESS (WOSB)

ELIGIBLE UNDER THE WOMEN-OWNED

SMALL BUSINESS PROGRAM

EDWOSB

32g. E-MAIL OF AUTHORIZED GOVERNMENT REPRESENTATIVE

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS

(CONTINUED)

PAGE 2 OF26

ACCEPTED, AND CONFORMS TO THE CONTRACT, EXCEPT AS NOTED: ______________________________________________________

32a. QUANTITY IN COLUMN 21 HAS BEEN

RECEIVED INSPECTED

32b. SIGNATURE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32c. DATE 32d. PRINTED NAME AND TITLE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32e. MAILING ADDRESS OF AUTHORIZED GOVERNMENT REPRESENTATIVE 32f . TELEPHONE NUMBER OF AUTHORIZED GOVERNMENT REPRESENTATIVE

37. CHECK NUMBER

FINALPARTIALCOMPLETE

36. PAYMENT35. AMOUNT VERIFIED

CORRECT FOR

34. VOUCHER NUMBER

FINAL

33. SHIP NUMBER

PARTIAL

38. S/R ACCOUNT NUMBER 39. S/R VOUCHER NUMBER 40. PAID BY

41a. I CERTIFY THIS ACCOUNT IS CORRECT AND PROPER FOR PAYMENT

41b. SIGNATURE AND TITLE OF CERTIFYING OFFICER 41c. DATE

42a. RECEIVED BY (Print)

42b. RECEIVED AT (Location)

42c. DATE REC'D (YY/MM/DD) 42d. TOTAL CONTAINERS

STANDARD FORM 1449 (REV. 2/2012) BACK

Prescribed by GSA – FAR (48 CFR) 53.212

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

SEE SCHEDULE

20.

SCHEDULE OF SUPPLIES/ SERVICES

21.

QUANTITY UNIT

22. 23.

UNIT PRICE

24.

AMOUNT

19.

ITEM NO.

N4215822PS066

Section SF 1449 - CONTINUATION SHEET

ITEM NO SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

0001 1 Job $37,305.00 $37,305.00

SERVICE FOR REMOVAL OF TWO DUST COLLECT

FFP

SERVICES FOR REMOVAL OF TWO DUST COLLECTORS AND

ASSOCIATED DUCTING IN ACCORDANCE WITH THE STATEMENT OF

WORK FOUND HEREIN

FOB: Destination

MILSTRIP: N4215822RC20320

PURCHASE REQUEST NUMBER: N4215822RC20320

PSC CD: P500

NET AMT $37,305.00

ACRN AA

CIN: N4215822RC203200001

$37,305.00

STATEMENT OF WORK

SECTION A: SCOPE

1. Objective:

Norfolk Naval Shipyard (NNSY) Equipment Engineering Branch, Code 980, requires service to safely remove (2) dust collectors and their accociated ducting at the Norfolk Naval Shipyard. Dust collectors are located outside between buildings 234 and 163 in the Controlled Industrial Are (CIA) of the Norfolk Naval

Shipyard and associated duct work continues inside of Bldg 234.

2. LOCATION: Norfolk Naval Shipyard (NNSY), Portsmouth, VA 23709-5000 behind building 234.

SECTION B: APPLICABLE DOCUMENTS:

3. CRANE LIFTING PLAN / ANALYSIS / WORK PLAN REQUIREMENTS

(prior to any equipment mobilization into NNSY)

CRANE LIFTING PLAN

o Contractor shall submit a crane lifting plan for NNSY Code 700 approval.

o Plan to be submitted within (14) calendar days prior to starting work.

o The endorsement process is anticipated to require between two (2) to four (4) weeks.

RISK ANALYSIS

o Contractor shall submit a risk analysis of the rigging configuration and the surrounding area

(if not included in the crane lifting plan).

FLOOR/GROUND LOADING ANALYSIS

o Contractor shall submit for any forklift, crane, and/or truck that will be used to transport, handling, lift, or otherwise bear the load of excess equipment.

o Contractor shall secure NNSY Code 980 authorization before exceeding floor limits based on the analysis and the weight handling equipment to be used.

o NNSY Code 980 structural/civil engineer shall determine the appropriate metal plates to be utilized to reduce or eliminate the effects of overloading the ground.

DETAILED WORK PLAN

o Contractor shall perform a site visit of all the requested material that is being ask to be scrapped for proper planning o Contractor shall submit a detailed work plan to NNSY Code 980 for approval.

o Contractor shall have certified crane operator and rigging operator certified through NCCC

(National Commission Certification of Crane) operators.

o Plan shall be submitted within fifteen (14) calendar days prior to contract award.

o Plan including all necessary steps for any disassembly, removal from building, planned weight handling, shop areas affected, and timeframe expected for the duration of the work.

SECTION C: REQUIREMENTS

4. SAFETY MEETING REQUIRED

Contractor shall attend NNSY Code 980 Safety Meetings prior to beginning work.

The initial meeting shall be scheduled within fifteen (15) business days of contract award.

Safety meetings shall be conducted by the NNSY Code 980 Technical Point of Contact.

5. CONTRACTOR RESPONSIBILITIES

Contractor shall remove remove (2) dust collectors and their accociated ducting as follows:

Filter dust Collectors (Hoppers) are located outside between buildings 234 and 163 in the Controlled

Industrial Are (CIA) of the Norfolk Naval Shipyard and associated duct work continues inside of Bldg

234. Dust collectors and all associated materials (Duct work) shall be removed and delivered to

Building 1460 within the Shipyard. Code 980 Technical POC will coordinate with NAVFAC recycling and contractor for the delivery.

a. Hoppers and all associated equipment weighs approximately 40,000 pounds combined

Disassembly is required for safe removal of the all items due to the physical size of each unit.

b. Units will either have to be dismantled and/or cut into smaller load carrying pieces

c. Any protruding studs/bolts shall be cut flush to concrete surface.

d. Concrete slab and building 234 shall not be disturbed.

6. NNSY RESPONSIBILITIES

NNSY shall provide parking area around the enclosure for contractor work

SECTION D: CONTACT INFORMATION

7. NNSY Points of Contact:

Technical POC: Shahin Khyamian; shahin.khyamian@navy.mil; 757-617-4617 or

Shelton Brown; shelton.e.brown@navy.mil; 757-636-5896

Invoice Certifying POC: Shahin Khyamian; shahin.khyamian@navy.mil; 757-617-4617 or

Shelton Brown; shelton.e.brown@navy.mil; 757-636-5896

8. Safety:

Per FAR 22.102-1(a) entitled "Safety", Contractors are hereby informed that their employees or representatives present on property under Norfolk Naval Shipyard cognizance must follow the requirements in Shipyard Occupational Safety and Health Manual, NAVSHIPYDNORINST P5100.56 or the site specific location of the contract.

"Per FAR 22.102-1(a) entitled "Safety", Contractors are hereby informed that their employees or representatives present on property under Norfolk Naval Shipyard cognizance must follow Federal and

State OSHA requirements and Norfolk Naval Shipyard OSHE Program Manual, NAVSHIPYDNORINST

P5090.2 requirements or safety requirements for site specific location of the contract.

mailto:shahin.khyamian@navy.mil mailto:shelton.e.brown@navy.mil mailto:shahin.khyamian@navy.mil mailto:shelton.e.brown@navy.mil

a. Contractors and Non-NNSY Government Agencies (NNGAs) are hereby informed that their employees or representatives present on property under Norfolk Naval Shipyard (NNSY) cognizance must adhere to Federal OSHA requirements for hazardous energy control IAW 29 CFR 1915.89 and must follow

Hazardous Energy Control (HEC) procedures as identified in NAVSEA’s Occupational Safety, Health, and

Environment Corporate Manual (OSHECM) Chapter 250 (latest revision), when performing work under

NNSY contract. All HEC work to be performed by Contractors and NNGAs requires that NNSY Technical

Points of Contact (TPOCs) and/or Contracting Officer’s Representatives (CORs) be notified of the HEC scope of work prior to starting work. Any changes or deviations in the initial scope of HEC work requires the NNSY TPOCs and/or CORs be informed of the change/deviation. Appendix 250.B-1 through B-3 of

OSHECM Chapter 250 for multiple employer work identifies when Contractors and NNGAs are required to assign their Lockout/Tags-Plus Coordinator (LOTC) to coordinate HEC work with the cognizant NNSY

LOTC. HEC locks shall be provided by the contractor or NNGA for their employees use. The HEC locks shall have red bodies with name labels or name tags affixed, identifying who installed the HEC lock(s) and a point of contact telephone number. HEC lock name lables and tags must be made of materials that will hold up to the environment to which they are exposed. HEC tags used for Tags-Plus HEC work shall be provided by the cognizant NNSY LOTC to the contractor or NNGA for their use if machinery, equipment, or systems (MES) cannot be locked out. OSHECM Chapter 250 Tags-Plus procedures will be strictly followed.

b. Contractors and NNGA’s may obtain electronic copies of OSHECM Chapter 250 (latest revision) and access the OSHA 1915.89 web site by using the following link to NNSY’s public access web site:

http://www.navsea.navy.mil/shipyards/norfolk/default.aspx

c. Names and contact information for NNSY LOTCs and/or the Facility Custodian will be provided by NNSY TPOC and/or CORs set forth elsewhere in this award document.”

NOTE: The contractor shall report ALL contractor labor hours (including subcontractor labor hours) required for performance of services provided under this contract for the maintenance agreement via a secure data collection site. The contractor is required to completely fill in all required data fields using the following web address System for Award Management (https://www.sam.gov).

Reporting inputs will be for the labor executed during the period of performance during each Government fiscal year (FY), which runs October 1 through September 30. While inputs may be reported any time during the FY, all data shall be reported no later than October 31 of each calendar year. Contractors may direct questions to the help desk, linked at https://sam.gov/content/home.

9. Identification Badges and Installation Access (DBIDS):

Any new contractor, vendor or supplier requesting base access AFTER 31 May 2017 will be required to obtain a DBIDS credential. NCACS credentials will no longer be issued.

Only DBIDS credentials will be issued to ALL contractors, vendors and suppliers seeking base access

AFTER 14 August 2017.

o Defense Biometric Identification System (DBIDS) increases installation security and communications by receiving frequent database updates on changes to personnel/credential status, law enforcement warrants, lost/stolen cards, and force protection conditions. The system provides a continuous vetting anytime the DBIDS card is scanned at an installation entry point.

If you currently have a Navy Commercial Access Control System (NCACS) card, the following is required to get a DBIDS credential:

Present your NCACS Card and a completed copy of the SECNAV FORM 5512/1 to the base Visitor

Control Center representative.

The VCC will pull up your information in the computer, ensuring all information is current and correct.

Once your information is validated, a temporary DBIDS credential is provided.

Your temporary credential will have an expiration date, prior to which you will need to obtain your permanent DBIDS credential (~ 90 days).

For each additional U.S. Navy installation to which you need access, the first time you visit you only need to bring your DBIDS credential and statement of purpose for base access when arriving at the

Visitor Control Center.

The representative will enter base access authorization and then you may proceed to work.

If you do NOT have an NCACS Card, the following is required to obtain a DBIDS credential:

Present a letter or official document from my government sponsoring organization that provides the purpose for your access.

Present valid identification, such as a passport or Real ID Act-compliant state driver's license.

Present a completed copy of the SECNAV 5512/1 form to obtain your background check.

Upon completion of the background check, the Visitor Control Center representative will complete the DBIDS enrollment process, which includes your photo, finger prints, base restrictions, and several other assessments; after all this is done, you will be provided with your new DBIDS credential.

You may now proceed to work.

For additional questions about obtaining a dbids card, contact your local base visitor control center.

Information is also provided at: www.cnic.navy.mil/om/dbids.html

One-Day Passes. Participation in the DBIDS is not mandatory, and if the Contractor chooses to not participate, the Contractor's personnel will have to obtain daily passes, be subject to daily mandatory vehicle inspection, and will have limited access to the installation. The Government will not be responsible for any cost or lost time associated with obtaining daily passes or added vehicle inspections incurred by non-participants in the DBIDS.

10. After hour’s base access information: Contractors are to go to Gate 15 and let the guards know they are to provide services/support via contract N42158-22-P-S066. It would be helpful for them to have a copy of the contract. The guards at the gate will then call the Base Precinct and will subsequently escort contractors to Bldg. 1618 to have a badge made.

11. Authorization of Additional Work: Any additional work outside the scope of this contract/purchase order shall have written authorization from the Contracting Officer prior to executing any additional work. Any work performed without the written authorization of the Contracting Officer shall be considered “At-Risk” and the government will have no legal obligation to pay for the work performed.

Pursuant FAR 13 .004(b), Once you have initiated performance of the work, this shall constitute your acceptance of the task order.

INSPECTION AND ACCEPTANCE TERMS

Supplies/services will be inspected/accepted at:

CLIN INSPECT AT INSPECT BY ACCEPT AT ACCEPT BY

0001 Destination Government Destination Government

DELIVERY INFORMATION

http://www.cnic.navy.mil/om/dbids.html

CLIN DELIVERY DATE QUANTITY SHIP TO ADDRESS DODAAC /

CAGE

0001 POP 10-MAR-2022 TO

30-APR-2022

N/A NORFOLK NAVAL SHIPYARD

SEE STATEMENT OF WORK

FOR DELIVERY AND CONTACT

INFORMATION

PORTSMOUTH VA 23709

TEL: WITHIN

FOB: Destination

N42158

ACCOUNTING AND APPROPRIATION DATA

AA: 1721804 6B4B 310 A2158 056521 2D N42158

COST CODE: 15822RC20320

AMOUNT: $37,305.00

ACRN CLIN/SLIN CIN AMOUNT

AA 0001 N4215822RC203200001 $37,305.00

CLAUSES INCORPORATED BY REFERENCE

52.204-9 Personal Identity Verification of Contractor Personnel JAN 2011

52.204-13 System for Award Management Maintenance OCT 2018

52.204-18 Commercial and Government Entity Code Maintenance AUG 2020

52.204-25 Prohibition on Contracting for Certain Telecommunications and Video Surveillance Services or Equipment

DEC 2021

52.209-10 Prohibition on Contracting With Inverted Domestic

Corporations

NOV 2015

52.212-4 Contract Terms and Conditions--Commercial Products and

Commercial Services

DEC 2021

52.219-6 Notice Of Total Small Business Set-Aside NOV 2020

52.222-41 Service Contract Labor Standards AUG 2018

52.232-39 Unenforceability of Unauthorized Obligations JUN 2013

52.232-40 Providing Accelerated Payments to Small Business

Subcontractors

DEC 2021

52.237-2 Protection Of Government Buildings, Equipment, And

Vegetation

APR 1984

52.247-34 F.O.B. Destination NOV 1991

252.203-7000 Requirements Relating to Compensation of Former DoD

Officials

SEP 2011

252.203-7002 Requirement to Inform Employees of Whistleblower Rights SEP 2013

252.204-7003 Control Of Government Personnel Work Product APR 1992

252.204-7004 Antiterrorism Awareness Training for Contractors. FEB 2019

252.204-7012 Safeguarding Covered Defense Information and Cyber

Incident Reporting

DEC 2019

252.204-7015 Notice of Authorized Disclosure of Information for Litigation

Support

MAY 2016

252.204-7018 Prohibition on the Acquisition of Covered Defense

Telecommunications Equipment or Services

JAN 2021

252.223-7006 Prohibition On Storage, Treatment, and Disposal of Toxic or

Hazardous Materials

SEP 2014

252.225-7015 Restriction on Acquisition of Hand Or Measuring Tools JUN 2005

252.225-7048 Export-Controlled Items JUN 2013

252.232-7003 Electronic Submission of Payment Requests and Receiving

Reports

DEC 2018

252.232-7010 Levies on Contract Payments DEC 2006

252.232-7017 Accelerating Payments to Small Business Subcontractors--

Prohibition on Fees and Consideration

APR 2020

252.237-7010 Prohibition on Interrogation of Detainees by Contractor

Personnel

JUN 2013

252.244-7000 Subcontracts for Commercial Items JAN 2021

252.247-7023 Transportation of Supplies by Sea FEB 2019

CLAUSES INCORPORATED BY FULL TEXT

52.204-21 BASIC SAFEGUARDING OF COVERED CONTRACTOR INFORMATION SYSTEMS (NOV 2021)

(a) Definitions. As used in this clause--

Covered contractor information system means an information system that is owned or operated by a contractor that processes, stores, or transmits Federal contract information.

Federal contract information means information, not intended for public release, that is provided by or generated for the Government under a contract to develop or deliver a product or service to the Government, but not including information provided by the Government to the public (such as on public websites) or simple transactional information, such as necessary to process payments.

Information means any communication or representation of knowledge such as facts, data, or opinions, in any medium or form, including textual, numerical, graphic, cartographic, narrative, or audiovisual (Committee on

National Security Systems Instruction (CNSSI) 4009).

Information system means a discrete set of information resources organized for the collection, processing, maintenance, use, sharing, dissemination, or disposition of information (44 U.S.C. 3502).

Safeguarding means measures or controls that are prescribed to protect information systems.

(b) Safeguarding requirements and procedures.

(1) The Contractor shall apply the following basic safeguarding requirements and procedures to protect covered contractor information systems. Requirements and procedures for basic safeguarding of covered contractor information systems shall include, at a minimum, the following security controls:

(i) Limit information system access to authorized users, processes acting on behalf of authorized users, or devices

(including other information systems).

(ii) Limit information system access to the types of transactions and functions that authorized users are permitted to execute.

(iii) Verify and control/limit connections to and use of external information systems.

(iv) Control information posted or processed on publicly accessible information systems.

(v) Identify information system users, processes acting on behalf of users, or devices.

(vi) Authenticate (or verify) the identities of those users, processes, or devices, as a prerequisite to allowing access to organizational information systems.

(vii) Sanitize or destroy information system media containing Federal Contract Information before disposal or release for reuse.

(viii) Limit physical access to organizational information systems, equipment, and the respective operating environments to authorized individuals.

(ix) Escort visitors and monitor visitor activity; maintain audit logs of physical access; and control and manage physical access devices.

(x) Monitor, control, and protect organizational communications (i.e., information transmitted or received by organizational information systems) at the external boundaries and key internal boundaries of the information systems.

(xi) Implement subnetworks for publicly accessible system components that are physically or logically separated from internal networks.

(xii) Identify, report, and correct information and information system flaws in a timely manner.

(xiii) Provide protection from malicious code at appropriate locations within organizational information systems.

(xiv) Update malicious code protection mechanisms when new releases are available.

(xv) Perform periodic scans of the information system and real-time scans of files from external sources as files are downloaded, opened, or executed.

(2) Other requirements. This clause does not relieve the Contractor of any other specific safeguarding requirements specified by Federal agencies and departments relating to covered contractor information systems generally or other

Federal safeguarding requirements for controlled unclassified information (CUI) as established by Executive Order

13556.

(c) Subcontracts. The Contractor shall include the substance of this clause, including this paragraph (c), in subcontracts under this contract (including subcontracts for the acquisition of commercial products or commercial services, other than commercially available off-the-shelf items), in which the subcontractor may have Federal contract information residing in or transiting through its information system.

(End of clause)

52.212-5 CONTRACT TERMS AND CONDITIONS REQUIRED TO IMPLEMENT STATUTES OR

EXECUTIVE ORDERS--COMMERCIAL PRODUCTS AND COMMERCIAL SERVICES (NOV 2021)

(a) The Contractor shall comply with the following Federal Acquisition Regulation (FAR) clauses, which are incorporated in this contract by reference, to implement provisions of law or Executive orders applicable to acquisitions of commercial products and commercial services:

(1) 52.203-19, Prohibition on Requiring Certain Internal Confidentiality Agreements or Statements (JAN 2017)

(section 743 of Division E, Title VII, of the Consolidated and Further Continuing Appropriations Act, 2015 (Pub. L.

113-235) and its successor provisions in subsequent appropriations acts (and as extended in continuing resolutions)).

(2) 52.204-23, Prohibition on Contracting for Hardware, Software, and Services Developed or Provided by

Kaspersky Lab and Other Covered Entities (NOV 2021) (Section 1634 of Pub. L. 115-91).

(3) 52.204-25, Prohibition on Contracting for Certain Telecommunications and Video Surveillance Services or

Equipment. (NOV 2021) (Section 889(a)(1)(A) of Pub. L. 115-232).

(4) 52.209-10, Prohibition on Contracting with Inverted Domestic Corporations (Nov 2015).

(5) 52.233-3, Protest After Award (AUG 1996) (31 U.S.C. 3553).

(6) 52.233-4, Applicable Law for Breach of Contract Claim (OCT 2004) (Public Laws 108-77 and 108-78 (19

U.S.C. 3805 note)).

(b) The Contractor shall comply with the FAR clauses in this paragraph (b) that the Contracting Officer has indicated as being incorporated in this contract by reference to implement provisions of law or Executive orders applicable to acquisitions of commercial products and commercial services: [Contracting Officer check as appropriate.]

___ (1) 52.203-6, Restrictions on Subcontractor Sales to the Government (JUN 2020), with Alternate I (NOV

2021) (41 U.S.C. 4704 and 10 U.S.C. 2402).

___ (2) 52.203-13, Contractor Code of Business Ethics and Conduct (NOV 2021) (41 U.S.C. 3509).

___ (3) 52.203-15, Whistleblower Protections under the American Recovery and Reinvestment Act of 2009 (JUN

2010) (Section 1553 of Pub. L. 111-5). (Applies to contracts funded by the American Recovery and Reinvestment

Act of 2009.)

X (4) 52.204-10, Reporting Executive Compensation and First-Tier Subcontract Awards (JUN 2020) (Pub. L. 109-

282) (31 U.S.C. 6101 note).

___ (5) [Reserved]

___ (6) 52.204-14, Service Contract Reporting Requirements (Oct 2016) (Pub. L. 111-117, section 743 of Div. C).

___ (7) 52.204-15, Service Contract Reporting Requirements for Indefinite-Delivery Contracts (Oct 2016) (Pub.

L. 111-117, section 743 of Div. C).

X (8) 52.209-6, Protecting the Government's Interest When Subcontracting with Contractors Debarred, Suspended, or Proposed for Debarment. (NOV 2021) (31 U.S.C. 6101 note).

___ (9) 52.209-9, Updates of Publicly Available Information Regarding Responsibility Matters (OCT 2018) (41

U.S.C. 2313).

____ (10) [Reserved]

____ (11) 52.219-3, Notice of HUBZone Set-Aside or Sole-Source Award (SEP 2021) (15 U.S.C. 657a).

____ (12) 52.219-4, Notice of Price Evaluation Preference for HUBZone Small Business Concerns (SEP 2021) (if the offeror elects to waive the preference, it shall so indicate in its offer) (15 U.S.C. 657a).

____ (13) [Reserved]

____ (14)(i) 52.219-6, Notice of Total Small Business Set-Aside (NOV 2020) (15 U.S.C. 644).

____ (ii) Alternate I (MAR 2020) of 52.219-6.

____ (15)(i) 52.219-7, Notice of Partial Small Business Set-Aside (NOV 2020) (15 U.S.C. 644).

____ (ii) Alternate I (MAR 2020) of 52.219-7.

____ (16) 52.219-8, Utilization of Small Business Concerns (OCT 2018) (15 U.S.C. 637(d)(2) and (3)).

____ (17)(i) 52.219-9, Small Business Subcontracting Plan (NOV 2021) (15 U.S.C. 637(d)(4)).

____ (ii) Alternate I (NOV 2016) of 52.219-9.

____ (iii) Alternate II (NOV 2016) of 52.219-9.

____ (iv) Alternate III (JUN 2020) of 52.219-9.

____ (v) Alternate IV (SEP 2021) of 52.219-9.

____ (18) (i) 52.219-13, Notice of Set-Aside of Orders (MAR 2020) (15 U.S.C. 644(r)).

____ (ii) Alternate I (MAR 2020) of 52.219-13.

____ (19) 52.219-14, Limitations on Subcontracting (SEP 2021) (15 U.S.C. 657s).

____ (20) 52.219-16, Liquidated Damages—Subcontracting Plan (SEP 2021) (15 U.S.C. 637(d)(4)(F)(i)).

____ (21) 52.219-27, Notice of Service-Disabled Veteran-Owned Small Business Set-Aside (SEP 2021) (15 U.S.C.

657f).

X (22) (i) 52.219-28, Post-Award Small Business Program Rerepresentation (SEP 2021) (15 U.S.C. 632(a)(2)).

____ (ii) Alternate I (MAR 2020) of 52.219-28.

____ (23) 52.219-29, Notice of Set-Aside for, or Sole-Source Award to, Economically Disadvantaged Women-

Owned Small Business Concerns (SEP 2021) (15 U.S.C. 637(m)).

____ (24) 52.219-30, Notice of Set-Aside for, or Sole-Source Award to, Women-Owned Small Business Concerns

Eligible Under the Women-Owned Small Business Program (SEP 2021) (15 U.S.C. 637(m)).

____ (25) 52.219-32, Orders Issued Directly Under Small Business Reserves (MAR 2020) (15 U.S.C. 644(r)).

____ (26) 52.219-33, Nonmanufacturer Rule (SEP 2021) (15 U.S.C. 657s).

X (27) 52.222-3, Convict Labor (JUN 2003) (E.O. 11755).

____(28) 52.222-19, Child Labor--Cooperation with Authorities and Remedies (JAN 2020) (E.O. 13126).

X (29) 52.222-21, Prohibition of Segregated Facilities (APR 2015).

X (30)(i) 52.222-26, Equal Opportunity (SEPT 2016) (E.O. 11246).

____ (ii) Alternate I (FEB 1999) of 52.222-26.

____ (31)(i) 52.222-35, Equal Opportunity for Veterans (JUN 2020) (38 U.S.C. 4212).

____ (ii) Alternate I (JUL 2014) of 52.222-35.

X (32)(i) 52.222-36, Equal Opportunity for Workers with Disabilities (JUN 2020) (29 U.S.C. 793).

____ (ii) Alternate I (JUL 2014) of 52.222-36.

____ (33) 52.222-37, Employment Reports on Veterans (JUN 2020) (38 U.S.C. 4212).

____ (34) 52.222-40, Notification of Employee Rights Under the National Labor Relations Act (DEC 2010) (E.O.

13496).

X (35)(i) 52.222-50, Combating Trafficking in Persons (NOV 2021) (22 U.S.C. chapter 78 and E.O. 13627).

____ (ii) Alternate I (MAR 2015) of 52.222-50 (22 U.S.C. chapter 78 and E.O. 13627).

____ (36) 52.222-54, Employment Eligibility Verification (NOV 2021). (E. O. 12989). (Not applicable to the acquisition of commercially available off-the-shelf items or certain other types of commercial products or commercial services as prescribed in FAR 22.1803.)

____ (37)(i) 52.223-9, Estimate of Percentage of Recovered Material Content for EPA–Designated Items (MAY

2008) (42 U.S.C. 6962(c)(3)(A)(ii)). (Not applicable to the acquisition of commercially available off-the-shelf items.)

____ (ii) Alternate I (MAY 2008) of 52.223-9 (42 U.S.C. 6962(i)(2)(C)). (Not applicable to the acquisition of commercially available off-the-shelf items.)

____ (38) 52.223-11, Ozone-Depleting Substances and High Global Warming Potential Hydrofluorocarbons (JUN

2016) (E.O. 13693).

____ (39) 52.223-12, Maintenance, Service, Repair, or Disposal of Refrigeration Equipment and Air Conditioners

(JUN 2016) (E.O. 13693).

____ (40) (i) 52.223-13, Acquisition of EPEAT® Registered Imaging Equipment (JUN 2014) (E.O.s 13423 and

13514).

____ (ii) Alternate I (OCT 2015) of 52.223-13.

____ (41)(i) 52.223-14, Acquisition of EPEAT® Registered Televisions (JUN 2014) (E.O.s 13423 and 13514).

____ (ii) Alternate I (JUN 2014) of 52.223-14.

____ (42) 52.223-15, Energy Efficiency in Energy-Consuming Products (MAY 2020) (42 U.S.C. 8259b).

____ (43)(i) 52.223-16, Acquisition of EPEAT®-Registered Personal Computer Products (OCT 2015) (E.O.s

13423 and 13514).

____ (ii) Alternate I (JUN 2014) of 52.223-16.

X (44) 52.223-18, Encouraging Contractor Policies to Ban Text Messaging While Driving (JUN 2020) (E.O.

13513).

____ (45) 52.223-20, Aerosols (JUN 2016) (E.O. 13693).

____ (46) 52.223-21, Foams (JUN 2016) (E.O. 13693).

____ (47)(i) 52.224-3, Privacy Training (JAN 2017) (5 U.S.C. 552a).

____ (ii) Alternate I (JAN 2017) of 52.224-3.

____ (48) 52.225-1, Buy American--Supplies (NOV 2021) (41 U.S.C. chapter 83).

____ (49) (i) 52.225-3, Buy American--Free Trade Agreements--Israeli Trade Act (NOV 2021) (41 U.S.C. chapter

83, 19 U.S.C. 3301 note, 19 U.S.C. 2112 note, 19 U.S.C. 3805 note, 19 U.S.C. 4001 note, Pub. L. 103-182, 108-77, 108-78, 108-286, 108-302, 109-53, 109-169, 109-283, 110-138, 112-41, 112-42, and 112-43.

____ (ii) Alternate I (JAN 2021) of 52.225-3.

____ (iii) Alternate II (JAN 2021) of 52.225-3.

____ (iv) Alternate III (JAN 2021) of 52.225-3.

____ (50) 52.225-5, Trade Agreements (OCT 2019) 19 U.S.C. 2501, et seq., 19 U.S.C. 3301 note).

X (51) 52.225-13, Restrictions on Certain Foreign Purchases (FEB 2021) (E.O.'s, proclamations, and statutes administered by the Office of Foreign Assets Control of the Department of the Treasury).

____ (52) 52.225-26, Contractors Performing Private Security Functions Outside the United States (OCT 2016)

(Section 862, as amended, of the National Defense Authorization Act for Fiscal Year 2008; 10 U.S.C. 2302 Note).

____ (53) 52.226-4, Notice of Disaster or Emergency Area Set-Aside (NOV 2007) (42 U.S.C. 5150

____ (54) 52.226-5, Restrictions on Subcontracting Outside Disaster or Emergency Area (NOV 2007) (42 U.S.C.

5150).

____ (55) 52.229-12, Tax on Certain Foreign Procurements (FEB 2021).

____ (56) 52.232-29, Terms for Financing of Purchases of Commercial Products and Commercial Services (NOV

2021) (41 U.S.C. 4505, 10 U.S.C. 2307(f)).

____ (57) 52.232-30, Installment Payments for Commercial Products and Commercial Services (NOV 2021) (41

U.S.C. 4505, 10 U.S.C. 2307(f)).

X (58) 52.232-33, Payment by Electronic Funds Transfer—System for Award Management (OCT 2018) (31 U.S.C.

3332).

____ (59) 52.232-34, Payment by Electronic Funds Transfer—Other than System for Award Management (JUL

2013) (31 U.S.C. 3332).

____ (60) 52.232-36, Payment by Third Party (MAY 2014) (31 U.S.C. 3332).

____ (61) 52.239-1, Privacy or Security Safeguards (AUG 1996) (5 U.S.C. 552a).

____ (62) 52.242-5, Payments to Small Business Subcontractors (JAN 2017)(15 U.S.C. 637(d)(13)).

____ (63)(i) 52.247-64, Preference for Privately Owned U.S.-Flag Commercial Vessels (NOV 2021) (46 U.S.C.

55305 and 10 U.S.C. 2631).

____ (ii) Alternate I (APR 2003) of 52.247-64.

____ (iii) Alternate II (NOV 2021) of 52.247-64.

(c) The Contractor shall comply with the FAR clauses in this paragraph (c), applicable to commercial services, that the Contracting Officer has indicated as being incorporated in this contract by reference to implement provisions of law or Executive orders applicable to acquisitions of commercial products and commercial services: [Contracting

Officer check as appropriate.]

X (1) 52.222-41, Service Contract Labor Standards (AUG 2018) (41 U.S.C. chapter 67).

X (2) 52.222-42, Statement of Equivalent Rates for Federal Hires (MAY 2014) (29 U.S.C. 206 and 41 U.S.C.

chapter 67).

_____ (3) 52.222-43, Fair Labor Standards Act and Service Contract Labor Standards--Price Adjustment (Multiple

Year and Option Contracts) (AUG 2018) (29 U.S.C. 206 and 41 U.S.C. chapter 67).

X (4) 52.222-44, Fair Labor Standards Act and Service Contract Labor Standards--Price Adjustment (MAY 2014)

(29 U.S.C 206 and 41 U.S.C. chapter 67).

_____ (5) 52.222-51, Exemption from Application of the Service Contract Labor Standards to Contracts for

Maintenance, Calibration, or Repair of Certain Equipment--Requirements (MAY 2014) (41 U.S.C. chapter 67).

_____ (6) 52.222-53, Exemption from Application of the Service Contract Labor Standards to Contracts for Certain

Services--Requirements (MAY 2014) (41 U.S.C. chapter 67).

X (7) 52.222-55, Minimum Wages Under Executive Order 13658 (NOV 2020) (E.O. 13658).

X (8) 52.222-62, Paid Sick Leave Under Executive Order 13706 (JAN 2017) (E.O. 13706).

_____ (9) 52.226-6, Promoting Excess Food Donation to Nonprofit Organizations (JUN 2020) (42 U.S.C. 1792).

(d) Comptroller General Examination of Record. The Contractor shall comply with the provisions of this paragraph

(d) if this contract was awarded using other than sealed bid, is in excess of the simplified acquisition threshold, as defined in FAR 2.101, on the date of award of this contract, and does not contain the clause at 52.215-2, Audit and

Records--Negotiation.

(1) The Comptroller General of the United States, or an authorized representative of the Comptroller General, shall have access to and right to examine any of the Contractor's directly pertinent records involving transactions related to this contract.

(2) The Contractor shall make available at its offices at all reasonable times the records, materials, and other evidence for examination, audit, or reproduction, until 3 years after final payment under this contract or for any shorter period specified in FAR Subpart 4.7, Contractor Records Retention, of the other clauses of this contract. If this contract is completely or partially terminated, the records relating to the work terminated shall be made available for 3 years after any resulting final termination settlement. Records relating to appeals under the disputes clause or to litigation or the settlement of claims arising under or relating to this contract shall be made available until such appeals, litigation, or claims are finally resolved.

(3) As used in this clause, records include books, documents, accounting procedures and practices, and other data, regardless of type and regardless of form. This does not require the Contractor to create or maintain any record that the Contractor does not maintain in the ordinary course of business or pursuant to a provision of law.

(e) (1) Notwithstanding the requirements of the clauses in paragraphs (a), (b), (c), and (d) of this clause, the

Contractor is not required to flow down any FAR clause, other than those in this paragraph (e)(1)in a subcontract for commercial products or commercial services. Unless otherwise indicated below, the extent of the flow down shall be as required by the clause—

(i) 52.203-13, Contractor Code of Business Ethics and Conduct (NOV 2021) (41 U.S.C. 3509).

(ii) 52.203-19, Prohibition on Requiring Certain Internal Confidentiality Agreements or Statements (JAN 2017)

(section 743 of Division E, Title VII, of the Consolidated and Further Continuing Appropriations Act, 2015 (Pub. L.

113-235) and its successor provisions in subsequent appropriations acts (and as extended in continuing resolutions)).

(iii) 52.204-23, Prohibition on Contracting for Hardware, Software, and Services Developed or Provided by

Kaspersky Lab and Other Covered Entities (NOV 2021) (Section 1634 of Pub. L. 115-91).

(iv) 52.204-25, Prohibition on Contracting for Certain Telecommunications and Video Surveillance Services or

Equipment. (NOV 2021) (Section 889(a)(1)(A) of Pub. L. 115-232).

(v) 52.219-8, Utilization of Small Business Concerns (Oct 2018) (15 U.S.C. 637(d)(2) and (3)), in all subcontracts that offer further subcontracting opportunities. If the subcontract (except subcontracts to small business concerns) exceeds the applicable threshold specified in FAR 19.702(a) on the date of subcontract award, the subcontractor must include 52.219-8 in lower tier subcontracts that offer subcontracting opportunities.

(vi) 52.222-21, Prohibition of Segregated Facilities (Apr 2015).

(vii) 52.222-26, Equal Opportunity (Sep 2016) (E.O. 11246).

(viii) 52.222-35, Equal Opportunity for Veterans (JUN 2020) (38 U.S.C. 4212).

(ix) 52.222-36, Equal Opportunity for Workers with Disabilities (JUN 2020) (29 U.S.C. 793).

(x) 52.222-37, Employment Reports on Veterans (JUN 2020) (38 U.S.C. 4212).

(xi) 52.222-40, Notification of Employee Rights Under the National Labor Relations Act (Dec 2010) (E.O. 13496).

Flow down required in accordance with paragraph (f) of FAR clause 52.222-40.

(xii) 52.222-41, Service Contract Labor Standards (Aug 2018), (41 U.S.C. chapter 67).

(xiii) X (A) 52.222-50, Combating Trafficking in Persons (NOV 2021) (22 U.S.C. chapter 78 and E.O. 13627).

_____ (B) Alternate I (March 2, 2015) of 52.222-50 (22 U.S.C. chapter 78 and E.O. 13627).

(xiv) 52.222-51, Exemption from Application of the Service Contract Labor Standards to Contracts for

Maintenance, Calibration, or Repair of Certain Equipment--Requirements (May 2014) (41 U.S.C. chapter 67.)

(xv) 52.222-53, Exemption from Application of the Service Contract Labor Standards to Contracts for Certain

Services--Requirements (May 2014) (41 U.S.C. chapter 67)

(xvi) 52.222-54, Employment Eligibility Verification (NOV 2021) (E. O. 12989).

(xvii) 52.222-55, Minimum Wages Under Executive Order 13658 (NOV 2020) (E.O. 13658).

(xviii) 52.222-62, Paid Sick Leave Under Executive Order 13706 (Jan 2017) (E.O. 13706).

(xix) (A) 52.224-3, Privacy Training (Jan 2017) (5 U.S.C. 552a).

(B) Alternate I (Jan 2017) of 52.224-3.

(xx) 52.225-26, Contractors Performing Private Security Functions Outside the United States (Oct 2016) (Section

862, as amended, of the National Defense Authorization Act for Fiscal Year 2008; 10 U.S.C. 2302 Note).

(xxi) 52.226-6, Promoting Excess Food Donation to Nonprofit Organizations. (JUN 2020) (42 U.S.C. 1792). Flow down required in accordance with paragraph (e) of FAR clause 52.226-6.

(xxii) 52.247-64, Preference for Privately-Owned U.S. Flag Commercial Vessels (NOV 2021) (46 U.S.C. 55305 and

10 U.S.C. 2631). Flow down required in accordance with paragraph (d) of FAR clause 52.247-64.

(2) While not required, the Contractor may include in its subcontracts for commercial products and commercial services a minimal number of additional clauses necessary to satisfy its contractual obligations.

52.222-42 STATEMENT OF EQUIVALENT RATES FOR FEDERAL HIRES (MAY 2014)

In compliance with the Service Contract Labor Standards statute and the regulations of the Secretary of Labor (29

CFR part 4), this clause identifies the classes of service employees expected to be employed under the contract and states the wages and fringe benefits payable to each if they were employed by the contracting agency subject to the provisions of 5 U.S.C. 5341 or 5332.

THIS STATEMENT IS FOR INFORMATION ONLY: IT IS NOT A WAGE DETERMINATION

Employee Class Monetary Wage – Fringe Benefits (Per Hour)

21020 Forklift Operator $19.49

23850 Rigger $25.83

23470 Laborer $12.63

52.223-18 ENCOURAGING CONTRACTOR POLICIES TO BAN TEXT MESSAGING WHILE DRIVING (JUN

2020)

Driving— https://www.acquisition.gov/content/part-52-solicitation-provisions-and-contract-clauses#i52_222_62 https://www.acquisition.gov/content/part-52-solicitation-provisions-and-contract-clauses#i52_224_3 http://uscode.house.gov/browse.xhtml;jsessionid=114A3287C7B3359E597506A31FC855B3 https://www.acquisition.gov/content/part-52-solicitation-provisions-and-contract-clauses#i52_224_3

(1) Means operating a motor vehicle on an active roadway with the motor running, including while temporarily stationary because of traffic, a traffic light, stop sign, or otherwise.

(2) Does not include operating a motor vehicle with or without the motor running when one has pulled over to the side of, or off, an active roadway and has halted in a location where one can safely remain stationary.

Text messaging means reading from or entering data into any handheld or other electronic device, including for the purpose of short message service texting, e-mailing, instant messaging, obtaining navigational information, or engaging in any other form of electronic data retrieval or electronic data communication. The term does not include glancing at or listening to a navigational device that is secured in a commercially designed holder affixed to the vehicle, provided that the destination and route are programmed into the device either before driving or while stopped in a location off the roadway where it is safe and legal to park.

(b) This clause implements Executive Order 13513, Federal Leadership on Reducing Text Messaging while Driving, dated October 1, 2009.

(c) The Contractor is encouraged to--

(1) Adopt and enforce policies that ban text messaging while driving--

(i) Company-owned or -rented vehicles or Government-owned vehicles; or

(ii) Privately-owned vehicles when on official Government business or when performing any work for or on behalf of the Government.

(2) Conduct initiatives in a manner commensurate with the size of the business, such as--

(i) Establishment of new rules and programs or re-evaluation of existing programs to prohibit text messaging while driving; and

(ii) Education, awareness, and other outreach to employees about the safety risks associated with texting while driving.

(d) Subcontracts. The Contractor shall insert the substance of this clause, including this paragraph (d), in all subcontracts that exceed the micro-purchase threshold, as defined in Federal Acquisition Regulation 2.101 on the date of subcontract award.

52.252-2 CLAUSES INCORPORATED BY REFERENCE (FEB 1998)

This contract incorporates one or more clauses by reference, with the same force and effect as if they were given in full text. Upon request, the Contracting Officer will make their full text available. Also, the full text of a clause may be accessed electronically at this/these address(es):

FAR CLAUSE: http://acquisition.gov/far

DFARS Clause: http://acquisition.gov/dfars http://acquisition.gov/far http://acquisition.gov/dfars

252.204-7020 NIST SP 800-171 DOD ASSESSMENT REQUIREMENTS (NOV 2020)

(a) Definitions.

Basic Assessment means a contractor's self-assessment of the contractor's implementation of NIST SP 800-171 that-

(1) Is based on the Contractor's review of their system security plan(s) associated with covered contractor information system(s);

(2) Is conducted in accordance with the NIST SP 800-171 DoD Assessment Methodology; and

(3) Results in a confidence level of "Low" in the resulting score, because it is a self-generated score.

Covered contractor information system has the meaning given in the clause 252.204-7012, Safeguarding Covered

Defense Information and Cyber Incident Reporting, of this contract.

High Assessment means an assessment that is conducted by Government personnel using NIST SP 800-171A, Assessing Security Requirements for Controlled Unclassified Information that--

(1) Consists of--

(i) A review of a contractor's Basic Assessment;

(ii) A thorough document review;

(iii) Verification, examination, and demonstration of a Contractor's system security plan to validate that NIST SP

800-171 security requirements have been implemented as described in the contractor's system security plan; and

(iv) Discussions with the contractor to obtain additional information or clarification, as needed; and

(2) Results in a confidence level of "High" in the resulting score.

Medium Assessment means an assessment conducted by the Government that--

(1) Consists of--

(i) A review of a contractor's Basic Assessment;

(ii) A thorough document review; and

(iii) Discussions with the contractor to obtain additional information or clarification, as needed; and

(2) Results in a confidence level of "Medium" in the resulting score.

(b) Applicability. This clause applies to covered contractor information systems that are required to comply with the

National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171, in accordance with

Defense Federal Acquisition Regulation System (DFARS) clause at 252.204-7012, Safeguarding Covered Defense

Information and Cyber Incident Reporting, of this contract.

(c) Requirements. The Contractor shall provide access to its facilities, systems, and personnel necessary for the

Government to conduct a Medium or High NIST SP 800-171 DoD Assessment, as described in NIST SP 800-171

DoD Assessment Methodology at https://www.acq.osd.mil/dpap/pdi/cyber/strategically_assessing_contractor_implementation_of_NIST_SP_800-

171.html, if necessary.

https://www.acq.osd.mil/dpap/pdi/cyber/strategically_assessing_contractor_implementation_of_NIST_SP_800-171.html https://www.acq.osd.mil/dpap/pdi/cyber/strategically_assessing_contractor_implementation_of_NIST_SP_800-171.html

(d) Procedures. Summary level scores for all assessments will be posted in the Supplier Performance Risk System

(SPRS) (https://www.sprs.csd.disa.mil/) to provide DoD Components visibility into the summary level scores of strategic assessments.

(1) Basic Assessments. A contractor may submit, via encrypted email, summary level scores of Basic Assessments conducted in accordance with the NIST SP 800-171 DoD Assessment Methodology to webptsmh@navy.mil for posting to SPRS.

(i) The email shall include the following information:

(A) Version of NIST SP 800-171 against which the assessment was conducted.

(B) Organization conducting the assessment (e.g., Contractor self-assessment).

(C) For each system security plan (security requirement 3.12.4) supporting the performance of a DoD contract--

(1) All industry Commercial and Government Entity (CAGE) code(s) associated with the information system(s) addressed by the system security plan; and

(2) A brief description of the system security plan architecture, if more than one plan exists.

(D) Date the assessment was completed.

(E) Summary level score (e.g., 95 out of 110, NOT the individual value for each requirement).

(F) Date that all requirements are expected to be implemented (i.e., a score of 110 is expected to be achieved) based on information gathered from associated plan(s) of action developed in accordance with NIST SP 800-171.

(ii) If multiple system security plans are addressed in the email described at paragraph (b)(1)(i) of this section, the

Contractor shall use the following format for the report:

Brief

CAGE codes description of Date of Total Date score of

System security plan supported by this the plan assessment score 110 will plan architecture achieved

(2) Medium and High Assessments. DoD will post the following Medium and/or High Assessment summary level scores to SPRS for each system security plan assessed:

(i) The standard assessed (e.g., NIST SP 800-171 Rev 1).

(ii) Organization conducting the assessment, e.g., DCMA, or a specific organization (identified by Department of

Defense Activity Address Code (DoDAAC)).

(iii) All industry CAGE code(s) associated with the information system(s) addressed by the system security plan.

(iv) A brief description of the system security plan architecture, if more than one system security plan exists.

https://www.sprs.csd.disa.mil/ mailto:webptsmh@navy.mil

(v) Date and level of the assessment, i.e., medium or high.

(vi) Summary level score (e.g., 105 out of 110, not the individual value assigned for each requirement).

(vii) Date that all requirements are expected to be implemented (i.e., a score of 110 is expected to be achieved) based on information gathered from associated plan(s) of action developed in accordance with NIST SP 800-171.

(e) Rebuttals. (1) DoD will provide Medium and High Assessment summary level scores to the Contractor and offer the opportunity for rebuttal and adjudication of assessment summary level scores prior to posting the summary level scores to SPRS (see SPRS User's Guide https://www.sprs.csd.disa.mil/pdf/SPRS_Awardee.pdf).

(2) Upon completion of each assessment, the contractor has 14 business days to provide additional information to demonstrate that they meet any security requirements not observed by the assessment…