N4523A-18-Q-4001.pdf

SEE ADDENDUM

(No Collect Calls)

N4523A18Q4001 20-Oct-2017

b. TELEPHONE NUMBER

360-476-4074

8. OFFER DUE DATE/LOCAL TIME

02:00 PM 23 Oct 2017

5. SOLICITATION NUMBER 6. SOLICITATION ISSUE DATE

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

STANDARD FORM 1449 (REV. 2/2012)

Prescribed by GSA – FAR (48 CFR) 53.212

(TYPE OR PRINT)

(SIGNATURE OF CONTRACTING OFFICER)

ADDENDA ARE

26. TOTAL AWARD AMOUNT (For Gov t. Use Only )

23.

CODE 10. THIS ACQUISITION IS

SUCH ADDRESS IN OFFER

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT

BELOW IS CHECKED

TELEPHONE NO.

N4523A9. ISSUED BY

18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a. UNLESS BLOCK

7. FOR SOLICITATION

INFORMATION CALL:

a. NAME

JACQUELINE EDGERTON

2. CONTRACT NO. 3. AWARD/EFFECTIVE DATE 4. ORDER NUMBER

(TYPE OR PRINT)

30b. NAME AND TITLE OF SIGNER 30c. DATE SIGNED 31b. NAME OF CONTRACTING OFFICER

30a. SIGNATURE OF OFFEROR/CONTRACTOR 31a.UNITED STATES OF AMERICA

27a. SOLICITATION INCORPORATES BY REFERENCE FAR 52.212-1. 52.212-4. FAR 52.212-3. 52.212-5 ARE ATTACHED.

25. ACCOUNTING AND APPROPRIATION DATA

1. REQUISITION NUMBER

20.

ADDITIONAL SHEETS SUBJECT TO THE TERMS AND CONDITIONS SPECIFIED.

OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, AND 30

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS

SEE SCHEDULE

ARE NOT ATTACHED

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA ARE ARE NOT ATTACHED

(BLOCK 5), INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE

SET FORTH HEREIN, IS ACCEPTED AS TO ITEMS:

. YOUR OFFER ON SOLICITATION

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN

% FOR:SET ASIDE:UNRESTRICTED OR X

SMALL BUSINESSX

17a.CONTRACTOR/ CODE FACILITY

OFFEROR CODE

N4523A PSNS&IMF

C440

COMMAND NUCLEAR CONTRACTING SUPPORT

1400 FARRAGUT AVE

BREMERTON WA 98314-2026

18a. PAYMENT WILL BE MADE BY CODE

RATED ORDER UNDER

DPAS (15 CFR 700)

13a. THIS CONTRACT IS A

13b. RATING

CODE15. DELIVER TO CODE 16. ADMINISTERED BY

SEE SCHEDULE

12. DISCOUNT TERMS11. DELIVERY FOR FOB DESTINA-

TION UNLESS BLOCK IS

MARKED

SEE SCHEDULE

14. METHOD OF SOLICITATION

RFQ IFB RFP

FAX:

TEL: 360-476-4211

SERVICE-DISABLED

VETERAN-OWNED

SMALL BUSINESS

8(A)

HUBZONE SMALL

BUSINESS

SIZE STANDARD:

1,000

NAICS:

313310

X

OFFER DATED

29. AWARD OF CONTRACT: REF.

DELIVER ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND ON ANY

COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND

EMAIL:

TEL:

31c. DATE SIGNED

SEE SCHEDULE

SCHEDULE OF SUPPLIES/ SERVICESITEM NO. QUANTITY UNIT UNIT PRICE AMOUNT

24.22.21.19.

WOMEN-OWNED SMALL BUSINESS (WOSB)

ELIGIBLE UNDER THE WOMEN-OWNED

SMALL BUSINESS PROGRAM

EDWOSB

32g. E-MAIL OF AUTHORIZED GOVERNMENT REPRESENTATIVE

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS

(CONTINUED)

PAGE 2 OF22

ACCEPTED, AND CONFORMS TO THE CONTRACT, EXCEPT AS NOTED: ______________________________________________________

32a. QUANTITY IN COLUMN 21 HAS BEEN

RECEIVED INSPECTED

32b. SIGNATURE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32c. DATE 32d. PRINTED NAME AND TITLE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32e. MAILING ADDRESS OF AUTHORIZED GOVERNMENT REPRESENTATIVE 32f . TELEPHONE NUMBER OF AUTHORIZED GOVERNMENT REPRESENTATIVE

37. CHECK NUMBER

FINALPARTIALCOMPLETE

36. PAYMENT35. AMOUNT VERIFIED

CORRECT FOR

34. VOUCHER NUMBER

FINAL

33. SHIP NUMBER

PARTIAL

38. S/R ACCOUNT NUMBER 39. S/R VOUCHER NUMBER 40. PAID BY

41a. I CERTIFY THIS ACCOUNT IS CORRECT AND PROPER FOR PAYMENT

41b. SIGNATURE AND TITLE OF CERTIFYING OFFICER 41c. DATE

42a. RECEIVED BY (Print)

42b. RECEIVED AT (Location)

42c. DATE REC'D (YY/MM/DD) 42d. TOTAL CONTAINERS

STANDARD FORM 1449 (REV. 2/2012) BACK

Prescribed by GSA – FAR (48 CFR) 53.212

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

SEE SCHEDULE

20.

SCHEDULE OF SUPPLIES/ SERVICES

21.

QUANTITY UNIT

22. 23.

UNIT PRICE

24.

AMOUNT

19.

ITEM NO.

N4523A18Q4001

Section SF 1449 - CONTINUATION SHEET

ITEM NO SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

CLIN

Number

WETSUIT

FFP

330 Each

WETSUIT - See Attached Order Data Sheet (ODS)

FOB: Destination

MILSTRIP: N4523A7275V513

MFR PART NR: FSBS1041NAVYPS-S/M

PURCHASE REQUEST NUMBER: N4523A7275V513

PROJECT: 6W3

NET AMT

390 Each

FOB: Destination

NSN: 4470

MILSTRIP: N4523A7275V514

MFR PART NR: FSBS1041NAVYPS-M/L

PURCHASE REQUEST NUMBER: N4523A7275V514

775 Each

WETSUIT, - See Attached Order Data Sheet (ODS)

FOB: Destination

NSN: 4470

MILSTRIP: N4523A7275V515

MFR PART NR: FSBS1041NAVYPS-L/XL

PURCHASE REQUEST NUMBER: N4523A7275V515

145 Each

FOB: Destination

MILSTRIP: N4523A7275V516

MFR PART NR: FSBS1041NAVYPS-2X

PURCHASE REQUEST NUMBER: N4523A7275V516

REQUIRED POC INFORMATION

Solicitation Information -- Required

POC Information - FOR Supplies Only

POC INFORMATION

**** THIS SOLICITATION MUST BE COMPLETED AND RETURNED IN FULL TO BE CONSIDERED

RESPONSIVE****

****CONTACT CONTRACTING OFFICIAL AT EMAIL:****

E-MAIL: jacqueline.edgerton @NAVY.MIL

(a) PLEASE PROVIDE:

BUSINESS NAME: ____________________________________________________

POC NAME: __________________________________________________________

YOUR CAGE CODE NUMBER:__________________________________________

YOUR E-MAIL ADDRESS:_____________________________________________

YOUR PHONE NUMBER:______________________________________________

YOUR FAX NUMBER:________________________________________________

YOUR BUSINESS SIZE: LARGE OR SMALL (PLEASE CIRCLE)

RETURN QUOTE FILLED OUT AND SIGNED TO THE E-MAIL LISTED ABOVE.

(b) Is material being offered exactly as specified? Yes____ No____

Delivery date offered, if different than specified: _________________________

Name of Manufacturer ______________________________________________

Country of Origin ___________________________________________________

SIZE OF MANUFACTURE: LARGE OR SMALL (PLEASE CIRCLE)

PAYMENT INFORMATION WILL BE ENTERED IN ANY RESULTING AWARD BY GOVERNMENT WIDE

AREA WORK FLOW SYSTEM, WAWF OR GOVERNMENT CREDIT CARD:

****CREDIT CARD INFORMATION IS GIVEN AFTER MATERIAL HAS BEEN DELIVERED AND THE QA

INSPECTION DATE HAS PASSED***** IF THIS IS UN-EXCEPTABLE PAYMENT WILL HAVE TO BE

THE WAWF SYSTEM****

PURSUANT TO THE CONTRACT CLAUSE ENTITLED “AVAILABILITY OF FUNDS” AND IN

ACCORDANCE WITH THE FISCAL YEAR 2017 CONTINUING RESOLUTION, THESE FUNDS ARE

CONTINGENT UPON THE ENACTMENT OF THE FY17 DoD APPROPRIATION ACT OR ENACTMENT OF

ANOTHER FY17 CONTINUING RESOLUTION BEYOND DECEMBER 2016, AND ARE SUBJECT TO ALL

PROVISIONS OF WHICHEVER ACT BECOMES APPLICABLE.

INSPECTION LEVEL:

QA: E 7 DAY INSPECTION

POC Information for Services (includes CPAR info. Section)

POC INFORMATION

**** THIS SOLICITATION MUST BE COMPLETED AND RETURNED IN FULL TO BE CONSIDERED

RESPONSIVE****

****CONTACT CONTRACTING OFFICIAL AT EMAIL:****

E-MAIL: JACQUELINE.EDGERTON@NAVY.MIL

(a) PLEASE PROVIDE:

BUSINESS NAME: _____________________________________________________

POC NAME: __________________________________________________________

YOU’RE CAGE CODE NUMBER:___________________________________________

YOU’RE E-MAIL ADDRESS:______________________________________________

YOU’RE PHONE NUMBER:______________________________________________

YOU’RE FAX NUMBER:________________________________________________

RETURN QUOTE FILLED OUT AND SIGNED TO THE E-MAIL LISTED ABOVE.

(b) Is material being offered exactly as specified? Yes____ No____

Delivery date offered, if different than specified: _________________________

Name of Manufacturer ______________________________________________

Country of Origin ___________________________________________________

SIZE OF MANUFACTURE: LARGE OR SMALL (PLEASE CIRCLE)

(c) This contract may be subject to Contract Performance Assessment Reporting System (CPARS). Designate an individual who has the authority to review and provide comments on Government appraisals of your firm’s performance under this contract.

mailto:marty.sampson@navy.mil mailto:%20JACQUELINE.EDGERTON@NAVY.MIL

NAME: ____________________________________________________________________

TITLE: _____________________________________________________________________

PHONE: _____________________________________________________________________

TOLL-FREE PHONE NO: (800)__________________________________________________

FULL INTERNET E-MAIL ADDRESS: ____________________________________________

PAYMENT INFORMATION WILL BE ENTERED IN ANY RESULTING AWARD BY GOVERNMENT WIDE

AREA WORK FLOW SYSTEM, WAWF OR GOVERNMENT CREDIT CARD:

****CREDIT CARD INFORMATION IS GIVEN AFTER MATERIAL HAS BEEN DELIVERED AND THE QA

INSPECTION DATE HAS PASSED*****IF THIS IS UN-EXCEPTABLE PAYMENT WILL HAVE TO BE THE

WAWF SYSTEM****

PURSUANT TO THE CONTRACT CLAUSE ENTITLED “AVAILABILITY OF FUNDS” AND IN

ACCORDANCE WITH THE FISCAL YEAR 2017 CONTINUING RESOLUTION, THESE FUNDS ARE

CONTINGENT UPON THE ENACTMENT OF THE FY17 DoD APPROPRIATION ACT OR ENACTMENT OF

ANOTHER FY17 CONTINUING RESOLUTION BEYOND DECEMBER 2016, AND ARE SUBJECT TO ALL

PROVISIONS OF WHICHEVER ACT BECOMES APPLICABLE.

INSPECTION LEVEL: (SEE CODE IN BOX 75 OF JML)

QA: E 7 DAY INSPECTION

Navy Commercial Access Control System (NCACS):

Commander, Navy Installations Command (CNIC), has established the Navy Commercial Access Control System

(NCACS), a standardized process for granting unescorted access privileges to vendors, contractors, suppliers, and service providers not otherwise entitled to the issuance of a Common, Access Card (CAC) who seek access to and can provide justification to enter Navy installations and facilities. Visiting venders may obtain daily passes directly from the individual Navy Installations by submitting identification credentials for verification and undergoing a criminal screening/background check. Alternatively, if the vendor so chooses, it may voluntarily elect to obtain long-term credentials through enrollment registration, background vetting, screening issuance of credentials through a designated independent contractor NCACS service provider. Credentials will be issued every five years and access privileges will be reviewed/renewed on an annual basis.

Further information regarding NCACS can be found at www.eidpassport.com/support/fags/rapidgate-premier (copy and paste to connect)

Questions about the NCACS Program for Naval Base Kitsap are Judith Barratt; Ms. Barratt can be reached at 360-

476-4884.

EFFECTIVE DATES FOR SPECIFICATIONS AND STANDARDS

Unless otherwise specified, the revision level and date for each specification or standard cited within this solicitation/contract (including any specifications or standards cited in any drawing, handbook, or referenced specification or standard contained within this solicitation/contract) shall be the latest revision in the ASSIST database on the Internet at http://assist.daps.dla.mil/online/start/ as of DATE OF SOLICITATION.

Standard Warranty

The Contractor shall extend to the Government the full coverage of any standard warranty normally offered in a similar sale, provided such warranty is available at no additional cost to the Government. Acceptance of the standard warranty does not waive the Government’s rights under any “Inspection” clause that may be in the contract nor does it limit the Government’s rights with regard to the other terms and conditions of this contract. In the event of a conflict, the terms and conditions of the contract shall take precedence over the standard warranty. The standard warranty period shall begin upon final acceptance of the applicable material and/or services listed in the Schedule.

The Contractor shall provide a copy of its standard warranty (if applicable) with its offer. The warranty covers a period of ______________ months (offeror is to insert number).

SPECIFICATIONS

http://www.eidpassport.com/support/fags/rapidgate-premier http://assist.daps.dla.mil/online/start/

EFFECTIVE DATES FOR SPECIFICATIONS AND STANDARDS

Unless otherwise specified, the revision level and date for each specification or standard cited within this solicitation/contract (including any specifications or standards cited in any drawing, handbook, or referenced specification or standard contained within this solicitation/contract) shall be the latest revision in the ASSIST database on the Internet at http://assist.daps.dla.mil/online/start/ as of DATE OF SOLICITATION.

C500 Mercury Control

Mercury or mercury containing compounds shall not be intentionally added or come in direct contact with hardware or supplies furnished under this contract.

G505 Vendor Disposition of Nonconforming Material

Material not in compliance with all contract requirements shall be deemed as nonconforming. Nonconforming material shall either be scrapped and remade to meet all contract requirements, reworked/repaired to meet all requirements, or the vendor may submit a request to the shipyard to allow the nonconforming material be tendered for acceptance. A request for authority to submit nonconforming material shall include a complete description of the nonconformance and an assessment of the impact of the nonconformance on the technical adequacy of the material.

In no instance shall nonconforming material be tendered to the shipyard for acceptance without specific shipyard approval.

C528 Specification Changes No changes to specifications or other contract technical requirements are allowed without Contracting Officer approval.

E2 Inspection and Acceptance (at destination) Inspection and acceptance of the supplies or services to be furnished hereunder shall be made at destination by the receiving activity. Receiving activity shall execute acceptance certificate on the applicable inspection and receiving report form (DD Form 1155, Standard Form 44, DD form 250 or WAWF) and the executed payment copy shall be forwarded to the paying office within four (4) workdays thereafter.

Standard Warranty

The Contractor shall extend to the Government the full coverage of any standard warranty normally offered in a similar sale, provided such warranty is available at no additional cost to the Government. Acceptance of the standard warranty does not waive the Government’s rights under any “Inspection” clause that may be in the contract nor does it limit the Government’s rights with regard to the other terms and conditions of this contract. In the event of a conflict, the terms and conditions of the contract shall take precedence over the standard warranty. The standard warranty period shall begin upon final acceptance of the applicable material and/or services listed in the Schedule.

The Contractor shall provide a copy of its standard warranty (if applicable) with its offer. The warranty covers a period of ______________ months (offeror is to insert number).

PAYMENT INFORMATION

INVOICING INFORMATION

WAWF Information – Clause # 252.232-7006 – Full Text

Supporting clause - should also have clause (not full text) – 252.232-7003

1 – Combo Document Type

2- INSPECTION – N4523A

ACCEPTANCE – N4523A

3. (see below table) *** Please note your contract may call for other DoDAACs

Field Name in WAWF Data to be entered in WAWF http://assist.daps.dla.mil/online/start/

Pay Official DoDAAC N68732

Issue by DoDAAC N4523A

Admin DoDAAC N4523A

Inspect By DoDAAC N4523A

Ship to Code ____

Ship from Code ____

Mark for Code ____

Service Approver (DoDAAC) ____

Service Acceptor (DoDAAC) N4523A

Accept at Other DoDAAC ____

LPO DoDAAC N4523A

DCAA Auditor DoDAAC ____

Other DoDAAC(s) ____

5. KO Isabelito Cabana– Phone (360) 536-8584 isabelito.Cabana@navy.mil

Jacqueline Edgerton – Phone (360) 476-4205 jacqueline.edgerton@navy.mil

6. Local WAWF POCs

PSNSASKAccountsPayable@navy.mil

PSNS_C610.22CERT.FCT@navy.mil

EVALUATION INFORMATION

EVALUATION--COMMERCIAL ITEMS (OCT 2014)

(a) The Government will award a contract resulting from this solicitation to the responsible offeror whose offer conforming to the solicitation is determined to be the lowest price technically acceptable offer. The following factors shall be used to evaluate offers:

Factor (i) – Technical capability of the item offered to meet the Government requirement;

Factor (ii) – Price

Factor (i) – Technical Capability Grading Criteria: Offers will be evaluated first under Factor (i) above, which represents MINIMUM acceptable criteria (see Table 1 below). Under this factor, product/service offered will be determined to be either technically acceptable or unacceptable.

Failure to meet the minimum criteria for this factor may render the offer to be technically unacceptable and shall be eliminated from further competition.

Table 1 - Technical Acceptable/Unacceptable Ratings mailto:isabelito.Cabana@navy.mil mailto:jacqueline.edgerton@navy.mil

Rating Description

Acceptable Proposal clearly meets the minimum requirements of the solicitation. (See note below.)

Unacceptable Proposal does not clearly meet the minimum requirements of the solicitation.

Note: To “clearly” show that the proposal meets minimum technical requirement, it must address and show that ALL the qualifications/specifications required are met.

Only those Offers which meet the minimum requirements established by Factor (i) will be further evaluated under Factors (ii).

(b) A written notice of award or acceptance of an offer, mailed or otherwise furnished to the successful offeror within the time for acceptance specified in the offer, shall result in a binding contract without further action by either party. Before the offer’s specified expiration time, the

Government may accept an offer (or part of an offer), whether or not there are negotiations after its receipt, unless a written notice of withdrawal is received before award.

(End of Provision)

(End of provision)

INSPECTION AND ACCEPTANCE TERMS

Supplies/services will be inspected/accepted at:

CLIN INSPECT AT INSPECT BY ACCEPT AT ACCEPT BY

0001 Destination Government Destination Government

0002 Destination Government Destination Government

0003 Destination Government Destination Government

0004 Destination Government Destination Government

DELIVERY INFORMATION

CLIN DELIVERY DATE QUANTITY SHIP TO ADDRESS DODAAC /

CAGE

0001 05-JAN-2018 330 N/A

FOB: Destination

0002 05-JAN-2018 390 N/A

0003 05-JAN-2018 775 N/A

0004 05-JAN-2018 145 N/A

CLAUSES INCORPORATED BY REFERENCE

52.202-1 Definitions NOV 2013

52.204-7 System for Award Management OCT 2016

52.212-1 Instructions to Offerors--Commercial Items JAN 2017

52.232-39 Unenforceability of Unauthorized Obligations JUN 2013

52.246-1 Contractor Inspection Requirements APR 1984

52.247-34 F.O.B. Destination NOV 1991

252.203-7000 Requirements Relating to Compensation of Former DoD

Officials

SEP 2011

252.203-7005 Representation Relating to Compensation of Former DoD

Officials

NOV 2011

252.204-7003 Control Of Government Personnel Work Product APR 1992

252.204-7004 Alt A System for Award Management Alternate A FEB 2014

252.204-7005 Oral Attestation of Security Responsibilities NOV 2001

252.204-7008 Compliance With Safeguarding Covered Defense Information

Controls

OCT 2016

252.204-7012 Safeguarding Covered Defense Information and Cyber

Incident Reporting

OCT 2016

252.223-7008 Prohibition of Hexavalent Chromium JUN 2013

252.225-7001 Buy American And Balance Of Payments Program-- Basic

(Dec 2016)

DEC 2016

CLAUSES INCORPORATED BY FULL TEXT

52.212-5 CONTRACT TERMS AND CONDITIONS REQUIRED TO IMPLEMENT STATUTES OR

EXECUTIVE ORDERS--COMMERCIAL ITEMS (JAN 2017)

(a) The Contractor shall comply with the following Federal Acquisition Regulation (FAR) clauses, which are incorporated in this contract by reference, to implement provisions of law or Executive orders applicable to acquisitions of commercial items:

(1) 52.203-19, Prohibition on Requiring Certain Internal Confidentiality Agreements or Statements (JAN 2017)

(section 743 of Division E, Title VII, of the Consolidated and Further Continuing Appropriations Act, 2015 (Pub. L.

113-235) and its successor provisions in subsequent appropriations acts (and as extended in continuing resolutions)).

(2) 52.209-10, Prohibition on Contracting with Inverted Domestic Corporations (Nov 2015).

(3) 52.233-3, Protest After Award (AUG 1996) (31 U.S.C. 3553).

(4) 52.233-4, Applicable Law for Breach of Contract Claim (OCT 2004) (Public Laws 108-77 and 108-78 (19

U.S.C. 3805 note)).

(b) The Contractor shall comply with the FAR clauses in this paragraph (b) that the Contracting Officer has indicated as being incorporated in this contract by reference to implement provisions of law or Executive orders applicable to acquisitions of commercial items: (Contracting Officer check as appropriate.)

___ (1) 52.203-6, Restrictions on Subcontractor Sales to the Government (Sept 2006), with Alternate I (Oct 1995)

(41 U.S.C. 4704 and 10 U.S.C. 2402).

xx (2) 52.203-13, Contractor Code of Business Ethics and Conduct (Oct 2015) (41 U.S.C. 3509).

xx (3) 52.203-15, Whistleblower Protections under the American Recovery and Reinvestment Act of 2009 (June

2010) (Section 1553 of Pub. L. 111-5). (Applies to contracts funded by the American Recovery and Reinvestment

Act of 2009.)

___ (4) 52.204-10, Reporting Executive Compensation and First-Tier Subcontract Awards (Oct 2016) (Pub. L. 109-

282) (31 U.S.C. 6101 note).

___ (5) [Reserved]

___ (6) 52.204-14, Service Contract Reporting Requirements (Oct 2016) (Pub. L. 111-117, section 743 of Div.

C).

___ (7) 52.204-15, Service Contract Reporting Requirements for Indefinite-Delivery Contracts (Oct 2016) (Pub.

L. 111-117, section 743 of Div. C).

___ (8) 52.209-6, Protecting the Government's Interest When Subcontracting with Contractors Debarred, Suspended, or Proposed for Debarment. (Oct 2015) (31 U.S.C. 6101 note).

____ (9) 52.209-9, Updates of Publicly Available Information Regarding Responsibility Matters (July 2013) (41

U.S.C. 2313).

____ (10) [Reserved]

____ (11)(i) 52.219-3, Notice of HUBZone Set-Aside or Sole-Source Award (NOV 2011) (15 U.S.C. 657a).

____ (ii) Alternate I (NOV 2011) of 52.219-3.

____ (12) (i) 52.219-4, Notice of Price Evaluation Preference for HUBZone Small Business Concerns (OCT 2014)

(if the offeror elects to waive the preference, it shall so indicate in its offer) (15 U.S.C. 657a).

____ (ii) Alternate I (JAN 2011) of 52.219-4.

____ (13) [Reserved] xx (14)(i) 52.219-6, Notice of Total Small Business Set-Aside (NOV 2011) (15 U.S.C. 644).

____ (ii) Alternate I (NOV 2011).

____ (iii) Alternate II (NOV 2011).

____ (15)(i) 52.219-7, Notice of Partial Small Business Set-Aside (June 2003) (15 U.S.C. 644).

____ (ii) Alternate I (Oct 1995) of 52.219-7.

____ (iii) Alternate II (Mar 2004) of 52.219-7.

____ (16) 52.219-8, Utilization of Small Business Concerns (Nov 2016) (15 U.S.C. 637(d)(2) and (3)).

____ (17)(i) 52.219-9, Small Business Subcontracting Plan (Jan 2017) (15 U.S.C. 637(d)(4)).

____ (ii) Alternate I (Nov 2016) of 52.219-9.

____ (iii) Alternate II (Nov 2016) of 52.219-9.

____ (iv) Alternate III (Nov 2016) of 52.219-9.

____ (v) Alternate IV (Nov 2016) of 52.219-9.

____ (18) 52.219-13, Notice of Set-Aside of Orders (NOV 2011) (15 U.S.C. 644(r)).

____ (19) 52.219-14, Limitations on Subcontracting (JAN 2017) (15 U.S.C. 637(a)(14)).

____ (20) 52.219-16, Liquidated Damages—Subcon-tracting Plan (Jan 1999) (15 U.S.C. 637(d)(4)(F)(i)).

____ (21) 52.219-27, Notice of Service-Disabled Veteran-Owned Small Business Set-Aside (NOV 2011) (15 U.S.C.

657f).

____ (22) 52.219-28, Post Award Small Business Program Rerepresentation (July 2013) (15 U.S.C. 632(a)(2)).

____ (23) 52.219-29, Notice of Set-Aside for, or Sole Source Award to, Economically Disadvantaged Women-

Owned Small Business Concerns (Dec 2015) (15 U.S.C. 637(m)).

____(24) 52.219-30, Notice of Set-Aside for, or Sole Source Award to, Women-Owned Small Business Concerns

Eligible Under the Women-Owned Small Business Program (Dec 2015) (15 U.S.C. 637(m)).

XX (25) 52.222-3, Convict Labor (June 2003) (E.O. 11755).

XX (26) 52.222-19, Child Labor--Cooperation with Authorities and Remedies (Oct 2016) (E.O. 13126).

XX (27) 52.222-21, Prohibition of Segregated Facilities (Apr 2015).

XX (28) 52.222-26, Equal Opportunity (Sept 2016) (E.O. 11246).

XX(29) 52.222-35, Equal Opportunity for Veterans (Oct 2015) (38 U.S.C. 4212).

XX (30) 52.222-36, Equal Opportunity for Workers with Disabilities (July 2014) (29 U.S.C. 793).

(31) 52.222-37, Employment Reports on Veterans (FEB 2016) (38 U.S.C. 4212).

____ (32) 52.222-40, Notification of Employee Rights Under the National Labor Relations Act (Dec 2010) (E.O.

13496).

XX (33)(i) 52.222-50, Combating Trafficking in Persons (March 2, 2015) (22 U.S.C. chapter 78 and E.O. 13627).

____ (ii) Alternate I (March 2, 2015) of 52.222-50 (22 U.S.C. chapter 78 and E.O. 13627).

____ (34) 52.222-54, Employment Eligibility Verification (Oct 2015). (E. O. 12989). (Not applicable to the acquisition of commercially available off-the-shelf items or certain other types of commercial items as prescribed in

22.1803.)

(35) 52.222-59, Compliance with Labor Laws (Executive Order 13673) (OCT 2016). (Applies at $50 million for solicitations and resultant contracts issued from October 25, 2016 through April 24, 2017; applies at $500,000 for solicitations and resultant contracts issued after April 24, 2017).

Note to paragraph (b)(35): By a court order issued on October 24, 2016, 52.222-59 is enjoined indefinitely as of the date of the order. The enjoined paragraph will become effective immediately if the court terminates the injunction. At that time, DoD, GSA, and NASA will publish a document in the Federal

Register advising the public of the termination of the injunction.

____ (36) 52.222-60, Paycheck Transparency (Executive Order 13673) (OCT 2016).

____ (37)(i) 52.223-9, Estimate of Percentage of Recovered Material Content for EPA–Designated Items (May

2008) (42 U.S.C. 6962(c)(3)(A)(ii)). (Not applicable to the acquisition of commercially available off-the-shelf items.)

____ (ii) Alternate I (May 2008) of 52.223-9 (42 U.S.C. 6962(i)(2)(C)). (Not applicable to the acquisition of commercially available off-the-shelf items.)

____ (38) 52.223-11, Ozone-Depleting Substances and High Global Warming Potential Hydrofluorocarbons (June, 2016) (E.O. 13693).

____ (39) 52.223-12, Maintenance, Service, Repair, or Disposal of Refrigeration Equipment and Air Conditioners

(June, 2016) (E.O. 13693).

____ (40) (i) 52.223-13, Acquisition of EPEAT® Registered Imaging Equipment (Jun 2014) (E.O.s 13423 and

13514).

____ (ii) Alternate I (OCT 2015) of 52.223-13.

____ (41)(i) 52.223-14, Acquisition of EPEAT® Registered Televisions (Jun 2014) (E.O.s 13423 and 13514).

____ (ii) Alternate I (Jun 2014) of 52.223-14.

____ (42) 52.223-15, Energy Efficiency in Energy-Consuming Products (Dec 2007) (42 U.S.C. 8259b).

____ (43)(i) 52.223-16, Acquisition of EPEAT[supreg]-Registered Personal Computer Products (OCT 2015) (E.O.s

13423 and 13514).

____ (ii) Alternate I (Jun 2014) of 52.223-16.

XX (44) 52.223-18, Encouraging Contractor Policies to Ban Text Messaging While Driving (Aug 2011) (E.O.

13513).

____ (45) 52.223-20, Aerosols (June, 2016) (E.O. 13693).

____ (46) 52.223-21, Foams (June, 2016) (E.O. 13693).

____ (47)(i) 52.224-3, Privacy Training (JAN 2017) (5 U.S.C. 552a).

____ (ii) Alternate I (JAN 2017) of 52.224-3.

XX (48) 52.225-1, Buy American--Supplies (May 2014) (41 U.S.C. chapter 83).

____(49) (i) 52.225-3, Buy American--Free Trade Agreements--Israeli Trade Act (May 2014) (41 U.S.C. chapter

83, 19 U.S.C. 3301 note, 19 U.S.C. 2112 note, 19 U.S.C. 3805 note, 19 U.S.C. 4001 note, Pub. L.

103-182, 108-77, 108-78, 108-286, 108-302, 109-53, 109-169, 109-283, 110-138, 112-41, 112-42, and 112-43.

____ (ii) Alternate I (May 2014) of 52.225-3.

____ (iii) Alternate II (May 2014) of 52.225-3.

____ (iv) Alternate III (May 2014) of 52.225-3.

(50) 52.225-5, Trade Agreements (Oct 2016) (19 U.S.C. 2501, et seq., 19 U.S.C. 3301 note).

____ (51) 52.225-13, Restrictions on Certain Foreign Purchases (June 2008) (E.O.’s, proclamations, and statutes administered by the Office of Foreign Assets Control of the Department of the Treasury).

____ (52) 52.225-26, Contractors Performing Private Security Functions Outside the United States (Oct 2016)

(Section 862, as amended, of the National Defense Authorization Act for Fiscal Year 2008; 10 U.S.C. 2302 Note).

xx (53) 52.226-4, Notice of Disaster or Emergency Area Set-Aside (Nov 2007) (42 U.S.C. 5150

____ (54) 52.226-5, Restrictions on Subcontracting Outside Disaster or Emergency Area (Nov 2007) (42 U.S.C.

5150).

____ (55) 52.232-29, Terms for Financing of Purchases of Commercial Items (Feb 2002) (41 U.S.C. 4505, 10

U.S.C. 2307(f)).

____ (56) 52.232-30, Installment Payments for Commercial Items (Jan 2017) (41 U.S.C. 4505, 10 U.S.C. 2307(f)).

XX (57) 52.232-33, Payment by Electronic Funds Transfer—System for Award Management (July 2013) (31 U.S.C.

3332).

____ (58) 52.232-34, Payment by Electronic Funds Transfer—Other than System for Award Management (July

2013) (31 U.S.C. 3332).

____ (59) 52.232-36, Payment by Third Party (MAY 2014) (31 U.S.C. 3332).

(60) 52.239-1, Privacy or Security Safeguards (Aug 1996) (5 U.S.C. 552a).

____ (61) 52.242-5, Payments to Small Business Subcontractors (JAN 2017)(15 U.S.C. 637(d)(12)).

____ (62)(i) 52.247-64, Preference for Privately Owned U.S.-Flag Commercial Vessels (Feb 2006) (46 U.S.C.

Appx. 1241(b) and 10 U.S.C. 2631).

____ (ii) Alternate I (Apr 2003) of 52.247-64.

(c) The Contractor shall comply with the FAR clauses in this paragraph (c), applicable to commercial services, that the Contracting Officer has indicated as being incorporated in this contract by reference to implement provisions of law or Executive orders applicable to acquisitions of commercial items: (Contracting Officer check as appropriate.)

_____(1) 52.222-17, Nondisplacement of Qualified Workers (May 2014) (E.O. 13495).

_____ (2) 52.222-41, Service Contract Labor Standards (MAY 2014) (41 U.S.C. chapter 67).

_____ (3) 52.222-42, Statement of Equivalent Rates for Federal Hires (MAY 2014) (29 U.S.C. 206 and 41 U.S.C.

chapter 67).

_____ (4) 52.222-43, Fair Labor Standards Act and Service Contract Labor Standards--Price Adjustment (Multiple

Year and Option Contracts) (MAY 2014) (29 U.S.C. 206 and 41 U.S.C. chapter 67).

_____ (5) 52.222-44, Fair Labor Standards Act and Service Contract Labor Standards--Price Adjustment (MAY

2014) (29 U.S.C 206 and 41 U.S.C. chapter 67).

_____ (6) 52.222-51, Exemption from Application of the Service Contract Labor Standards to Contracts for

Maintenance, Calibration, or Repair of Certain Equipment--Requirements (MAY 2014) (41 U.S.C. chapter 67).

_____ (7) 52.222-53, Exemption from Application of the Service Contract Labor Standards to Contracts for Certain

Services--Requirements (MAY 2014) (41 U.S.C. chapter 67).

_____(8) 52.222-55, Minimum Wages Under Executive Order 13658 (DEC 2015) (E.O. 13658).

_____ (9) 52.222-62, Paid Sick Leave Under Executive Order 13706 (JAN 2017) (E.O. 13706).

_____ (10) 52.226-6, Promoting Excess Food Donation to Nonprofit Organizations (MAY 2014) (42 U.S.C. 1792).

_____ (11) 52.237-11, Accepting and Dispensing of $1 Coin (Sept 2008) (31 U.S.C. 5112(p)(1)).

(d) Comptroller General Examination of Record. The Contractor shall comply with the provisions of this paragraph

(d) if this contract was awarded using other than sealed bid, is in excess of the simplified acquisition threshold, and does not contain the clause at 52.215-2, Audit and Records--Negotiation.

(1) The Comptroller General of the United States, or an authorized representative of the Comptroller General, shall have access to and right to examine any of the Contractor's directly pertinent records involving transactions related to this contract.

(2) The Contractor shall make available at its offices at all reasonable times the records, materials, and other evidence for examination, audit, or reproduction, until 3 years after final payment under this contract or for any shorter period specified in FAR Subpart 4.7, Contractor Records Retention, of the other clauses of this contract. If this contract is completely or partially terminated, the records relating to the work terminated shall be made available for 3 years after any resulting final termination settlement. Records relating to appeals under the disputes clause or to litigation or the settlement of claims arising under or relating to this contract shall be made available until such appeals, litigation, or claims are finally resolved.

(3) As used in this clause, records include books, documents, accounting procedures and practices, and other data, regardless of type and regardless of form. This does not require the Contractor to create or maintain any record that the Contractor does not maintain in the ordinary course of business or pursuant to a provision of law.

(e) (1) Notwithstanding the requirements of the clauses in paragraphs (a), (b), (c), and (d) of this clause, the

Contractor is not required to flow down any FAR clause, other than those in this paragraph (e)(1)in a subcontract for commercial items. Unless otherwise indicated below, the extent of the flow down shall be as required by the clause—

(i) 52.203-13, Contractor Code of Business Ethics and Conduct (Oct 2015) (41 U.S.C. 3509).

(ii) 52.203-19, Prohibition on Requiring Certain Internal Confidentiality Agreements or Statements (JAN 2017)

(section 743 of Division E, Title VII, of the Consolidated and Further Continuing Appropriations Act, 2015 (Pub. L.

113-235) and its successor provisions in subsequent appropriations acts (and as extended in continuing resolutions)).

(iii) 52.219-8, Utilization of Small Business Concerns (Nov 2016) (15 U.S.C. 637(d)(2) and (3)), in all subcontracts that offer further subcontracting opportunities. If the subcontract (except subcontracts to small business concerns) exceeds $700,000 ($1.5 million for construction of any public facility), the subcontractor must include 52.219-8 in lower tier subcontracts that offer subcontracting opportunities.

(iv) 52.222-17, Nondisplacement of Qualified Workers (MAY 2014) (E.O. 13495). Flow down required in accordance with paragraph (l) of FAR clause 52.222-17.

(v) 52.222-21, Prohibition of Segregated Facilities (Apr 2015).

(vi) 52.222-26, Equal Opportunity (Sept 2016) (E.O. 11246).

(vii) 52.222-35, Equal Opportunity for Veterans (Oct 2015) (38 U.S.C. 4212).

(viii) 52.222-36, Equal Opportunity for Workers with Disabilities (Jul 2014) (29 U.S.C. 793).

(ix) 52.222-37, Employment Reports on Veterans (Feb 2016) (38 U.S.C. 4212).

(x) 52.222-40, Notification of Employee Rights Under the National Labor Relations Act (Dec 2010) (E.O. 13496).

Flow down required in accordance with paragraph (f) of FAR clause 52.222-40.

(xi) 52.222-41, Service Contract Labor Standards (May 2014), (41 U.S.C. chapter 67).

(xii) _____ (A) 52.222-50, Combating Trafficking in Persons (March 2, 2015) (22 U.S.C. chapter 78 and E.O.

13627).

_____ (B) Alternate I (March 2, 2015) of 52.222-50 (22 U.S.C. chapter 78 and E.O. 13627).

(xiii) 52.222-51, Exemption from Application of the Service Contract Labor Standards to Contracts for

Maintenance, Calibration, or Repair of Certain Equipment--Requirements (May 2014) (41 U.S.C. chapter 67.)

(xiv) 52.222-53, Exemption from Application of the Service Contract Labor Standards to Contracts for Certain

Services--Requirements (May 2014) (41 U.S.C. chapter 67)

(xv) 52.222-54, Employment Eligibility Verification (Oct 2015) (E. O. 12989).

(xvi)52.222-55, Minimum Wages Under Executive Order 13658 (Dec 2015) (E.O. 13658).

(xvii) 52.222-59, Compliance with Labor Laws (Executive Order 13673) (OCT 2016) (Applies at $50 million for solicitations and resultant contracts issued from October 25, 2016 through April 24, 2017; applies at $500,000 for solicitations and resultant contracts issued after April 24, 2017).

Note to paragraph (e)(1)(xvii): By a court order issued on October 24, 2016, 52.222-59 is enjoined indefinitely as of the date of the order. The enjoined paragraph will become effective immediately if the court terminates the injunction. At that time, DoD, GSA, and NASA will publish a document in the Federal Register advising the public of the termination of the injunction.

(xviii) 52.222-60, Paycheck Transparency (Executive Order 13673) (OCT 2016)).

(xix) (A) 52.224-3, Privacy Training (JAN 2017) (5 U.S.C. 552a).

(B) Alternate I (JAN 2017) of 52.224-3.

(xx) 52.222-62 Paid Sick Leave Under Executive Order 13706 (JAN 2017) (E.O. 13706).

(xxi) 52.225-26, Contractors Performing Private Security Functions Outside the United States (Oct 2016) (Section

862, as amended, of the National Defense Authorization Act for Fiscal Year 2008; 10 U.S.C. 2302 Note).

(xxii) 52.226-6, Promoting Excess Food Donation to Nonprofit Organizations. (May 2014) (42 U.S.C. 1792). Flow down required in accordance with paragraph (e) of FAR clause 52.226-6.

(xxiii) 52.247-64, Preference for Privately-Owned U.S. Flag Commercial Vessels (Feb 2006) (46 U.S.C. Appx

1241(b) and 10 U.S.C. 2631). Flow down required in accordance with paragraph (d) of FAR clause 52.247-64.

(2) While not required, the Contractor may include in its subcontracts for commercial items a minimal number of additional clauses necessary to satisfy its contractual obligations.

(End of clause)

52.252-2 CLAUSES INCORPORATED BY REFERENCE (FEB 1998)

This contract incorporates one or more clauses by reference, with the same force and effect as if they were given in full text. Upon request, the Contracting Officer will make their full text available. Also, the full text of a clause may be accessed electronically at this/these address(es):

FAR Clauses: http://acquisition.gov/far/

DFARS Clauses: http://www.acq.osd.mil/dpap/dars/dfars/

252.204-7008 COMPLIANCE WITH SAFEGUARDING COVERED DEFENSE INFORMATION CONTROLS

(OCT 2016)

(a) Definitions. As used in this provision--

Controlled technical information, covered contractor information system, covered defense information, cyber incident, information system, and technical information are defined in clause 252.204-7012, Safeguarding Covered

Defense Information and Cyber Incident Reporting.

(b) The security requirements required by contract clause 252.204-7012 shall be implemented for all covered defense information on all covered contractor information systems that support the performance of this contract.

(c) For covered contractor information systems that are not part of an information technology service or system operated on behalf of the Government (see 252.204-7012(b)(2))--http://acquisition.gov/far/ http://www.acq.osd.mil/dpap/dars/dfars/

(1) By submission of this offer, the Offeror represents that it will implement the security requirements specified by

National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171, ``Protecting Controlled

Unclassified Information in Nonfederal Information Systems and Organizations'' (see http://dx.doi.org/10.6028/NIST.SP.800-171) that are in effect at the time the solicitation is issued or as authorized by the contracting officer not later than December 31, 2017.

(2)(i) If the Offeror proposes to vary from any of the security requirements specified by NIST SP 800-171 that are in effect at the time the solicitation is issued or as authorized by the Contracting Officer, the Offeror shall submit to the Contracting Officer, for consideration by the DoD Chief Information Officer (CIO), a written explanation of—

(A) Why a particular security requirement is not applicable; or

(B) How an alternative but equally effective, security measure is used to compensate for the inability to satisfy a particular requirement and achieve equivalent protection.

(ii) An authorized representative of the DoD CIO will adjudicate offeror requests to vary from NIST SP 800-171 requirements in writing prior to contract award. Any accepted variance from NIST SP 800-171 shall be incorporated into the resulting contract.

(End of provision)

252.204-7012 SAFEGUARDING COVERED DEFENSE INFORMATION AND CYBER INCIDENT

REPORTING (OCT 2016)

(a) Definitions. As used in this clause--

Adequate security means protective measures that are commensurate with the consequences and probability of loss, misuse, or unauthorized access to, or modification of information.

Compromise means disclosure of information to unauthorized persons, or a violation of the security policy of a system, in which unauthorized intentional or unintentional disclosure, modification, destruction, or loss of an object, or the copying of information to unauthorized media may have occurred.

Contractor attributional/proprietary information means information that identifies the contractor(s), whether directly or indirectly, by the grouping of information that can be traced back to the contractor(s) (e.g., program description, facility locations), personally identifiable information, as well as trade secrets, commercial or financial information, or other commercially sensitive information that is not customarily shared outside of the company.

Controlled technical information means technical information with military or space application that is subject to controls on the access, use, reproduction, modification, performance, display, release, disclosure, or dissemination.

Controlled technical information would meet the criteria, if disseminated, for distribution statements B through F using the criteria set forth in DoD Instruction 5230.24, Distribution Statements on Technical

Documents. The term does not include information that is lawfully publicly available without restrictions.

Covered contractor information system means an unclassified information system that is owned, or operated by or for, a contractor and that processes, stores, or transmits covered defense information.

Covered defense information means unclassified controlled technical information or other information, as described in the Controlled Unclassified Information (CUI) Registry at http://www.archives.gov/cui/registry/category-http://dx.doi.org/10.6028/NIST.SP.800-171 http://www.archives.gov/cui/registry/category-list.html list.html, that requires safeguarding or dissemination controls pursuant to and consistent with law, regulations, and

Governmentwide policies, and is--

(1) Marked or otherwise identified in the contract, task order, or delivery order and provided to the contractor by or on behalf of DoD in support of the performance of the contract; or

(2) Collected, developed, received, transmitted, used, or stored by or on behalf of the contractor in support of the performance of the contract.

Cyber incident means actions taken through the use of computer networks that result in a compromise or an actual or potentially adverse effect on an information system and/or the information residing therein.

Forensic analysis means the practice of gathering, retaining, and analyzing computer-related data for investigative purposes in a manner that maintains the integrity of the data.

Information system means a discrete set of information resources organized for the collection, processing, maintenance, use, sharing, dissemination, or disposition of information.

Malicious software means computer software or firmware intended to perform an unauthorized process that will have adverse impact on the confidentiality, integrity, or availability of an information system. This definition includes a virus, worm, Trojan horse, or other code-based entity that infects a host, as well as spyware and some forms of adware.

Media means physical devices or writing surfaces including, but is not limited to, magnetic tapes, optical disks, magnetic disks, large-scale integration memory chips, and printouts onto which covered defense information is recorded, stored, or printed within a covered contractor information system.

Operationally critical support means supplies or services designated by the Government as critical for airlift, sealift, intermodal transportation services, or logistical support that is essential to the mobilization, deployment, or sustainment of the Armed Forces in a contingency operation.

Rapidly report means within 72 hours of discovery of any cyber incident.

Technical information means technical data or computer software, as those terms are defined in the clause at

DFARS 252.227-7013, Rights in Technical Data--Noncommercial Items, regardless of whether or not the clause is incorporated in this solicitation or contract. Examples of technical information include research and engineering data, engineering drawings, and associated lists, specifications, standards, process sheets, manuals, technical reports, technical orders, catalog-item identifications, data sets, studies and analyses and related information, and computer software executable code and source code.

(b) Adequate security. The Contractor shall provide adequate security on all covered contractor information systems.

To provide adequate security, the Contractor shall implement, at a minimum, the following information security protections:

(1) For covered contractor information systems that are part of an information technology (IT) service or system operated on behalf of the Government, the following security requirements apply:

(i) Cloud computing services shall be subject to the security requirements specified in the clause 252.239-7010, Cloud Computing Services, of this contract.

(ii) Any other such IT service or system (i.e., other than cloud computing) shall be subject to the security requirements specified elsewhere in this contract.

http://www.archives.gov/cui/registry/category-list.html

(2) For covered contractor information systems that are not part of an IT service or system operated on behalf of the

Government and therefore are not subject to the security requirement specified at paragraph (b)(1) of this clause, the following security requirements apply:

(i) Except as provided in paragraph (b)(2)(ii) of this clause, the covered contractor information system shall be subject to the security requirements in National Institute of Standards and Technology (NIST)

Special Publication (SP) 800-171, ``Protecting Controlled Unclassified Information in Nonfederal Information

Systems and Organizations'' (available via the internet at http://dx.doi.org/10.6028/NIST.SP.800-171) in effect at the time the solicitation is issued or as authorized by the Contracting Officer.

(ii)(A) The Contractor shall implement NIST SP 800-171, as soon aspractical, but not later than December 31, 2017.

For all contracts awarded prior to October 1, 2017, the Contractor shall notify the DoD Chief Information Officer

(CIO), via email at osd.dibcsia@mail.mil, within 30 days of contract award, of any security requirements specified by NIST SP 800-171 not implemented at the time of contract award.

(B) The Contractor shall submit requests to vary from NIST SP 800-171 in writing to the Contracting Officer, for consideration by the DoD CIO. The Contractor need not implement any security requirement adjudicated by an authorized representative of the DoD CIO to be nonapplicable or to have an alternative, but equally effective, security measure that may be implemented in its place.

(C) If the DoD CIO has previously adjudicated the contractor's requests indicating that a requirement is not applicable or that an alternative security measure is equally effective, a copy of that approval shall be provided to the Contracting Officer when requesting its recognition under this contract.

(D) If the Contractor intends to use an external cloud service provider to store, process, or transmit any covered defense information in performance of this contract, the Contractor shall require and ensure that the cloud service provider meets security requirements equivalent to those established by the Government for the Federal Risk and Authorization Management Program (FedRAMP) Moderate baseline

(https://www.fedramp.gov/resources/documents/) and that the cloud service provider complies with requirements in paragraphs (c) through (g) of this clause for cyber incident reporting, malicious software, media preservation and protection, access to additional information and equipment necessary for forensic analysis, and cyber incident damage assessment.

(3) Apply other information systems security measures when the Contractor reasonably determines that information systems security measures, in addition to those identified in paragraphs (b)(1) and (2) of this clause, may be required to provide adequate security in a dynamic environment or to accommodate special circumstances (e.g., medical devices) and any individual, isolated, or temporary deficiencies based on an assessed risk or vulnerability. These measures may be addressed in a system security plan.

(c) Cyber incident reporting requirement.

(1) When the Contractor discovers a cyber incident that affects a covered contractor information system or the covered defense information residing therein, or that affects the contractor's ability to perform the requirements of the contract that are designated as operationally critical support and identified in the contract, the Contractor shall--

(i) Conduct a review for evidence of compromise of covered defense information, including, but not limited to, identifying compromised computers, servers, specific data, and user accounts. This review shall also include analyzing covered contractor information system(s) that were part of the cyber incident, as well as other information systems on the Contractor's network(s), that may have been accessed as a result of the incident in order to identify compromised covered defense information, or that affect the Contractor's ability to provide operationally critical support; and

(ii) Rapidly report cyber incidents to DoD at http://dibnet.dod.mil.

http://dx.doi.org/10.6028/NIST.SP.800-171 mailto:osd.dibcsia@mail.mil https://www.fedramp.gov/resources/documents/ http://dibnet.dod.mil/

(2) Cyber incident report. The cyber incident report shall be treated as information created by or for DoD and shall include, at a minimum, the required elements at http://dibnet.dod.mil.

(3) Medium assurance certificate requirement. In order to report cyber incidents in accordance with this clause, the

Contractor or subcontractor shall have or acquire a DoD-approved medium assurance certificate to report cyber incidents. For information on obtaining a DoD-approved medium assurance certificate, see http://iase.disa.mil/pki/eca/Pages/index.aspx.

(d) Malicious software. When the Contractor or subcontractors discover and isolate malicious software in connection with a reported cyber incident, submit the malicious software to DoD Cyber Crime Center

(DC3) in accordance with instructions provided by DC3 or the Contracting Officer.