RFQ_-_C A_-_VOIP.docx

This is a Request for Quotation (RFQ) for a commercial item(s) prepared in accordance with the information in FAR Part 13

SALES TAX EXEMPTION

The contractor is hereby advised that the United States Government and Agencies thereof are exempt from State and Local Government tax by virtue of Article 6 of the United States Constitution. No exemption certificate is required.

1.0 INTRODUCTION

Naval Surface Warfare Center Corona (NSWC, Corona), Command Operations Department Code 104, requires a Firm Fixed Price (FFP) contract for the new Voice over Internet Protocol (VoIP) system’s Information Assurance (IA) Certification and Accreditation (C&A) and Tier 2 Security Engineering support.

2.0 BACKGROUND

Code 104 has a requirement to produce one new Information Assurance (IA) Certification and Accreditations (C&A) for the new VoIP system. Code 104 requires independent validation services, along with C&A support and Tier 2 Security Engineering to fully accredit the new VoIP system.

3.0 SCOPE

The scope of this work is for C&A development, system security validation and Tier 2 Security Engineering support for one (1) new VoIP system.

4.0 APPLICABLE DIRECTIVES/DOCUMENTS

Federal Standards: The Contractor is required to adhere to all applicable standards and guidelines specified in the basic contract. In the absence of named standards, Department of the Navy (DON) standards, applicable Federal Information Processing Standards (FIPS), and broadly accepted professional standards shall prevail as related to the associated industries within the task identified in this Section. The most current version of all documents applies through life of this contract.

APPLICABLE DIRECTIVES

INDUSTRIAL SECURITY

INFORMATION SECURITY

2/24/2012

CH 2 3/19/2013

2/24/2012

CH 2 3/19/2013

2/24/2012

2/24/2012

Executive Order 12968 (as Amended)

Access to Classified Information http://www.gpo.gov/fdsys/pkg/FR-1995-08-07/pdf/95-19654.pdf

8/2/1985

12/29/2009

Executive Order 13556

Controlled Unclassified Information (CUI) http://www.gpo.gov/fdsys/pkg/FR-2010-11-09/pdf/2010-28360.pdf

11/4/2010

May 2006

June 2006

PRIVACY ACT/PII

http://www.dod.gov/pubs/foi/privacy/docs/OMB_22May2007.pdf

5/22/2007

5 U.S.C. 552a

Privacy Act of 1974 http://www.gpo.gov/fdsys/pkg/USCODE-2012-title5/pdf/USCODE-2012-title5-partI-chap5-subchapII-sec552a.pdf

12/31/1974

SECNAVINST 5211.5e

DON Privacy Program http://doni.daps.dla.mil/Directives/05000%20General%20Management%20Security%20and%20Safety%20Services/05-200%20Management%20Program%20and%20Techniques%20Services/5211.5E.pdf

12/28/2005

PERSONNEL SECURITY

DoD 5200.2-R, CH 3

Personnel Security Program http://www.dtic.mil/whs/directives/corres/pdf/520008r.pdf

CH 3 2/23/1996

1/1/1987

DoD Instruction 5200.02 Change 1

DoD Personnel Security Program

3/21/2014

OPERATIONS SECURITY

6/20/2012

National Security Decision Directive (NSDD) 298

National Operations Security Program http://www.reagan.utexas.edu/archives/reference/Scanned%20NSDS/NSDD298.pdf

1/22/1988

PHYSICAL SECURITY

DoD 5200.08-R, CH 1

Physical Security Program

4/9/2007

12/8/2009

4/25/2013

ANTITERRORISM SECURITY

COMMON ACCESS CARD (CAC)

http://www.dtic.mil/whs/directives/corres/pdf/100013_vol1.pdf

1/23/2014

http://www.dtic.mil/whs/directives/corres/pdf/100013_vol2.pdf

1/21/2014

9/9/2014

August 2013

12/22/2011

7/31/2008

8/27/2004

5.0 GENERAL REQUIREMENTS

The Contractor shall provide Information Assurance (IA) C&A support to NSWC Corona in all areas of engineering, technical, information assurance and data management capabilities executed by the Code 104 Division. These tasks will include collection and distribution of data, operation and certification of Code 104 VoIP system.

The Contractor shall provide rapid startup of assigned tasking to address critical issues relating to Department of Defense (DOD) Information Assurance (IA) policy.

5.1 PERFORMANCE REQUIREMENTS

The contractor shall perform the following in order to achieve the outcomes desired by the government under this contract.

5.1.1 Engineering Technical Support for the New VoIP System (CLIN 0001)

A. Generate Information Assurance (IA) and Certification and Accreditation (C&A) documentation for the new VoIP system in coordination with local IA Officer, Project Leads, and System Administrators.

These tasks will include:

1. Make recommendations and provide guidance based on DoD IA standards in order to meet IA compliance for system engineering activities.

2. Ensure Certification and Accreditation (C&A) and IA compliance in accordance with the current Department of Defense (DOD) and Department of the Navy (DON) IT instructions and policies for all IT devices owned and supported by the customer.

3. Perform initial system hardening of any VoIP IT assets by applying required IA policy and processes.

4. Perform initial on-site scanning of the systems once they are have had applied Information Assurance policy.

5. Remediate findings until acceptable for C&A package submission.

6. Perform the creation, maintenance, updating, and revising all documentation required by the cognizant Designated Approving Authority (DAA) for the new Code 104 VoIP system. Perform all steps stipulated in DOD and DON instructions and from collaboration meetings and reviews to coordinate and ensure Code 104 VoIP system are accredited in accordance with current DoD and DON policies. All C&A documents will be turned over to the customer.

7. Perform validation services for the new VoIP system.

8. Update the Enterprise Mission Assurance Support Service (eMASS) system as required

9. Serve as a Navy Certification Agent and have a current appointment by the Navy Certifying Authority as a Fully Qualified Navy Certification Agent for this new VoIP system.

These services are to be provided at: NSWC Corona

B. In coordination with the local IA Officer, Project Leads, and System Administrators, provide monthly system management and maintenance once the new systems have received an Authority to Operate (ATO) and.

1. Assist in the installation software updates and reviews of any new operating systems.

2. Assist in any system installation/upgrades as required.

3. Perform vulnerability tests, scans, patches, security assessments, and remediation for the new VoIP system to maintain DOD and DON IT compliance as system goes through upgrades and throughout the lifecycle of the system.

4. Perform the creation and maintenance of Plan of Action & Milestones (POA&Ms) in the event the system exhibit open findings. Assist with the production of a remediation POA&M in coordination with the local IA Officer, Project Leads, and System Administrators.

5. Provide summary data, status reports, and graphs for internal and external IA compliance and technical information gathering that result from data calls given by the Command.

6. Prepare the responses to various IA audits and security inspection questions. Be present during audits and act as technical liaison for audit team(s) to obtain passing and satisfactory audit results in the IA compliance area.

7. Attend weekly IA meetings and specific program meetings.

These services are to be provided at: NSWC Corona

5.1.2 Required Qualifications of Contractor

5.1.2.1 C&A Qualifications:

1. Validator C&A personnel must have experience developing Navy Certification & Accreditation packages.

2. Shall be a Fully Qualified Navy Validator. Validator shall be IAT Level 3 certified under Cybersecurity Workforce.

3. Shall have completed or initiated Single Scope Background Investigation (SSBI) for position sensitivity IT-I.

4. Shall have developed policy for Navy Certification & Accreditation.

5. Shall have experience with working with the NAVSEA Echelon 2 command representatives, Navy CA Liaisons, & NAO action officers.

6. Shall have experience with configuration and management of host based security system (HBSS).

5.1.2.2 Non-Validator C&A personnel qualifications:

1. Shall be minimum IAT Level 2 certified under Cybersecurity Workforce.

2. Shall have completed or initiated Single Scope Background Investigation (SSBI) for position sensitivity IT-I.

6.0 DELIVERABLES

Deliverables under this contract shall be provided in accordance with “DON Policy on Digital Product/Technical Data,” ASN RD&A MEMO of 23 Oct 04 and shall be provided in accordance with the Contract Data Requirements Lists, (CDRL, DD Form 1423 and supporting Data Item Descriptions (DIDs).

7.0 GOVERNMENT FURNISHED PROPERTY (GFP)

The Government will provide up to two (2) workspaces at NSWC Corona with up to two (2) Naval Marine Corps Intranet (NMCI) computers. The Government will make at least 1 laptop available for vulnerability scanning. The Government will provide electronic copies of any existing IA related documentation for the VoIP system owned by Code 104.

8.0 CONTRACTOR EQUIPMENT

The Contractor will be allowed to use Contractor-owned equipment at NSWC Corona sites to perform IT, IA, and C&A tasks provided the equipment is compliant with DOD and DON IA directives. The NSWC Corona ISSM must approve in writing all Contractor equipment used to perform work on this Statement of Work (SOW). Use of e-mail request/approval is acceptable.

9.0 SECURITY

9.1 Security Clearances and Investigations. All personnel shall obtain and maintain background investigations and clearances appropriate to support contract performance. Clearances shall be maintained for the duration of this procurement. Personnel unable to successfully obtain or maintain an appropriate investigation or necessary clearance will immediately, upon notification from Facility Security Officer (FSO), be expected to vacate the installation or performance location. The department manager and security office will also be notified of any such vacancy.

9.2 Clearance Lists. A list of personnel and their security clearances shall be delivered to the (NSWCCORDIV) security office COR no later than 20 business days following award and shall be updated with the monthly personnel listing deliverable and when personnel changes occur.

9.3 General Security Compliance. Contractor personnel shall comply with all DoD, DoN, NAVSEA, NSWCCORDIV, and other performance location’s security instructions, policies, procedures and guidance. These requirements apply both on and off Government property at NSWC Corona, remote sites or travel destinations, to include any established check-in / check-out procedures of personnel occupying Government facilities.

9.4 System Authorization Access Request (SAAR-N) The Contractor shall complete/sign Classified and Unclassified User Authorization Agreements as applicable, using OPNAV 5239/14 SAAR-N forms, and Privileged Access Agreements. Contractor personnel shall complete the DOD Annual Information Awareness training prior to being granted access to government IT systems and must indicate on the OPNAV 5239/14 SAAR-N, the IA training completion date. The Contractor shall submit a copy of their IA training certificates to the NSWCCORDIV COR.

9.5 Security Inspections. Security Inspections (to include Industrial) will occur a minimum of once per year. Department Manager and FSO will be informed of results. Inspections will also typically involve interaction with 2-3 contractor employees. Brief unannounced spot-checks of department occur throughout the year and are at the discretion of the government.

9.6 Foreign Interests. Contractors with defined Foreign Interests (a Facility that is owned, controlled, or influenced by foreign interests) will ensure adherence to DoD and Navy regulations. Full disclosure to the Corona Contracting Officer, COR and security office is mandated.

9.7 Training. Personnel will participate in Annual Security Refresher Brief, New Employee Security Brief, and Annual Counter-Intelligence Brief. FSO will be given initial orientation training either in person or electronically of installation concept of operations as relative to the contract.

9.8 Emergency Management. Employees are expected to register Regional (AtHoc) Emergency Notification System. Contractors will follow Corona emergency preparedness and antiterrorism protocol during designated command emergencies and declared threat conditions.

9.9 Common Access Cards (CACs). CAC issuance is at the discretion of the Government and will only be to personnel who meet at least one of the three following criteria:

(1) The individual requires both access to a DoD facility and logon access to DoD networks on site or remotely.

(2) The applicant requires remote access to DoD networks that use only the CAC logon for user authentication.

(3) The applicant requires frequent access to a DoD network to perform volunteer duties (volunteers only).

9.10 Government Facilities. Access to Government facilities is at the discretion of the Government. The Government reserves the right to rescind access at any time.

9.10.1 In each instance when employees no longer work for a company due to circumstances favorable or unfavorable, the FSO shall ensure the prompt return of the following materials:

(1) Government-owned keys to desks, offices, etc.

(2) CAC, except for CACs issued to retired military personnel and retired civil servants on that basis.

(3) Base Passes, except for passes issued to retired military personnel and retired civil servants on that basis

(4) Base stickers for the employee’s vehicle, except for stickers issued to retired military personnel and retired civil servants on that basis

(5) Government Furnished Equipment (GFE) and Government Furnished Information (GFI), with special attention to Information Technology (IT) equipment, Critical Information (CI), and Critical Program Information (CPI). In executing the provisions above, the contractor may collect the materials listed in that paragraph and return them to the custody of an appropriate Government employee or direct the contractor employee to surrender these items to the security office, whichever is appropriate to the circumstances.

9.11 Isolated Personnel Reporting. Contractor personnel traveling overseas shall contact the Antiterrorism Officer and if required, complete all mandated Foreign Travel requirements.

9.12 Information protection will occur as per any applicable governing directives.

9.13 Contractor personnel granted access to the NMCI network will be required to complete Navy IA or comparable training, at the Government’s discretion, and complete and sign appropriate IA forms required to be granted continued access to Government information technology networks. All IA security concerns will be directed to the Information Assurance Manager.

9.14 Operations Security. Background, Operations Security (OPSEC) is a process for protecting unclassified sensitive information from exploitation by an adversary. Sensitive unclassified information – which is also referred to as CI or CPI – is defined as information that is not classified but which needs to be protected from unauthorized disclosure. Examples are information labeled “For Official Use Only (FOUO),” proprietary information, contractor sensitive information, limited distribution information, and Personally Identifiable Information (PII).

9.14.1 The contractor and all subcontractors shall provide OPSEC protection for sensitive unclassified information as identified in the CI List (see below) paragraphs and CPI List, if applicable. The prime contractor and all subcontractors shall employ the countermeasures listed below in order to protect that information. Additional countermeasures may be employed as necessary. If an OPSEC Plan is provided, the contractor and all subcontractors shall comply with that plan. These OPSEC requirements will be in effect throughout the life of the procurement from award through the conclusion of services at the end of the Period of Performance (PoP) or other procurement termination. If required, the contractor and all subcontractors shall prepare an OPSEC Plan.

9.14.2 Contractor personnel shall follow OPSEC concepts and principles in the conduct of this requirement to protect CI, personnel, facilities, equipment and operations from compromise. The contractor shall consult with the COR within 5 working days of receipt of order to determine all special circumstances affecting OPSEC under this requirement. In any case where there is uncertainty or ambiguity regarding OPSEC measures, the contractor shall consult the COR as soon as possible. If the COR is unavailable, the contractor shall consult the contracting officer instead. The prime contractor and all subcontractors shall provide OPSEC protection for sensitive unclassified information and comply with all OPSEC requirements.

9.14.3 Minimum Protection Requirements for CI. CI is exempt from public release under Exemption 2 of the Freedom of Information Act (FOIA). It is designated “For Official Use Only (FOUO)” and is considered controlled unclassified information. Specific Critical Program Information, for reasons of OPSEC will not be identified to offerors prior to award. CPI will be identified to the successful offeror only after receipt of order.

9.15 Personally Identifiable Information (PII). PII will be protected in accordance with DoD and Navy directives, in such a manner as to prevent unauthorized disclosure. Email containing PII must be encrypted.

9.16 Controlled Unclassified Information (CUI): CUI is official information that requires the application of controls and protective measures for a variety of reasons and has not been approved for public release, to include technical information, proprietary data, information requiring protection under the Privacy Act of 1974, and Government-developed privileged information involving the award of contracts. CUI is a categorical designation that refers to unclassified information that does not meet the standards for National Security Classification under Executive Order(s), but is pertinent to the national interest of the United States or to the important interests of entities outside the Federal Government, and under law or policy requires protection from unauthorized disclosure, special handling safeguards, or prescribed limits on exchange or dissemination.

9.16.1 Minimum Requirements for Access to CUI: Prior to access, contractor personnel requiring access to DoN CUI or "user level access to DoN or DoD networks and information systems, system security and network defense systems, or to system resources providing visual access and/or ability to input, delete or otherwise manipulate sensitive information without controls to identify and deny sensitive information" who do not have clearance eligibility are required to submit a Questionnaire for Public Trust Positions (Standard Form 85P) through the cognizant Facility Security Officer or contractor entity representative for a suitability determination by DoN Central Adjudication Facility.

9.16.2 Minimum Protection Requirements for CUI: Contract deliverables taking the form of unclassified limited-distribution documents (FOUO), are not authorized for public release and therefore shall not be posted on a publicly accessible web server, nor electronically transmitted via electronic mail unless appropriately encrypted.

9.17 Countermeasures. Countermeasures to CI exploitation are required to negate the susceptibility of critical information to exploitation by an adversary or competitor. The contractor shall protect all CI listed in a manner appropriate to the nature of the information, including use of the necessary countermeasures as listed below applicable to specific items:

(1) Encryption of electronically-stored CI.

(2) Encryption of e-mail containing CI.

(3) Storage of hard copy CI, optical media and external hard drives in locked containers when not in use.

(4) Transmission of CI to the minimum set of recipients with a need to know.

(5) Proper marking of CI with warnings to include at a minimum “FOR OFFICIAL USE ONLY”; as appropriate to the nature of the CI it shall also be marked with “UNCLASSIFIED BUT SENSITIVE,” “PRIVACY ACT INFORMATION,” “PERSONALLY IDENTIFYING INFORMATION,” “PROTECT FROM UNAUTHORIZED DISCLOSURE” or other similar statements cautioning protection of the CI.

(6) Restricting disclosure of CI at meetings and conferences (including teleconferences) to the minimum necessary to the performance of this requirement.

(7) Immediate and appropriate destruction in a manner precluding reconstruction of all CI no longer needed under this requirement.

(8) Restricting verbal discussion of CI to venues and circumstances that prevent the monitoring and interception of the discussion by unauthorized personnel.

(9) Maintaining current, successful completion of Navy-mandated IA and OPSEC training by all personnel handling CI.

(10) Refraining from the use of unencrypted cellular telephones to transmit CI.

(11) Refraining from the use of foreign postal systems to ship CI.

(12) Promptly retrieving documents containing CI printed on printers accessible by persons without a need to know the CI.

(13) Use of cover pages or other appropriate means to prevent the viewing of CI by unauthorized persons.

(14) Limiting the inclusion of CI in contract and budget documents, presentations, press releases and other publications to that which is essential to the performance of this requirement.

(15) Use of protected databases and strong passwords and the protection of user identifications (UserIDs).

(16) During test and evaluation events (as applicable to this requirement) practice OPSEC methodologies with respect to staging units, personnel and materials out of the observation of unauthorized persons; desensitization; and the speed of execution of the event.

9.18 Compromise. The contractor shall notify the COR, FSO, and security office immediately of all known and suspected compromises of CI, classified information, or PII. If the COR cannot be reached, the contractor shall notify the Contracting Officer (or the Command Duty Officer if after normal work hours).

9.19 FOUO. The FOUO marking is assigned to information at the time of its creation. It is not authorized as a substitute for a security classification marking but is used on official Government information that may be withheld from the public under exemptions 2 through 9 of the Freedom of Information Act (FOIA). Use of FOUO markings does not mean that the information can’t be released to the public, only that it must be reviewed by the Government prior to its release to determine whether a significant and legitimate government purpose is served by withholding the information or portions of it.

9.19.1 All UNCLASSIFIED documents created under this procurement that contain FOUO information will be marked “FOR OFFICIAL USE ONLY” on the bottom of the cover page and interior pages.

9.19.2 Classified documents containing FOUO do not require any markings on the cover of the document. However, the interior pages containing only FOUO information shall be marked at the top and bottom center with “FOR OFFICIAL USE ONLY.” Only unclassified portions containing FOUO shall be marked with “(FOUO)” immediately before each unclassified FOUO portion.

9.19.3 All FOUO information released to the contractor will be marked with the following statement prior to transfer:

THIS DOCUMENT CONTAINS INFORMATION EXEMPT FROM MANDATORY

DISCLOSURE UNDER THE FOIA. EXEMPTIONS(S) ______ APPLY.

9.19.4 Removal of the FOUO marking may be accomplished only by the originator or other competent authority. The contractor SHALL NOT REMOVE ANY FOUO MARKING WITHOUT WRITTEN AUTHORIZATION FROM NSWC CORONA OR THE AUTHOR. The Government will notify the contractor when the FOUO status is terminated.

9.19.5 The contractor is authorized to disseminate FOUO information to its employees and those having a need to know the information in order to accomplish the requirements of this procurement.

9.19.6 During working hours, reasonable steps shall be taken to minimize the risk of access to FOUO information by unauthorized personnel. FOUO information shall be placed in an out-of-sight location if the work area is accessible to persons who do not have a need to know the information in order to perform the requirements of this procurement. During non-working hours, the FOUO information shall be stored in a locked desk, file cabinet, bookcase, rooms, or other lockable container or space affording reasonable protection from unauthorized disclosure.

9.19.7 FOUO information may be transmitted via US postal service first-class mail, parcel post and fourth-class mail for bulk shipments only. The contractor shall not permit FOUO information to enter foreign postal systems and parcel delivery systems.

9.19.8 When no longer needed, FOUO information shall either be returned to appropriate Government custody or destroyed in a manner precluding reconstruction of the information.

9.19.9 Electronic transmission of FOUO information (via voice, data, or facsimile transmission) shall be by approved secure communications systems (such as encryption if unclassified). If circumstances preclude the use of such a system, the contractor shall consult the COR; if the COR is not available and time requirements do not permit delay, the contractor shall consult the contracting officer.

9.20 ACCESS BRIEFINGS. FSO will provide any necessary access briefings required for contract performance (NATO, CNWDI, etc.).

9.21 COMSEC. Specific COMSEC guidance will be provided upon award of the contract and via the Corona EKMS Manager.

9.22 Couriering. FSO will provide a courier briefing to any personnel designated to courier classified material in support of contract performance. FSO will provide the NSWCCORDIV security office list of any personnel authorized (briefed) to courier classified material with applicable details (CONUS/OCONUS), clearance level, and expiration date. This list will also be reconciled and forwarded to the security office as changes occur.

9.23 Classified information performance will occur only at locations specified in the DD254.

9.24 The prime contracted FSO will immediately provide the COR a copy of any DD254 subcontracting classified information performance.

10.0 ON-SITE ENVIRONMENTAL AWARENESS

(a) In accordance with 29 CFR 1925 Safety and Health Standards for Federal Service Contracts, the contractor shall strictly adhere to Federal Occupational Safety and Health Administration (OSHA) Regulations, Environmental Protection Agency (EPA) Regulations, and all applicable state and local requirements.

(b) In accordance with OPNAVINST 5090.1 (series) the contractor shall ensure that each contractor employee reads the NSWC Corona Division document entitled, “Commanding Officer’s Environmental and Natural Resources Policy statement” within 30 days of commencing performance at NSWC Corona Division. This document is available at https://intranet.crna.nmci.navy.mil/CMD/wwwroot2/ or you can contact your Contracting Officer Representative (COR) ) or Subject Matter Expert (SME) for additional assistance/options.

(c) In accordance with OPNAVINST 5090.1 (series) the contractor shall ensure that each contractor employee who will be resident at NSWC Corona Division completes the Environmental Management System (EMS) Awareness training within 30 days of commencing performance at NSWC Corona Division. This training is available at https://www.navfac.ecatts.com/ or you can contact your Contracting Officer Representative (COR) ) or Subject Matter Expert (SME) for additional options.

(d) In accordance with OPNAVINST 5090.1 (series) the contractor shall certify that employees have read the NSWC Corona Divisions document entitled “Commanding Officer’s Environmental and Natural Resources Policy statement” and taken the Environmental Management System (EMS) Awareness training within 30 days of commencing performance at NSWC Corona Division. This shall be accomplished by e-mail to their Contracting Officer Representative (COR) ) or Subject Matter Expert (SME) with a copy to Environmental, Safety and Health (ESH) Program Office (Code 013) (joseph.edgman@navy.mil). The e-mail shall include the employees name, work site, and contract number.

(e) In accordance with OPNAVINST 5090.1 (series) the contractor shall complete the “ECATTS Training Workbook” for each contractor employee who will be resident at NSWC Corona Division within 30 days of commencing performance at NSWC Corona Division. This document is available at https://intranet.crna.nmci.navy.mil/CMD/wwwroot2/ or you can contact your Contracting Officer Representative (COR) ) or Subject Matter Expert (SME) for additional assistance/options.

11.0 ON-SITE SAFETY AWARENESS

(a) In accordance with 29 CFR 1925 Safety and Health Standards for Federal Service Contracts, the contractor company shall strictly adhere to Federal Occupational Safety and Health Administration (OSHA) Regulations, Environmental Protection Agency (EPA) Regulations, and all applicable state and local requirements. OSHA Directive CSP 03-01-003 Voluntary Protection Programs (VPP) Policies and Protection Manual defines contractors into two categories.

1) Applicable Contractor. A contractor whose employees worked at least 1,000 hours for a VPP participant in any calendar quarter within the last 12 months and are not directly supervised by the applicant/participant.

2) Nested Contractor. Reference (a) does not specifically define this term. However, in discussing injury and illness data requirements for contractors, the OSHA guidance states that “nested contractors. . . are supervised by host site management”, and “are regularly intermingled with the owner’s employees and under direct supervision by management”.

(b) In accordance with OPNAVINST 5100.23(series) and OSHA Directive CSP 03-01-003, our command is to ensure that all contractor employees have read the NSWC Corona Divisions document entitled, “Commanding Officers Occupational Safety and Health Policy Statement” and “Occupational Safety and Health Administration (OSHA) Voluntary Protection Programs (VPP) document” within 30 days of commencing performance. This document is available at https://intranet.crna.nmci.navy.mil/CMD/wwwroot2/ or you can contact your Contracting Officer Representative (COR) or Subject Matter Expert (SME) for additional assistance/options.

(c) In accordance with OPNAVINST 5100.23(series) and OSHA Directive CSP 03-01-003, our command is to ensure that all nested contractor employees completes the Voluntary Protection Program (VPP) Awareness Training within 30 days of commencing performance at NSWC Corona Division. This document is available at https://intranet.crna.nmci.navy.mil/CMD/wwwroot2/ or you can contact your Contracting Officer Representative (COR) ) or Subject Matter Expert (SME) for additional assistance/options.

(d) In accordance with 29 CFR 1904 and OSHA Directive CSP 03-01-003, the contractor company shall certify that all contractor employees have read the NSWC Corona Divisions document entitled “Commanding Officers Occupational Safety and Health Policy Statement” and “Occupational Safety and Health Administration (OSHA) Voluntary Protection Programs (VPP) document” and all nested contractor employees have taken the Voluntary Protection Program (VPP) awareness training within 30 days of commencing performance at NSWC Corona Division. This can be accomplished by sending an e-mail to their Contracting Officer Representative (COR) ) or Subject Matter Expert (SME) with a copy to Environmental, Safety and Health (ESH) Program Office (Code 013) (joseph.edgman@navy.mil). The document/e-mail shall include the employees name, work site, and contract number.

(e) In accordance with 29 CFR 1904 and OSHA Directive CSP 03-01-003, the contractor company shall submit their OSHA 300 Logs (injury/illness rates) within 30 days of commencing performance at NSWC Corona Division to their Contracting Officer Representative (COR) ) or Subject Matter Expert (SME) with a copy to Environmental, Safety and Health (ESH) Program Office for review by the ESH Manager (Code 013).

(f) In accordance with 29 CFR 1904 Standards for Recording and Reporting Occupational Injuries and Illness, the contractor shall post their OSHA 300 Logs in a conspicuous place where employee notices are posted immediately upon commencing performance and at intervals as required by CFR.

(g) In accordance with 29 CFR 1904 and OSHA Directive CSP 03-01-003, require Contractor Company to provide quarterly reports of recordable cases and hours worked so that site OSHA recordkeeping personnel can calculate and monitor contractor TCIR/DART rates. Only include cases and hours for work performed at the VPP participant's site.

(h) In accordance with OPNAVINST 5100.23(series) and OSHA Directive CSP 03-01-003, the applicable contractor company shall submit Total Case Incident Rate (TCIR) and Days Away, Restricted and Transfer (DART) rates for the past three years within 30 days of commencing performance at NSWC Corona Division to their Contracting Officer Representative (COR) with a copy to Environmental, Safety and Health (ESH) Program Office for review by the ESH Manager (Code 013).

(i) In accordance with 29 CFR 1904 and OSHA Directive CSP 03-01-003, the contractor shall report all work-related injuries/illnesses that occurred while working at NSWC Corona Division to their Contracting Officer Representative (COR) ) or Subject Matter Expert (SME) and to Environmental, Safety and Health (ESH) Program Office for review by the ESH Manager (Code 013).

(j) In accordance with 29 CFR 1925 and OSHA Directive CSP 03-01-003, the contractor shall ensure that all contractor employees working at NSWC Corona Division are briefed with the applicable sections of the Safety and Occupational Health (SOH) Program Manual (NSWCCORDIVINST 5100.3(series)). This document is available at https://intranet.crna.nmci.navy.mil/CMD/wwwroot2/ or you can contact your Contracting Officer Representative (COR) ) or Subject Matter Expert (SME) for additional assistance/options.

These are requirement from OSHA Code of Federal Regulations (CFR), 29 CFR 1910 Standards for General Industry, and 29 CFR 1925 Safety and Health Standards for Federal Service Contracts, and from OPNAVINST 5090.1 (series)

12.0 PLACES OF PERFORMANCE

The Contractor shall perform work at the following location:

NSWC CORONA DIVISION

ATTN: Hao Nguyen, Code 104/ (951) 393-4469

1999 FOURTH ST

NORCO, CA 92860

Contractor’s facility:

TBD

PERIOD OF PERFORMANCE:

Contracted Period of performance is 03 October 2016 – 02 October 2017

PERIOD OF PERFORMANCE BY CLIN:

Services: CLIN 0001: Support to commence within 14 days after receipt of order (ARO).

CLAUSES INCORPORATED BY REFERENCE

252.204-7012 SAFEGUARDING OF UNCLASSIFIED CONTROLLED TECHNICAL INFORMATION (NOV 2013)

(End of Text)

CLAUSES INCORPORATED BY FULL TEXT

252.232-7006 WIDE AREA WORKFLOW PAYMENT INSTRUCTIONS (MAY 2013)

(a) Definitions. As used in this clause--

Department of Defense Activity Address Code (DoDAAC) is a six position code that uniquely identifies a unit, activity, or organization.

Document type means the type of payment request or receiving report available for creation in Wide Area WorkFlow (WAWF).

Local processing office (LPO) is the office responsible for payment certification when payment certification is done external to the entitlement system.

(b) Electronic invoicing. The WAWF system is the method to electronically process vendor payment requests and receiving reports, as authorized by DFARS 252.232-7003, Electronic Submission of Payment Requests and Receiving Reports.

(c) WAWF access. To access WAWF, the Contractor shall--

(1) Have a designated electronic business point of contact in the Central Contractor Registration at https://www.acquisition.gov; and

(2) Be registered to use WAWF at https://wawf.eb.mil/ following the step-by-step procedures for self-registration available at this Web site.

(d) WAWF training. The Contractor should follow the training instructions of the WAWF Web-Based Training Course and use the Practice Training Site before submitting payment requests through WAWF. Both can be accessed by selecting the "Web Based Training" link on the WAWF home page at https://wawf.eb.mil/.

(e) WAWF methods of document submission. Document submissions may be via Web entry, Electronic Data Interchange, or File Transfer Protocol.

(f) WAWF payment instructions. The Contractor must use the following information when submitting payment requests and receiving reports in WAWF for this contract/order:

(1) Document type. The Contractor shall use the following document type(s).

X - Invoicing and Receiving Report Combo (FFP Supply)

(2) Inspection/acceptance location. The Contractor shall select the following inspection/acceptance location(s) in WAWF, as specified by the contracting officer.

DESTINATION / DESTINATION

(3) Document routing. The Contractor shall use the information in the Routing Data Table below only to fill in applicable fields in WAWF when creating payment requests and receiving reports in the system.

Routing Data Table*

(4) Payment request and supporting documentation. The Contractor shall ensure a payment request includes appropriate contract line item and subline item descriptions of the work performed or supplies delivered, unit price/cost per unit, fee (if applicable), and all relevant back-up documentation, as defined in DFARS Appendix F, (e.g. timesheets) in support of each payment request.

(5) WAWF email notifications. The Contractor shall enter the email address identified below in the "Send Additional Email Notifications" field of WAWF once a document is submitted in the system.

CRNA_WAWF_COMPTROL@navy.mil, vernon.fowler@navy.mil, CRNA_FISC_MAILBOX@navy.mil, TBD@navy.mil.

(g) WAWF point of contact. (1) The Contractor may obtain clarification regarding invoicing in WAWF from the following contracting activity's WAWF point of contact.

Dani Hageman (951) 393-4768

(2) For technical WAWF help, contact the WAWF helpdesk at 866-618-5988.

(End of clause)

HQ G-2-0004 PURCHASING OFFICE REPRESENTATIVE

PRODUCT DATA REPORTING AND EVALUATION PROGRAM (PDREP) DEPARTMENT COORDINATOR

Note: Subject Matter Expert (SME) shall be used in lieu of Contracting Officer's Representative (COR)

SUPPLEMENTAL INSTRUCTIONS REGARDING ELECTRONIC INVOICING (NAVSEA) (SEP 2012)

(a) The Contractor agrees to segregate costs incurred under this contract/task order (TO), as applicable, at the lowest level of performance, either at the technical instruction (TI), sub line item number (SLIN), or contract line item number (CLIN) level, rather than on a total contract/TO basis, and to submit invoices reflecting costs incurred at that level. Supporting documentation in Wide Area Workflow (WAWF) for invoices shall include summaries of work charged during the period covered as well as overall cumulative summaries by individual labor categories, rates, and hours (both straight time and overtime) invoiced; as well as, a cost breakdown of other direct costs (ODCs), materials, and travel, by TI, SLIN, or CLIN level. For other than firm fixed price subcontractors, subcontractors are also required to provide labor categories, rates, and hours (both straight time and overtime) invoiced; as well as, a cost breakdown of ODCs, materials, and travel invoiced. Supporting documentation may be encrypted before submission to the prime contractor for WAWF invoice submittal. Subcontractors may email encryption code information directly to the Contracting Officer (CO) and Contracting Officer Representative (COR). Should the subcontractor lack encryption capability, the subcontractor may also email detailed supporting cost information directly to the CO and COR; or other method as agreed to by the CO.

(b) Contractors submitting payment requests and receiving reports to WAWF using either Electronic Data Interchange (EDI) or Secure File Transfer Protocol (SFTP) shall separately send an email notification to the COR and CO on the same date they submit the invoice in WAWF. No payments shall be due if the contractor does not provide the COR and CO email notification as required herein.

52.212-1 INSTRUCTIONS TO OFFERORS--COMMERCIAL ITEMS (JULY 2013)

(a) North American Industry Classification System (NAICS) code and small business size standard. The NAICS code and small business size standard for this acquisition appear in Block 10 of the solicitation cover sheet (SF 1449). However, the small business size standard for a concern which submits an offer in its own name, but which proposes to furnish an item which it did not itself manufacture, is 500 employees.

(b) Submission of offers. Submit signed and dated offers to the office specified in this solicitation at or before the exact time specified in this solicitation. Offers may be submitted on the SF 1449, letterhead stationery, or as otherwise specified in the solicitation. As a minimum, offers must show--

(1) The solicitation number;

(2) The time specified in the solicitation for receipt of offers;

(3) The name, address, and telephone number of the offeror;

(4) A technical description of the items being offered in sufficient detail to evaluate compliance with the requirements in the solicitation. This may include product literature, or other documents, if necessary;

(5) Terms of any express warranty;

(6) Price and any discount terms;

(7) "Remit to" address, if different than mailing address;

(8) A completed copy of the representations and certifications at FAR 52.212-3 (see FAR 52.212-3(b) for those representations and certifications that the offeror shall complete electronically);

(9) Acknowledgment of Solicitation Amendments;

(10) Past performance information, when included as an evaluation factor, to include recent and relevant contracts for the same or similar items and other references (including contract numbers, points of contact with telephone numbers and other relevant information); and

(11) If the offer is not submitted on the SF 1449, include a statement specifying the extent of agreement with all terms, conditions, and provisions included in the solicitation. Offers that fail to furnish required representations or information, or reject the terms and conditions of the solicitation may be excluded from consideration.

(c) Period for acceptance of offers. The offeror agrees to hold the prices in its offer firm for 30 calendar days from the date specified for receipt of offers, unless another time period is specified in an addendum to the solicitation.

(d) Product samples. When required by the solicitation, product samples shall be submitted at or prior to the time specified for receipt of offers. Unless otherwise specified in this solicitation, these samples shall be submitted at no expense to the Government, and returned at the sender's request and expense, unless they are destroyed during preaward testing.

(e) Multiple offers. Offerors are encouraged to submit multiple offers presenting alternative terms and conditions or commercial items for satisfying the requirements of this solicitation. Each offer submitted will be evaluated separately.

(f) Late submissions, modifications, revisions, and withdrawals of offers:

(1) Offerors are responsible for submitting offers, and any modifications, revisions, or withdrawals, so as to reach the Government office designated in the solicitation by the time specified in the solicitation. If no time is specified in the solicitation, the time for receipt is 4:30 p.m., local time, for the designated Government office on the date that offers or revisions are due.

(2)(i) Any offer, modification, revision, or withdrawal of an offer received at the Government office designated in the solicitation after the exact time specified for receipt of offers is "late" and will not be considered unless it is received before award is made, the Contracting Officer determines that accepting the late offer would not unduly delay the acquisition; and--

(A) If it was transmitted through an electronic commerce method authorized by the solicitation, it was received at the initial point of entry to the Government infrastructure not later than 5:00 p.m. one working day prior to the date specified for receipt of offers; or

(B) There is acceptable evidence to establish that it was received at the Government installation designated for receipt of offers and was under the Government's control prior to the time set for receipt of offers; or

(C) If this solicitation is a request for proposals, it was the only proposal received.

(ii) However, a late modification of an otherwise successful offer, that makes its terms more favorable to the Government, will be considered at any time it is received and may be accepted.

(3) Acceptable evidence to establish the time of receipt at the Government installation includes the time/date stamp of that installation on the offer wrapper, other documentary evidence of receipt maintained by the installation, or oral testimony or statements of Government personnel.

(4) If an emergency or unanticipated event interrupts normal Government processes so that offers cannot be received at the Government office designated for receipt of offers by the exact time specified in the solicitation, and urgent Government requirements preclude amendment of the solicitation or other notice of an extension of the closing date, the time specified for receipt of offers will be deemed to be extended to the same time of day specified in the solicitation on the first work day on which normal Government processes resume.

(5) Offers may be withdrawn by written notice received at any time before the exact time set for receipt of offers. Oral offers in response to oral solicitations may be withdrawn orally. If the solicitation authorizes facsimile offers, offers may be withdrawn via facsimile received at any time before the exact time set for receipt of offers, subject to the conditions specified in the solicitation concerning facsimile offers.