15-R-0075_Amendment_2.docx

DOCX document 67 KB Posted Mar 4, 2016

Attached to: F/A-18 E/A-18G Sensor Systems Improvement
Solicitation number: N6893615R0075
Issued by: Department of the Navy Naval Air Systems Command Naval Air Warfare Center

About this file

From the source

15-R-0075 Amendment 2

View the file

Other files

File	Type	Posted
Red_LSJ_18-0066.pdf	PDF	Dec 19, 2017
Redacted_J&A.pdf	PDF	Dec 21, 2016
15-R-0075_Amendment_5.docx	DOCX document	Jun 10, 2016
15-R-0075_Amendment_4.docx	DOCX document	May 11, 2016
Amendment_of_Solicitation_15-R-0075.docx	DOCX document	Apr 15, 2016
Updated_CDRLs.pdf	PDF	Apr 15, 2016
Performance_Work_Statement_(PWS)_V_1.1.doc	DOC document	Apr 15, 2016
Cybersecurity_CDRL.pdf	PDF	Mar 4, 2016
Updated_PWS.docx	DOCX document	Mar 4, 2016
15-T-0075_Amendment.docx	DOCX document	Nov 4, 2015
Updated_PWS.pdf	PDF	Nov 4, 2015
Soliciation _Offer _and_Award.docx	DOCX document	Sep 24, 2015
DD254.pdf	PDF	Sep 24, 2015
PWS.docx	DOCX document	Sep 24, 2015
Signed_CDRLs.pdf	PDF	Sep 24, 2015

Show all 15

On GovTribe

Work with this file

Download the original file
Contacts named in this file
Similar government files
Ask GovTribe AI about this file

Try for free Login

Text version

The file's text, extracted by GovTribe without its formatting.

N68936-15-R-0075

SECTION SF 30 BLOCK 14 CONTINUATION PAGE

The following items are applicable to this modification:

SUMMARY CHANGES

The following have been modified:

SECTION C - DESCRIPTIONS AND SPECIFICATIONS

STATEMENT OF WORK

Work performed on this contract shall be in accordance with the Performance Work Statement (PWS), Attachment 1.

CLIN EXTENDED DESCRIPTIONS:

CLIN 0001: F/A-18 and EA-18G Sensor System Support The Contractor shall provide technical support for hardware & software anomaly investigation, design, development, documentation, integration, test, and evaluation of systems and support equipment as a result of the F/A-18EA-18G lifecycle.

CLIN 0002: Data The contractor shall provide data in accordance with the Contract Data Requirements List (CDRL) DD Form 1423-1, Exhibit A.

C01- REQUIRED ENTERPRISE-WIDE CONTRACTOR MANPOWER REPORTING APPLICATION (ECMRA) INFORMATION

The contractor shall report contractor labor hours (including subcontractor labor hours) required for performance of services provided under this contract for the [NAMED COMPONENT] via a secure data collection site. Contracted services, excluded from reporting are based on Product Service Codes (PSCs). The excluded PSCs are:
	(1) W, Lease/Rental of Equipment;
	(2) X, Lease/Rental of Facilities;
	(3) Y, Construction of Structures and Facilities;
	(4) D, Automatic Data Processing and Telecommunications, IT and Telecom - Telecommunications Transmission (D304) and Internet (D322) ONLY.
	(5) S, Utilities ONLY;
	(6) V, Freight and Shipping ONLY.
The contractor is required to completely fill in all required data fields using the following web address "https://doncmra.nmci.navy.mil".
Reporting inputs will be for the labor executed during the period of performance during each Government fiscal year (FY), which runs October 1 through September 30. While inputs may be reported any time during the FY, all data shall be reported no later than October 31 of each calendar year. Contractors may direct questions to the help desk, linked at "https://doncmra.nmci.navy.mil".

5252.211-9503

LEVEL OF EFFORT (COST REIMBURSEMENT) (NAVAIR)(DEC 2012)

(a) The level of effort estimated to be ordered during the term of this contract is 49,040 man-hours of labor including Direct Labor hours, Cost Estimate Relationships (CER) hours and authorized subcontract labor, if any. The contractor shall not, under any circumstances, exceed one hundred (100%) percent of the total level of effort specified in this basic contract. The estimated composition of the labor by classification is as follows:

(b) FAR Clause 52.232-20, "Limitation of Cost" applies to fully funded orders and FAR Clause 52.232-22, "Limitation of Funds" applies to incrementally funded orders. Nothing in this clause amends the rights or responsibilities of the parties hereto under either of those two clauses. In addition, the notifications required by this clause are separate and distinct from any specified in either FAR Clause 52.232-20 or FAR Clause 52.232-22.
(c) In the event that less than one hundred (100%) percent of the established level of effort of the contract/order is actually expended by the end of the performance period, the Government shall have the option of:
	(1) Requiring the Contractor to continue performance, subject to the provisions of the FAR Clause 52.232-20 or 52.232-22, as applicable, until the effort expended equals 100% of the established Level of Effort; or
	(2) Effecting a reduction in the fixed fee by the percentage by which the total expended man-hours is less than one hundred (100%) percent of the established Level of Effort.
(d) The contractor agrees that effort performed in fulfillment of level of effort obligations under this contract shall include only verifiable effort in direct support of the work specified. It shall not include efforts such as work performed in transit to or from an employee's usual workplace, work during lunchtime activities, or effort performed at other non-work locations.
(e) In performing the contract/order, the contractor may use any reasonable combination of hours for the labor categories in support of section C of this contract/order.

SECTION I - CONTRACT CLAUSES

The following have been added by full text:

252.204-7009	LIMITATIONS ON THE USE OR DISCLOSURE OF THIRD-PARTY CONTRACTOR REPORTED CYBER INCIDENT INFORMATION (DEC 2015)
	(a) Definition. As used in this clause --
	"Compromise" means disclosure of information to unauthorized persons, or a violation of the security policy of a system, in which unauthorized intentional or unintentional disclosure, modification, destruction, or loss of an object, or the copying of information to unauthorized media may have occurred.
	"Controller technical information" means technical information with military or space application that is subject to controls on the access, use, reproduction, modification, performance, display, release, disclosure, or dissemination. Controlled technical information would meet the criteria, if disseminated, for distribution statements B through F using the criteria set forth in DoD Instruction 5230.24, Distribution Statements on Technical Documents. The term does not include information that is lawfully publicly available without restrictions.
	"Covered defense information means unclassified information that --
		(1) Is--
			(i) Provided to the contractor by or on behalf of DoD in connection with the performance of the contract; or
			(ii) Collected, developed, received, transmitted, used, or stored by or on behalf of the contractor in support of the performance of the contract; and
		(2) Falls in any of the following categories:
			(i) Controlled technical information.
			(ii) Critical information (operations security). Specific facts identified through the Operations Security process about friendly intentions, capabilities, and activities vitally needed by adversaries for them to plan and act effectively so as to guarantee failure or unacceptable consequences for friendly mission accomplishment (part of Operations Security process).
			(iii) Export control. Unclassified information concerning certain items, commodities, technology, software, or other information whose export could reasonably be expected to adversely affect the United States national security and nonproliferation objectives. To include dual use items; items identified in export administration regulations, international traffic in arms regulations and munitions list; license applications; and sensitive nuclear technology information.
			(iv) Any other information, marked or otherwise identified in the contract, that requires safeguarding or dissemination controls pursuant to and consistent with law, regulations, and Governmentwide policies (e.g., privacy, proprietary business information).
	"Cyber incident" means actions taken through the use of computer networks that result in a compromise or an actual or potentially adverse effect on an information system and/or the information residing therein.
	(b) Restrictions. The Contractor agrees that the following conditions apply to any information it receives or cerates in the performance of this contract that is information obtained from a third-party's reporting of a cyber incident pursuant to DFARS clause 252.204-7012, Safeguarding Covered Defense Information and Cyber Incident Reporting (or derived from such information obtained under that clause):
		(1) The Contractor shall access and use the information only for the purpose of furnishing advice or technical assistance directly to the Government in support of the Government's activities related to clause 252.204-7012, and shall not be used for any other purpose.
		(2) The Contractor shall protect the information against unauthorized release or disclosure.
		(3) The Contractor shall ensure that its employees are subject to use and non-disclosure obligations consistent with this clause prior to the employees being provided access to or use of the information.
		(4) The third-party contractor that reported the cyber incident is a third-party beneficiary of the non-disclosure agreement between the Government and Contractor, as required by paragraph (b)(3) of this clause.
		(5) A breach of these obligations or restrictions may subject the Contractor to --
			(i) Criminal, civil, administrative, and contractual actions in law and equity for penalties, damages, and other appropriate remedies by the United States; and
			(ii) Civil actions for damages and other appropriate remedies by the third party that reported the cyber incident, as a third party beneficiary of this clause.
	(c) Subcontracts. The Contractor shall include this clause, including this paragraph (c), in subcontracts, or similar contractual instruments, for services that include support for the Government's activities related to safeguarding covered defense information and cyber incident reporting, including subcontracts for commercial items, without alteration, except to identify the parties.

The following included by full text have been revised:

52.230-3	DISCLOSURE AND CONSISTENCY OF COST ACCOUNTING PRACTICES (OCT 2015)
	(a) The Contractor, in connection with this contract, shall--
		(1) Comply with the requirements of 48 CFR 9904.401, Consistency in Estimating, Accumulating, and Reporting Costs; 48 CFR 9904.402, Consistency in Allocating Costs Incurred for the Same Purpose; 48 CFR 9904.405 Accounting for Unallowable Costs; and 48CFR 9904.406, Cost Accounting Standard--Cost Accounting Period, in effect on the date of award of this contract as indicated in 48 CFR Part 9904.
		(2) (CAS-covered Contracts Only) If it is a business unit of a company required to submit a Disclosure Statement, disclose in writing its cost accounting practices as required by 48 CFR 9903.202-1 through 9903.202-5. If the Contractor has notified the Contracting Officer that the Disclosure Statement contains trade secrets and commercial or financial information which is privileged and confidential, the Disclosure Statement shall be protected and shall not be released outside of the Government.
		(3)(i) Follow consistently the Contractor's cost accounting practices. A change to such practices may be proposed, however, by either the Government or the Contractor, and the Contractor agrees to negotiate with the Contracting Officer the terms and conditions under which a change may be made. After the terms and conditions under which the change is to be made have been agreed to, the change must be applied prospectively to this contract, and the Disclosure Statement, if affected, must be amended accordingly.
			(ii) The Contractor shall, when the parties agree to a change to a cost accounting practice and the Contracting Officer has made the finding required in 48 CFR 9903.201-6(c), that the change is desirable and not detrimental to the interests of the Government, negotiate an equitable adjustment as provided in the Changes clause of this contract. In the absence of the required finding, no agreement may be made under this contract clause that will increase costs paid by the United States.
		(4) Agree to an adjustment of the contract price or cost allowance, as appropriate, if the Contractor or a subcontractor fails to comply with the applicable CAS or to follow any cost accounting practice, and such failure results in any increased costs paid by the United States. Such adjustment shall provide for recovery of the increased costs to the United States together with interest thereon computed at the annual rate established under section 6621(a)(2) of the Internal Revenue Code of 1986 (26 U.S.C. 6621(a)(2)), from the time the payment by the United States was made to the time the adjustment is effected.
	(b) If the parties fail to agree whether the Contractor has complied with an applicable CAS, rule, or regulation as specified in 48 CFR, Parts 9903 and 9904 and as to any cost adjustment demanded by the United States, such failure to agree will constitute a dispute under 41 U.S.C. chapter 71, Contract Disputes.
	(c) The Contractor shall permit any authorized representatives of the Government to examine and make copies of any documents, papers, and records relating to compliance with the requirements of this clause.
	(d) The Contractor shall include in all negotiated subcontracts, which the Contractor enters into, the substance of this clause, except paragraph (b), and shall require such inclusion in all other subcontracts of any tier, except that--
		(1) If the subcontract is awarded to a business unit which pursuant to 48 CFR 9903.201-2 is subject to other types of CAS coverage, the substance of the applicable clause set forth in subsection 30.201-4 of the Federal Acquisition Regulation shall be inserted.
		(2) This requirement shall apply only to negotiated subcontracts in excess of $750,000.
		(3) The requirement shall not apply to negotiated subcontracts otherwise exempt from the requirement to include a CAS clause as specified in 48 CFR 9903.201-1.

252.204-7012	SAFEGUARDING COVERED DEFENSE INFORMATION AND CYBER INCIDENT INFORMATION (DEC 2015)
	(a) Definition. As used in this clause -- "Adequate security" means protective measures that are commensurate with the consequences and probability of loss, misuse, or unauthorized access to, or modification of information.
	"Compromise" means disclosure of information to unauthorized persons, or a violation of the security policy of a system, in which unauthorized intentional or unintentional disclosure, modification, destruction, or loss of an object, or the copying of information to unauthorized media may have occurred.
	"Contractor attributional/proprietary information" means information that identifies the contractor(s), whether directly or indirectly, by the grouping of information that can be traced back to the contractor(s) (e.g., program description, facility locations), personally identifiable information, as well as trade secrets, commercial or financial information, or other commercially sensitive information that is not customarily shared outside of the company.
	"Contractor information system" means an information system belonging to, or operated by or for, the Contractor.
	"Controlled technical information" means technical information with military or space application that is subject to controls on the access, use, reproduction, modification, performance, display, release, disclosure, or dissemination. Controlled technical information would meet the criteria, if disseminated, for distribution statements B through F using the criteria set forth in DoD Instruction 5230.24, Distribution Statements on Technical Documents. The term does not include information that is lawfully publicly available without restrictions.
	"Covered defense information" means unclassified information that --
		(i) Is --
			(A) Provided to the contractor by or on behalf of DoD in connection with the performance of the contract; or
			(B) Collected, developed, received, transmitted, used, or stored by or on behalf of the contractor in support of the performance of the contract; and
		(ii) Falls in any of the following categories:
			(A) Controlled technical information.
			(B) Critical information (operations security). Specific facts identified through the Operations Security process about friendly intentions, capabilities, and activities vitally needed by adversaries for them to plan and act effectively so as to guarantee failure or unacceptable consequences for friendly mission accomplishment (part of Operations Security process).
			(C) Export control. Unclassified information concerning certain items, commodities, technology, software, or other information whose export could reasonably be expected to adversely affect the United States national security and nonproliferation objectives. To include dual use items; items identified in export administration regulations, international traffic in arms regulations and munitions list; license applications; and sensitive nuclear technology information.
			(D) Any other information, marked or otherwise identified in the contract, that requires safeguarding or dissemination controls pursuant to and consistent with law, regulations, and Governmentwide policies (e.g., privacy, proprietary business information).
	"Cyber incident" means actions taken through the use of computer networks that result in a compromise or an actual or potentially adverse effect on an information system and/or the information residing therein.
	"Forensic analysis" means the practice of gathering, retaining, and analyzing computer-related data for investigative purposes in a manner that maintains the integrity of the data.
	"Malicious software" means computer software or firmware intended to perform an unauthorized process that will have adverse impact on the confidentiality, integrity, or availability of an information system. This definition includes a virus, worm, Trojan horse, or other code-based entity that infects a host, as well as spyware and some forms of adware.
	"Media" means physical devices or writing surfaces including, but not limited to, magnetic tapes, optical disks, magnetic disks, large-scale integration memory chips, and printouts onto which information is recorded, stored, or printed within an information system.
	"Operationally critical support" means supplies or services designated by the Government as critical for airlift, sealift, intermodal transportation services, or logistical support that is essential to the mobilization, deployment, or sustainment of the Armed Forces in a contingency operation.
	"Rapid(ly) report(ing)" means within 72 hours of discovery of any cyber incident.
	"Technical information" means technical data or computer software, as those terms are defined in the clause at DFARS 252.227-7013, Rights in Technical Data - Non Commercial Items, regardless of whether or not the clause is incorporated in this solicitation or contract. Examples of technical information include research and engineering date, engineering drawings, and associated lists, specifications, standards, process sheets, manuals, technical reports, technical orders, catalog-item identifications, data sets, studies and analyses and related information, and computer software executable code and source code.
	(b) Adequate security. The Contractor shall provide adequate security for all covered defense information on all covered contractor information systems that support the performance of work under this contract. To provide adequate security, the Contractor shall -
		(1) Implement information systems security protections on all covered contractor information systems including, as a minimum --
			(i) For covered contractor information systems that are part of an Information Technology (IT) service or system operated on behalf of the Government -
				(A) Cloud computing services shall be subject to the security requirements specified in the clause 252.239-7010, Cloud Computing Services, of this contract; and
				(B) Any other such IT service or system (i.e., other than cloud computing) shall be subject to the security requirements specified elsewhere in this contract; or
			(ii) For covered contractor information systems that are not part of an IT service or system operated on behalf of the Government and therefore are not subject to the security requirement specified at paragraph (b)(1)(i) of this clause --
				(A) The security requirements in National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171, "Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations," http://dx.doi.org/10.6028/NIST.SP.800-171 that is in effect at the time the solicitation is issued or as authorized by the Contracting Officer, as soon as practical, but not later than December 31, 2017. The Contractor shall notify the DoD CIO, via email at osd.dibcsia@mail.mil, within 30 days of contract award, of any security requirements specified by NIST SP 800-171 not implemented at the time of contract award; or
				(B) Alternative but equally effective security measures used to compensate for the inability to satisfy a particular requirement and achieve equivalent protection accepted in writing by an authorized representative of the DoD CIO; and
			(2) Apply other security measures when the Contractor reasonably determines that such measures, in addition to those identified in paragraph (b)(1) of this clause, may be required to provide adequate security in a dynamic environment based on an assessed risk or vulnerability.
	(c) Cyber incident reporting requirement.
		(1) When the Contractor discovers a cyber incident that affects a covered contractor information system or the covered defense information residing therein, or that affects the contractor's ability to perform the requirements of the contract that are designated as operationally critical support, the Contractor shall --
			(i) Conduct a review for evidence of compromise of covered defense information, including, but not limited to, identifying compromised computers, servers, specific data, and user accounts. This review shall also include analyzing covered contractor information system(s) that were part of the cyber incident, as well as other information systems on the Contractor's network(s), that may have been accessed as a result of the incident in order to identify compromised covered defense information, or that affect the Contractor's ability to provide operationally critical support; and
			(ii) Rapidly report cyber incidents to DoD at http://didnet.dod.mil.
		(2) Cyber incident report. The cyber incident report shall be treated as information created by or for DoD and shall include, at a minimum, the required elements at http://didnet.dod.mil.
		(3) Medium assurance certificate requirement. In order to report cyber incidents in accordance with this clause, the Contractor or subcontractor shall have or acquire a DoD-approved medium assurance certificate to report cyber incidents. For information on obtaining a DoD-approved medium assurance certificate, see http://iase.disa.mil/pki/eca/Pages/index.aspx.
	(d) Malicious software. The Contractor or subcontractors that discover and isolate malicious software in connection with a reported cyber incident shall submit the malicious software in accordance with instructions provided by the Contracting Officer.
	(e) Media preservation and protection. When a Contractor discovers a cyber incident has occurred, the Contractor shall preserve and protect images of all known affected information systems identified in paragraph (c)(1)(i) of this clause and all relevant monitoring/packet capture data for at least 90 days from the submission of the cyber incident report to allow DoD to request the media or decline interest.
	(f) Access to additional information or equipment necessary for forensic analysis. Upon request by DoD, the Contractor shall provide DoD with access to additional information or equipment that is necessary to conduct a forensic analysis.
	(g) Cyber incident damage assessment activities. If DoD elects to conduct a damage assessment, the Contracting Officer will request that the Contractor provide all of the damage assessment information gathered in accordance with paragraph (e) of this clause.
	(h) DoD safeguarding and use of contractor attributional/proprietary information. The Government shall protect against the unauthorized use or release of information obtained from the contractor (or derived from information obtained from the contractor) under this clause that includes contractor attributional/proprietary information, including such information submitted in accordance with paragraph (c). To the maximum extent practicable, the Contractor shall identify and mark attributional/proprietary information. In making an authorized release of such information, the Government will implement appropriate procedures to minimize the contractor attributional/proprietary information that is included in such authorized release, seeking to include only that information that is necessary for the authorized purpose(s) for which the information is being released.
	(i) Use and release of contractor attributional/proprietary information not created by or for DoD. Information that is obtained from the contractor (or derived from information obtained from the contractor) under this clause that is not created by or for DoD is authorized to be released outside of DoD--
		(1) To entities with missions that may be affected by such information;
		(2) To entities that may be called upon to assist in the diagnosis, detection, or mitigation of cyber incidents;
		(3) To Government entities that conduct counterintelligence or law enforcement investigations;
		(4) For national security purposes, including cyber situational awareness and defense purposes (including with Defense Industrial Base (DIB) participants in the program at 32 CFR part 236); or
		(5) To a support services contractor ("recipient") that is directly supporting Government activities under a contract that includes the clause at 252.204-7009, Limitations on the Use or Disclosure of Third-Party Contractor Reported Cyber Incident Information.
	(j) Use and release of contractor attributional/proprietary information created by or for DoD. Information that is obtained from the contractor (or derived from information obtained from the contractor) under this clause that is created by or for DoD (including the information submitted pursuant to paragraph (c) of this clause) is authorized to be used and released outside of DoD for purposes and activities authorized by paragraph (i) of this clause, and for any other lawful Government purposes or activity, subject to all applicable statutory, regulatory, and policy based restrictions on the Government's use and release of such information.
	(k) The Contractor shall conduct activities under this clause in accordance with applicable laws and regulations on the interception, monitoring, access, use, and disclosure of electronic communications and data.
	(l) Other safeguarding or reporting requirements. The safeguarding and cyber incident reporting required by this clause in no way abrogates the Contractor's responsibility for other safeguarding or cyber incident reporting pertaining to its unclassified information systems as required by other applicable clauses of this contract, or as a result of other applicable U.S. Government statutory or regulatory requirements.
	(m) Subcontracts. The Contractor shall --
		(1) Include this clause, including this paragraph (m), in subcontracts, or similar contractual instruments, for operationally critical support, or for which subcontract performance will involve a covered contractor information system, including subcontracts for commercial items, without alteration, except to identify the parties; and
		(2) When this clause is included in a subcontract, require subcontractors to rapidly report cyber incidents directly to DoD at http://dibnet.dod.mil and the prime Contractor. This includes providing the incident report number, automatically assigned by DoD, to the prime Contractor (or next higher-tier subcontractor) as soon as practicable.

252.225-7981	ADDITIONAL ACCESS TO CONTRACTOR AND SUBCONTRACTOR RECORDS (DEVIATION 2015-O0016: SEP 2015)
	(a) In addition to any other existing examination-of-records authority, the Government is authorized to examine any records of the Contractor and its subcontractors to the extent necessary to ensure that funds, including supplies and services, available under this contract are not provided, directly or indirectly, to a person or entity that is actively opposing United States or coalition forces involved in a contingency operation in which members of the Armed Forces are actively engaged in hostilities.
	(b) The substance of this clause, including this paragraph(b), is required to be included in subcontracts, including subcontracts for commercial items, under this contract that have an estimated value over $50,000 and will be performed outside the United States and its outlying areas.

SECTION J - LIST OF DOCUMENTS, EXHIBITS AND OTHER ATTACHMENTS

LIST OF DOCUMENTS AND EXHIBITS

Exhibit/Attachment Table of Contents

DOCUMENT TYPE	DESCRIPTION				PAGES		DATE
Exhibit A		Contract Data Requirements List		20		9/09/2015
Exhibit A		Contract Data Requirements List		1		2/02/2016
Attachment 1		PWS					48	2/19/2016
Attachment 2		Contract Security Classification		6		7/30/2015
			Specification (DD 254)

SECTION K - REPRESENTATIONS, CERTIFICATIONS AND OTHER STATEMENTS OF OFFERORS

The following have been added by full text:

252.204-7008	COMPLIANCE WITH SAFEGUARDING COVERED DEFENSE INFORMATION CONTROLS (DEC 2015)
	(a) Definition. As used in this provision -- Controller technical information, covered contractor information system, and covered defense information are defined in clause 252.204-7012, Safeguarding Covered Defense Information and Cyber Incident Reporting.
	(b) The security requirements required by contract clause 252.204-7012, Safeguarding Covered Defense Information and Cyber Incident Reporting, shall be implemented for all covered defense information on all covered contractor information systems that support the performance of this contract.
	(c) For covered contractor information systems that are not part of an information technology (IT) service or system operated on behalf of the Government (see 252.204-7012(b)(1)(ii)) -
		(1)By submission of this offer, the Offeror represents that is will implement the security requirements specified by National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171, "Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations" (see http://dx.doi.org/10.6028/NIST.SP.800-171), not later than December 31, 2017.
		(2)(i) If the Offeror proposes to vary from any of the security requirements specified by NIST SP 800-171 that is in effect at the time the solicitation is issued or as authorized by the Contracting Officer, the Offeror shall submit to the Contracting Officer, for consideration by the DoD Chief Information Officer (CIO), a written explanation of --
				(A) Why a particular security requirement is not applicable; or
				(B) How an alternative but equally effective, security measure is used to compensate for the inability to satisfy a particular requirement and achieve equivalent protection.
			(ii) An authorized representative of the DoD CIO will adjudicate offeror requests to vary from NIST SP 800-171 requirements in writing prior to contract award. Any accepted variance from NIST SP 800-171 shall be incorporated into the resulting contract.

The following included by full text have been revised:

52.225-25	PROHIBITION ON CONTRACTING WITH ENTITIES ENGAGING IN CERTAIN ACTIVITIES OR TRANSACTIONS RELATING TO IRAN-REPRESENTATION AND CERTIFICATION (OCT 2015)
	(a) Definitions. As used in this provision
	“Person”-
		(1) Means--
			(i) A natural person;
			(ii) A corporation, business association, partnership, society, trust, financial institution, insurer, underwriter, guarantor, and any other business organization, any other nongovernmental entity, organization, or group, and any governmental entity operating as a business enterprise; and
			(iii) Any successor to any entity described in paragraph (1)(ii) of this definition; and
		(2) Does not include a government or governmental entity that is not operating as a business enterprise.
	“Sensitive technology--”-
		(1) Means hardware, software, telecommunications equipment, or any other technology that is to be used specifically--
			(i) To restrict the free flow of unbiased information in Iran; or
			(ii) To disrupt, monitor, or otherwise restrict speech of the people of Iran; and
		(2) Does not include information or informational materials the export of which the President does not have the authority to regulate or prohibit pursuant to section 203(b)(3) of the International Emergency Economic Powers Act (50 U.S.C. 1702(b)(3).
	(b) The offeror shall email questions concerning sensitive technology to the Department of State at CISADA106@state.gov.
	(c) Except as provided in paragraph (d) of this provision or if a waiver has been granted in accordance with 25.703-4, by submission of its offer, the offeror--
		(1) Represents, to the best of its knowledge and belief, that the offeror does not export any sensitive technology to the government of Iran or any entities or individuals owned or controlled by, or acting on behalf or at the direction of, the government of Iran; and
		(2) Certifies that the offeror, or any person owned or controlled by the offeror, does not engage in any activities for which sanctions may be imposed under section 5 of the Iran Sanctions Act. These sanctioned activities are in the areas of development of the petroleum resources of Iran, production of refined petroleum products in Iran, sale and provision of refined petroleum products to Iran, and contributing to Iran's ability to acquire or develop certain weapons or technologies.
		(3) Certifies that the offeror, and any person owned or controlled by the offeror, does not knowingly engage in any transaction that exceeds $3,500 with Iran's Revolutionary Guard Corps or any of its officials, agents, or affiliates, the property and interests in property of which are blocked pursuant to the International Emergency Economic Powers Act (50 U.S.C. 1701 et seq.)(see OFAC's Specially Designated Nationals and Blocked Persons List at http:www.treasury.gov/ofac/downloads/t11sdn.pdf).
	(d) Exception for trade agreements. The representation requirement of paragraph (c)(1) and the certification requirement of paragraph (c)(2) and (c)(3) of this provision does not apply if--
		(1) This solicitation includes a trade agreements notice or certification (e.g., 52.225-4, 52.225-6, 52.225-12, 52.225-24, or comparable agency provision); and
		(2) The offeror has certified that all the offered products to be supplied are designated country end products or designated country construction material.

52.230-1	COST ACCOUNTING STANDARDS NOTICES AND CERTIFICATION (OCT 2015)
	Note: This notice does not apply to small businesses or foreign governments. This notice is in three parts, identified by Roman numerals I through III.
	Offerors shall examine each part and provide the requested information in order to determine Cost Accounting Standards (CAS) requirements applicable to any resultant contract.
	If the offeror is an educational institution, Part II does not apply unless the contemplated contract will be subject to full or modified CAS coverage pursuant to 48 CFR 9903.201-2(c)(5) or 9903.201-2(c)(6), respectively.
	I. Disclosure Statement -- Cost Accounting Practices and Certification
		(a) Any contract in excess of $750,000 resulting from this solicitation will be subject to the requirements of the Cost Accounting Standards Board (48 CFR Chapter 99), except for those contracts which are exempt as specified in 48 CFR 9903.201-1.
		(b) Any offeror submitting a proposal which, if accepted, will result in a contract subject to the requirements of 48 CFR Chapter 99 must, as a condition of contracting, submit a Disclosure Statement as required by 48 CFR 9903.202. When required, the Disclosure Statement must be submitted as a part of the offeror's proposal under this solicitation unless the offeror has already submitted a Disclosure Statement disclosing the practices used in connection with the pricing of this proposal. If an applicable Disclosure Statement has already been submitted, the offeror may satisfy the requirement for submission by providing the information requested in paragraph (c) of Part I of this provision.
	Caution: In the absence of specific regulations or agreement, a practice disclosed in a Disclosure Statement shall not, by virtue of such disclosure, be deemed to be a proper, approved, or agreed-to practice for pricing proposals or accumulating and reporting contract performance cost data.
		(c) Check the appropriate box below:
			[ ] (1) Certificate of Concurrent Submission of Disclosure Statement. The offeror hereby certifies that, as a part of the offer, copies of the Disclosure Statement have been submitted as follows:
				(i) Original and one copy to the cognizant Administrative Contracting Officer (ACO) or cognizant Federal agency official authorized to act in that capacity (Federal official), as applicable; and
				(ii) One copy to the cognizant Federal auditor.
			(Disclosure must be on Form No. CASB DS-1 or CASB DS-2, as applicable. Forms may be obtained from the cognizant ACO or Federal official and/or from the loose-leaf version of the Federal Acquisition Regulation.)
			Date of Disclosure Statement: __________________ Name and Address of Cognizant ACO or Federal Official Where Filed: __________________________________________________________________________
		The offeror further certifies that the practices used in estimating costs in pricing this proposal are consistent with the cost accounting practices disclosed in the Disclosure Statement.
			[ ] (2) Certificate of Previously Submitted Disclosure Statement. The offeror hereby certifies that the required Disclosure Statement was filed as follows:
			Date of Disclosure Statement: __________________ Name and Address of Cognizant ACO or Federal Official Where Filed: __________________________________________________________________________
		The offeror further certifies that the practices used in estimating costs in pricing this proposal are consistent with the cost accounting practices disclosed in the applicable Disclosure Statement.
			[ ] (3) Certificate of Monetary Exemption. The offeror hereby certifies that the offeror, together with all divisions, subsidiaries, and affiliates under common control, did not receive net awards of negotiated prime contracts and subcontracts subject to CAS totaling $50 million or more in the cost accounting period immediately preceding the period in which this proposal was submitted. The offeror further certifies that if such status changes before an award resulting from this proposal, the offeror will advise the Contracting Officer immediately.
			[ ] (4) Certificate of Interim Exemption. The offeror hereby certifies that:
				(i) the offeror first exceeded the monetary exemption for disclosure, as defined in (3) of this subsection, in the cost accounting period immediately preceding the period in which this offer was submitted and
				(ii) in accordance with 48 CFR 9903.202-1, the offeror is not yet required to submit a Disclosure Statement. The offeror further certifies that if an award resulting from this proposal has not been made within 90 days after the end of that period, the offeror will immediately submit a revised certificate to the Contracting Officer, in the form specified under subparagraph (c)(1) or (c)(2) of Part I of this provision, as appropriate, to verify submission of a completed Disclosure Statement.
	Caution: Offerors currently required to disclose because they were awarded a CAS-covered prime contract or subcontract of $50 million or more in the current cost accounting period may not claim this exemption (4). Further, the exemption applies only in connection with proposals submitted before expiration of the 90-day period following the cost accounting period in which the monetary exemption was exceeded.
	II. Cost Accounting Standards -- Eligibility for Modified Contract Coverage
	If the offeror is eligible to use the modified provisions of 48 CFR 9903.201-2(b) and elects to do so, the offeror shall indicate by checking the box below. Checking the box below shall mean that the resultant contract is subject to the Disclosure and Consistency of Cost Accounting Practices clause in lieu of the Cost Accounting Standards clause.
		[ ] The offeror hereby claims an exemption from the Cost Accounting Standards clause under the provisions of 48 CFR 9903.201-2(b) and certifies that the offeror is eligible for use of the Disclosure and Consistency of Cost Accounting Practices clause because during the cost accounting period immediately preceding the period in which this proposal was submitted, the offeror received less than $50 million in awards of CAS-covered prime contracts and subcontracts. The offeror further certifies that if such status changes before an award resulting from this proposal, the offeror will advise the Contracting Officer immediately.
	Caution: An offeror may not claim the above eligibility for modified contract coverage if this proposal is expected to result in the award of a CAS-covered contract of $50 million or more or if, during its current cost accounting period, the offeror has been awarded a single CAS-covered prime contract or subcontract of $50 million or more.
	III. Additional Cost Accounting Standards Applicable to Existing Contracts
	The offeror shall indicate below whether award of the contemplated contract would, in accordance with subparagraph (a)(3) of the Cost Accounting Standards clause, require a change in established cost accounting practices affecting existing contracts and subcontracts. [ ] yes [ ] no

252.203-7998	PROHIBITION ON CONTRACTING WITH ENTITIES THAT REQUIRE CERTAIN INTERNAL CONFIDENTIALITY AGREEMENTS - REPRESENTATION (DEVIATION 2015-O0010)(FEB 2015)
	(a) In accordance with section 743 of Division E, Title VII, of the Consolidated and Further Continuing Resolution Appropriations Act, 2015 (Pub. L. 113-235), Government agencies are not permitted to use funds appropriated (or otherwise made available) under that or any other Act for contracts with an entity that requires employees or subcontractor of such entity seeking to report fraud, waste, or abuse to sign internal confidentiality agreements or statements prohibiting or otherwise restricting such employees or contractors from lawfully reporting such waste, fraud, or abuse to a designated investigative or law enforcement representative of a Federal department or agency authorized to receive such information.
	(b) The prohibition in paragraph (a) of this provision does not contravene requirements applicable to Standard Form 312, Form 4414, or any other form issued by a Federal department or agency governing the nondisclosure of classified information.
	(c) Representation. By submission of its offer, the Offeror represents that it does not require employees or subcontractor of such entity seeking to report fraud, waste, or abuse to sign or comply with internal confidentiality agreements or statements prohibiting or otherwise restricting such employees or contractors from lawfully reporting such waste, fraud, or abuse to designated investigative or law enforcement representative of a Federal department or agency authorized to receive such information.

252.225-7049	PROHIBITION ON ACQUISITION OF COMMERCIAL SATELLITE SERVICES FROM CERTAIN FOREIGN ENTITIES - REPRESENTATIONS (OCT 2015)
	(a) Definition. As used in this provision --
		“Covered foreign country” means --
			(i) The People's Republic of China;
			(ii) North Korea; or
			(iii) Any country that is a state sponsor of terrorism. (10 U.S. C. 2279)
		“Foreign entity” means --
			(i) Any branch, partnership, group or subgroup, association, estate, trust, corporation or division of a corporation, or organization organized under the laws of a foreign state if either its principal place of business is outside the United States or its equity securities are primarily traded on one or more foreign exchanges.
			(ii) Notwithstanding paragraph (i) of this definition, any branch, partnership, group or sub-group, association, estate, trust, corporation, or organization that demonstrates that a majority of the equity interest in such entity is ultimately owned by U.S. nationals in not a foreign entity. (31 CFR 800.212)
		“Government of a covered foreign country” includes the state and the government of a covered foreign country, as well as any political subdivision, agency, or instrumentality thereof.
		“Satellite services” means communications capabilities that utilize an on-orbit satellite for transmitting the signal from one location to another.
		“State sponsor of terrorism” means a country determined by the Secretary of State, under section 6(j)(1)(A) of the Export Administration Act of 1979 (50 U.S.C. App. 2405(j)(i)(A)), to be a country the government of which has repeatedly provided support for acts of international terrorism. As of the date of this provision, state sponsors of terrorism subject to this provision are Iran, Sudan, and Syria. (10 U.S.C. 2327)
	(b) Prohibition on award. In accordance with 10 U.S.C. 2279, unless an exception is determined to apply in accordance with DFARS 225.772-4, no contract for commercial satellite services may be awarded to --
		(1) A foreign entity if the Under Secretary of Defense for Acquisition, Technology, and Logistics or the Under Secretary of Defense for Policy reasonably believes that the foreign entity --
			(i) Is an entity in which the government of a covered foreign country has an ownership interest that enables the government to affect satellite operations; or
			(ii) Plans to, or is expected to, provide or use launch or other satellite services under the contract from a covered foreign country; or
		(2) An offeror that is offering to provide the commercial satellite services of a foreign entity as described in paragraph (b)(1) of this section.
	(c) Representations. The Offeror represents that --
			(1) It [ ] is, [ ] is not a foreign entity in which the government of a foreign country has an ownership interest that enables the government to affect satellite operations;
			(2) It [ ] is, [ ] is not a foreign entity that plans to provide or use launch or other satellite services under the contract from a covered foreign country;
			(3) It [ ] is, [ ] is not offering commercial satellite services provided by a foreign entity in which the government of a covered foreign country has an ownership interest that enables the government to affect satellite operations; and
			(4) It [ ] is, [ ] is not offering commercial satellite services provided by a foreign entity that plans to or is expected to provide or use launch or other satellite services under the contract from a covered foreign country.
	(d) Disclosure. If the Offeror has responded affirmatively to any of the above representations, provide the following information, as applicable:
		(1) Identification of the foreign entity proposed to provide the commercial satellite services, if other than the Offeror.
		(2) To the extent practicable, a description of any ownership interest that the government of a covered foreign country has in the foreign entity proposed to provide the satellite services, including identification of the covered foreign country.
		(3) Identification of any covered foreign country in which launch or other satellite services will be provided or used, and a description of any satellite services planned to be provided or used in that country.
	(e) The representations in paragraph(c) of this provision are a material representation of fact upon which reliance will be placed when making award. If it is later determined that the Offeror knowingly rendered an erroneous representation, in addition to other remedies available to the Government, the Contracting Officer may terminate the contract resulting from this solicitation for default.

image1.wmf image2.emf

File details come from the government source that posted it. Updated Nov 14, 2017.