RFP_75N96024R00001.pdf

- 1 -

SOLICITATION

SECTION A - SOLICITATION/CONTRACT FORM

1. Requisition or other Purchase Authority: Public Law 92-218 as Amended

2. Request for Proposal

(RFP) Number:

75N96024R00001

3. Issue Date: 4. Set Aside:

[X] No

[ ] Yes See Part IV Section L

5. Title : Management and Support of an Archives and Repository Contract for the National Toxicology Program (NTP) and the National Institute of Environmental Health Sciences (NIEHS) Divisions of Translational Toxicology (DTT) and Intramural Research (DIR)

6. ISSUED BY:

Office of Acquisitions

National Institute of Environmental Health Sciences

National Institutes of Health

530 Davis Drive

Morrisville, NC 27560

7. SUBMIT OFFERS TO:

See Part III, Section J, "Packaging and Delivery of the Proposal,"

ATTACHMENT 1 of this Solicitation.

8. Proposals for furnishing the supplies and/or services in THE SCHEDULE will be received at the place specified in, and in the number of copies specified in Attachment 1, "Packaging and Delivery of the Proposal," until

5:00PM EST on January 8, 2024. Offers will be valid for 120 days unless a different period is specified by the offeror on the Attachment entitled, "Proposal Summary and Data Record, NIH 2043.

9. This solicitation requires delivery of proposals as stated in ATTACHMENT 1, "PACKAGING AND DELIVERY

OF THE PROPOSAL." If proposals are required to be delivered to two different locations, the OFFICIAL POINT

OF RECEIPT for determining TIMELY DELIVERY is the address provided for the OFFICE OF ACQUISITIONS.

IF YOUR PROPOSAL IS NOT RECEIVED BY THE CONTRACTING OFFICER OR HIS DESIGNEE AT THE

PLACE AND TIME SPECIFIED FOR THE OFFICE OF ACQUISITIONS, THEN IT WILL BE CONSIDERED

LATE AND HANDLED IN ACCORDANCE WITH subparagraph (c)(3) of FAR Clause 52.215-1, Instructions to

Offerors--Competitive Acquisition," LOCATED IN SECTION L.1. OF THIS SOLICITATION.

10. Offeror must be registered in the System for Award Management (SAM) prior to award of a contract at https:// www.sam.gov/SAM/.

11. FOR INFORMATION CONTACT: Julie Bardo e-MAIL: julie.bardo@nih.gov

TELEPHONE CALLS WILL NOT BE ACCEPTED.

SUBMIT ALL QUESTIONS IN WRITING VIA EMAIL TO:

julie.bardo@nih.gov. ALL QUESTIONS MUST BE SUBMITTED

NO LATER THAN 5:00 PM EST, DECEMBER 19, 2023.

TELEPHONE INQUIRIES WILL NOT BE ACCEPTED.

Julie Bardo

Contracting Officer

Office of Acquisitions

National Institute of Environmental Health

Sciences

December 5, 2023 https://www.sam.gov/SAM/ https://www.sam.gov/SAM/ mailto:julie.bardo@nih.gov mailto:julie.bardo@nih.gov

RFP Number : 75N96024R00001

- 2 -

RFP TABLE OF CONTENTS

PART I - THE SCHEDULE

SECTION A - SOLICITATION/CONTRACT FORM

SECTION B - SUPPLIES OR SERVICES AND PRICES/COSTS

SECTION C - DESCRIPTION/SPECIFICATIONS/WORK STATEMENT

SECTION D - PACKAGING, MARKING AND SHIPPING

SECTION E - INSPECTION AND ACCEPTANCE

SECTION F - DELIVERIES OR PERFORMANCE

SECTION G - CONTRACT ADMINISTRATION DATA

SECTION H - SPECIAL CONTRACT REQUIREMENTS

ARTICLE H.2. CERTIFICATE OF CONFIDENTIALITY

PART II - CONTRACT CLAUSES

PART III - LIST OF DOCUMENTS, EXHIBITS AND OTHER ATTACHMENTS

SECTION J - LIST OF ATTACHMENTS

SOLICITATION ATTACHMENTS

TECHNICAL PROPOSAL ATTACHMENTS

BUSINESS PROPOSAL ATTACHMENTS

INFORMATIONAL ATTACHMENTS

PART IV - REPRESENTATIONS AND INSTRUCTIONS

SECTION K - REPRESENTATIONS, CERTIFICATIONS AND OTHER STATEMENTS OF OFFERORS

SECTION L - INSTRUCTIONS, CONDITIONS, AND NOTICES TO OFFERORS

1. GENERAL INFORMATION

a. INSTRUCTIONS TO OFFERORS--COMPETITIVE ACQUISITION

b. NAICS CODE AND SIZE STANDARD

c. TYPE OF CONTRACT AND NUMBER OF AWARDS

d. LEVEL OF EFFORT

e. COMMITMENT OF PUBLIC FUNDS

f. COMMUNICATIONS PRIOR TO CONTRACT AWARD

g. RELEASE OF INFORMATION

h. PREPARATION COSTS

i. SERVICE OF PROTEST

2. INSTRUCTIONS TO OFFERORS

a. GENERAL INSTRUCTIONS

1. Contract Type and General Clauses

2. Authorized Official and Submission of Proposal

3. Proposal Summary and Data Record (NIH-2043)

4. Separation of Technical and Business Proposals

5. Alternate Proposals

6. Evaluation of Proposals

7. Potential Award Without Discussions

8. Use of the Metric System of Measurement

9. Privacy Act - Treatment of Proposal Information

10. Selection of Offerors

- 3 -

11. CERTIFICATION REGARDING TAX MATTERS (OCT 2020)

12. Prohibition on Contracting with Entities that Require Certain Internal Confidentiality Agreements

13. HHS Security and Privacy Language for Information and IT Procurements

14. Electronic Information Technology Accessibility Notice, HHSAR 352.239-73 (December 2015)

b. TECHNICAL PROPOSAL INSTRUCTIONS

1. Technical Discussions

2. Other Considerations

3. Technical Evaluation

4. Obtaining and Disseminating Biomedical Research Resources

5. Specific Technical Proposal Instructions

c. BUSINESS PROPOSAL INSTRUCTIONS

1. Basic Cost/Price Information

2. Proposal Cover Sheet

3. Information Other than Cost or Pricing Data

4. Requirements for Cost or Pricing Data or Information Other than Cost and Pricing Data

5. Small Business Subcontracting Plan

6. Mentor Protege Program, HHSAR 352.219-70

7. HUBZone Small Business Concerns

8. Total Compensation Plan

9. Other Administrative Data

10. Qualifications of the Offeror

11. Subcontractors

12. Proposer's Annual Financial Report

13. Travel Costs/Travel Policy

14. Specific Business Proposal Instructions

SECTION M - EVALUATION FACTORS FOR AWARD

1. GENERAL

2. COST/PRICE EVALUATION

3. MANDATORY QUALIFICATION CRITERIA

4. EVALUATION OF OPTIONS

5. TECHNICAL EVALUATION PROCEDURES AND CRITERIA

- 4 -

PART I - THE SCHEDULE

THE INFORMATION SET FORTH IN SECTION A - SOLICITATION/CONTRACT FORM, HEREIN CONTAINS

IMPORTANT INFORMATION FOR ANY OFFEROR INTERESTED IN RESPONDING TO THIS SOLICITATION.

ANY CONTRACT RESULTING FROM THIS SOLICITATION WILL INCLUDE IN ITS SECTION A - SOLICITATION/

CONTRACT FORM, ACCOUNTING, APPROPRIATION AND GENERAL INFORMATION APPLICABLE TO THE

CONTRACT AWARD.

THE CONTRACT SCHEDULE SET FORTH IN SECTIONS B THROUGH H, HEREIN, CONTAINS CONTRACTUAL

INFORMATION PERTINENT TO THIS SOLICITATION. IT IS NOT AN EXACT REPRESENTATION OF THE

CONTRACT DOCUMENT THAT WILL BE AWARDED AS A RESULT OF THIS SOLICITATION. THE CONTRACT

COST OR PRICE AND OTHER CONTRACTUAL PROVISIONS PERTINENT TO THE OFFEROR (i.e., those relating to the organizational structure [e.g., Non-Profit, Commercial] and specific cost authorizations unique to the Offeror's proposal and requiring Contracting Officer Prior Approval) WILL BE DISCUSSED IN THE NEGOTIATION PROCESS

AND WILL BE INCLUDED IN THE RESULTANT CONTRACT. THE ENCLOSED CONTRACT SCHEDULE IS

INTENDED TO PROVIDE THE OFFEROR WITH THE NECESSARY INFORMATION TO UNDERSTAND THE

TERMS AND CONDITIONS OF THE RESULTANT CONTRACT.

SECTION B - SUPPLIES OR SERVICES AND PRICES/COSTS

ARTICLE B.1. BRIEF DESCRIPTION OF SUPPLIES OR SERVICES

The purpose of the proposed contract is to provide the necessary services, qualified professional, technical, administrative or clerical personnel as well as materials, equipment, and facilities needed for management and support of an archives and repository contract for the National Toxicology Program (NTP) and the National Institute of

Environmental Health Sciences (NIEHS) Divisions of Translational Toxicology (DTT) and Intramural Research (DIR).

The contractor shall provide for the storage and management of large volumes of data, biological and environmental specimens that require safe, secure, short-term and long-term storage under specific environmental conditions.

ARTICLE B.2. ESTIMATED COST - OPTION

a. The estimated cost of the Base Period of this contract is $ .

b. The fixed fee for the Base Period of this contract is $ For level of effort contracts: The fixed fee shall be paid in direct ratio to the level of effort expended; that is, the percent of fee paid shall be equal to the percent of total effort expended. Payment shall be subject to the withholding provisions of the clauses ALLOWABLE

COST AND PAYMENT and FIXED FEE referenced in the General Clause Listing in Part II, ARTICLE I.1. of this contract.

c. The total estimated amount of the contract, represented by the sum of the estimated cost plus the fixed fee for the Base Period is $ .

d. If the Government exercises its option pursuant to the OPTION PROVISION Article in SECTION H of this contract, the Government's total estimated contract amount represented by the sum of the estimated cost plus the fixed fee will be increased as follows:

Period Period of Performance

Estimated Cost

Fixed Fee

Estimated Cost

Plus Fixed Fee

Base Period TBD - 12

Months

Option Period 1 TBD - 12

- 5 -

Period Period of

Performance Estimated Cost

Fixed Fee

Estimated Cost

Plus Fixed Fee

Option Period 2 TBD - 12

Option Period 3 TBD - 12

Option Period 4 TBD - 12

Option Period 5: Six (6) Month Ext in accordance with FAR 52.217-8

TBD - 6 Months

Base Period A: Increased LOE (20%) TBD

Option Period 1 – Optional A: Increased

LOE (20%)

TBD

Option Period 2 – Optional A: Increased

LOE (20%)

TBD

Option Period 3 – Optional A: Increased

LOE (20%)

TBD

Option Period 4 – Optional A: Increased

LOE (20%)

TBD

Optional B: Rapid addition of data and/or specimens (Price for 1x)

TBD

Total

[Base Period and All Option(s)]

ARTICLE B.3. PROVISIONS APPLICABLE TO DIRECT COSTS

This article will prohibit or restrict the use of contract funds, unless otherwise approved by the Contracting Officer. The following is a list of items that may be included in the resultant contract as applicable. 1) Conferences & Meetings, 2)

Food for Meals, Light Refreshments & Beverages, 3) Promotional Items, 4) Acquisition, by purchase or lease, of any interest in real property; 5) Special rearrangement or alteration of facilities; 6) Purchase or lease of any item of general purpose office furniture or office equipment regardless of dollar value; 7) Travel Costs including Foreign Travel; 8)

Consultant Costs; 9) Subcontract Costs; 10) Patient Care Costs; 11) Accountable Government Property; 12) Printing costs; and 13) Research Funding.

ARTICLE B.4. ADVANCE UNDERSTANDINGS

Specific elements of cost, which normally require prior written approval of the Contracting Officer before incurrence of the cost (e.g., foreign travel, consultant fees, subcontracts) will be included in this Article if the Contracting Officer has granted his/her approval prior to contract award.

- 6 -

SECTION C - DESCRIPTION/SPECIFICATIONS/WORK STATEMENT

ARTICLE C.1. STATEMENT OF WORK

a. Independently and not as an agent of the Government, the Contractor shall be required to furnish all the necessary services, qualified personnel, material, equipment, and facilities, not otherwise provided by the

Government, as needed to perform the Statement of Work, dated 11/8/2023, attached hereto and made a part of this Solicitation (See SECTION J - List of Attachments).

ARTICLE C.2. REPORTING REQUIREMENTS

All reports shall be submitted electronically and shall be compliant with Section 508 of the Rehabilitation Act of 1973.

See Section 10 of the Statement of Work for Section 508 requirements.

- 7 -

SECTION D - PACKAGING, MARKING AND SHIPPING

All deliverables required under this contract shall be packaged, marked and shipped in accordance with the

Statement of Work. At a minimum, all deliverables shall be marked with the contract number and Contractor name.

The Contractor shall guarantee that all required materials shall be delivered in immediate usable and acceptable condition.

- 8 -

SECTION E - INSPECTION AND ACCEPTANCE

a. The Contracting Officer or the duly authorized representative will perform inspection and acceptance of materials and services to be provided.

b. For the purpose of this SECTION, Contracting Officer's Representative is the authorized representative of the

Contracting Officer.

c. Inspection and acceptance will be performed at:

National Institutes of Health

National Institute of Environmental Health Sciences

Research Triangle Park, NC 27709

Acceptance may be presumed unless otherwise indicated in writing by the Contracting Officer or the duly authorized representative within 30 days of receipt.

d. This contract incorporates the following clause by reference, with the same force and effect as if it were given in full text. Upon request, the Contracting Officer will make its full text available.

FAR Clause 52.246-5, Inspection of Services - Cost-Reimbursement (April 1984).

- 9 -

SECTION F - DELIVERIES OR PERFORMANCE

ARTICLE F.1. PERIOD OF PERFORMANCE

a. The period of performance of this contract shall be from TBD through TBD.

b. If the Government exercises its option(s) pursuant to the OPTION PROVISION Article in Section H of this contract, the period of performance will be increased as listed below:

Option Option Period

Option Period 1 12 Months

Option Period 2 12 Months

Option Period 3 12 Months

Option Period 4 12 Months

Option Period 5 (6 Month Option - 52.217-8) 6 Months

*NOTE: THESE DATES WILL BE DETERMINED BY THE ACTUAL AWARD DATE OF THE CONTRACT.

ARTICLE F.2. DELIVERIES

a. Satisfactory performance of this contract shall be deemed to occur upon performance of the work described in the Statement of Work Article in SECTION C of this contract and upon delivery and acceptance by the

Contracting Officer, or the duly authorized representative, of the Services specified in the Delivery Schedule which are described in SECTION C of this contract.

b. Submission of deliverables shall be made as specified in the Statement of Work.

c. Unless otherwise specified, deliveries shall be made to the Delivery Point specified above Mondays through

Fridays (excluding Federal Holidays) between the hours of 8:30 a.m. and 5:30 p.m. EST only. Supplies or services scheduled for delivery on a Federal holiday shall be made the following day.

ARTICLE F.3. LEVEL OF EFFORT

a. The Contractor shall have satisfied the requirement herein if not less than 90% nor more than 110% of the total direct labor Hours specified herein are furnished. These terms and conditions do not supersede the requirements of either the "Limitation of Cost" or "Limitation of Funds" clause.

b. In the event fewer Hours than the minimum specified number of direct labor Hours in the total categories are used by the Contractor in accomplishing the prescribed work and the Government has not invoked its rights under FAR Clause 52.249-6, TERMINATION (Cost-Reimbursement) incorporated in this contract, these parties agree that the fee will be adjusted based solely upon the quantity of Hours by which the number of direct labor Hours furnished is less than the number of direct labor Hours specified in this ARTICLE. The resulting adjustment shall be evidenced by a contract modification.

ARTICLE F.4. CLAUSES INCORPORATED BY REFERENCE, FAR 52.252-2 (FEB 1998).

This contract incorporates the following clause(s) by reference, with the same force and effect as if it were given in full text. Upon request, the Contracting Officer will make its full text available. Also, the full text of a clause may be accessed electronically at this address: https://www.acquisition.gov/?q=browsefar.

https://www.acquisition.gov/?q=browsefar

- 10 -

FEDERAL ACQUISITION REGULATION (48 CFR CHAPTER 1) CLAUSE:

52.242-15, Stop Work Order (August 1989).

Alternate I (April 1984) is applicable to this contract.

- 11 -

SECTION G - CONTRACT ADMINISTRATION DATA

ARTICLE G.1. CONTRACTING OFFICER REPRESENTATIVE (COR)

The following Contracting Officer Representative (COR) will represent the Government for the purpose of this contract:

To be specified at award.

The COR is responsible for: (1) monitoring the Contractor's technical progress, including the surveillance and assessment of performance and recommending to the Contracting Officer changes in requirements; (2) interpreting the statement of work and any other technical performance requirements; (3) performing technical evaluation as required; (4) performing technical inspections and acceptances required by this contract; and (5) assisting in the resolution of technical problems encountered during performance.

[The alternate COR is responsible for carrying out the duties of the COR only in the event that the COR can no longer perform his/her duties as assigned.]

The Contracting Officer is the only person with authority to act as agent of the Government under this contract. Only the Contracting Officer has authority to: (1) direct or negotiate any changes in the statement of work; (2) modify or extend the period of performance; (3) change the delivery schedule; (4) authorize reimbursement to the Contractor for any costs incurred during the performance of this contract; (5) otherwise change any terms and conditions of this contract; or (6) sign written licensing agreements. Any signed agreement shall be incorporated by reference in Section

K of the contract

The Government may unilaterally change its COR designation.

ARTICLE G.2. KEY PERSONNEL, HHSAR 352.237-75 (December 2015).

The key personnel specified in this contract are considered to be essential to work performance. At least 30 days prior to the contractor voluntarily diverting any of the specified individuals to other programs or contracts the Contractor shall notify the Contracting Officer and shall submit a justification for the diversion or replacement and a request to replace the individual. The request must identify the proposed replacement and provide an explanation of how the replacement's skills, experience, and credentials meet or exceed the requirements of the contract (including, when applicable, Human Subjects Testing requirements). If the employee of the contractor is terminated for cause or separates from the contractor voluntarily with less than thirty days' notice, the Contractor shall provide the maximum notice practicable under the circumstances. The Contractor shall not divert, replace, or announce any such change to key personnel without the written consent of the Contracting Officer. The contract will be modified to add or delete key personnel as necessary to reflect the agreement of the parties.

(End of clause).

The following individual(s) is/are considered to be essential to the work being performed hereunder:

Name Title

Project Director

Archives/Frozen Tissue Bank Manager

Repository Manager

- 12 -

ARTICLE G.3. INVOICE SUBMISSION/CONTRACT FINANCING REQUEST AND CONTRACT

FINANCIAL REPORT

a. Invoice Submission/Contract Financing Request, NIH(RC)-1for NIH Cost-Reimbursement Type Contracts are attached and made part of this contract. The Contractor shall follow the attached instructions and submission procedures specified below to meet the requirements of a "proper invoice" pursuant to FAR Subpart 32.9, Prompt Payment.

The Contractor must submit invoices to the Department of Treasury's Invoice Processing Platform (IPP) at https://www.ipp.gov with a copy of the invoice to the approving official, as directed below.

1. The Contractor shall submit a copy of the electronic invoice to the following Approving Official

(Contracting Officer) and Contracting Officer Representative:

Official: Contracting Officer

Name- To be specified at award. Email Address- To be specified at award.

Contracting Officer Representative

Name- To be specified at award. Email Address- To be specified at award.

For inquiries regarding the status of invoices, contact OFM Customer Service via email at ofm_customer_service@mail-cmp.niceincontact.com or via phone at 301-496-6088. To send your inquiries via other available communication methods refer to the OFM Customer Service website at https://ofm.od.nih.gov/Pages/Customer-Service.aspx.

Note: The OFM Customer Service is open Eastern Standard Time Monday - Friday from 8:30 a.m. to

5:00 p.m. and is closed between 12:00 p.m. to 1:00 p.m.

2. In addition to the requirements specified in FAR 32.905 for a proper invoice, the Contractor shall include the following information on the face page of all payment requests:

a. Name of the Office of Acquisitions. The Office of Acquisitions for this contract is National

Institute for Environmental Health Sciences .

b. Federal Taxpayer Identification Number (TIN). If the Contractor does not have a valid TIN, it shall identify the Vendor Identification Number (VIN) on the payment request. The VIN is the number that appears after the Contractor's name on the face page of the contract. [Note: A

VIN is assigned to new contracts awarded on or after June 4, 2007, and any existing contract modified to include the VIN number.] If the Contractor has neither a TIN, Unique Entity Identifier

(UEI), or VIN, contact the Contracting Officer. Note: The Contractor shall not include TIN if it is a

Social Security Number.

c. Unique Entity Identifier (UEI). The UEI is located in the System for Award Management

(SAM) and replaces the Dun & Bradstreet Data Universal Numbering System (DUNS) number. The UEI number must identify the Contractor's name and address exactly as stated in the contract and as registered in the Central Contractor Registration (CCR) database. If the

Contractor does not have a valid UEI number, it shall identify the Vendor Identification Number

(VIN) on the payment request. The VIN is the number that appears after the Contractor's name on the face page of the contract. [Note: A VIN is assigned to new contracts awarded on or after

June 4, 2007, and any existing contract modified to include the VIN number.] If the Contractor has neither a TIN, UEI, or VIN, contact the Contracting Officer.

https://www.ipp.gov/ mailto:ofm_customer_service@mail-cmp.niceincontact.com https://ofm.od.nih.gov/Pages/Customer-Service.aspx

- 13 -

d. Invoice Matching Option. This contract requires a two-way match.

e. Unique Invoice Number. Each payment request must be identified by a unique invoice number, which can only be used one time regardless of the number of contracts or orders held by an organization.

f. The Contract Title is:

Management and Support of an Archives and Repository Contract for the National

Toxicology Program (NTP) and the National Institute of Environmental Health Sciences

(NIEHS) Divisions of Translational Toxicology (DTT) and Intramural Research (DIR)

g. Contract Line Items as follows:

Line Item # Line Item Description

TBD TBD

b. Inquiries regarding payment of invoices shall be directed to the designated billing office, (301) 496-6088.

ARTICLE G.4. PROVIDING ACCELERATED PAYMENT TO SMALL BUSINESS

SUBCONTRACTORS, FAR 52.232-40 (Nov 2021).

a. Upon receipt of accelerated payments from the Government, the Contractor shall make accelerated payments to its small business subcontractors under this contract, to the maximum extent practicable and prior to when such payment is otherwise required under the applicable contract or subcontract, after receipt of a proper invoice and all other required documentation from the small business subcontractor.

b. The acceleration of payments under this clause does not provide any new rights under the prompt Payment Act.

c. Include the substance of this clause, include this paragraph c, in all subcontracts with small business concerns, including subcontracts with small business concerns for the acquisition of commercial items.

(End of clause).

ARTICLE G.5. INDIRECT COST RATES

In accordance with Federal Acquisition Regulation (FAR) (48 CFR Chapter 1) Clause 52.216-7 (d)(2), Allowable

Cost and Payment incorporated by reference in this contract in PART II, SECTION I, the cognizant Contracting

Officer Representative responsible for negotiating provisional and/or final indirect cost rates is identified as follows:

Director, Division of Financial Advisory Services

Office of Acquisition Management and Policy

National Institutes of Health

6011 EXECUTIVE BLVD, ROOM 549C, MSC-7663

BETHESDA MD 20892-7663

These rates are hereby incorporated without further action of the Contracting Officer. Go to the Indirect Cost

Submission web page: https://oamp.od.nih.gov/division-of-financial-advisory-services/indirect-cost-branch/indirect-cost-submission for electronic copies of the Branch's information package documents.

https://oamp.od.nih.gov/division-of-financial-advisory-services/indirect-cost-branch/indirect-cost-submission https://oamp.od.nih.gov/division-of-financial-advisory-services/indirect-cost-branch/indirect-cost-submission

- 14 -

ARTICLE G.6. POST AWARD EVALUATION OF CONTRACTOR PERFORMANCE

a. Contractor Performance Evaluations

Interim and Final evaluations of Contractor performance will be prepared on this contract in accordance with

FAR Subpart 42.15. The Final performance evaluation will be prepared at the time of completion of work.

In addition to the Final evaluation, Interim evaluation(s) will be prepared Annually as follows on TBD [Insert

Dates].

Interim and Final evaluations will be provided to the Contractor as soon as practicable after completion of the evaluation. The Contractor will be permitted thirty days to review the document and to submit additional information or a rebutting statement. If agreement cannot be reached between the parties, the matter will be referred to an individual one level above the Contracting Officer, whose decision will be final.

Copies of the evaluations, Contractor responses, and review comments, if any, will be retained as part of the contract file, and may be used to support future award decisions.

b. Electronic Access to Contractor Performance Evaluations

Contractors may access evaluations through a secure Web site for review and comment at the following address:

https://www.cpars.gov

ARTICLE G.7. GOVERNMENT PROPERTY

If this RFP will result in the acquisition or use of Government Property provided by the contracting agency or if the Contracting Officer authorizes in the preaward negotiation process, the acquisition of property (other than real property), this ARTICLE will include applicable provisions and incorporate the HHS Publication, entitled, "HHS

Contracting Guide for Contract of Government Property," Appendix Q, which can be found at:

https://oamp.od.nih.gov/ sites/default/files/DGS/HHS%20Contracting%20Guide%20for%20Contract%20of%

20Government%20Property- Appendix%20Q.pdf.

https://www.cpars.gov/ https://oamp.od.nih.gov/sites/default/files/DGS/HHS%20Contracting%20Guide%20for%20Contract%20of%20Government%20Property-Appendix%20Q.pdf https://oamp.od.nih.gov/sites/default/files/DGS/HHS%20Contracting%20Guide%20for%20Contract%20of%20Government%20Property-Appendix%20Q.pdf

- 15 -

SECTION H - SPECIAL CONTRACT REQUIREMENTS

ARTICLE H.1. HUMAN SUBJECTS

It is hereby understood and agreed that research involving human subjects shall not be conducted under this contract, and that no material developed, modified, or delivered by or to the Government under this contract, or any subsequent modification of such material, will be used by the Contractor or made available by the Contractor for use by anyone other than the Government, for experimental or therapeutic use involving humans without the prior written approval of the Contracting Officer.

ARTICLE H.2. CERTIFICATE OF CONFIDENTIALITY

Section 2012 of the 21st Century Cures Act, enacted December 13, 2016, enacts new provisions governing the authority of the Secretary of Health and Human Services (Secretary) to protect the privacy of individuals who are the subjects of research, including significant amendments to the previous statutory authority for such protections, under subsection 301(d) of the Public Health Service Act.

Effective October 1, 2017, all research that was commenced or ongoing on or after December 13, 2016 and is within the scope of the NIH Policy for Issuing Certificate of Confidentiality (CoC) NOT-OD-17-109, the Contractor shall protect the privacy of individuals who are subjects of such research in accordance with subsection 301(d) of the Public

Health Service Act as a term and condition of the contract. The certificate will not be issued as a separate document.

NIH considers research in which identifiable, sensitive information is collected or used, to include:

● Human subjects research as defined in the Federal Policy for the Protection of Human Subjects (45 CFR 46), including exempt research (except for human subjects' research that is determined to be exempt from all or some of the requirements of 45 CFR 46) if the information obtained is recorded in such a manner that human subjects cannot be identified or the identity of the human subjects cannot readily be ascertained, directly or through identifiers linked to the subjects);

● Research involving the collection or use of biospecimens that are identifiable to an individual or for which there is at least a very small risk that some combination of the biospecimen, a request for the biospecimen, and other available data sources could be used to deduce the identity of an individual;

● Research that involves the generation of individual level, human genomic data from biospecimens, or the use of such data, regardless of whether the data is recorded in such a manner that human subjects can be identified or the identity of the human subjects can readily be ascertained as defined in the Federal Policy for the Protection of Human Subjects (45 CFR 46); or

● Any other research that involves information about an individual for which there is at least a very small risk, as determined by current scientific practices or statistical methods, that some combination of the information, a request for the information, and other available data sources could be used to deduce the identity of an individual, as defined in subsection 301(d) of the Public Health Service Act.

The Contractor shall not:

● Disclose or provide, in any Federal, State, or local civil, criminal, administrative, legislative, or other proceeding, the name of such individual or any such information, document, or biospecimen that contains identifiable, sensitive information about the individual and that was created or compiled for purposes of the research, unless such disclosure or use is made with the consent of the individual to whom the information, document, or biospecimen pertains; or

● Disclose or provide to any other person not connected with the research the name of such an individual or any information, document, or biospecimen that contains identifiable, sensitive information about such an individual and that was created or compiled for purposes of the research.

- 16 -

The Contractor is permitted to disclose only in below circumstances. The Contractor shall notify the CO minimum ten

(10) calendar days prior to disclosure.

● Required by Federal, State, or local laws (e.g., as required by the Federal Food, Drug, and Cosmetic Act, or state laws requiring the reporting of communicable diseases to State and local health departments), excluding instances of disclosure in any Federal, State, or local civil, criminal, administrative, legislative, or other proceeding;

● Necessary for the medical treatment of the individual to whom the information, document, or biospecimen pertains and made with the consent of such individual;

● Made with the consent of the individual to whom the information, document, or biospecimen pertains; or

● Made for the purposes of other scientific research that is in compliance with applicable Federal regulations governing the protection of human subjects in research.

In accordance with 45 CFR Part 75.303(a), the Contractor shall maintain effective internal controls (e.g., policies and procedures) that provide reasonable assurance that the award is managed in compliance with Federal Statutes and regulations.

The recipient of CoCs shall ensure that any company/institution/individual not funded by NIH who receives a copy of identifiable, sensitive information protected by a Certificate understand that they are also subject to the requirements of subsection 301(d) of the Public Health Service Act. The Contractor shall ensure that Subcontractors who receive funds to carry out part of the Federal award understand they are also subject to subsection 301(d) of the

Public Health Service Act and the NIH Policy for Issuing CoC.

ARTICLE H.3. HUMAN MATERIALS

The acquisition and supply of all human specimen material (including fetal material) used under this contract shall be obtained by the Contractor in full compliance with applicable State and Local laws and the provisions of the Uniform

Anatomical Gift Act in the United States, and no undue inducements, monetary or otherwise, will be offered to any person to influence their donation of human material.

ARTICLE H.4. ACKNOWLEDGEMENT OF FEDERAL FUNDING

The Contractor shall clearly state, when issuing statements, press releases, requests for proposals, bid solicitations and other documents describing projects or programs funded in whole or in part with Federal money: (1) the percentage of the total costs of the program or project which will be financed with Federal money; (2) the dollar amount of Federal funds for the project or program; and (3) the percentage and dollar amount of the total costs of the project or program that will be financed by nongovernmental sources.

ARTICLE H.5. DISSEMINATION OF FALSE OR DELIBERATELY MISLEADING INFORMATION

The Contractor shall not use contract funds to disseminate information that is deliberately false or misleading.

ARTICLE H.6. GUN CONTROL

The Contractor shall not use contract funds in whole or in part, to advocate or promote gun control.

ARTICLE H.7. OPTION PROVISION

Unless the Government exercises its option pursuant to the Option Clause set forth in SECTION I., the contract will consist only of the Base Period of the Statement of Work as defined in Sections C and F of the contract. Pursuant to

FAR Clause 52.217-7, Option for Increased Quantity-Separately Priced Line Item ; FAR Clause 52.217-8, Option to

Extend Services; and FAR Clause 52.217-9, Option to Extend the Term of the Contract, set forth in SECTION I. of this

- 17 -contract, the Government may, by unilateral contract modification, require the Contractor to perform additional options set forth in the Statement of Work and also defined in Sections C and F of the contract. If the Government exercises this option, notice must be given at least 30 days prior to the expiration date of this contract, and the estimated cost plus fixed fee of the contract will be increased as set forth in the ESTIMATED COST PLUS FIXED FEE Article in

SECTION B of this contract.

ARTICLE H.8. SUBCONTRACTING PROVISIONS

a. Small Business Subcontracting Plan

1. In accordance with FAR 19.704 and FAR Clause 52.219-9, the submission of a subcontracting plan by other than small business offeror( s) is a requirement as a part of the proposal submission process and is to be submitted separately from the technical and cost proposals. An offeror's subcontracting plan must be determined to be acceptable, by the Contracting Officer, prior to the contract award.

2. The failure of any Contractor or subcontractor to comply in good faith with FAR Clause 52.219-8, entitled

" Utilization of Small Business Concerns" incorporated in this contract and the attached Subcontracting

Plan, will be a material breach of such contract or subcontract and subject to the remedies reserved to the

Government under FAR Clause 52.219-16 entitled, " Liquidated Damages- Subcontracting Plan."

b. Subcontracting Reports

1. An offeror is to submit their respective subcontracting plan electronically using the U.S. Department of

Health and Human Services (HHS) Small Business Customer Experience (SBCX) system at https:// osdbu.hhs.gov. The offeror shall follow the instructions outlined in the SBCX Industry Guide at: https:// oamp.od.nih.gov/nih-document-generation-system/dgs-workform-information/attachment-files-section-j to successfully submit their subcontracting plan by the proposal submission deadline.

2. The official point of receipt for determining timely submission of an offeror's subcontracting plan is the

SBCX system and/or email notification. Once the subcontracting plan is successfully submitted in the

SBCX system the offeror should receive an email notification and confirmation message of completion upon submission.

3. If an offeror's subcontracting plan is not confirmed as received within the SBCX system by the proposal submission date specified in the solicitation, it will be considered late in accordance with subparagraph (c)

(3) of FAR Clause 52.215-1, Instructions to Offeror-Competition Acquisition. Disposition of late submittals of a subcontracting plan by an offeror via the SBCX system is at the discretion of the Contracting Officer.

4. Any technical questions regarding the use of the SBCX system may be submitted via email message to the SBCX help desk at client.support@apexlogic.com. The client support hours of operation are Monday

- Friday, 6:00 a.m. - 8:00 p.m. Eastern Standard Time (EST). Note: help desk tickets can be submitted 24 hours a day / 7 days a week and a representative will respond within the presented client support hours of operation for assistance.

5. Individual Subcontract Reports ( ISR)

Regardless of the effective date of this contract, the Report shall be due on the following dates for the entire life of this contract:

April 30th

October 30th

Expiration Date of Contract

6. Summary Subcontract Report ( SSR)

Regardless of the effective date of this contract, the Summary Subcontract Report must be submitted annually on the following date for the entire life of this contract:

October 30th

For both the Individual and Summary Subcontract Reports, the Contracting Officer must be included as a contact for notification purposes at the following e- mail address:

https://osdbu.hhs.gov/ https://osdbu.hhs.gov/ https://oamp.od.nih.gov/nih-document-generation-system/dgs-workform-information/attachment-files-section-j https://oamp.od.nih.gov/nih-document-generation-system/dgs-workform-information/attachment-files-section-j mailto:client.support@apexlogic.com

- 18 -

TBD

Contracting Officer

ARTICLE H.9. HHS SECURITY AND PRIVACY LANGUAGE FOR INFORMATION AND IT

PROCUREMENTS

SECTION A - INFORMATION SECURITY AND/OR PHYSICAL ACCESS SECURITY

1. Baseline Security Requirements

a. Applicability. The requirements herein apply whether the entire contract or order (hereafter "contract"), or portion thereof, includes either or both of the following:

a. i. Access (Physical or Logical) to Government Information: A Contractor (and/or any subcontractor) will have or will be given the ability to have, routine physical (entry) or logical

(electronic) access to government information.

ii. Operate a Federal System Containing Information: A Contractor (and/or any subcontractor) will operate a federal system and information technology containing data that supports the

HHS mission. In addition to the Federal Acquisition Regulation (FAR) Subpart 2.1 definition of "information technology" (IT), the term as used in this section includes computers, ancillary equipment (including imaging peripherals, input, output, and storage devices necessary for security and surveillance), peripheral equipment designed to be controlled by the central processing unit of a computer, software, firmware and similar procedures, services (including support services), and related resources.

b. Safeguarding Information and Information Systems. All government information and information systems must be protected in accordance with HHS/NIH policies and level of risk. At a minimum, the Contractor (and/or any subcontractor) must:

i. Protect the:

● Confidentiality , which means preserving authorized restrictions on access and disclosure, based on the security terms found in this contract, including means for protecting personal privacy and proprietary information;

● Integrity , which means guarding against improper information modification or destruction, and ensuring information non-repudiation and authenticity; and

● Availability , which means ensuring timely and reliable access to and use of information.

ii. Categorize all information owned and/or collected/managed on behalf of HHS/NIH and information systems that store, process, and/or transmit HHS information in accordance with FIPS 199 and National

Institute of Standards and Technology (NIST) Special Publication (SP) 800-60, Volume II: Appendices to Guide for Mapping Types of Information and Information Systems to Security Categories. Based on information provided by the NIEHS ISSO, NIEHS SOP, or other representative, the impact level for each

Security Objective (Confidentiality, Integrity, and Availability) and the Overall Impact Level, which is the highest watermark of the three factors of the information or information system are the following:

■ Confidentiality: [ X ] Low [ ] Moderate [ ] High

■ Integrity: [ X ] Low [ ] Moderate [ ] High

■ Availability: [ X ] Low [ ] Moderate [ ] High http://csrc.nist.gov/publications/nistpubs/800-60-rev1/SP800-60_Vol2-Rev1.pdf http://csrc.nist.gov/publications/nistpubs/800-60-rev1/SP800-60_Vol2-Rev1.pdf http://csrc.nist.gov/publications/nistpubs/800-60-rev1/SP800-60_Vol2-Rev1.pdf http://csrc.nist.gov/publications/nistpubs/800-60-rev1/SP800-60_Vol2-Rev1.pdf

- 19 -

■ Overall Impact Level: [ X ] Low [ ] Moderate [ ] High

iii. Based on the agreed-upon level of impact, implement the necessary safeguards to protect all information systems and information collected and/or managed on behalf of HHS/NIH regardless of location or purpose.

iv. Report any discovered or unanticipated threats or hazards by either the agency or contractor, or if existing safeguards have ceased to function immediately after discovery, within one (1) hour or less, to the government representative(s).

v. Adopt and implement all applicable policies, procedures, controls, and standards required by the

HHS/NIH Information Security Program to ensure the confidentiality, integrity, and availability of government information and government information systems for which the Contractor is responsible under this contract or to which the Contractor may otherwise have access under this contract. Obtain all applicable security and privacy policies by contacting the CO/ COR or HHS/NIH security and/or privacy officials.

c. Privacy Act. Comply with the Privacy Act requirements (when applicable), and tailor FAR and HHSAR clauses as needed.

d. Privacy Compliance. Comply with the E-Government Act of 2002, NIST SP 800-53, and applicable

HHS/NIH/NIEHS privacy policies, and complete all the requirements below:

i. Per the Office of Management and Budget (OMB) Circular A-130, Personally Identifiable

Information (PII), is "information that can be used to distinguish or trace an individual's identity, either alone or when combined with other information that is linked or linkable to a specific individual." Examples of PII include, but are not limited to the following: Social Security number, date and place of birth, mother's maiden name, biometric records, etc.

ii. Based on information provided by the ISSO, system/data owner, or other security or privacy representative, it has been determined that this solicitation/ contract involves:

[ ] No PII [ X ] PII

iii. The Contractor must support the agency with conducting a Privacy Threshold Analysis (PTA) for the information system and/or information handled under this contract to determine whether or not a full

Privacy Impact Assessment (PIA) needs to be completed.

■ If the results of the PTA show that a full PIA is needed, the Contractor must support the agency with completing a PIA for the system or information within 60 days after completion of the PTA and in accordance with HHS policy and OMB M-03-22, Guidance for Implementing the Privacy

Provisions of the E-Government Act of 2002.

■ The Contractor must support the agency in reviewing the PIA at least every three years throughout the system development lifecycle (SDLC)/information lifecycle, or when determined by the agency that a review is required based on a major change to the system, or when new types of PII are collected that introduces new or increased privacy risks, whichever comes first.

e. Controlled Unclassified Information (CUI). Executive Order 13556 defines CUI as "information that laws, regulations, or Government-wide policies require to have safeguarding or dissemination controls, excluding classified information." The Contractor (and/or any subcontractor) must comply with Executive Order 13556, Controlled Unclassified Information, (implemented at 3 CFR, part 2002) when handling CUI. 32 C.F.R.

2002.4(aa) As implemented the term "handling" refers to "…any use of CUI, including but not limited to marking, safeguarding, transporting, disseminating, re-using, and disposing of the information." 81 Fed. Reg. 63323. The requirements below apply only to nonfederal systems that process, store, or transmit CUI, or that provide security protection for such components. All sensitive information that has been identified as CUI by a regulation or statute, handled by this solicitation/contract, must be:

- 20 -

i. Marked appropriately;

ii. Disclosed to authorized personnel on a Need-To-Know basis;

iii. Protected in accordance with NIST SP 800-53, Security and Privacy Controls for Information Systems and Organizations applicable baseline if handled by a Contractor system operated on behalf of the agency, or NIST SP 800-171, Protecting Controlled Unclassified Information in Nonfederal

Information Systems and Organizations if handled by internal Contractor system; and

iv. Returned to HHS control, destroyed when no longer needed, or held until otherwise directed.

Information and/or data must be disposed of in accordance with NIST SP 800-88, Guidelines for

Media Sanitization.

f. Protection of Sensitive Information. For security purposes, information is or may be sensitive because it requires security to protect its confidentiality, integrity, and/or availability. The Contractor (and/or any subcontractor) must protect all government information that is or may be sensitive by securing it with a solution that is validated with current FIPS 140 validation certificate from the NIST CMVP.

g. Confidentiality and Nondisclosure of Information. Any information provided to the contractor (and/ or any subcontractor) by HHS or collected by the contractor on behalf of HHS must be used only for the purpose of carrying out the provisions of this contract and must not be disclosed or made known in any manner to any persons except as may be necessary in the performance of the contract. The Contractor assumes responsibility for protection of the confidentiality of Government records and must ensure that all work performed by its employees and subcontractors must be under the supervision of the Contractor. Each

Contractor employee or any of its subcontractors to whom any HHS records may be made available or disclosed must be notified in writing by the Contractor that information disclosed to such employee or subcontractor can be used only for that purpose and to the extent authorized herein.

The confidentiality, integrity, and availability of such information must be protected in accordance with HHS and

NIH policies. Unauthorized disclosure of information will be subject to the HHS/NIH sanction policies and/or governed by the following laws and regulations:

i. 18 U.S.C. 641 (Criminal Code: Public Money, Property or Records);

ii. 18 U.S.C. 1905 (Criminal Code: Disclosure of Confidential Information); and

iii. 44 U.S.C. Chapter 35, Subchapter I (Paperwork Reduction Act).

h. Internet Protocol Version 6 (IPv6). All procurements using Internet Protocol must comply with OMB Memorandum M-05-22, Transition Planning for Internet Protocol Version 6 (IPv6).

i. Information and Communications Technology (ICT). ICT products and services from prohibited entities/ sources must not be used/acquired in compliance with Public Law 115-232, Section 889 Parts A and B, FAR

4.21, FAR 52.204.23, FAR 52.204.24, and FAR 52.204.25. The contractor (and/or any subcontractor) must notify the government if they identify prohibited ICT products and/or services are used during the contract performance.

j. Government Websites. All new and existing public-facing government websites must be securely configured with Hypertext Transfer Protocol Secure (HTTPS) using the most recent version of Transport

Layer Security (TLS). In addition, HTTPS must enable HTTP Strict Transport Security (HSTS) to instruct compliant browsers to assume HTTPS at all times to reduce the number of insecure redirects and protect against attacks that attempt to downgrade connections to plain HTTP. For internal-facing websites, HTTPS is not required, but it is highly recommended. Consult the HHS Policy for Internet and Email Security for additional information.

- 21 -

k. Contract Documentation. The Contractor must use provided templates, policies, forms and other agency documents. NIH will specify which documents/forms will be provided to comply with contract deliverables as appropriate.

l. Standard for Encryption. The Contractor (and/or any subcontractor) must:

i. Comply with the HHS Standard for Encryption of Computing Devices and Information to prevent unauthorized access to government information.

ii. Encrypt all sensitive federal data and information (i.e., PII, protected health information [PHI], proprietary information, etc.) in transit (i.e., email, network connections, etc.) and at rest (i.e., servers, storage devices, mobile devices, backup media, etc.) with encryption solution that is validated with current FIPS 140 validation certificate from the NIST CMVP.

iii. Secure all devices (i.e.: desktops, laptops, mobile devices, etc.) that store and process government information and ensure devices meet HHS and NIH-specific encryption standard requirements.

Maintain a complete and current inventory of all laptop computers, desktop computers, and other mobile devices and portable media that store or process sensitive government information (including

PII).

iv. Verify that the encryption solutions in use have been validated under the Cryptographic Module

Validation Program to confirm compliance with current FIPS 140 validation certificate from the NIST

CMVP. The Contractor must provide a written copy of the validation documentation to the COR within

15 days of the validation.

v. Use the Key Management system on the HHS personal identification verification (PIV) card or establish and use a key recovery mechanism to ensure the ability for authorized personnel to encrypt/ decrypt information and recover encryption keys http://csrc.nist.gov/publications/. Encryption keys must be provided to the COR upon request and at the conclusion of the contract.

m. Contractor Non-Disclosure…