RFQ 5000178352 CDSW Hadoop 91624.pdf

RFQ 5000178352

COMBINED SYNOPSIS/SOLICITATION

This notice is a combined synopsis/solicitation for commercial supplies and service prepared in accordance with the format in Subpart 12, as supplemented with additional information included in this notice. This announcement constitute a solicitation; quotes are not being requested and a written solicitation will not be issued.

This solicitation number will be 5000178352 and may be issued as a Request for Quote (RFQ). This solicitation document incorporates all mandatory commercial item provisions and clauses that are in effect through Federal Acquisition Circular 2024-06 effective August 29, 2024.

This acquisition will be full and open. Future offerors must have an active entity registration in the System for Award Management (SAM.gov).

This will be made as a Firm-Fixed Price, Single Award, solicited under North American Industry Classification System (NAICS) 513210, Software Publishers, with a business size of $47 Million.

FAR 52.212-1. Instruction to Offerors – Commercial Products and Commercial Services, applies to this acquisition.

Additional instructions have been provided herein.

FAR 52.212-2 is not incorporated into this solicitation.

Offerors shall include a completed copy of the provision at 52.212-3, Offeror Representations and Certifications – Commercial Products and Commercial Services, with its offer. Offeror shall complete and return all required provisions included in this solicitation once a final solicitation is posted.

FAR 52.212-4, Contract Terms and Conditions – Commercial Products and Commercial Services, applies to this acquisition. Additional Contract Terms and Conditions are included in Attachment 4 – Contract Clauses and Provisions.

FAR 52.212-5, Contract Terms and Conditions Required To Implement Statutes or Executive Orders-Commercial Products and Commercial Services applies and can be located in Attachment 4. Clauses applicable to this acquisition have been marked.

FAR 52.217-8, Option to Extend Services will be included in the contract.

Offerors are invited to submit their quotes in response to this notice by 10:00 AM Eastern Standard Time (EST), Thursday, September 19, 2024 to Vanessa.Rodgers@irs.gov. All questions must be submitted to Vanessa.Rodgers@irs.gov by 11:00 AM EST, Wednesday 18, 2024.

The Internal Revenue Service Office of Procurement intends to award one contract for the HPE Ezmeral, Ciphertrust, and Elastic Search licensing and maintenance to the offeror that represents the Best Value to the Government using a Lowest Priced Technically Acceptable (LPTA) evaluation procedures. In order to be technically acceptable vendor shall meet the evaluation factors set forth in this solicitation.

All communications shall be directed within the stated deadlines to the attention of:

Name: Vanessa Rodgers Title: Contract Specialist Vanessa Rodgers@irs.gov

Attachments

Attachment 1 – Pricing Section

Attachment 2 – Statement of Work

Attachment 3 – Representations and Certifications

Attachment 4 – Provisions/Clauses mailto:Vanessa.Rodgers@irs.gov mailto:Vanessa%20Rodgers@irs.gov

Attachment 5 – FISMA Contract Language

Attachment 6 – VPAT

1. The quote should be submitted in accordance with FAR 52.212-1 Addendum. The quote shall also include:

a. A completed “Pricing Section”. Quotes must provide the Line Items listed in “Pricing Section”, including Part Number (if applicable), List Price, any applicable discounted price, and the extended price.

b. Offer expiration date – The IRS requests the offeror's quote remain valid for a minimum period of 60 days from the date of submission.

c. Completed representations and certifications.

2. How your quote will be evaluated: A technical evaluation will be performed by the Program Management Office to determine whether the quote is technically acceptable i.e., meets the IRS’ requirement as outlined in Attachment 2 – Statement of Work. IRS contracting will evaluate the overall submission for responsiveness to the instructions and the completed pricing submission for price reasonableness. The quote must comply with all instructions, specifications, and requirements set forth in the RFQ to be considered responsive. Any available past performance information will also be considered in determining the responsibility of the Offeror i.e. CPARS, past contracts, and judgements. The quote must comply with all instructions, specifications, and requirements set forth in the RFQ to be considered responsive.

Attachment 1

To be considered for award, the contractor must provide a firm fixed price quote for products listed below. Please fill in each column to be considered for award. Failure to fill in each column will make the contractor nonresponsive and will not be considered for award:

CLIN Company Part #

Description Qty Unit Discounted

Price

IRS

Extended Price

Total Price

Base Year - 9/28/2024 through 09/27/2025

ElasticSearch

SBF-SN

Elastic Federal Platinum Subscription Brand Name or Equal

766 EA

HPE R9J51AAE

HPE Ezmeral Data Fab Cvg An Hadoop E- LTU Brand Name or Equal

EA

HPE R9J57AAE

Cvg Database E-LTU Brand Name or Equal

HPE R9J60AAE

Cvg Ev Stream E-LTU Brand Name or Equal 278

HPE R9J55AAE

Cvg SQL Drill E-LTU Brand Name or Equal 278

HPE R9J53AAE

Cvg Spark E-LTU Brand

HPE R9J62AAE

Port OS Plt E-LTU Brand Name or Equal 10

One Identity BPZ-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host 24x7 Maintenance Brand Name or Equal 100

One Identity BAF-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7 or Equal 1

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7

BAF-BAL-PS-

One Identity Safeguard Privileged Sessions 1

IRS

Extended Price

Option Year 1 - 9/28/2025 through 09/27/2026

Elastic Federal Platinum Subscription Brand Name or Equal

HPE Ezmeral Data Fab Cvg An Hadoop E-LTU Brand Name or Equal

Database E-LTU Brand

Ev Stream E-LTU Brand

SQL Drill E-LTU Brand

HPE

R9J53AAE

HPE Ezmeral Data Fab Cvg Spark E-LTU Brand Name or Equal 278

One Identity

Module Per Host High Availability 24x7 or Equal

One Identity Safeguard Privileged Sessions Module Per Host 24x7

0013 One Identity

BPZ-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host 24x7

One Identity ZAC-BAL-PS-

One Identity Safeguard Session Appliance 4000 Bundle 24x7 Maintenance Pack Brand Name or Equal 8

Ciphertrust 976-00001-

001G-PM1

Ciphertrust Flex Connector Bundle, Basic, Perpetual.

CTM Connector Plus 1- Year Brand Name or Equal 656

Ciphertrust

976-00003-

001G-PM1

Ciphertrust Flex Connector Bundle, Advanced, Perpetual. CTM Connector Plus 1-Year Brand Name or Equal 34

HPE

R9J62AAE

HPE Ezmeral Data Fab Port OS Plt E-LTU Brand Name or Equal 10

One Identity Safeguard Privileged Sessions Module Per Host 24x7 Maintenance Brand Name or Equal 100

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7 Maintenance Brand Name or Equal 1

One Identity Safeguard Privileged Sessions Module Per Host High Availability

One Identity Safeguard Privileged Sessions Module Per Host High Availability

One Identity Safeguard Privileged Sessions Module

One Identity Safeguard Privileged Sessions Module

One Identity Safeguard Session Appliance 4000 Bundle 24x7 Maintenance Pack Brand Name or Equal 8

Ciphertrust Flex Connector Bundle, Basic, Perpetual.

001G-PM1

Ciphertrust Flex Connector Bundle, Advanced, Perpetual. CTM Connector Plus 1-Year Brand Name or Equal 34

IRS

Extended Price

Option Year 2 - 9/28/2026 through 09/27/2027

Elastic Federal Platinum Subscription Brand Name

Cvg Database E-

One Identity Safeguard Privileged Sessions Module

One Identity Safeguard Privileged Sessions Module Per Host High Availability

One Identity Safeguard Privileged Sessions Module Per Host High Availability

One Identity Safeguard Privileged Sessions Module Per Host High Availability

One Identity Safeguard Privileged Sessions Module

One Identity Safeguard Privileged Sessions Module

One Identity Safeguard Session Appliance 4000

976-00001-

001G-PM1

Ciphertrust Flex Connector Bundle, Basic, Perpetual. 656

Year Brand Name or Equal

001G-PM1

Ciphertrust Flex Connector Bundle, Advanced, Perpetual. CTM Connector

IRS

Extended Price

Option Year 3 - 9/28/2027 through 09/27/2028

Elastic Federal Platinum

Cvg Database E-LTU Brand Name or Equal

One Identity Safeguard Privileged Sessions Module Per Host 24x7

One Identity Safeguard Privileged Sessions Module Per Host High Availability

One Identity Safeguard Privileged Sessions Brand Name Module Per Host High Availability 24x7

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7 Maintenance Brand 1

Name or Equal EA

One Identity Safeguard Privileged Sessions Module Per Host 24x7

One Identity Safeguard Privileged Sessions Module Per Host 24x7

One Identity Safeguard Session Appliance 4000

Ciphertrust Flex Connector Bundle, Basic, Perpetual.

001G-PM1

Ciphertrust Flex Connector Bundle, Advanced, Perpetual. CTM Connector

IRS

Extended Price

Option Year 4 - 9/28/2028 through 09/27/2029

Elastic Federal Platinum

Cvg Database E-

BPZ-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host 24x7 100

4008 One Identity Maintenance Brand Name

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7

One Identity Safeguard Privileged Sessions Module Per Host 24x7

One Identity Safeguard Privileged Sessions Module Per Host 24x7

One Identity Safeguard Session Appliance 4000

Ciphertrust Flex Connector Bundle, Basic, Perpetual.

001G-PM1

Ciphertrust Flex Connector Bundle, Advanced, Perpetual. CTM Connector Plus 1-Year Brand Name or Equal 34

Attachment 2

STATEMENT OF WORK (SOW)

HPE Ezmeral, Ciphertrust, and Elastic Search Licensing and One Identity Maintenance

1. Introduction:

The Internal Revenue Service (IRS) Data Services Cyber Security Data Warehouse (CSDW) requires the procurement of HPE Ezmeral (formally known as MapR), Elastic Search, and Ciphertrust software licenses and One Identity Safeguard software maintenance (formally known as Balabit). This acquisition will refresh and expand upon the capability of the environment already in place. The environment’s goal is to implement a multilayered defense architecture which will deliver the IRS Cybersecurity organization the ability to quickly focus energy on detecting and preventing both internal and external cyber threats. In addition, the Hadoop environment will provide the Data Services Warehouse team benefits in reducing time spent preparing data, exploring data, and building analytical models.

2. Background:

The Internal Revenue Service (IRS) has invested significant resources in securing their Information

Technology (IT) Infrastructure and protecting its critical data. Part of the infrastructure includes CSDW computing and storage technology that supports log collection and analysis to secure the enterprise and prevent fraudulent activity.

3. Scope of Work:

The vendor shall furnish HPE Ezmeral, Elastic Search, and Ciphertrust software licenses and One Identity Safeguard software maintenance as specified by the Government throughout the contract’s base Period of Performance and any exercised Option periods.

Item# Company Part #

Description Qty

Base Year - 9/28/2024 through 09/27/2025

0001 ElasticSearch

SBF-SN

Elastic Federal Platinum Subscription Brand Name or Equal

0002 HPE

R9J51AAE

HPE Ezmeral Data Fab Cvg An Hadoop E-LTU Brand

0003 HPE

R9J57AAE

HPE Ezmeral Data Fab Cvg Database E-LTU Brand

0004 HPE

R9J60AAE

HPE Ezmeral Data Fab Cvg Ev Stream E-LTU Brand Name or Equal 278

0005 HPE

R9J55AAE

HPE Ezmeral Data Fab Cvg SQL Drill E-LTU Brand Name or Equal 278

0006 HPE R9J53AAE HPE Ezmeral Data Fab Cvg Spark E-LTU Brand Name 278

0007 HPE

R9J62AAE

HPE Ezmeral Data Fab Port OS Plt E-LTU Brand Name or Equal 10

0008 One Identity BPZ-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host 24x7 Maintenance Brand Name or Equal 100

0009 One Identity

BAF-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7 Maintenance Brand Name

Item #

Company Part #

Option Year 1 - 9/28/2025 through 09/27/2026

0001 ElasticSearch

SBF-SN

Elastic Federal Platinum Subscription Brand Name or Equal

0002 HPE

R9J51AAE

R9J57AAE

R9J60AAE

HPE Ezmeral Data Fab Cvg Ev Stream E-LTU Brand Name or Equal 278

0005 HPE

R9J55AAE

HPE Ezmeral Data Fab Cvg SQL Drill E-LTU Brand Name or Equal 278

0006 HPE

R9J53AAE

HPE Ezmeral Data Fab Cvg Spark E-LTU Brand Name or Equal 278

0007 HPE

R9J62AAE

HPE Ezmeral Data Fab Port OS Plt E-LTU Brand Name or Equal 10

0008 One Identity BPZ-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host 24x7 Maintenance Brand Name or Equal 100

0009 One Identity

BAF-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7 Maintenance Brand Name or Equal 1

0010 One Identity

BAF-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7 Maintenance Brand Name or Equal 1

0011 One Identity

BAF-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7 Maintenance Brand Name or Equal 1

0012 One Identity BPZ-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host 24x7 Maintenance Brand Name or Equal 100

0013 One Identity BPZ-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host 24x7 Maintenance Brand Name or Equal 100

0014 One Identity ZAC-BAL-PS-

One Identity Safeguard Session Appliance 4000 Bundle 24x7 Maintenance Pack Brand Name or Equal 8

0010 One Identity

BAF-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7 Maintenance Brand Name or Equal 1

0011 One Identity

BAF-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7 Maintenance Brand Name or Equal 1

0012 One Identity BPZ-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host 24x7 Maintenance Brand Name or Equal 100

0013 One Identity BPZ-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host 24x7 Maintenance Brand Nam or Equal e 100

0014 One Identity ZAC-BAL-PS-

One Identity Safeguard Session Appliance 4000 Bundle 24x7 Maintenance Pack Brand Name or Equal 8

0015 Ciphertrust 976-00001-

001G-PM1

Ciphertrust Flex Connector Bundle, Basic, Perpetual.

CTM Connector Plus 1-Year Brand Name or Equal 656

0016 Ciphertrust 976-00003-

001G-PM1

Ciphertrust Flex Connector Bundle, Advanced, Perpetual. CTM Connector Plus 1-Year Brand Name or

0015 Ciphertrust 976-00001-

Ciphertrust Flex Connector Bundle, Basic, Perpetual.

CTM Connector Plus 1-Year Brand Name or Equal 656

0016 Ciphertrust 976-00003-

001G-PM1

Ciphertrust Flex Connector Bundle, Advanced, Perpetual. CTM Connector Plus 1-Year Brand Name or

Item # Company Part #

Option Year 2 - 9/28/2026 through 09/27/2027

0001 ElasticSearch

SBF-SN

Elastic Federal Platinum Subscription Brand Name or Equal

0002 HPE

R9J51AAE

R9J57AAE

R9J60AAE

HPE Ezmeral Data Fab Cvg Ev Stream E-LTU Brand Name or Equal 278

0005 HPE

R9J55AAE

HPE Ezmeral Data Fab Cvg SQL Drill E-LTU Brand Name or Equal 278

0006 HPE

R9J53AAE

HPE Ezmeral Data Fab Cvg Spark E-LTU Brand Name or Equal 278

0007 HPE

R9J62AAE

HPE Ezmeral Data Fab Port OS Plt E-LTU Brand Name or Equal 10

0008 One Identity BPZ-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host 24x7 Maintenance Brand Name or Equal 100

0009 One Identity

BAF-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7 Maintenance Brand Name or Equal 1

0010 One Identity

BAF-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7 Maintenance Brand Name or Equal 1

0011 One Identity

BAF-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7 Maintenance Brand Name or Equal 1

0012 One Identity BPZ-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host 24x7 Maintenance Brand Nam or Equal e 100

0013 One Identity BPZ-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host 24x7 Maintenance Brand Name or Equal 100

0014 One Identity ZAC-BAL-PS-

One Identity Safeguard Session Appliance 4000 Bundle 24x7 Maintenance Pack Brand Name or Equal 8

0015 Ciphertrust 976-00001-

001G-PM1

Ciphertrust Flex Connector Bundle, Basic, Perpetual.

CTM Connector Plus 1-Year Brand Name or Equal 656

0016 Ciphertrust 976-00003-

001G-PM1

Ciphertrust Flex Connector Bundle, Advanced, Perpetual. CTM Connector Plus 1-Year Brand Name or

Option Year 3 - 9/28/2027 through 09/27/2028

0001 ElasticSearch

SBF-SN

Elastic Federal Platinum Subscription Brand Name or Equal

0002 HPE

R9J51AAE

R9J57AAE

R9J60AAE

HPE Ezmeral Data Fab Cvg Ev Stream E-LTU Brand Name or Equal 278

0005 HPE

R9J55AAE

HPE Ezmeral Data Fab Cvg SQL Drill E-LTU Brand Name or Equal 278

0006 HPE R9J53AAE HPE Ezmeral Data Fab Cvg Spark E-LTU Brand Name 278

0007 HPE

R9J62AAE

HPE Ezmeral Data Fab Port OS Plt E-LTU Brand Name or Equal 10

0008 One Identity BPZ-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host 24x7 Maintenance Brand Name or Equal 100

0009 One Identity

BAF-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7 Maintenance Brand Name or Equal 1

0010 One Identity

BAF-BAL-PS-

One Identity Safeguard Privileged Sessions Brand Name Module Per Host High Availability 24x7 Maintenance Brand Name or Equal 1

0011 One Identity

BAF-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7 Maintenance Brand Name or Equal 1

0012 One Identity BPZ-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host 24x7 Maintenance Brand Name or Equal 100

0013 One Identity BPZ-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host 24x7 Maintenance Brand Name or Equal 100

0014 One Identity ZAC-BAL-PS-

One Identity Safeguard Session Appliance 4000 Bundle 24x7 Maintenance Pack Brand Name or Equal 8

0015 Ciphertrust 976-00001-

001G-PM1

Ciphertrust Flex Connector Bundle, Basic, Perpetual.

CTM Connector Plus 1-Year Brand Name or Equal 656

0016 Ciphertrust 976-00003-

001G-PM1

Ciphertrust Flex Connector Bundle, Advanced, Perpetual. CTM Connector Plus 1-Year Brand Name or

Option Year 4 - 9/28/2028 through 09/27/2029

0001 ElasticSearch

SBF-SN

Elastic Federal Platinum Subscription Brand Name or Equal

0002 HPE

R9J51AAE

R9J57AAE

R9J60AAE

HPE Ezmeral Data Fab Cvg Ev Stream E-LTU Brand Name or Equal 278

0005 HPE

R9J55AAE

HPE Ezmeral Data Fab Cvg SQL Drill E-LTU Brand Name or Equal 278

0006 HPE R9J53AAE HPE Ezmeral Data Fab Cvg Spark E-LTU Brand Name 278

0007 HPE

R9J62AAE

HPE Ezmeral Data Fab Port OS Plt E-LTU Brand Name or Equal 10

0008 One Identity BPZ-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host 24x7 Maintenance Brand Name or Equal 100

0009 One Identity

BAF-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7 Maintenance Brand

0010 One Identity

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7 Maintenance Brand Name or Equal 1

0011 One Identity

BAF-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7 Maintenance Brand Name or Equal 1

0012 One Identity BPZ-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host 24x7 Maintenance Brand Name or Equal 100

0013 One Identity BPZ-BAL-PS-

One Identity Safeguard Privileged Sessions Module Per Host 24x7 Maintenance Brand Name or Equal 100

0014 One Identity ZAC-BAL-PS-

One Identity Safeguard Session Appliance 4000 Bundle 24x7 Maintenance Pack Brand Name or Equal 8

0015 Ciphertrust 976-00001-

001G-PM1

Ciphertrust Flex Connector Bundle, Basic, Perpetual.

CTM Connector Plus 1-Year Brand Name or Equal 656

0016 Ciphertrust 976-00003-

001G-PM1

Ciphertrust Flex Connector Bundle, Advanced, Perpetual. CTM Connector Plus 1-Year Brand Name or

Salient Characteristics

The following are the minimum requirements that Elastic components or equivalent product need to provide:

• Store data such as Personally identifiable information (PII) and Non PII data form web proxies, syslog servers, firewalls, and email gateways locally for fast queries or remotely on low-cost S3 for unlimited data.

• Simplifies the collection and management of logs such as proxies, syslog servers, firewalls, and email gateways, metrics, and all other monitoring data.

• Analyze current and historical performance trends for each infrastructure component with logs, processes, application performance, anomalies and metadata in context.

• An application with the capability to provide real user monitoring transactions that can easily be isolated. Review associated logs, metrics, and traces to connect the dots. Correlate activity and resolve performance issues within 24 -48 hours in complex cloud configurations.

The following are the minimum requirements that HPE Ezmeral components or equivalent product need to provide:

• A scalable, secure, enterprise-grade platform that can be deployed across multiple data centers and clouds environments. Requiring an infrastructure platform purpose-built for Big Data and/or AI (Artificial intelligence) applications—including data science, analytics, machine learning (ML), and deep learning (DL)—using enterprise-grade security, networking, and support for a variety of local and remote storage options.

• A product that deploys and run non-cloud-native monolithic applications in containers without rearchitecting or refactoring them.

• Flexibility to deploy on bare-metal or virtualized infrastructure, on-premises, in the cloud.

• Pre-integrated with persistent container storage.

• A product that is fast, easy deployment within less than 30 days, management, and monitoring of Kubernetes clusters with out-of-the-box configuration of networking, load balancing, and storage.

• A product that doesn’t require additional hardware and software components to acquire to import external Kubernetes clusters; includes support for importing clusters from cloud vendors such as Amazon EKS, Google GKE, and Azure AKS.

• Must support a RESTful API (Application Programming Interface).

• Must streamlines operations by using automation of customized log file scripts from various sources and reduces

IT costs by automating provisioning, unifying management, and supporting push-button upgrades.

• Must supports three levels of High Availability (at the platform, virtual cluster, and/or Gateway node level) to provide redundancy and protection.

The following are the minimum requirements that One Identity components or equivalent product need to

• Full session audit, recording and replay.

• Real-time alerting and blocking

• Initiate workflows or deploy in transparent mode with no changes to users.

• Full text search including Optical Character Recognition

• Monitors questionable behaviors and uncovers previously unknown threats through trends in the log files from inside and outside of the organization.

• Automatically find privileged accounts on the network; supports host, directory, and network discovery.

• Generate and store secure passwords for all employees. Each product should contain a password tool that secures passwords from various applications.

The following are the minimum requirements that Cipher trust components or equivalent product need to

• Centrally manage encryption keys and configure security policies so organizations can control and protect sensitive data in the cloud, on-premises and across hybrid environments.

• Provide complete visibility into sensitive data on-premises and in the cloud with efficient data discovery, classification, and risk analysis.

• FIPS (Federal Information Processing Standards)140-2 compliant

• Multi-cloud key management

• Unparalleled partner ecosystem of KMIP (Key Management Interoperability Protocol) integrations

• Database encryption key management (Oracle TDE, big data, MS SQL, SQL Server Always Encrypted, etc.)

• Transparent encryption for files, databases, big data, and containers

• Application-layer data protection

• Tokenization with dynamic data masking

• Format preserving encryption.

• Static data masking

• Privileged user access controls

4. Tasks:

Service Level Maintenance Support for the Hadoop (Martinsburg/Memphis):

4.1 The maintenance services shall provide Enhanced Support Coverage on a 24x7x365 basis for software and operating system, technical support, and upgrades for all components of the deployed CSDW Upgrade and shall include the following:

• Telephone and email support centers

• Access to On-line e-support center for web support, online case management, and knowledge base.

• Access to patches, maintenance, and major releases of software updates;

• Shall meet Section 508 standards.

4.2 The Contractor shall provide all software release patches/bug fixes for purchased software covered and maintained under the contract at no additional charge to the IRS other than the Standard annual maintenance fee for the devices. All software releases and patches must be provided with appropriate supporting documentation in electronic or soft format. Maintenance fees will include a technical support option for on-site, phone, and on-line support.

4.3 Access to Government Property and Facilities:

Any required maintenance tasks required to be performed on-site in connection with the Email Gateway solution shall be performed at any of the following locations: Kearneysville, West Virginia and Memphis, Tennessee upon request of a trouble ticket placed through the customer service portal.

The Contractor shall abide by Department of the Treasury Directive (TD P) 15-71 regarding provisions for authorized entrance and exit at these facilities. When visiting a Government facility, the Contractor will be escorted at all times.

The Contractor may be subjected to search by Security personnel when visiting a Government facility.

The Contractor shall meet the following requirement for any on-site technical support personnel: U.S. Citizen or lawful

Permanent Resident Alien with at least three or more years of U.S. residency from the date of legal entry into the U.S.

5. Delivery Instructions:

The delivery date for the software is 30 days after the approval of the award. The vendor will provide electronic copies of all software to the following points of contact:.

IRS ECC-MEM

ATTN: Darryl Hudson, MOD K CSIRC West

Eric Smith, MOD K CSIRC West

5333 Getwell Road

Memphis, TN 38118

Late Deliverables:

Notice of Late Delivery: In the event the contractor anticipates difficulty in complying with the contract delivery schedule, the contractor shall immediately provide written notice to the CO and the COR. For any task order level deliverable, the contractor shall provide written notification immediately to the COR, with a copy to the CO. Each notification shall give pertinent details, including the date by which the contractor expects to make delivery; provided, that this data shall be informational only in character and that receipt thereof shall not be construed as a waiver by the

Government of any contract delivery schedule, or any rights or remedies provided by law or under this contract.

6. Place of Performance:

5333 Getwell Road

Memphis, TN 38118 and

250 Murall Drive

Keanrneysville, WV 25430-5200

7. Period of Performance:

The period of performance for the base year will be 09/28/2024 - 09/27/2025 with options as follows:

Option Period 1: 09/28/2025 - 09/27/2026 Option Period 2: 09/28/2026 - 09/27/2027 Option Period 3: 09/28/2027 - 09/27/2028 Option Period 4: 09/28/2028 - 09/27/2029

8. Government Furnished Property Access to Government property does not apply.

8.1 Government Furnished Information

Access to Government information does not apply.

9. Security Requirements N/A

10. Contract Administration Data

The Contracting Officer for this requirement is:

Internal Revenue Service Office of Procurement

Name: JW Terry Voice: 937-610-2123 Email: JW.R.Terry@irs.gov

Contract Specialist for this requirement is:

Internal Revenue Service Office of Procurement

Name: Vanessa Rodgers Voice: 904-661-3559 Email: Vanessa Rodgers@irs.gov

Contracting Officer’s Representative (COR) Point of Contact The COR Point of Contact for this order is listed below:

Internal Revenue Service Data Services Cyber Security Data Warehouse Name: Juan Acosta Phone: 240-412-5997 Email: juan.a.acosta@irs.gov

11. Technical Points of Contact:

Name: Darryl Hudson

5333 Getwell Road

Memphis, TN 38118

Email: Darryl.S.Hudson@irs.gov mailto:juan.a.acosta@irs.gov mailto:Darryl.S.Hudson@irs.gov

12. Section 508 Compliance

Section 508 Information, Documentation and Support (DEC 2019)

In accordance with 36 CFR, Appendix C to Part 1194, the information and communication technology (ICT) (ICT) products and product support services documentation furnished in performance of this contract shall be provided at no additional cost. The contractor shall provide information, documentation, and support relative to the supplies and services as described in the statement of work.

The following technical standards and provisions have been determined to be applicable to this contract:

_X__ Chapter 6: Support Documentation and Services

_X__ 601 General

_X__ 601.1

_X__ 602 Support Documentation

_X__ 602.1 _X__ 602.2 _X__ 602.3 _X__ 602.4

_X__ 603 Support Services

_X__ 603.1 _X__ 603.2 _X__ 603.3

(End of clause)

Section 508 Conformance (Apr 2024)

Each information and communication technology (ICT) product and/or product related service delivered under the terms of this contract, at a minimum, shall conform to the applicable accessibility standards at 36 CFR, Appendix C to Part

1194 at the level of conformance as specified in the Attachment entitled, “(Voluntary Product Accessibility Template

(VPAT)”

The following technical standards have been determined to be applicable to this contract:

___ Chapter 4: Hardware

___ 401 General

__ 401.1

___ 402 Closed Functionality

___ 402.1 ___ 402.2(1-6) ___ 402.3 ___ 402.4 ___ 402.5

___ 403 Biometrics

___ 403.1

___ 404 Preservation of Information Provided for Accessibility

___ 404.1 https://www.access-board.gov/ict/ https://www.section508.gov/buy/inventory-your-ict/

___ 405 Privacy

___ 405.1

___ 406 Standard Connections

___ 406.1

___ 407 Operable Parts

___ 407.1 ___ 407.2 ___ 407.3 ___ 407.4 ___ 407.5 ___ 407.6 ___ 407.7 ___ 407.8

___ 408 Display Screens

___ 408.1 ___ 408.2 ___ 408.3

___ 409 Status Indictors

___ 409.1

___ 410 Color Coding

___ 410.1

___ 411 Audible Signals

___ 411.1

___ 412 ICT with Two-Way Communication

___ 412.1 ___ 412.2 ___ 412.3 ___ 412.4 ___ 412.5 ___ 412.6 ___ 412.7 ___412.8

___ 413 Closed Caption Processing Technologies

___ 413.1

___ 414 Audio Description Processing Technologies

___ 414.1

___ 415 User Controls for Captions and Audio Descriptions

___ 415.1

_X__ Chapter 5: Software

_X__ 501 General

_X__ 501.1

_X__ 502 Interoperability with Assistive Technology

_X__ 502.1 _X__ 502.2 _X__ 502.3 _X__ 502.4(A-G)

_X__ 503 Applications

_X__ 503.1 _X__ 503.2 _X__ 503.3 _X__ 503.4

_X__ 504 Authoring Tools

_X__ 504.1 _X__ 504.2 _X__ 504.3 _X__ 504.4

_X__ Chapter 7: Referenced Standards

_X__ 701 General

_X__ 701.1

_X__ 702 Incorporation by Reference

_X__ 702.1 ___ 702.2 _X__ 702.3 _X__ 702.4 ___ 702.5 _X__ 702.6 ___ 702.7 ___ 702.8 ___ 702.9

_X__ 702.10

The standards do not require the installation of specific accessibility-related software or the attachment of an assistive technology device, but merely require that the ICT be compatible with such software and devices so that it can be made accessible if so required by the agency in the future.

The following functional performance criteria (36 CFR Chapter 3) apply to this contract.

_X__ Chapter 3: Functional Performance Criteria

_X__ 301 General

_X__ 301.1

_X__ 302 Functional Performance Criteria

_X__ 302.1 _X__ 302.2 _X__ 302.3 _X__ 302.4 _X__ 302.5 _X__ 302.6 _X__ 302.7 _X__ 302.8 _X__

302.9

(End of clause)

Section 508 Services (Apr 2024)

All contracts, solicitations, purchase orders, delivery orders and interagency agreements that contain a requirement of services which will result in the delivery of a new or updated information and communication technology(ICT) item/product must conform to the applicable provisions of the appropriate technical standards in 36 CFR, Appendix C to

Part 1194, and functional performance criteria in 36 CFR Chapter 3, unless an agency exception to this requirement exists at E202 General Exceptions.

The following technical standards and provisions have been determined to be applicable to this contract:

___ Chapter 4: Hardware

___ 401 General

___ 401.1

___ 402 Closed Functionality https://www.access-board.gov/ict/

___ 402.1 ___ 402.2(1-6) ___ 402.3 ___ 402.4 ___ 402.5

___ 403 Biometrics

___ 403.1

___ 404 Preservation of Information Provided for Accessibility

___ 404.1

___ 405 Privacy

___ 405.1

___ 406 Standard Connections

___ 406.1

___ 407 Operable Parts

___ 407.1 ___ 407.2 ___ 407.3 ___ 407.4 ___ 407.5 ___ 407.6 ___ 407.7 ___ 407.8

___ 408 Display Screens

___ 408.1 ___ 408.2 ___ 408.3

___ 409 Status Indictors

___ 409.1

___ 410 Color Coding

___ 410.1

___ 411 Audible Signals

___ 411.1

___ 412 ICT with Two-Way Communication

___ 412.1 ___ 412.2 ___ 412.3 ___ 412.4 ___ 412.5 ___ 412.6 ___ 412.7 ___412.8

___ 413 Closed Caption Processing Technologies

___ 413.1

___ 414 Audio Description Processing Technologies

___ 414.1

___ 415 User Controls for Captions and Audio Descriptions

___ 415.1

_X__ Chapter 5: Software

_X__ 501 General

_X__ 501.1

_X__ 502 Interoperability with Assistive Technology

_X__ 502.1 _X__ 502.2 _X__ 502.3 _X__ 502.4(A-G)

_X__ 503 Applications

_X__ 503.1 _X__ 503.2 _X__ 503.3 _X__ 503.4

_X__ 504 Authoring Tools

_X__ 504.1 _X__ 504.2 _X__ 504.3 _X__ 504.4

_X__ Chapter 7: Referenced Standards

_X__ 701 General

_X__ 701.1

_X__ 702 Incorporation by Reference

_X__ 702.1 ___ 702.2 _X__ 702.3 _X__ 702.4 ___ 702.5 ___ 702.6 ___ 702.7 ___ 702.8 ___ 702.9

_X__ 702.10

The standards do not require the installation of specific accessibility-related software or the attachment of an assistive technology device, but merely require that the ICT be compatible with such software and devices so that it can be made accessible if so required by the agency in the future.

The following functional performance criteria (36 CFR Chapter 3) apply to this contract.

_X__ Chapter 3: Functional Performance Criteria

_X__ 301 General

_X__ 301.1

_X__ 302 Functional Performance Criteria

_X__ 302.1 _X__ 302.2 _X__ 302.3 _X__ 302.4 _X__ 302.5 _X__ 302.6 _X__ 302.7 _X__ 302.8 _X__

302.9

(End of clause)

IR1052.239-9003 Section 508 Accessibility of Information and Communication Technology (100% Compliance) (Dec 2019)

Each information and communication technology (ICT) product or service furnished under this contract shall comply with the Information and Communication Technology Accessibility Standards (36 CFR, Appendix C to Part 1194). If the Contracting Officer determines any furnished products or services are not in compliance with the contract, the Contracting Officer will apply the remedies described under FAR 52.246-2, Inspection of Supplies – Fixed Price or FAR 52.246-4, Inspection of Services – Fixed Price.

The following technical standards and provisions have been determined to be applicable to this contract:

___ Chapter 4: Hardware ___ 401 General ___ 401.1 ___ 402 Closed Functionality ___ 402.1 ___ 402.2(1-6) ___ 402.3 ___ 402.4 ___ 402.5 ___ 403 Biometrics ___ 403.1 ___ 404 Preservation of Information Provided for Accessibility ___ 404.1 ___ 405 Privacy ___ 405.1 ___ 406 Standard Connections ___ 406.1 ___ 407 Operable Parts ___ 407.1 ___ 407.2 ___ 407.3 ___ 407.4 ___ 407.5 ___ 407.6 ___ 407.7 ___ 407.8 ___ 408 Display Screens ___ 408.1 ___ 408.2 ___ 408.3 ___ 409 Status Indictors ___ 409.1 ___ 410 Color Coding ___ 410.1 ___ 411 Audible Signals ___ 411.1 ___ 412 ICT with Two-Way Communication ___ 412.1 ___ 412.2 ___ 412.3 ___ 412.4 ___ 412.5 ___ 412.6 ___ 412.7 ___ 412.8 ___ 413 Closed Caption Processing Technologies ___ 413.1 ___ 414 Audio Description Processing Technologies ___ 414.1 ___ 415 User Controls for Captions and Audio Descriptions ___ 415.1 _X_ Chapter 5: Software _X_ 501 General _X_ 501.1 _X_ 502 Interoperability with Assistive Technology _X_ 502.1 _X_ 502.2 _X_ 502.3 _X_ 502.4(A-G) _X_ 503 Applications _X_ 503.1 _X_ 503.2 _X_ 503.3 _X_ 503.4 _X_ 504 Authoring Tools _X_ 504.1 _X_ 504.2 _X_ 504.3 _X_ 504.4 _X_ Chapter 7: Referenced Standards _X_ 701 General _X_ 701.1 _X_ 702 Incorporation by Reference _X_ 702.1 ___ 702.2 _X_ 702.3 _X_ 702.4 ___ 702.5 ___ 702.6 ___ 702.7 ___ 702.8 ___ 702.9 _X_ 702.10

The standards do not require the installation of specific accessibility-related software or the attachment of an assistive technology device, but merely require that the ICT be compatible with such software and devices so that it can be made accessible if so required by the agency in the future.

The following functional performance criteria (36 CFR Chapter 3) apply to this contract.

_X_ Chapter 3: Functional Performance Criteria _X_ 301 General _X_ 301.1 _X_ 302 Functional Performance Criteria _X_ 302.1 _X_ 302.2 _X_ 302.3 _X_ 302.4 _X_ 302.5 _X_ 302.6 _X_ 302.7 _X_ 302.8 _X_ 302.9

(End of Clause)

Attachment 3 Representations and Certifications

52.204-24 Representation Regarding Certain Telecommunications and Video Surveillance Services or Equipment (Nov 2021)

The Offeror shall not complete the representation at paragraph (d)(1) of this provision if the Offeror has represented that it “does not provide covered telecommunications equipment or services as a part of its offered products or services to the Government in the performance of any contract, subcontract, or other contractual instrument” in paragraph (c)(1) in the provision at 52.204-26, Covered Telecommunications Equipment or Services— Representation, or in paragraph (v)(2)(i) of the provision at 52.212-3, Offeror Representations and Certifications- Commercial Products and Commercial Services. The Offeror shall not complete the representation in paragraph (d)(2) of this provision if the Offeror has represented that it “does not use covered telecommunications equipment or services, or any equipment, system, or service that uses covered telecommunications equipment or services” in paragraph (c)(2) of the provision at 52.204-26, or in paragraph (v)(2)(ii) of the provision at 52.212-3.

a. Definitions. As used in this provision-

Backhaul, covered telecommunications equipment or services, critical technology, interconnection arrangements, reasonable inquiry, roaming, and substantial or essential component have the meanings provided in the clause 52.204- 25, Prohibition on Contracting for Certain Telecommunications and Video Surveillance Services or Equipment.

b. Prohibition. (1) Section 889(a)(1)(A) of the John S. McCain National Defense Authorization Act for Fiscal Year 2019 (Pub. L. 115-232) prohibits the head of an executive agency on or after August 13, 2019, from procuring or obtaining, or extending or renewing a contract to procure or obtain, any equipment, system, or service that uses covered telecommunications equipment or services as a substantial or essential component of any system, or as critical technology as part of any system. Nothing in the prohibition shall be construed to—

a. Prohibit the head of an executive agency from procuring with an entity to provide a service that connects to the facilities of a third-party, such as backhaul, roaming, or interconnection arrangements; or

b. Cover telecommunications equipment that cannot route or redirect user data traffic or cannot permit visibility into any user data or packets that such equipment transmits or otherwise handles.

(2) Section 889(a)(1)(B) of the John S. McCain National Defense Authorization Act for Fiscal Year 2019 (Pub. L. 115-

232) prohibits the head of an executive agency on or after August 13, 2020, from entering into a contract or extending or renewing a contract with an entity that uses any equipment, system, or service that uses covered telecommunications equipment or services as a substantial or essential component of any system, or as critical technology as part of any system. This prohibition applies to the use of covered telecommunications equipment or services, regardless of whether that use is in performance of work under a federal contract. Nothing in the prohibition shall be construed to—

a. Prohibit the head of an executive agency from procuring with an entity to provide a service that connects to the facilities of a third-party, such as backhaul, roaming, or interconnection arrangements; or

b. Cover telecommunications equipment that cannot route or redirect user data traffic or cannot permit visibility into any user data or packets that such equipment transmits or otherwise handles.

(c) Procedures. The Offeror shall review the list of excluded parties in the System for Award Management (SAM) (https://www.sam.gov) for entities excluded from receiving federal awards for “covered telecommunications equipment or services.”

(d) Representations. The Offeror represents that—

(1) It [ ] will, [ ] will not provide covered telecommunications equipment or services to the Government in the performance of any contract, subcontract or other contractual instrument resulting from this solicitation. The Offeror shall provide the additional disclosure information required at paragraph (e)(1) of this section if the Offeror responds “will” in paragraph (d)(1) of this section; and

(2) After conducting a reasonable inquiry, for purposes of this representation, the Offeror represents that—

It [ ] does, [ ] does not use covered telecommunications equipment or services, or use any equipment, system, or service that uses covered telecommunications equipment or services. The Offeror shall provide the additional disclosure information required at paragraph (e)(2) of this section if the Offeror responds “does” in paragraph (d)(2) of this section.

Disclosures. (1) Disclosure for the representation in paragraph (d)(1) of this provision. If the Offeror has responded “will” in the representation in paragraph (d)(1) of this provision, the Offeror shall provide the following information as part of the offer:

(i) For covered equipment—

(A) The entity that produced the covered telecommunications equipment (include entity name, unique entity identifier, CAGE code, and whether the entity was the original equipment manufacturer (OEM) or a distributor, if known);

(B) A description of all covered telecommunications equipment offered (include brand; model number, such as OEM number, manufacturer part number, or wholesaler number; and item description, as applicable); and

(C) Explanation of the proposed use of covered telecommunications equipment and any factors relevant to determining if such use would be permissible under the prohibition in paragraph (b)(1) of this provision.

(ii) For covered services—

(A) If the service is related to item maintenance: A description of all covered telecommunications services offered (include on the item being maintained: Brand; model number, such as OEM number, manufacturer part number, or wholesaler number; and item description, as applicable); or

(B) If not associated with maintenance, the Product Service Code (PSC) of the service being provided; and explanation of the proposed use of covered telecommunications services and any factors relevant to determining if such use would be permissible under the prohibition in paragraph (b)(1) of this provision.

(2) Disclosure for the representation in paragraph (d)(2) of this provision. If the Offeror has responded “does” in the representation in paragraph (d)(2) of this provision, the Offeror shall provide the following information as part of the offer:

1. For covered equipment—

(A) The entity that produced the covered telecommunications equipment (include entity name, unique entity identifier, CAGE code, and whether the entity was the OEM or a distributor, if known);

(B) A description of all covered telecommunications equipment offered (include brand; model number, such as OEM number, manufacturer part number, or wholesaler number; and item description, as applicable); and

(C) Explanation of the proposed use of covered telecommunications equipment and any factors relevant to determining if such use would be permissible under the prohibition in paragraph (b)(2) of this provision.

• For covered services—

(A) If the service is related to item maintenance: A description of all covered telecommunications services offered (include on the item being maintained: Brand; model number, such as OEM number, manufacturer part number, or wholesaler number; and item description, as applicable); or

(B) If not associated with maintenance, the PSC of the service being provided; and explanation of the proposed use of covered telecommunications services and any factors relevant to determining if such use would be permissible under the prohibition in paragraph (b)(2) of this provision.

(End of Provision)

52.212-3 Offeror Representations and Certifications—Commercial Products and Commercial Services (May 2024)

The Offeror shall complete only paragraph (b) of this provision if the Offeror has completed the annual representations and certification electronically in the System for Award Management (SAM) accessed through https://www.sam.gov. If the Offeror has not completed the annual representations and certifications electronically, the Offeror shall complete only paragraphs (c) through (v) of this provision.

(a) Definitions. As used in this provision—

Covered telecommunications equipment or services has the meaning provided in the clause 52.204-25, Prohibition on Contracting for Certain Telecommunications and Video Surveillance Services or Equipment.

Economically disadvantaged women-owned small business (EDWOSB) concern means a small business concern that is at least 51 percent directly and unconditionally owned by, and the management and daily business operations of which are controlled by, one or more women who are citizens of the United States and who are economically disadvantaged in accordance with 13 CFR part 127, and the concern is certified by SBA or an approved third-party certifier in accordance with 13 CFR 127.300. It automatically qualifies as a women-owned small business eligible under the WOSB Program.

Forced or indentured child labor means all work or service—

(1) Exacted from any person under the age of 18 under the menace of any penalty for its nonperformance and for which the worker does not offer himself voluntarily; or

(2) Performed by any person under the age of 18 pursuant to a contract the enforcement of which can be accomplished by process or penalties.

Highest-level owner means the entity that owns or controls an immediate owner of the offeror, or that owns or controls one or more entities that control an immediate owner of the offeror. No entity owns or exercises control of the highest level owner.

Immediate owner means an entity, other than the offeror, that has direct control of the offeror. Indicators of control include, but are not limited to, one or more of the following: Ownership or interlocking management, identity of interests among family members, shared facilities and equipment, and the common use of employees.

Inverted domestic corporation means a foreign incorporated entity that meets the definition of an inverted domestic corporation under 6 U.S.C. 395(b), applied in accordance with the rules and definitions of 6 U.S.C. 395(c).

Manufactured end product means any end product in product and service codes (PSCs) 1000-9999, except—

(1) PSC 5510, Lumber and Related Basic Wood Materials;

(2) Product or Service Group (PSG) 87, Agricultural Supplies;

(3) PSG 88, Live Animals;

(4) PSG 89, Subsistence;

(5) PSC 9410, Crude Grades of Plant Materials;

(6) PSC 9430, Miscellaneous Crude Animal Products, Inedible;

(7) PSC 9440, Miscellaneous Crude Agricultural and Forestry Products;

(8) PSC 9610, Ores;

(9) PSC 9620, Minerals, Natural and Synthetic; and

(10) PSC 9630, Additive Metal Materials.

Place of manufacture means the place where an end product is assembled out of components, or otherwise made or processed from raw materials into the finished product that is to be provided to the Government. If a product is disassembled and reassembled, the place of reassembly is not the place of manufacture.

Predecessor means an entity that is replaced by a successor and includes any predecessors of the predecessor.

Reasonable inquiry has the meaning provided in the clause 52.204-25, Prohibition on Contracting for Certain Telecommunications and Video Surveillance Services or Equipment.

Restricted business operations means business operations in Sudan that include power production activities, mineral extraction activities, oil-related activities, or the production of military equipment, as those terms are defined in the Sudan Accountability and Divestment Act of 2007 (Pub. L. 110-174). Restricted business operations do not include business operations that the person (as that term is defined in Section 2 of the Sudan Accountability and Divestment Act of 2007) conducting the business can demonstrate—

(1) Are conducted under contract directly and exclusively with the regional government of southern Sudan;

(2) Are conducted pursuant to specific authorization from the Office of Foreign Assets Control in the Department of the Treasury, or are expressly exempted under Federal law from the requirement to be conducted under such authorization;

(3) Consist of providing goods or services to marginalized populations of Sudan;

(4) Consist of providing goods or services to an internationally recognized peacekeeping force or humanitarian organization;

(5) Consist of providing goods or services that are used only to promote health or education; or

(6) Have been voluntarily suspended.

Sensitive technology—

(1) Means hardware, software, telecommunications equipment, or any other technology that is to be used specifically—

(i) To restrict the free flow of unbiased information in Iran; or

(ii) To disrupt, monitor, or otherwise restrict speech of the people of Iran; and

(2) Does not include information or informational materials the export of which the President does not have the authority to regulate or prohibit pursuant to section 203(b)(3) of the International Emergency Economic Powers Act (50 U.S.C.

1702(b)(3)).

Service-disabled veteran-owned small business (SDVOSB) concern means a small business concern—

(1)(i) Not less than 51 percent of which is owned and controlled…