RFQ Copy Machines -Scanner - Maintenance.doc

88310324Q00137 –IT Copier/Scanner

This is a combined synopsis/solicitation for commercial items prepared in accordance with the format in FAR Subpart 12.6, Streamlined Procedures for Evaluation and Solicitation for Commercial Products and Commercial Services as supplemented with additional information included in this notice. This announcement constitutes the only solicitation; quotations are being requested and a written solicitation will not be issued. The solicitation number is NARA-883103-24-Q-00137 and is issued as a Request for Quotation (RFQ). The solicitation document and incorporated provisions and clauses are those in effect through Federal Acquisition Circular FAC 2024-06 effective September 12, 2024. This is an unrestricted requirement under NAICS Code 423420, Office Equipment Merchant. CONTRACT LINE ITEM NUMBER(S): See Attachment 2, Schedule of Prices. REQUIREMENT: The National Archives and Records Administration (NARA) has a requirement for copiers, scanner, and yearly maintenance. PERIOD OF PERFORMANCE: The resulting contract will be for a base year plus four option years. The following Federal Acquisition Regulation (FAR) clauses are incorporated and are to remain in full force in any resultant contract, with the exception of FAR provisions which will be removed prior to award: FAR 52.212-1. Instructions to Offerors - Commercial Products and Commercial Services (Sept 2023). Addenda: Delete paragraph (h), Multiple Awards. - see below for additional quotation submission instructions. EVALUATION (In lieu of FAR 52.212-2): Evaluation and award will be in accordance with Simplified Acquisition Procedures at FAR Subpart 13.106, Soliciting Competition, Evaluation of Quotations or Offers, Award and Documentation authorized by FAR Subpart 13.5, Simplified Procedures for Certain Commercial Products and Commercial Services. Selection of the Contractor to perform this contract will be based on NARA’s assessment of the best overall value to the Government. Accordingly, best value for this procurement will be obtained through a lowest price technically acceptable evaluation. Exceptions taken to any terms and conditions stated in the RFQ must be clearly outlined on a separate page of the Contractor’s quotation entitled “Exceptions.” The Contractor must also include complete rationale, justification, and the cost impact of each exception noted. The Government reserves the right to make an award on the initial quotation without discussions of this procurement. Multiple awards will not be made under this solicitation. For evaluation purposes, the Total Contract (Base Year Plus Option Years) Ceiling Price will be used to determine the lowest price. The Total Price for each CLIN will be determined by multiplying the Quantity by the Firm Fixed Unit Price. The Total Contract Ceiling Price for each year of the contract will be determined by summing the Total Price of each CLIN. The Total Contract (Base Year Plus Option Years) Ceiling Price will be determined by summing the Total Contract Ceiling Price for each year of the contract. The resultant contract will include FAR 52.217-8, Option to Extend Services. NARA will evaluate six additional months of services at the rates for CLINs 0026 through 0031 by dividing them in half. The evaluated Total Contract (Base Year Plus Option Years) Ceiling Price will be determined by summing the Total Contract Ceiling Price for each year of the contract plus half of the rates for CLINs 0026 through 0031. Contractors are prohibited from including wage and fringe benefits adjustments in their pricing for non-exempt Service Contract Labor Standards position. FAR 52.212-3, Offeror Representations and Certifications - Commercial Products and Commercial Services (May 2024) - The Offeror shall complete only paragraph (b) of this provision if the Offeror has completed the annual representations and certification electronically via the System for Award Management (SAM) website located at https://www.sam.gov/portal. If the Offeror has not completed the annual representations and certifications electronically, the Offeror shall complete only paragraphs (c) through (v) of this provision. FAR 52.212-4, Contract Terms and Conditions - Commercial Products and Commercial Services (Nov 2023) – see Attachment 4, Additional NARA Terms and Conditions (Addenda to FAR clause 52.212-4). FAR 52.212-5, Contract Terms and Conditions Required to Implement Statutes or Executive Orders - Commercial Products and Commercial Services (May 2024) - see Attachment 5, FAR Clauses, for the full text of this clause and for additional applicable FAR clauses. Full text provisions and clauses can be found at https://www.acquisition.gov.

National Archives and Records Administration (NARA)

Acquisitions Branch

8601 Adelphi Road, Room 3340

College Park, MD 20740-6001 88310324Q00137

THIS IS A REQUEST FOR QUOTATION

THIS IS A REQUEST FOR QUOTATION (RFQ) for a Brand Name or Equal Item: Copiers, Scanner, and Yearly Maintenance (THIS IS NOT AN ORDER) Vendor must provide a Voluntary Product Accessibility Template (VPAT) for each IT Component All questions regarding this solicitation must be submitted in writing to Yolanda Bean via e-mail at yolanda.bean@nara.gov

The Government will not accept questions after 12:00 noon (ET) September 12, 2024. Please allow one extra business day for delivery and receipt if quotation is sent via e-mail, as the e-mail will need to pass through IT security. Telephonic responses will not be processed.

Attn: Yolanda Bean

8601 Adelphi Road, Room 3340

College Park, MD 20740-6001

Yolanda.bean@nara.gov

This is a request for quote, and quotations furnished are not offers. This request does not commit the Government to pay any costs incurred in the preparation of the submission of this quotation or to contract for supplies or services. This is a firm-fixed price request and all delivery cost/terms must be included in the total firm-fixed price quote. It is the Vendors responsibility to ensure that NARA is not provided counterfeit or non-compliant products. In the event that quoted line items are determined to be counterfeit/non-compliant, NARA will seek all available legal remedies including criminal prosecution. Counterfeit information technology product means any item of information technology (IT), including hardware and software that is an unauthorized copy, replica, or substitute. Vendors are reminded that all FSS delivery orders are required to be compliant with the Trade Agreements Act, and in order to ensure compliance, NARA requires Vendors submit the country of production of any quoted items. Items made in China or any other Non-TAA compliant country, as contemplated by the Trade Agreements Act, will not be accepted and will be returned at the Vendors expense.

It is the Vendor's responsibility to ensure that NARA is not provided counterfeit products. In the event that such IT products are determined to be counterfeit, NARA will seek all available legal remedies including criminal prosecution. Counterfeit information technology product means any item of information technology (IT), including hardware and software that is an unauthorized copy, replica, or substitute. A gray market (or gray market) also known as parallel market is the trade of a commodity through distribution channels which, while legal, are unofficial, unauthorized, or unintended by the original manufacturer.

The contractor must meet the ENERGY STAR® OR FEDERAL ENERGY MANAGEMENT PROGRAM (FEMP) energy use requirements (if applicable). All items quoted must be IPv6 COMPLAINT (if applicable). Supplies furnished under this request for quotation are of domestic origin unless otherwise indicated by quoter. FOB destination pricing is requested.

Note to Contractor: Enclosure 5, RFQ/Vendor Information Sheet, MUST be completed and contain all applicable information and submitted with your quote.

All equipment delivered to NARA must be Internet Protocol version 6 (IPv.6) compliant.

CONTRACT LINE ITEMS (CLINs) REQUIRED:

In accordance with FAR 52.211-6, Vendors are required to provide the Brand Name, model number and any supporting information for products offered. Vendor’s quoting the specified Brand Name are required to state such in their quote.

ENCLOSURES:

Enclosure 1: ------ Schedule of Prices

Enclosure 2: ------ Invoice Submissions Enclosure 3: ------ Salient Characteristics / Specifications

Enclosure 4: ------ Additional NARA Terms and Conditions

Enclosure 5: ------ Vendor Information Sheet

ENCLOSURE 1

SCHEDULE OF PRICES

I. DESCRIPTION OF SERVICES

The purpose of this procurement is to acquire copiers/scanners, training, and yearly maintenance agreement for the National Archives and Records Administration (NARA).

1.0

PRICING YEAR

(a)

The contractor must submit a firm fixed price quote for each of the items listed in Section 4.0, Contract Line Items. The firm fixed price will include the price of the item and any shipping (FOB Destination).

3.0 SCHEDULE OF PRICES: Schedule A

For all CLINs insert in the table full firm fixed price for each item including shipping.

CLIN = Contract Line Item Number.

4.0 CONTRACT LINE ITEMS: Schedule A

* Permits remote management of settings such as Wake-on-LAN, boot configuration, asset tag, serial number, memory configuration, etc. through management tools including ZENworks and VB Scripts supporting Configuration Management.

*Use of Purging or Destroying sanitization methods as documented in NIST Publication 800-88, Guidelines for Media Sanitization, safeguards against breach of PII and other sensitive information.

*In the event of a failure, the manufacturer would replace defective hard drive without requiring return of failed drive; customer disposes of failed drive.

All items are Brand Name or Equal. Award will be made to the Vendors whose conforming quotation in response to the RFQ (total minimum quantities) will be most advantageous to the Government. Best value for this award will be obtained through a lowest priced technically acceptable evaluation.

*Shipping will include FOB to various NARA facilities within the CONUS

ENCLOSURE 2

INVOICE SUBMISSIONS

1.0

INVOICE SUBMISSION REQUIREMENTS

Invoice Instructions:

(a). The preferred method for invoicing is through the Invoice Processing Platform (IPP) which is a secure web-based electronic invoicing and payment information system. This service is provided by the U.S. Treasury’s Bureau of the Fiscal Service free of charge to federal agencies and contractors. IPP allows contractors to view information regarding their contracts and orders, electronically submit invoices and view payment information.

(b). The IPP website address is https://www.ipp.gov. Contractors can obtain enrollment assistance by contacting the Fiscal Service Accounts Payable Help Desk via e-mail at accountspayable@fiscal.treasury.gov or by phone at 304-480-8000, Option 7.

(c). Contractors that are not able to utilize the IPP system for submitting payment requests may submit invoices electronically by e-mail to accountspayable@fiscal.treasury.gov. Microsoft Excel, Adobe Acrobat Portable Document Format (PDF) and Microsoft Word are acceptable formats.

(d). Invoices for services shall be submitted monthly unless otherwise stated elsewhere in the contract.

(e). For invoice and payment questions call the Fiscal Service AP Help Desk at 304-480-8000, Option 7.

2.0

GOVERNMENT CONTACT SPECIALIST

The Contract Specialist assigned to this contract is:

Yolanda Bean

Telephone: (301) 837-0994

Email: yolanda.bean@nara.gov

3.0 FAR 52.217-9, OPTION TO EXTEND THE TERM OF THE CONTRACT (Mar 2000) (a) The Government may extend the term of this task order by written notice to the Contractor within 30 days; provided that the Government gives the Contractor a preliminary written notice of its intent to extend at least 60 days before the task order expires. The preliminary notice does not commit the Government to an extension.

(b) If the Government exercises this option, the extended contract shall be considered to include this option clause.

(c) The total duration of this contract, including the exercise of any options under this clause, shall not exceed 60 months.

ENCLOSURE 3

Requirements/ Specifications

Must be delivered with platen covers, not document feeders.

Be capable of a sustained copy output of up to 10,000 per month.

Be capable of making digital images and saving them to a USB drive.

Have a first copy speed of no more than 12 seconds.

Total paper capacity must be a minimum of 500 sheets.

Have all paper storage areas capable of supporting legal (8.5" x 14") paper.

Resolution up to, at least 800 dpi.

Provide an easily understood user interface.

Be capable of creating a minimum of 8-bit scanned images.

Provide preview of image capability for scans.

Have wireless and/or wired cards available for WiFi access.

Hard drives cannot be removed from NATF premises for repair.

MUST BE ABLE to interface with Papercut, or come pre-loaded with Papercut.

Total Count = 14 machines (13 black and white and 1 color).

Maintenance Specifications

The plan shall include preventative and repair (remedial) services and all consumable operating supplies except paper.

The plan shall allow annual pooling of maintenance charges across all copiers that can be adjusted at least quarterly, based on a minimum of 125,000 copies.

Preventative maintenance consists of those schedules service calls necessary to maintain the equipment in first-class operating condition (e.g. cleaning, lubricating, adjusting, and replacing parts when needed).

Response time on services requirements shall be within 6 working hours.

The Maintenance Plan includes the cost of labor, transportation, and replacement/spare parts.

Must provide annual PaperCut license.

Delivery and Training

Delivery of 6 machines to the National Archives of Washington D.C. (A1) (701 Constitution Ave. NW, Washington, DC 20408).

Delivery of 8 machines to the National Archives at College Park, MD (A2) (3301 Metzerott Road, College Park, MD 20740).

Training at both locations to occur within 30 days after delivery.

ENCLOSURE 4

ADDITIONAL NARA TERMS AND CONDITIONS

I. SECURITY OF INFORMATION AND PROTECTION OF CONTROLLED UNCLASSIFIED INFORMATION, INCLUDING PERSONALLY IDENTIFIABLE INFORMATION – INTERAGENCY AGREEMENTS (APRIL 2018)

(a) Applicability

This clause applies to all controlled unclassified information, which may include personally identifiable information, as defined in Section B, regardless of the medium in which it is found and includes paper records.

(b) Definitions. As used in this clause:

“Breach” means the loss of control, compromise, unauthorized disclosure, unauthorized acquisition, unauthorized access, or any similar situation where persons other than authorized users, and for other than authorized purpose, have access or potential access to personally identifiable information, in usable form whether physical or electronic.

“Controlled Unclassified Information” means information the Government creates or possesses, or that an entity creates or possesses for or on behalf of the Government, that a law, regulation, or Government-wide policy requires or permits an agency to handle using safeguarding or dissemination controls. However, CUI does not include classified information or information a non-executive branch entity possesses and maintains in its own systems that did not come from, or was not created or possessed by or for, an executive branch agency or an entity acting for an agency. Law, regulation, or Government-wide policy may require or permit safeguarding or dissemination controls in three ways: Requiring or permitting agencies to control or protect the information but providing no specific controls, which makes the information CUI Basic; requiring or permitting agencies to control or protect the information and providing specific controls for doing so, which makes the information CUI Specified; or requiring or permitting agencies to control the information and specifying only some of those controls, which makes the information CUI Specified, but with CUI Basic controls where the authority does not specify.

“Personally identifiable information (PII)” means any information that permits the identity of an individual to be directly or indirectly inferred, including any other information that is linked or linkable to that individual regardless of whether the individual is a citizen of the United States, legal permanent resident, or a visitor to the United States. Examples of PII include the following:

(1) Name.

(2) Date of birth.

(3) Mailing address.

(4) Telephone number.

(5) Social Security Number.

(6) Email address.

(7) Zip code.

(8) Account numbers.

(9) Certificate/license numbers.

(10) Vehicle identifiers including license plates.

(11) Uniform resource locators (URLs).

(12) Internet protocol addresses.

(13) Biometric identifiers (e.g., fingerprints).

(14) Photographic facial images.

(15) Any other unique identifying number or characteristic.

(16) Any information where it is reasonably foreseeable that the information will be linked with other information to identify the individual.

“Sensitive personally identifiable information (sensitive PII)” means a subset of PII, which if lost, compromised or disclosed without authorization, could result in substantial harm, embarrassment, inconvenience, or unfairness to an individual.

(1) Complete social security numbers, alien registration numbers (A-number) and biometric identifiers (such as fingerprint, voiceprint, or iris scan) are considered sensitive PII even if they are not coupled with additional PII.

(2) Additional examples include any grouping of information that contains an individual’s name or other unique identifier plus one or more of the following elements:

(i) Driver’s license number, passport number, or truncated social security number (such as last 4 digits);

(ii) Date of birth (month, day, and year);

(iii) Citizenship or immigration status;

(iv) Financial information such as account numbers or electronic funds transfer information;

(v) Medical information; and/or

(vi) System authentication information such as mother’s maiden name, account passwords or personal identification numbers.

(3) Other PII may be “sensitive” depending on its context, such as a list of employees with less than satisfactory performance ratings or an unlisted home address or phone number. In contrast, a business card or public telephone directory of agency employees contains PII but it is not sensitive.

(c) Data Security.

(1) The Servicing Agency shall limit access to the data covered by this clause to those employees and its contractor(s) who require the information in order to perform their official duties under this Interagency Agreement (IAA).

(2) The Servicing Agency employees, and its contractors must physically or electronically secure CUI, which may include sensitive PII, when not in use and/or under the control of an authorized individual, and when in transit to prevent unauthorized access or loss.

(3) When CUI is no longer needed or required to be retained under applicable Government records retention policies, it must be destroyed in accordance with NIST 800-88 standards.

(4) The Servicing Agency shall only use CUI obtained under this IAA for purposes of the Servicing Agency; it shall not be disclosed, released, disseminated, or published without the prior written consent of the Contracting Officer.

(5) If it is established elsewhere in this IAA that information to be utilized under this IAA, or a portion thereof, is subject to the Privacy Act, The Servicing Agency shall follow the rules and procedures of disclosure set forth in the Privacy Act of 1974, 5 U.S.C. 552a, and implementing regulations and policies, with respect to systems of records determined to be subject to the Privacy Act.

(6) At expiration or termination of this IAA, the Servicing Agency shall turn over all CUI obtained under the Servicing Agency that is in its possession.

(d) Systems Access. Work to be performed under this IAA may require the handling of CUI, including PII. The Servicing Agency shall provide the Government access to, and information regarding those systems handling CUI, including sensitive PII for the Government under the Servicing Agency, when requested by the Government, as part of the Servicing Agency’s responsibility to ensure compliance with security requirements, and shall otherwise cooperate with the Government in assuring compliance with such requirements. Government access shall include independent testing of controls, system penetration testing by the Government, Federal Information Security Management Act data reviews, and access by agency Inspectors General (IG) for IG reviews.

When requested by the NARA CO or COR or other NARA official as described herein, in connection with NARA’s efforts to ensure compliance with security requirements and to maintain and safeguard against threats and hazards to the security, confidentiality, integrity, and availability of NARA Information, Servicing Agency shall provide NARA, including the NARA OIG, (1) access to any and all information and records, including electronic information, regarding a Covered Information System, and (2) physical access to Servicing Agency's facilities, installations, systems, operations, documents, records, and databases. Such access may include independent validation testing of controls, system penetration testing, and FISMA data reviews by NARA or agents acting on behalf of NARA, and such access shall be provided within 72 hours of the request. Additionally, the Servicing Agency shall cooperate with NARA’s efforts to ensure, maintain, and safeguard the security, confidentiality, integrity, and availability of NARA information.

(e) Systems Security.

(1) In performing its duties related to management, operation, and/or access of systems containing PII under this IAA, the Servicing Agency, its employees and its contractors shall comply with all applicable security requirements and rules of conduct applicable to the agency’s systems as described in:

a) NARA Directive 1608 http://www.archives.gov/foia/directives/nara1608.pdf and

b) FedRAMP baseline controls for moderate IT systems.

(2) In addition, the use of Servicing Agency-Owned laptops or other portable storage devices to process or store sensitive PII is prohibited under this IAA until the Servicing Agency provides, and the Contracting Officer, in coordination with the Senior Agency Official for Privacy (SAOP) or the SAOP’s designee, approves the Servicing Agency’s written acknowledgment that the following requirements are met:

(i) Laptops and other portable storage devices must employ encryption that is NIST Federal Information Processing Standard (FIPS) 140-2 validated (or its successor) http://csrc.nist.gov/publications/PubsFIPS.html, and approved.

(ii) The Servicing Agency has developed and implemented a process to ensure that security and other applications software are kept current.

(iii) Mobile computing devices utilize anti-virus software and a host-based firewall mechanism.

(iv) Removable media, such as hard drives, flash drives, devices with flash memory, CDs and floppy disks containing CUI, which may include sensitive PII shall not be removed from a Government facility unless they are encrypted using a NIST FIPS 140-2 or successor approved product.

(v) When no longer needed, all removable media, hard drives, and flash memory shall be destroyed in accordance with Government security requirements identified in NARA’s Media Protection Methodology.

(vi) The Servicing Agency shall maintain an accurate inventory of devices used in the performance of this IAA.

(3) All NARA information obtained under this IAA shall be removed from Servicing Agency-Owned information technology assets at the direction of the Contracting Officer or Contracting Officer’s Representative. Removal must be accomplished in accordance with standard FedRAMP controls for media protection in moderate IT systems and NIST 800-88 standards. Certification of data removal will be performed by the Servicing Agency’s Project Manager and written notification confirming acknowledgment will be delivered to the Contracting Officer within 30 days of the direction to remove the information.

(4) Back up or mirrors of any systems or files containing CUI shall be treated in the same manner as the original data containing CUI, with the same protections and obligations.

(5) The Servicing Agency shall require FIPS 140-2 (or successor) encryption of any sensitive PII when transmitted electronically across the Internet or other public works.

(f) Breach Notification to Government.

(1) The Servicing Agency has been provided with: NARA Directive 1608, and is aware of its roles, responsibilities, and relationship with the Government in case of data breach.

(2) In the event of any actual or suspected breach of sensitive PII, the Servicing Agency shall immediately, and in no event later than one hour of discovery, report the breach to the Contracting Officer, the COR, the Senior Agency Official for Privacy (currently NARA’s General Counsel garymstern@nara.gov) and the Chief Information Officer (only for IT requirements) in accordance with NARA Directive 1608.

(3) The Servicing Agency is responsible for positively verifying that notification is received and acknowledged by appropriate Government parties identified in subparagraph (2) above.

(4) In the event of a confirmed, potential or suspected Security Breach, involving unauthorized exposure, loss of control, compromise, exfiltration, manipulation, disclosure, acquisition, or accessing of any Covered Information System or any NARA Information accessed by, retrievable from, processed by stored on, or transmitted within, to or from any such system, Servicing Agency shall immediately (and in no event later than within 1 hour of discovery) report any Confirmed Breach to the NARA CO and the CO's Representative (''COR").

(5) NARA, at its sole discretion, may obtain, and Servicing Agency will permit, the assistance of other federal agencies and/or third party contractors or firms to aid in response activities related to any security incident, PII or Security Breach. Additionally. NARA, at its sole discretion, may require Servicing Agency to retain, at Servicing Agency's expense, a Third Party Assessing Organization (3PAO) acceptable to NARA, with expertise in incident response, compromise assessment, and federal security control requirements, to conduct a thorough vulnerability and security assessment of all affected Information Systems.

(6) Any report submitted in accordance with paragraphs (1), (2) and (3) above, shall identify (I) both the Information Systems and NARA Information involved or at risk, including the type, amount, and level of sensitivity of the NARA Information and, if the NARA Information contains PII, the estimated number of unique instances of Pll, (2) all steps and processes being undertaken by Servicing Agency to minimize, remedy, and/or investigate the Security Incident, (3) any and all other information as required by the USCERT Federal Incident Notification Guidelines, including the functional impact, information impact, impact to recoverability, threat vector, mitigation details, and all available incident details; and (4) any other information specifically requested by the NARA. Servicing Agency shall continue to provide written updates to the NARA CO regarding the status of the Security incident at least every three (3) calendar days until informed otherwise by the NARA CO.

(7) Response activities related to any security incident or PII or Security Breach undertaken by NARA, including activities undertaken by Servicing Agency, other federal agencies, and any third-party contractors or firms at the request or direction of NARA, may include inspections, investigations, forensic reviews, data analyses and processing, and final determinations of responsibility for the Security Incident and/or liability for any additional response activities. Servicing Agency shall be responsible for all costs and related resource a locations required for all such response activities related to any Security Incident or Breach, including the cost of any penetration testing.

(g) Personally Identifiable Information Notification Requirement

Servicing Agency certifies that it has a security policy in place that contains procedures to promptly notify any individual whose Personally Identifiable Information ("Pll") was, or is reasonably determined by NARA to have been, compromised. Any notification shall be coordinated with the NARA CO and shall not proceed until NARA has made a determination that notification would not impede a law enforcement investigation or jeopardize national security. The method and content of any notification by Servicing Agency shall be coordinated with, and subject to the approval of, NARA. Servicing Agency shall be responsible for taking corrective action consistent with NARA Data Breach Notification Procedures and as directed by the NARA CO, including all costs and expenses associated already covered by above clauses added in PII clause with such corrective action, which may include providing credit monitoring to any individuals whose Pll was actually or potentially compromised.

All determinations regarding whether and when to notify individuals and/or federal agencies potentially affected by a Security Incident, Breach, or PII Breach will be made by NARA senior officials at NARA’s discretion.

(h) Flowdown of security requirements to contractors.

(1) The Servicing Agency shall incorporate the substance of this clause, its terms and requirements including this paragraph (g), in all contracts under this IAA, and require written contractor acknowledgement of same.

(2) Violation by a contractor of any provision set forth in this clause will be attributed to the Servicing Agency.

II. NARA PROTECTION OF PII AND KEEP HARD DRIVE

In accordance with NARA policy, NARA will take title to all electronic storage devices, including but not limited to hard drives that may contain Personally Identifiable Information (PII). NARA will not allow the removal of any electronic storage device that may contain PII data from its facilities by a contractor, including individuals performing maintenance on equipment, devices or systems. This provision applies even in the event the equipment is leased. NARA will handle the destruction of this hardware internally. This provision must flow down to all subcontracts, including those for maintenance.

If the Vendor comes into possession of an electronic storage device that may contain PII, the Vendor will immediately notify the Contracting Officer and return the electronic storage device to NARA. Vendor will protect the confidentiality of the electronic storage device and will not access, disclose, release, disseminate, or publish any of the information on the electronic storage device.

ENCLSOURE 5

RFQ Information Sheet

Failure to provide the TAA Country of Production (if applicable) will result in no further consideration of the quotation. Vendors must complete this sheet and submit it with the Quotation. Failure to do so will render the quotation unacceptable for receipt of the order.

Statutory/Regulatory Compliance

TRADE AGREEMENT ACT COUNTRY OF PRODUCTION:_____________________

ENERGY STAR® OR FEDERAL ENERGY MANAGEMENT PROGRAM (FEMP) ENERGY USE REQUIREMENT COMPLIANCE, AS REQUIRED: YES_____ or NO_____

IPv6 COMPLIANT: YES____ or NO_____

SECTION 508 COMPLIANT: YES_____ or NO____

Specific Terms, Conditions, and Administrative information

PAYMENT TERMS:

DELIVERY DATE:

NAME AND ADDRESS OF QUOTER:

TELEPHONE NO (INCLUDE AREA CODE): __________________________

FAX NUMBER: ___________________________

E-MAIL ADDRESS:

ENROLLED IN SYSTEM FOR AWARD MANAGEMENT – SAM: Yes____ No____

UEI: _______________________________________

Vendor Certification: [By signing the Vendor acknowledges that the information provided in response to this RFQ is correct.]

NAME AND TITLE OF SIGNER: __________________________________

DATE OF QUOTATION: ___________________________________

SIGNATURE OF PERSON AUTHORIZED TO SIGN: ______________________________