RFQ HS002121R0031.pdf

CONTROLLED UNCLASSIFIED INFORMATION

This is a combined synopsis/solicitation for a commercial item, prepared in accordance with the format in

Federal Acquisition Regulation (FAR) Subpart 12.6, as supplemented with additional information included in this notice. This announcement constitutes the only solicitation; quoations are being requested and a written solicitation will not be issued. The solicitation number is HS0021-21-R-0031 and is issued as a Request for Quotations (RFQ). This solicitation document incorporates all mandatory commercial item provisions and clauses that are in effect through Federal Acquisition Circular (FAC) 2021-05 dated

March 10, 2021.

The North American Industrial Classification System (NAICS) code is 518210 – Data Processing, Hosting, and Related Services, and this procurement is full and open competition. The Defense

Counterintelligence and Security Agency (DCSA) is soliciting quotations for fingerprint channeling for the state of Michigan for the purpose of obtaining criminal history record information (CHRI).

The following are inserted by reference; FAR 52.212-1, Instructions to Offerors-Commercial Items (to be submitted with quotation); FAR 52.212-2, Evaluation-Commercial Items, FAR 52.212-3, Offeror

Representations and Certifications-Commercial Items. The offeror shall complete only paragraph (b) of this provision if the offeror has completed the annual representations and certification electronically in the

Sytem for Award Management (SAM) accessed through https://www.sam.gov. If the offeror has not completed the annual representations and certifications electronically, the offeror shall complete only paragraphs (c) through (u) of this provision. FAR 52.212-4, Contract Terms and Conditions-Commercial

Items, applies to this acquisition. FAR 52.212-5, Contract Terms and Conditions Required to Implement

Statutes or Executive Orders-Commercial Items with the incorporated clauses as noted within the solicitation. The full text of FAR references may be accessed electronically at website http://www.acquisition.gov/.

INSTRUCTIONS TO OFFERORS

Quotations in response to this RFQ shall be accepted until 11:00am Eastern Daylight Time, May 20, 2021. Quotations shall include the solicitation number in the subject line and be signed, dated, and submitted via email to brittney.l.larimore.civ@mail.mil. Only written requests for additional information will be accepted. Notification of any changes shall be made only on www.beta.sam.gov.

All offerors shall provide a quote that also contains all information required pursuant to FAR 52.212-1, Instructions to Offerors-Commercial Items. The quotation shall also include validation that the offeror can perform this requirement with the state of Michigan. Validation to be provided is at the discretion of the offeror, however, it is the responsibility of the offeror to provide enough evidence that the Government can determine acceptability. If the offeror is unable to provide sufficient evidence, demonstrating the offeror’s ability to carry out the requirement with the state of Michigan, the offeror will automatically be deemed technically unacceptable.

Finally, all offerors submitting quotes shall include a positive affirmation statement that the quote meets the Government’s technical requirements.

https://www.sam.gov/ http://www.acquisition.gov/ mailto:brittney.l.larimore.civ@mail.mil http://www.beta.sam.gov/

HS002121R0031

Section B - Supplies or Services and Prices

ITEM NO SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

0001 1,007 Each Fingerprint Channeling

FFP

Fingerprint channeling for the purpose of obtaining criminal history record information (CHRI) for the state of Michigan.

Estimated Period of Performance: 1 June 2021 thru 31 May 2022

All work shall be performed in accordance with the Requirements Specification.

Quantity for the base year includes 521 backlogged items.

FOB: Destination

PSC CD: R499

NET AMT

1001 494 Each OPTION Fingerprint Channeling

FFP

Fingerprint channeling for the purpose of obtaining criminal history record information (CHRI) for the state of Michigan.

Estimated Period of Performance: 1 June 2022 thru 31 May 2023

All work shall be performed in accordance with the Requirements Specification.

2001 543 Each OPTION Fingerprint Channeling

FFP

Fingerprint channeling for the purpose of obtaining criminal history record information (CHRI) for the state of Michigan.

Estimated Period of Performance: 1 June 2023 thru 31 May 2024

All work shall be performed in accordance with the Requirements Specification.

3001 597 Each OPTION Fingerprint Channeling

FFP

Fingerprint channeling for the purpose of obtaining criminal history record information (CHRI) for the state of Michigan.

Estimated Period of Performance: 1 June 2024 thru 31 May 2025

All work shall be performed in accordance with the Requirements Specification.

4001 657 Each OPTION Fingerprint Channeling

FFP

Fingerprint channeling for the purpose of obtaining criminal history record information (CHRI) for the state of Michigan.

Estimated Period of Performance: 1 June 2025 thru 31 May 2026

All work shall be performed in accordance with the Requirements Specification.

Section C - Descriptions and Specifications

REQUIREMENT SPECIFICATION

Performance Work Statement

1.0 General Information

1.1 Introduction

The mission of the Defense Counterintelligence and Security Agency (DCSA) is continuously ensuring a trusted federal, industrial and affiliated workforce, and enabling industry’s delivery of uncompromised capabilities by leveraging advanced technologies and innovation. The mission of the DCSA Federal

Investigative Records Enterprise (FIRE) is to obtain data source records for inclusion in the Federal

Personnel Vetting program; including, background investigations, continuous vetting, and adjudications programs. This acquisition will allow DCSA to complete its mission by obtaining criminal history record information (CHRI) throughout the DCSA personnel vetting mission.

DCSA has a recurring need for a simplified method of filling the anticipated repetitive needs for fingerprint channeling for the purpose of obtaining CHRI from the state of Michigan. DCSA is committed to conducting background investigations on individuals (employees or applicants) for federal employment, members of the military, consultants, volunteers and/or vendor personnel for national security purposes. This requirement is for CHRI in support of background investigations as DCSA obtains criminal history records in order to meet the requirements of the Intelligence Reform and

Terrorism Prevention Act of 2004.

1.2 Authority

The following authorities provide DCSA and its Agents, the authorization to request and maintain information, depending on the purpose of the investigation: Executive Orders (E.O.s) 9397, 10450, 10577, 10865, 12333, and 12968, as amended; E.O.s 13467, 13488, and 13549; 5

U.S.C. sections 1103, 1302, 1303, 1304, 3301, 7301, 9101, and 11001; 22 U.S.C. sections 272b, 290a, and 2519; 31 U.S.C. section 1537; 42 U.S.C. sections 1874(b)(3), 2165, 2201, and 20132;

50 U.S.C. section 3341; Public Law 108-136; 5 C.F.R. parts 2, 5, 731, 732, 736, and 1400; and Homeland

Security Presidential Directive 12 (HSPD 12). Public Law 101-647, Crime Control Act of 1990.

1.3 Scope of Work

DCSA has a need for fingerprint channeling for the purpose of obtaining CHRI for the state of Michigan.

1.4 Place of Performance

All performance is expected to take place at the vendor’s facility. Delivery will be arranged as described in the requirements.

2.0 Specific Requirements

2.1 The Government will provide to the vendor

DCSA will provide the vendor with the applicant subject information necessary in order to conduct the criminal history records check via a mailed hardcopy fingerprint (Standard Form 87 or FD-258).

2.2 The Vendor Shall

The vendor shall digitize the hardcopy fingerprint cards and electronically transmit the print and associated Personally Identifiable Information (PII) to the state of Michigan repository, while properly safeguarding the confidentiality of data exchanged as per DCSA terms and conditions found within the provisions and clauses section.

The vendor shall only invoice for the quantity ordered by the Government and delivered by the vendor.

2.3 Retention of Authorizing Documentation

The vendor must maintain a current and complete file of all documentation authorizing handling of

Controlled Unclassified Information (CUI) during the period of performance of the contract, unless otherwise instructed by the Contracting Officer (KO). Documentation will be made accessible during inspections or upon written request by the KO or the Contracting Officer’s Representative (COR).

2.4 The Vendor will provide the Government

2.4.1 The vendor is responsible for ensuring the Government receives a complete response to include “No

Record” result, on each applicant sent by DCSA to the vendor for the requested state. The data the vendor must return to the Government to be included must at a minimum contain:

2.4.1.1 Identifiable descriptions and notations of arrests, indictments, information, and other formal criminal charges;

2.4.1.2 Disposition information;

2.4.1.3 Information on sentencing, correction supervision, and release;

2.4.1.4 Those records of a State or locality sealed pursuant to law if such records are accessible by State and local criminal justice agencies for the purpose of conducting background checks.

2.4.2 The vendor shall be responsible for coordinating any follow up with the state repository in the event a response is not received by DCSA on submitted applicants. The vendor shall provide a single point of contact for the state.

2.4.3 The vendor, upon request, shall provide the status on each submission, and where it is in the process at the request of the Government.

2.5 Bad Print Return Processing

In the event a hardcopy fingerprint cannot be processed, the vendor shall, within one-business day, contact the COR, with detailed instructions on how to process a subsequent print/reprint.

2.6 Supporting Documentation for Invoicing

2.6.1 Supporting documentation shall contain an itemized list detailing the DCSA Case Number, DCSA

Case Name or the subject’s last name, and corresponding CLIN Amount for each search provided.

2.6.2 Supporting documentation is preferred to be submitted electronically in an Excel spreadsheet at the time the invoice is required.

2.6.3 Neither the invoice, nor the supporting documentation shall contain any Personally Identifiable

Information (PII) to include copies of reports, forms, and/or files.

2.6.4 PII is information that can be used to discern or trace a person's identity, such as name, social security number, biometric records, and that combined with other information can be used to compromise the integrity of agency records relating to a person, by permitting access to unauthorized disclosure of these records. For example, a name alone would generally not constitute PII, but when linked to his or her social security number, date of birth, or mother's maiden name, would constitute PII. In other words, PII refers to any information, on any medium, that identifies a specific individual whether the information is on paper or electronic.

Section E - Inspection and Acceptance

INSPECTION AND ACCEPTANCE TERMS

Supplies/services will be inspected/accepted at:

CLIN INSPECT AT INSPECT BY ACCEPT AT ACCEPT BY

0001 Destination Government Destination Government

1001 Destination Government Destination Government

2001 Destination Government Destination Government

3001 Destination Government Destination Government

4001 Destination Government Destination Government

Section F - Deliveries or Performance

DELIVERY INFORMATION

CLIN DELIVERY DATE QUANTITY SHIP TO ADDRESS DODAAC /

CAGE

0001 POP 01-JUN-2021 TO

31-MAY-2022

1,007 DCSA BOYERS

JANEEN BEATTY

1137 BRANCHTON ROAD

BOYERS PA 16018

HS0001

1001 POP 01-JUN-2022 TO

31-MAY-2023

494 (SAME AS PREVIOUS LOCATION)

2001 POP 01-JUN-2023 TO

31-MAY-2024

543 (SAME AS PREVIOUS LOCATION)

3001 POP 01-JUN-2024 TO

31-MAY-2025

597 (SAME AS PREVIOUS LOCATION)

4001 POP 01-JUN-2025 TO

31-MAY-2026

657 (SAME AS PREVIOUS LOCATION)

Section G - Contract Administration Data

CLAUSES INCORPORATED BY FULL TEXT

252.232-7006 WIDE AREA WORKFLOW PAYMENT INSTRUCTIONS (DEC 2018)

(a) Definitions. As used in this clause—

“Department of Defense Activity Address Code (DoDAAC)” is a six position code that uniquely identifies a unit, activity, or organization.

“Document type” means the type of payment request or receiving report available for creation in Wide Area

WorkFlow (WAWF).

“Local processing office (LPO)” is the office responsible for payment certification when payment certification is done external to the entitlement system.

“Payment request” and “receiving report” are defined in the clause at 252.232-7003, Electronic Submission of

Payment Requests and Receiving Reports.

(b) Electronic invoicing. The WAWF system provides the method to electronically process vendor payment requests and receiving reports, as authorized by Defense Federal Acquisition Regulation Supplement (DFARS) 252.232-

7003, Electronic Submission of Payment Requests and Receiving Reports.

(c) WAWF access. To access WAWF, the Contractor shall—

(1) Have a designated electronic business point of contact in the System for Award Management at https://www.sam.gov; and

(2) Be registered to use WAWF at https://wawf.eb.mil/ following the step-by-step procedures for self-registration available at this web site.

(d) WAWF training. The Contractor should follow the training instructions of the WAWF Web-Based Training

Course and use the Practice Training Site before submitting payment requests through WAWF. Both can be accessed by selecting the “Web Based Training” link on the WAWF home page at https://wawf.eb.mil/.

(e) WAWF methods of document submission. Document submissions may be via web entry, Electronic Data

Interchange, or File Transfer Protocol.

(f) WAWF payment instructions. The Contractor shall use the following information when submitting payment requests and receiving reports in WAWF for this contract or task or delivery order:

(1) Document type. The Contractor shall submit payment requests using the following document type(s):

(i) For cost-type line items, including labor-hour or time-and-materials, submit a cost voucher.

(ii) For fixed price line items—

(A) That require shipment of a deliverable, submit the invoice and receiving report specified by the Contracting

Officer.

_______Invoice 2-in-1____________________________________________ https://wawf.eb.mil/ https://wawf.eb.mil/

(B) For services that do not require shipment of a deliverable, submit either the Invoice 2in1, which meets the requirements for the invoice and receiving report, or the applicable invoice and receiving report, as specified by the

Contracting Officer.

____N/A__________________________________________________

(iii) For customary progress payments based on costs incurred, submit a progress payment request.

(iv) For performance based payments, submit a performance based payment request.

(v) For commercial item financing, submit a commercial item financing request.

(2) Fast Pay requests are only permitted when Federal Acquisition Regulation (FAR) 52.213-1 is included in the contract.

[Note: The Contractor may use a WAWF “combo” document type to create some combinations of invoice and receiving report in one step.]

(3) Document routing. The Contractor shall use the information in the Routing Data Table below only to fill in applicable fields in WAWF when creating payment requests and receiving reports in the system.

Routing Data Table*

Field Name in WAWF Data to be entered in WAWF

Pay Official DoDAAC HQ0690

Issue By DoDAAC HS0021

Admin DoDAAC** HS0021

Inspect By DoDAAC HS0001

Ship To Code HS0001

Ship From Code N/A

Mark For Code N/A

Service Approver (DoDAAC) HS0001

Service Acceptor (DoDAAC) HS0001

Accept at Other DoDAAC N/A

LPO DoDAAC N/A

DCAA Auditor DoDAAC N/A

Other DoDAAC(s) N/A

(4) Payment request. The Contractor shall ensure a payment request includes documentation appropriate to the type of payment request in accordance with the payment clause, contract financing clause, or Federal Acquisition

Regulation 52.216-7, Allowable Cost and Payment, as applicable.

(5) Receiving report. The Contractor shall ensure a receiving report meets the requirements of DFARS Appendix F.

(g) WAWF point of contact.

(1) The Contractor may obtain clarification regarding invoicing in WAWF from the following contracting activity’s

WAWF point of contact.

Contract Specialist: Brittney Larimore // brittney.l.larimore.civ@mail.mil // (724) 794-7191

Contracting Officer: Sarah Croyle // sarah.s.croyle.civ@mail.mil // (724) 794-7151

(2) Contact the WAWF helpdesk at 866-618-5988, if assistance is needed.

(End of clause) mailto:sarah.s.croyle.civ@mail.mil

Section I - Contract Clauses

CLAUSES INCORPORATED BY REFERENCE

52.203-12 Limitation On Payments To Influence Certain Federal

Transactions

JUN 2020

52.204-10 Reporting Executive Compensation and First-Tier

Subcontract Awards

JUN 2020

52.204-13 System for Award Management Maintenance OCT 2018

52.204-18 Commercial and Government Entity Code Maintenance AUG 2020

52.212-4 Contract Terms and Conditions--Commercial Items OCT 2018

52.232-40 Providing Accelerated Payments to Small Business

Subcontractors

DEC 2013

52.233-4 Applicable Law for Breach of Contract Claim OCT 2004

52.242-13 Bankruptcy JUL 1995

52.247-34 F.O.B. Destination NOV 1991

52.253-1 Computer Generated Forms JAN 1991

252.203-7000 Requirements Relating to Compensation of Former DoD

Officials

SEP 2011

252.204-7003 Control Of Government Personnel Work Product APR 1992

252.204-7015 Notice of Authorized Disclosure of Information for Litigation

Support

MAY 2016

252.225-7001 Buy American And Balance Of Payments Program-- Basic DEC 2017

252.225-7012 Preference For Certain Domestic Commodities DEC 2017

252.225-7051 Prohibition on Acquisition of Certain Foreign Commercial

Satellite Services.

DEC 2018

252.226-7001 Utilization of Indian Organizations and Indian-Owned

Economic Enterprises, and Native Hawaiian Small Business

Concerns

APR 2019

252.232-7003 Electronic Submission of Payment Requests and Receiving

Reports

DEC 2018

252.232-7010 Levies on Contract Payments DEC 2006

252.243-7001 Pricing Of Contract Modifications DEC 1991

252.243-7002 Requests for Equitable Adjustment DEC 2012

252.244-7000 Subcontracts for Commercial Items JAN 2021

252.247-7023 Transportation of Supplies by Sea FEB 2019

52.212-5 CONTRACT TERMS AND CONDITIONS REQUIRED TO IMPLEMENT STATUTES OR

EXECUTIVE ORDERS--COMMERCIAL ITEMS (JAN 2021)

(a) The Contractor shall comply with the following Federal Acquisition Regulation (FAR) clauses, which are incorporated in this contract by reference, to implement provisions of law or Executive orders applicable to acquisitions of commercial items:

(1) 52.203-19, Prohibition on Requiring Certain Internal Confidentiality Agreements or Statements (JAN 2017)

(section 743 of Division E, Title VII, of the Consolidated and Further Continuing Appropriations Act, 2015 (Pub. L.

113-235) and its successor provisions in subsequent appropriations acts (and as extended in continuing resolutions)).

(2) 52.204-23, Prohibition on Contracting for Hardware, Software, and Services Developed or Provided by

Kaspersky Lab and Other Covered Entities (Jul 2018) (Section 1634 of Pub. L. 115-91).

(3) 52.204-25, Prohibition on Contracting for Certain Telecommunications and Video Surveillance Services or

Equipment. (AUG 2020) (Section 889(a)(1)(A) of Pub. L. 115-232).

(4) 52.209-10, Prohibition on Contracting with Inverted Domestic Corporations (Nov 2015).

(5) 52.233-3, Protest After Award (AUG 1996) (31 U.S.C. 3553).

(6) 52.233-4, Applicable Law for Breach of Contract Claim (OCT 2004) (Public Laws 108-77 and 108-78 (19

U.S.C. 3805 note)).

(b) The Contractor shall comply with the FAR clauses in this paragraph (b) that the Contracting Officer has indicated as being incorporated in this contract by reference to implement provisions of law or Executive orders applicable to acquisitions of commercial items: (Contracting Officer check as appropriate.)

___ (1) 52.203-6, Restrictions on Subcontractor Sales to the Government (JUN 2020), with Alternate I (Oct 1995)

(41 U.S.C. 4704 and 10 U.S.C. 2402).

____ (2) 52.203-13, Contractor Code of Business Ethics and Conduct (JUN 2020) (41 U.S.C. 3509).

____ (3) 52.203-15, Whistleblower Protections under the American Recovery and Reinvestment Act of 2009 (JUN

2010) (Section 1553 of Pub. L. 111-5). (Applies to contracts funded by the American Recovery and Reinvestment

Act of 2009.)

X (4) 52.204-10, Reporting Executive Compensation and First-Tier Subcontract Awards (JUN 2020) (Pub. L. 109-

282) (31 U.S.C. 6101 note).

___ (5) [Reserved]

___ (6) 52.204-14, Service Contract Reporting Requirements (Oct 2016) (Pub. L. 111-117, section 743 of Div.

C).

___ (7) 52.204-15, Service Contract Reporting Requirements for Indefinite-Delivery Contracts (Oct 2016) (Pub.

L. 111-117, section 743 of Div. C).

X (8) 52.209-6, Protecting the Government's Interest When Subcontracting with Contractors Debarred, Suspended, or Proposed for Debarment. (JUN 2020) (31 U.S.C. 6101 note).

____ (9) 52.209-9, Updates of Publicly Available Information Regarding Responsibility Matters (OCT 2018) (41

U.S.C. 2313).

____ (10) [Reserved]

____ (11)(i) 52.219-3, Notice of HUBZone Set-Aside or Sole-Source Award (MAR 2020) (15 U.S.C. 657a).

____ (ii) Alternate I (MAR 2020) of 52.219-3.

X (12) (i) 52.219-4, Notice of Price Evaluation Preference for HUBZone Small Business Concerns (MAR 2020) (if the offeror elects to waive the preference, it shall so indicate in its offer) (15 U.S.C. 657a).

____ (ii) Alternate I (MAR 2020) of 52.219-4.

____ (13) [Reserved]

____ (14)(i) 52.219-6, Notice of Total Small Business Set-Aside (NOV 2020) (15 U.S.C. 644).

____ (ii) Alternate I (MAR 2020) of 52.219-6.

____ (15)(i) 52.219-7, Notice of Partial Small Business Set-Aside (NOV 2020) (15 U.S.C. 644).

____ (ii) Alternate I (MAR 2020) of 52.219-7.

____ (16) 52.219-8, Utilization of Small Business Concerns (OCT 2018) (15 U.S.C. 637(d)(2) and (3)).

____ (17)(i) 52.219-9, Small Business Subcontracting Plan (JUN 2020) (15 U.S.C. 637(d)(4)).

____ (ii) Alternate I (NOV 2016) of 52.219-9.

____ (iii) Alternate II (NOV 2016) of 52.219-9.

____ (iv) Alternate III (JUN 2020) of 52.219-9.

____ (v) Alternate IV (JUN 2020) of 52.219-9.

____ (18) (i) 52.219-13, Notice of Set-Aside of Orders (MAR 2020) (15 U.S.C. 644(r)).

____ (ii) Alternate I (MAR 2020) of 52.219-13.

____ (19) 52.219-14, Limitations on Subcontracting (MAR 2020) (15 U.S.C. 637(a)(14)).

____ (20) 52.219-16, Liquidated Damages—Subcontracting Plan (Jan 1999) (15 U.S.C. 637(d)(4)(F)(i)).

____ (21) 52.219-27, Notice of Service-Disabled Veteran-Owned Small Business Set-Aside (MAR 2020) (15

U.S.C. 657f).

X (22) (i) 52.219-28, Post Award Small Business Program Rerepresentation (NOV 2020) (15 U.S.C. 632(a)(2)).

____ (ii) Alternate I (MAR 2020) of 52.219-28.

____ (23) 52.219-29, Notice of Set-Aside for, or Sole Source Award to, Economically Disadvantaged Women-

Owned Small Business (EDWOSB) Concerns (MAR 2020) (15 U.S.C. 637(m)).

____ (24) 52.219-30, Notice of Set-Aside for, or Sole Source Award to, Women-Owned Small Business Concerns

Eligible Under the Women-Owned Small Business Program (MAR 2020) (15 U.S.C. 637(m)).

____ (25) 52.219-32, Orders Issued Directly Under Small Business Reserves (MAR 2020) (15 U.S.C. 644(r)).

X (26) 52.219-33, Nonmanufacturer Rule (MAR 2020) (15 U.S.C. 637(a)(17)).

____ (27) 52.222-3, Convict Labor (JUN 2003) (E.O. 11755).

X (28) 52.222-19, Child Labor--Cooperation with Authorities and Remedies (JAN 2020) (E.O. 13126).

____ (29) 52.222-21, Prohibition of Segregated Facilities (APR 2015).

____ (30)(i) 52.222-26, Equal Opportunity (SEPT 2016) (E.O. 11246).

____ (ii) Alternate I (FEB 1999) of 52.222-26.

____ (31)(i) 52.222-35, Equal Opportunity for Veterans (JUN 2020) (38 U.S.C. 4212).

____ (ii) Alternate I (JUL 2014) of 52.222-35.

____ (32)(i) 52.222-36, Equal Opportunity for Workers with Disabilities (JUN 2020) (29 U.S.C. 793).

____ (ii) Alternate I (JUL 2014) of 52.222-36.

____ (33) 52.222-37, Employment Reports on Veterans (JUN 2020) (38 U.S.C. 4212).

____ (34) 52.222-40, Notification of Employee Rights Under the National Labor Relations Act (DEC 2010) (E.O.

13496).

X (35)(i) 52.222-50, Combating Trafficking in Persons (OCT 2020) (22 U.S.C. chapter 78 and E.O. 13627).

____ (ii) Alternate I (MAR 2015) of 52.222-50 (22 U.S.C. chapter 78 and E.O. 13627).

____ (36) 52.222-54, Employment Eligibility Verification (OCT 2015). (E. O. 12989). (Not applicable to the acquisition of commercially available off-the-shelf items or certain other types of commercial items as prescribed in

22.1803.)

____ (37)(i) 52.223-9, Estimate of Percentage of Recovered Material Content for EPA–Designated Items (MAY

2008) (42 U.S.C. 6962(c)(3)(A)(ii)). (Not applicable to the acquisition of commercially available off-the-shelf items.)

____ (ii) Alternate I (MAY 2008) of 52.223-9 (42 U.S.C. 6962(i)(2)(C)). (Not applicable to the acquisition of commercially available off-the-shelf items.)

____ (38) 52.223-11, Ozone-Depleting Substances and High Global Warming Potential Hydrofluorocarbons (JUN

2016) (E.O. 13693).

____ (39) 52.223-12, Maintenance, Service, Repair, or Disposal of Refrigeration Equipment and Air Conditioners

(JUN 2016) (E.O. 13693).

____ (40) (i) 52.223-13, Acquisition of EPEAT® Registered Imaging Equipment (JUN 2014) (E.O.s 13423 and

13514).

____ (ii) Alternate I (OCT 2015) of 52.223-13.

____ (41)(i) 52.223-14, Acquisition of EPEAT® Registered Televisions (JUN 2014) (E.O.s 13423 and 13514).

____ (ii) Alternate I (JUN 2014) of 52.223-14.

____ (42) 52.223-15, Energy Efficiency in Energy-Consuming Products (MAY 2020) (42 U.S.C. 8259b).

____ (43)(i) 52.223-16, Acquisition of EPEAT®-Registered Personal Computer Products (OCT 2015) (E.O.s

13423 and 13514).

____ (ii) Alternate I (JUN 2014) of 52.223-16.

X (44) 52.223-18, Encouraging Contractor Policies to Ban Text Messaging While Driving (JUN 2020) (E.O.

13513).

____ (45) 52.223-20, Aerosols (JUN 2016) (E.O. 13693).

____ (46) 52.223-21, Foams (JUN 2016) (E.O. 13693).

____ (47)(i) 52.224-3, Privacy Training (JAN 2017) (5 U.S.C. 552a).

____ (ii) Alternate I (JAN 2017) of 52.224-3.

____ (48) 52.225-1, Buy American--Supplies (JAN 2021) (41 U.S.C. chapter 83).

____ (49) (i) 52.225-3, Buy American--Free Trade Agreements--Israeli Trade Act (JAN 2021) (41 U.S.C. chapter

83, 19 U.S.C. 3301 note, 19 U.S.C. 2112 note, 19 U.S.C. 3805 note, 19 U.S.C. 4001 note, Pub. L. 103-182, 108-77, 108-78, 108-286, 108-302, 109-53, 109-169, 109-283, 110-138, 112-41, 112-42, and 112-43.

____ (ii) Alternate I (JAN 2021) of 52.225-3.

____ (iii) Alternate II (JAN 2021) of 52.225-3.

____ (iv) Alternate III (JAN 2021) of 52.225-3.

____ (50) 52.225-5, Trade Agreements (OCT 2019) 19 U.S.C. 2501, et seq., 19 U.S.C. 3301 note).

X (51) 52.225-13, Restrictions on Certain Foreign Purchases (JUN 2008) (E.O.'s, proclamations, and statutes administered by the Office of Foreign Assets Control of the Department of the Treasury).

____ (52) 52.225-26, Contractors Performing Private Security Functions Outside the United States (OCT 2016)

(Section 862, as amended, of the National Defense Authorization Act for Fiscal Year 2008; 10 U.S.C. 2302 Note).

____ (53) 52.226-4, Notice of Disaster or Emergency Area Set-Aside (NOV 2007) (42 U.S.C. 5150

____ (54) 52.226-5, Restrictions on Subcontracting Outside Disaster or Emergency Area (NOV 2007) (42 U.S.C.

5150).

____ (55) 52.229-12, Tax on Certain Foreign Procurements (JUN 2020).

____ (56) 52.232-29, Terms for Financing of Purchases of Commercial Items (FEB 2002) (41 U.S.C. 4505, 10

U.S.C. 2307(f)).

____ (57) 52.232-30, Installment Payments for Commercial Items (JAN 2017) (41 U.S.C. 4505, 10 U.S.C. 2307(f)).

X (58) 52.232-33, Payment by Electronic Funds Transfer—System for Award Management (OCT 2018) (31 U.S.C.

3332).

____ (59) 52.232-34, Payment by Electronic Funds Transfer—Other than System for Award Management (JUL

2013) (31 U.S.C. 3332).

____ (60) 52.232-36, Payment by Third Party (MAY 2014) (31 U.S.C. 3332).

____ (61) 52.239-1, Privacy or Security Safeguards (AUG 1996) (5 U.S.C. 552a).

____ (62) 52.242-5, Payments to Small Business Subcontractors (JAN 2017)(15 U.S.C. 637(d)(13)).

____ (63)(i) 52.247-64, Preference for Privately Owned U.S.-Flag Commercial Vessels (FEB 2006) (46 U.S.C.

Appx. 1241(b) and 10 U.S.C. 2631).

____ (ii) Alternate I (APR 2003) of 52.247-64.

____ (iii) Alternate II (FEB 2006) of 52.247-64.

(c) The Contractor shall comply with the FAR clauses in this paragraph (c), applicable to commercial services, that the Contracting Officer has indicated as being incorporated in this contract by reference to implement provisions of law or Executive orders applicable to acquisitions of commercial items: (Contracting Officer check as appropriate.)

_____ (1) 52.222-41, Service Contract Labor Standards (AUG 2018) (41 U.S.C. chapter 67).

_____ (2) 52.222-42, Statement of Equivalent Rates for Federal Hires (MAY 2014) (29 U.S.C. 206 and 41 U.S.C.

chapter 67).

_____ (3) 52.222-43, Fair Labor Standards Act and Service Contract Labor Standards--Price Adjustment (Multiple

Year and Option Contracts) (AUG 2018) (29 U.S.C. 206 and 41 U.S.C. chapter 67).

_____ (4) 52.222-44, Fair Labor Standards Act and Service Contract Labor Standards--Price Adjustment (MAY

2014) (29 U.S.C 206 and 41 U.S.C. chapter 67).

_____ (5) 52.222-51, Exemption from Application of the Service Contract Labor Standards to Contracts for

Maintenance, Calibration, or Repair of Certain Equipment--Requirements (MAY 2014) (41 U.S.C. chapter 67).

_____ (6) 52.222-53, Exemption from Application of the Service Contract Labor Standards to Contracts for Certain

Services--Requirements (MAY 2014) (41 U.S.C. chapter 67).

_____ (7) 52.222-55, Minimum Wages Under Executive Order 13658 (NOV 2020) (E.O. 13658).

_____ (8) 52.222-62, Paid Sick Leave Under Executive Order 13706 (JAN 2017) (E.O. 13706).

_____ (9) 52.226-6, Promoting Excess Food Donation to Nonprofit Organizations (JUN 2020) (42 U.S.C. 1792).

(d) Comptroller General Examination of Record. The Contractor shall comply with the provisions of this paragraph

(d) if this contract was awarded using other than sealed bid, is in excess of the simplified acquisition threshold, as defined in FAR 2.101, on the date of award of this contract, and does not contain the clause at 52.215-2, Audit and

Records--Negotiation.

(1) The Comptroller General of the United States, or an authorized representative of the Comptroller General, shall have access to and right to examine any of the Contractor's directly pertinent records involving transactions related to this contract.

(2) The Contractor shall make available at its offices at all reasonable times the records, materials, and other evidence for examination, audit, or reproduction, until 3 years after final payment under this contract or for any shorter period specified in FAR Subpart 4.7, Contractor Records Retention, of the other clauses of this contract. If this contract is completely or partially terminated, the records relating to the work terminated shall be made available for 3 years after any resulting final termination settlement. Records relating to appeals under the disputes clause or to litigation or the settlement of claims arising under or relating to this contract shall be made available until such appeals, litigation, or claims are finally resolved.

(3) As used in this clause, records include books, documents, accounting procedures and practices, and other data, regardless of type and regardless of form. This does not require the Contractor to create or maintain any record that the Contractor does not maintain in the ordinary course of business or pursuant to a provision of law.

(e) (1) Notwithstanding the requirements of the clauses in paragraphs (a), (b), (c), and (d) of this clause, the

Contractor is not required to flow down any FAR clause, other than those in this paragraph (e)(1)in a subcontract for commercial items. Unless otherwise indicated below, the extent of the flow down shall be as required by the clause—

(i) 52.203-13, Contractor Code of Business Ethics and Conduct (JUN 2020) (41 U.S.C. 3509).

(ii) 52.203-19, Prohibition on Requiring Certain Internal Confidentiality Agreements or Statements (JAN 2017)

(section 743 of Division E, Title VII, of the Consolidated and Further Continuing Appropriations Act, 2015 (Pub. L.

113-235) and its successor provisions in subsequent appropriations acts (and as extended in continuing resolutions)).

(iii) 52.204-23, Prohibition on Contracting for Hardware, Software, and Services Developed or Provided by

Kaspersky Lab and Other Covered Entities (Jul 2018) (Section 1634 of Pub. L. 115-91).

(iv) 52.204-25, Prohibition on Contracting for Certain Telecommunications and Video Surveillance Services or

Equipment. (AUG 2020) (Section 889(a)(1)(A) of Pub. L. 115-232).

(v) 52.219-8, Utilization of Small Business Concerns (Oct 2018) (15 U.S.C. 637(d)(2) and (3)), in all subcontracts that offer further subcontracting opportunities. If the subcontract (except subcontracts to small business concerns) exceeds the applicable threshold specified in FAR 19.702(a) on the date of subcontract award, the subcontractor must include 52.219-8 in lower tier subcontracts that offer subcontracting opportunities.

(vi) 52.222-21, Prohibition of Segregated Facilities (Apr 2015).

(vii) 52.222-26, Equal Opportunity (Sep 2016) (E.O. 11246).

(viii) 52.222-35, Equal Opportunity for Veterans (JUN 2020) (38 U.S.C. 4212).

(ix) 52.222-36, Equal Opportunity for Workers with Disabilities (JUN 2020) (29 U.S.C. 793).

(x) 52.222-37, Employment Reports on Veterans (JUN 2020) (38 U.S.C. 4212).

(xi) 52.222-40, Notification of Employee Rights Under the National Labor Relations Act (Dec 2010) (E.O. 13496).

Flow down required in accordance with paragraph (f) of FAR clause 52.222-40.

(xii) 52.222-41, Service Contract Labor Standards (Aug 2018), (41 U.S.C. chapter 67).

(xiii) X (A) 52.222-50, Combating Trafficking in Persons (OCT 2020) (22 U.S.C. chapter 78 and E.O. 13627).

_____ (B) Alternate I (March 2, 2015) of 52.222-50 (22 U.S.C. chapter 78 and E.O. 13627).

(xiv) 52.222-51, Exemption from Application of the Service Contract Labor Standards to Contracts for

Maintenance, Calibration, or Repair of Certain Equipment--Requirements (May 2014) (41 U.S.C. chapter 67.)

(xv) 52.222-53, Exemption from Application of the Service Contract Labor Standards to Contracts for Certain

Services--Requirements (May 2014) (41 U.S.C. chapter 67)

(xvi) 52.222-54, Employment Eligibility Verification (Oct 2015) (E. O. 12989).

(xvii) 52.222-55, Minimum Wages Under Executive Order 13658 (NOV 2020) (E.O. 13658).

(xviii) 52.222-62, Paid Sick Leave Under Executive Order 13706 (Jan 2017) (E.O. 13706).

(xix) (A) 52.224-3, Privacy Training (Jan 2017) (5 U.S.C. 552a).

(B) Alternate I (Jan 2017) of 52.224-3.

(xx) 52.225-26, Contractors Performing Private Security Functions Outside the United States (Oct 2016) (Section

862, as amended, of the National Defense Authorization Act for Fiscal Year 2008; 10 U.S.C. 2302 Note).

https://www.acquisition.gov/content/part-52-solicitation-provisions-and-contract-clauses#i52_222_62 https://www.acquisition.gov/content/part-52-solicitation-provisions-and-contract-clauses#i52_224_3 http://uscode.house.gov/browse.xhtml;jsessionid=114A3287C7B3359E597506A31FC855B3 https://www.acquisition.gov/content/part-52-solicitation-provisions-and-contract-clauses#i52_224_3

(xxi) 52.226-6, Promoting Excess Food Donation to Nonprofit Organizations. (JUN 2020) (42 U.S.C. 1792). Flow down required in accordance with paragraph (e) of FAR clause 52.226-6.

(xxii) 52.247-64, Preference for Privately-Owned U.S. Flag Commercial Vessels (Feb 2006) (46 U.S.C. Appx

1241(b) and 10 U.S.C. 2631). Flow down required in accordance with paragraph (d) of FAR clause 52.247-64.

(2) While not required, the Contractor may include in its subcontracts for commercial items a minimal number of additional clauses necessary to satisfy its contractual obligations.

52.217-9 OPTION TO EXTEND THE TERM OF THE CONTRACT (MAR 2000)

(a) The Government may extend the term of this contract by written notice to the Contractor within 15 days;

provided that the Government gives the Contractor a preliminary written notice of its intent to extend at least 15 days (60 days unless a different number of days is inserted) before the contract expires. The preliminary notice does not commit the Government to an extension.

(b) If the Government exercises this option, the extended contract shall be considered to include this option clause.

(c) The total duration of this contract, including the exercise of any options under this clause, shall not exceed 66 months.

52.252-1 SOLICITATION PROVISIONS INCORPORATED BY REFERENCE (FEB 1998)

This solicitation incorporates one or more solicitation provisions by reference, with the same force and effect as if they were given in full text. Upon request, the Contracting Officer will make their full text available. The offeror is cautioned that the listed provisions may include blocks that must be completed by the offeror and submitted with its quotation or offer. In lieu of submitting the full text of those provisions, the offeror may identify the provision by paragraph identifier and provide the appropriate information with its quotation or offer. Also, the full text of a solicitation provision may be accessed electronically at this/these address(es):

www.acquisition.gov

(End of provision)

52.252-2 CLAUSES INCORPORATED BY REFERENCE (FEB 1998)

This contract incorporates one or more clauses by reference, with the same force and effect as if they were given in full text. Upon request, the Contracting Officer will make their full text available. Also, the full text of a clause may be accessed electronically at this/these address(es):

www.acquisition.gov

252.204-7006 BILLING INSTRUCTIONS (OCT 2005)

When submitting a request for payment, the Contractor shall--

(a) Identify the contract line item(s) on the payment request that reasonably reflect contract work performance; and

(b) Separately identify a payment amount for each contract line item included in the payment request.

252.204-7012 SAFEGUARDING COVERED DEFENSE INFORMATION AND CYBER INCIDENT

REPORTING (DEC 2019)

(a) Definitions. As used in this clause--

Adequate security means protective measures that are commensurate with the consequences and probability of loss, misuse, or unauthorized access to, or modification of information.

Compromise means disclosure of information to unauthorized persons, or a violation of the security policy of a system, in which unauthorized intentional or unintentional disclosure, modification, destruction, or loss of an object, or the copying of information to unauthorized media may have occurred.

Contractor attributional/proprietary information means information that identifies the contractor(s), whether directly or indirectly, by the grouping of information that can be traced back to the contractor(s) (e.g., program description, facility locations), personally identifiable information, as well as trade secrets, commercial or financial information, or other commercially sensitive information that is not customarily shared outside of the company.

Controlled technical information means technical information with military or space application that is subject to controls on the access, use, reproduction, modification, performance, display, release, disclosure, or dissemination.

Controlled technical information would meet the criteria, if disseminated, for distribution statements B through F using the criteria set forth in DoD Instruction 5230.24, Distribution Statements on Technical Documents. The term does not include information that is lawfully publicly available without restrictions.

Covered contractor information system means an unclassified information system that is owned, or operated by or for, a contractor and that processes, stores, or transmits covered defense information.

Covered defense information means unclassified controlled technical information or other information, as described in the Controlled Unclassified Information (CUI) Registry at http://www.archives.gov/cui/registry/category-list.html, that requires safeguarding or dissemination controls pursuant to and consistent with law, regulations, and

Governmentwide policies, and is--

(1) Marked or otherwise identified in the contract, task order, or delivery order and provided to the contractor by or on behalf of DoD in support of the performance of the contract; or

(2) Collected, developed, received, transmitted, used, or stored by or on behalf of the contractor in support of the performance of the contract.

http://www.archives.gov/cui/registry/category-list.html http://www.archives.gov/cui/registry/category-list.html

Cyber incident means actions taken through the use of computer networks that result in a compromise or an actual or potentially adverse effect on an information system and/or the information residing therein.

Forensic analysis means the practice of gathering, retaining, and analyzing computer-related data for investigative purposes in a manner that maintains the integrity of the data.

Information system means a discrete set of information resources organized for the collection, processing, maintenance, use, sharing, dissemination, or disposition of information.

Malicious software means computer software or firmware intended to perform an unauthorized process that will have adverse impact on the confidentiality, integrity, or availability of an information system. This definition includes a virus, worm, Trojan horse, or other code-based entity that infects a host, as well as spyware and some forms of adware.

Media means physical devices or writing surfaces including, but is not limited to, magnetic tapes, optical disks, magnetic disks, large-scale integration memory chips, and printouts onto which covered defense information is recorded, stored, or printed within a covered contractor information system.

Operationally critical support means supplies or services designated by the Government as critical for airlift, sealift, intermodal transportation services, or logistical support that is essential to the mobilization, deployment, or sustainment of the Armed Forces in a contingency operation.

Rapidly report means within 72 hours of discovery of any cyber incident.

Technical information means technical data or computer software, as those terms are defined in the clause at

DFARS 252.227-7013, Rights in Technical Data--Noncommercial Items, regardless of whether or not the clause is incorporated in this solicitation or contract. Examples of technical information include research and engineering data, engineering drawings, and associated lists, specifications, standards, process sheets, manuals, technical reports, technical orders, catalog-item identifications, data sets, studies and analyses and related information, and computer software executable code and source code.

(b) Adequate security. The Contractor shall provide adequate security on all covered contractor information systems.

To provide adequate security, the Contractor shall implement, at a minimum, the following information security protections:

(1) For covered contractor information systems that are part of an information technology (IT) service or system operated on behalf of the Government, the following security requirements apply:

(i) Cloud computing services shall be subject to the security requirements specified in the clause 252.239-7010, Cloud Computing Services, of this contract.

(ii) Any other such IT service or system (i.e., other than cloud computing) shall be subject to the security requirements specified elsewhere in this contract.

(2) For covered contractor information systems that are not part of an IT service or system operated on behalf of the

Government and therefore are not subject to the security requirement specified at paragraph (b)(1) of this clause, the following security requirements apply:

(i) Except as provided in paragraph (b)(2)(ii) of this clause, the covered contractor information system shall be subject to the security requirements in National Institute of Standards and Technology (NIST) Special Publication

(SP) 800-171, “Protecting Controlled Unclassified Information in Nonfederal Information Systems and

Organizations” (available via the internet at http://dx.doi.org/10.6028/NIST.SP.800-171) in effect at the time the solicitation is issued or as authorized by the Contracting Officer.

http://dx.doi.org/10.6028/NIST.SP.800-171

(ii)(A) The Contractor shall implement NIST SP 800-171, as soon as practical, but not later than December 31, 2017. For all contracts awarded prior to October 1, 2017, the Contractor shall notify the DoD Chief Information

Officer (CIO), via email at osd.dibcsia@mail.mil, within 30 days of contract award, of any security requirements specified by NIST SP 800-171 not implemented at the time of contract award.

(B) The Contractor shall submit requests to vary from NIST SP 800-171 in writing to the Contracting Officer, for consideration by the DoD CIO. The Contractor need not implement any security requirement adjudicated by an authorized representative of the DoD CIO to be nonapplicable or to have an alternative, but equally effective, security measure that may be implemented in its place.

(C) If the DoD CIO has previously adjudicated the contractor's requests indicating that a requirement is not applicable or that an alternative security measure is equally effective, a copy of that approval shall be provided to the Contracting Officer when requesting its recognition under this contract.

(D) If the Contractor intends to use an external cloud service provider to store, process, or transmit any covered defense information in performance of this contract, the Contractor shall require and ensure that the cloud service provider meets security requirements equivalent to those established by the Government for the Federal Risk and Authorization Management Program (FedRAMP) Moderate baseline

(https://www.fedramp.gov/resources/documents/) and that the cloud service provider complies with requirements in paragraphs (c) through (g) of this clause for cyber incident reporting, malicious software, media preservation and protection, access to additional information and equipment necessary for forensic analysis, and cyber incident damage assessment.

(3) Apply other information systems security measures when the Contractor reasonably determines that information systems security measures, in addition to those identified in paragraphs (b)(1) and (2) of this clause, may be required to provide adequate security in a dynamic environment or to accommodate special circumstances (e.g., medical devices) and any individual, isolated, or temporary deficiencies based on an assessed risk or vulnerability. These measures may be addressed in a system security plan.

(c) Cyber incident reporting requirement.

(1) When the Contractor discovers a cyber incident that affects a covered contractor information system or the covered defense information residing therein, or that affects the contractor's ability to perform the requirements of the contract that are designated as operationally critical support and identified in the contract, the Contractor shall--

(i) Conduct a review for evidence of compromise of covered defense information, including, but not limited to, identifying compromised computers, servers, specific data, and user accounts. This review shall also include analyzing covered contractor information system(s) that were part of the cyber incident, as well as other information systems on the Contractor's network(s), that may have been accessed as a result of the incident in order to identify compromised covered defense information, or that affect the Contractor's ability to provide operationally critical support; and

(ii) Rapidly report cyber incidents to DoD at https://dibnet.dod.mil.

(2) Cyber incident report. The cyber incident report shall be treated as information created by or for DoD and shall include, at a minimum, the required elements at https://dibnet.dod.mil.

(3) Medium assurance certificate requirement. In order to report cyber incidents in accordance with this clause, the

Contractor or subcontractor shall have or acquire a DoD-approved medium assurance certificate to report cyber incidents. For information on obtaining a DoD-approved medium assurance certificate, see https://public.cyber.mil/eca/.

(d) Malicious software. When the Contractor or subcontractors discover and isolate malicious software in connection with a reported cyber incident, submit the malicious software to DoD Cyber Crime Center (DC3) in mailto:osd.dibcsia@mail.mil https://www.fedramp.gov/resources/documents/ http://dibnet.dod.mil/ http://dibnet.dod.mil/ https://public.cyber.mil/eca/ accordance with instructions provided by DC3 or the Contracting Officer. Do not send the malicious software to the

Contracting Officer.

(e) Media preservation and protection. When a Contractor discovers a cyber incident has occurred, the Contractor shall preserve and protect images of all known affected information systems identified in paragraph (c)(1)(i) of this clause and all relevant monitoring/packet capture data for at least 90 days from the submission of the cyber incident report to allow DoD to request the media or decline interest.

(f) Access to additional information or equipment necessary for forensic analysis. Upon request by DoD, the

Contractor shall provide DoD with access to additional information or equipment that is necessary to conduct a forensic analysis.

(g) Cyber incident damage assessment activities. If DoD elects to conduct a damage assessment, the Contracting

Officer will request that the Contractor provide all of the damage assessment information gathered in accordance with paragraph (e) of this clause.

(h) DoD safeguarding and use of contractor attributional/proprietary information. The Government shall protect against the unauthorized use or release of information obtained from the…