Sol_140A1620R0018.pdf

SEE ADDENDUMIS CHECKED

CODE 18a. PAYMENT WILL BE MADE BY

CODE

FACILITYCODE

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT SUCH ADDRESS IN OFFER

OFFEROR

A16

Reston VA 20191 Contracting Office 12220 Sunrise Valley Drive

BIA CENTRAL 00016

0009809247 CODE 16. ADMINISTERED BYCODE

X

X

X

541519

SIZE STANDARD:

100.00 % FOR:SET ASIDE:UNRESTRICTED ORA16

RFPIFB

10. THIS ACQUISITION ISCODE

RFQ

14. METHOD OF SOLICITATION

13b. RATING

NAICS:

SMALL BUSINESS

05/27/2020 1700 ET

04/28/2020

907-982-2313Nicole Rahmer (No collect calls)

INFORMATION CALL:

FOR SOLICITATION 8. OFFER DUE DATE/LOCAL TIMEb. TELEPHONE NUMBER a. NAME

4. ORDER NUMBER3. AWARD/ 6. SOLICITATION

140A1620R0018

5. SOLICITATION NUMBER

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS 1. REQUISITION NUMBER PAGE OF

1 120 OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, & 30

TELEPHONE NO.

17a. CONTRACTOR/

RESTON VA 20191

12220 SUNRISE VALLEY DRIVE

BIA CENTRAL 00016

15. DELIVER TO

Reston VA 20191 Contracting Office 12220 Sunrise Valley Drive

9. ISSUED BY

7.

2. CONTRACT NO.

EFFECTIVE DATE

$30.00

18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a UNLESS BLOCK BELOW

ISSUE DATE

DELIVERY FOR FOB DESTINA-

TION UNLESS BLOCK IS

MARKED

11.

SEE SCHEDULEX

12. DISCOUNT TERMS

THIS CONTRACT IS A

RATED ORDER UNDER

DPAS (15 CFR 700)

13a.

SERVICE-DISABLED

VETERAN-OWNED

SMALL BUSINESS

HUBZONE SMALL

BUSINESS

8(A)

BIA CENTRAL 00016

WOMEN-OWNED SMALL BUSINESS

(WOSB) ELIGIBLE UNDER THE WOMEN-OWNED

SMALL BUSINESS PROGRAM

EDWOSB

24.

AMOUNT

23.

UNIT PRICE

22.

UNIT

21.

QUANTITY

20.

SCHEDULE OF SUPPLIES/SERVICES

19.

ITEM NO.

Contractor shall provide Computer Network Defense (CND) Monitoring, Cyber Incident Response Team (CIRT), and Cyber Security Systems Engineering and Integration (CSSE&I) to Indian Affairs (IA).

This action is 100% set-aside for Native American Indian-owned Small Business Economic Enterprises (ISBEEs). Limitations on subcontracting apply.

Subject to availability of funds, the Government anticipates one (1) Labor-Hour contract to be awarded.

Period of Performance: 07/22/2020 to 07/21/2021

(Use Reverse and/or Attach Additional Sheets as Necessary)

HEREIN, IS ACCEPTED AS TO ITEMS:

DATED

Jeffrey Pearson

. YOUR OFFER ON SOLICITATION (BLOCK 5),

INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE SET FORTH

COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND DELIVER

ARE

ARE

31c. DATE SIGNED

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA

31a. UNITED STATES OF AMERICA (SIGNATURE OF CONTRACTING OFFICER)

30c. DATE SIGNED 31b. NAME OF CONTRACTING OFFICER (Type or print)

ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND ON ANY ADDITIONAL

SHEETS SUBJECT TO THE TERMS AND CONDITIONS SPECIFIED.

27a. SOLICITATION INCORPORATES BY REFERENCE FAR 52.212-1, 52.212-4. FAR 52.212-3 AND 52.212-5 ARE ATTACHED. ADDENDA

26. TOTAL AWARD AMOUNT (For Govt. Use Only)

OFFER

STANDARD FORM 1449 (REV. 2/2012)

Prescribed by GSA - FAR (48 CFR) 53.212

ARE NOT ATTACHED.

ARE NOT ATTACHED.

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

30b. NAME AND TITLE OF SIGNER (Type or print)

30a. SIGNATURE OF OFFEROR/CONTRACTOR

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN

25. ACCOUNTING AND APPROPRIATION DATA

29. AWARD OF CONTRACT:

REF.

32e. MAILING ADDRESS OF AUTHORIZED GOVERNMENT REPRESENTATIVE

32c. DATE 32b. SIGNATURE OF AUTHORIZED GOVERNMENT REPRESENTATIVE

ACCEPTED, AND CONFORMS TO THE CONTRACT, EXCEPT AS NOTED:

32a. QUANTITY IN COLUMN 21 HAS BEEN

RECEIVED INSPECTED

40. PAID BY39. S/R VOUCHER NUMBER38. S/R ACCOUNT NUMBER

37. CHECK NUMBER

FINALPARTIAL

36. PAYMENT

FINALPARTIAL

35. AMOUNT VERIFIED

CORRECT FOR

34. VOUCHER NUMBER33. SHIP NUMBER

COMPLETE

32g. E-MAIL OF AUTHORIZED GOVERNMENT REPRESENTATIVE

42d. TOTAL CONTAINERS42c. DATE REC'D (YY/MM/DD)

42b. RECEIVED AT (Location)

42a. RECEIVED BY (Print)

41c. DATE41b. SIGNATURE AND TITLE OF CERTIFYING OFFICER

41a. I CERTIFY THIS ACCOUNT IS CORRECT AND PROPER FOR PAYMENT

STANDARD FORM 1449 (REV. 2/2012) BACK

24.

AMOUNT

23.

UNIT PRICE

22.

UNIT

21.

QUANTITY

20.

SCHEDULE OF SUPPLIES/SERVICES

19.

ITEM NO.

00001 Cyber Security Operations

Base Year

Product/Service Code: R425

Product/Service Description: SUPPORT-

PROFESSIONAL: ENGINEERING/TECHNICAL

00002 Travel - NTE

Base Year

(Option Line Item)

07/21/2021

Product/Service Code: R425

Product/Service Description: SUPPORT-

PROFESSIONAL: ENGINEERING/TECHNICAL

10001 Cyber Security Operations

Option Year 1

(Option Line Item)

07/22/2021

Product/Service Code: R425

Product/Service Description: SUPPORT-

PROFESSIONAL: ENGINEERING/TECHNICAL

Period of Performance: 07/22/2021 to 07/21/2022

10002 Travel - NTE

Option Year 1

(Option Line Item)

Continued ...

32f. TELEPHONE NUMBER OF AUTHORIZED GOVERNMENT REPRESENTATIVE

32d. PRINTED NAME AND TITLE OF AUTHORIZED GOVERNMENT REPRESENTATIVE

120 2 of

ITEM NO. SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

NAME OF OFFEROR OR CONTRACTOR

3 120

CONTINUATION SHEET

REFERENCE NO. OF DOCUMENT BEING CONTINUED PAGE OF

(A) (B) (C) (D) (E) (F)

140A1620R0018

07/21/2022

Product/Service Code: R425

Product/Service Description: SUPPORT-

PROFESSIONAL: ENGINEERING/TECHNICAL

Period of Performance: 07/22/2021 to 07/21/2022

20001 Cyber Security Operations

Option Year 2

(Option Line Item)

07/22/2022

Product/Service Code: R425

Product/Service Description: SUPPORT-

PROFESSIONAL: ENGINEERING/TECHNICAL

Period of Performance: 07/22/2022 to 07/21/2023

20002 Travel - NTE

Option Year 2

(Option Line Item)

07/21/2023

Product/Service Code: R425

Product/Service Description: SUPPORT-

PROFESSIONAL: ENGINEERING/TECHNICAL

Period of Performance: 07/22/2022 to 07/21/2023

30001 Cyber Security Operations

Option Year 3

(Option Line Item)

07/22/2023

Product/Service Code: R425

Product/Service Description: SUPPORT-

PROFESSIONAL: ENGINEERING/TECHNICAL

Period of Performance: 07/22/2023 to 07/21/2024

30002 Travel - NTE

Option Year 3

(Option Line Item)

07/21/2024

Product/Service Code: R425

Product/Service Description: SUPPORT-

PROFESSIONAL: ENGINEERING/TECHNICAL

Period of Performance: 07/22/2023 to 07/21/2024

40001 Cyber Security Operations

Option Year 4

Continued ...

NSN 7540-01-152-8067 OPTIONAL FORM 336 (4-86)

Sponsored by GSA

FAR (48 CFR) 53.110

ITEM NO. SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

NAME OF OFFEROR OR CONTRACTOR

4 120

CONTINUATION SHEET

REFERENCE NO. OF DOCUMENT BEING CONTINUED PAGE OF

(A) (B) (C) (D) (E) (F)

140A1620R0018

(Option Line Item)

07/22/2024

Product/Service Code: R425

Product/Service Description: SUPPORT-

PROFESSIONAL: ENGINEERING/TECHNICAL

Period of Performance: 07/22/2024 to 07/21/2025

40002 Travel - NTE

Option Year 4

(Option Line Item)

07/21/2025

Product/Service Code: R425

Product/Service Description: SUPPORT-

PROFESSIONAL: ENGINEERING/TECHNICAL

Period of Performance: 07/22/2024 to 07/21/2025

NSN 7540-01-152-8067 OPTIONAL FORM 336 (4-86)

Sponsored by GSA

FAR (48 CFR) 53.110

Solicitation # 140A1620R0018 BIA Cyber Security Operations

Table of Contents SECTION A SF-1449 Continuation

A.1 Solicitation Type A.2 Set-Aside A.3 Contract Type

SECTION B Supplies or services and prices/costs B.1 Pricing Schedule B.2 Labor Rates B.3 Productive Direct Labor-Hours B.4 Travel B.4.1 Federal Travel Regulations B.5 Non-Personal Services

SECTION C Statement of Work C.1 Statement of Work (SOW)

SECTION D Packaging and Marking SECTION E Inspection and Acceptance

E.1 Authorized Representative for Inspection and Acceptance E.2 Correspondence E.3 Points of Contact E.4 Permits and Licenses E.5 Confidentiality

SECTION F Deliveries or Performance F.1 Period of Performance F.2 Exercise of Options F.3 Hours of Performance F.4 Work Products/Deliverable

SECTION G Contract Administration Data G.1 Electronic Invoicing and Payment Requirements - Invoice Processing Platform (IPP) (April 2013) G.2 Federal Holidays G.3 Reporting Matters Involving Fraud, Mismanagement, Waste and Abuse G.4 52.232-18 Availability of Funds (Apr 1984)

SECTION H Special Contract Requirements H.1 Contractor Identification H.2 Policies and Guidance H.3 Personnel Performance and Replacement H.4 Security Requirements H.5 Use of Government Computer System H.6 Dissemination of Contract Performance Information H.7 Mandatory Requirement for Contractor Return of all DOI-Owned and Leased Computing and Information Storage Equipment H.8 Disclosure of Information H.9 Non-Personal Services and Inherently Governmental Functions H.10 Limitation of Future Contracting

H.11 Personal Conflicts of Interest and Procurement Integrity SECTION I Contract Clauses

I.1 Clauses by Reference I.2 Clauses in Full Text I.3 Additional FAR Clauses I.4 DIAR Clauses and Provisions I.5 Custom Clauses

SECTION J List of Attachments SECTION K Representations, Certifications, & Other Statements of Offerors or Respondents . 53 SECTION L Instructions, Conditions, and Notices to Offerors or Respondents

L.1 Addendum to FAR 52.212-1 SECTION M Evaluation Factors for Award

M.1 FAR 52.212-2 Evaluation-Commercial Items (Oct 2014) M.2 Evaluation of Proposals

SECTION A SF-1449 CONTINUATION

A.1 Solicitation Type

This requirement is being solicited in accordance with Federal Acquisition Regulation (FAR) Part 12, Acquisition of Commercial Items and Part 15, Contracting by Negotiation. The Government does not intend to enter into discussions with offerors but reserves the right to do so, if deemed necessary. Proposals will be evaluated in accordance with FAR 15.101-1, Tradeoff Process.

A.2 Set-Aside

This requirement is 100% set-aside for Indian-owned Small Business Economic Enterprises (ISBEEs). Prime offerors must meet the eligibility requirements as stated in the Buy Indian Act and meet the small business size standard for NAICS 541519, Other computer Related Services, which is $30M. Prime offerors must also meet the limitation on subcontracting requirements as stated in FAR 52.219-14 and Department of The Interior Acquisition Regulation (DIAR) 1452.208-3.

A.3 Contract Type

The Government anticipates awarding a Labor Hour (LH) contract. Travel may be included as a direct reimbursable allowable fee in accordance with the Federal Travel Regulation (FTR). No fees may be applied to travel.

The contract will consist of a base period effective from the date of contract award through twelve (12) months thereafter, and four (4) one-year option periods, which may be exercised unilaterally by the Government.

SECTION B SUPPLIES OR SERVICES AND PRICES/COSTS

B.1 Pricing Schedule

Offerors shall provide fully burdened fixed-price labor rates for each of the labor categories listed in Attachment 1 – Pricing Schedule. Offerors shall review and follow the instructions listed on the bottom of Attachment 1. Failure to complete Attachment 1 in its entirety will result in the Offeror being deemed unacceptable and not considered for award.

B.2 Labor Rates

The Contractor shall provide pricing for all labor categories identified in Attachment 1 for each of the five (5) years. Estimated hours have been added to the spreadsheet based off the previous contract. The pricing schedules in Attachment 1 shall reflect labor categories and fully burdened hourly labor rates. Fully burdened hourly labor rates are inclusive of profit, fringe benefits, salary, general and administrative, and indirect costs.

B.3 Productive Direct Labor-Hours

The Contractor can only charge the Government for productive direct Labor-Hours, which are defined as those hours expended by Contractor personnel in performing work under the contract.

This does not include sick leave, vacation, Government or Contractor holidays, jury duty, military leave, or any other kind of administrative leave such as acts of God (i.e. hurricanes, snowstorms, tornadoes, etc.), Presidential funerals, or any other unexpected Government closures.

Productive direct Labor-Hours may still be applicable in cases of national emergency or other disaster recovery operation as Contractor personnel may be required to work from their home on either Government furnished equipment or using their personal computer.

B.4 Travel

Travel may be included on the contract as a direct reimbursable with a Not to Exceed (NTE) amount. Travel costs shall not include Contractor’s administrative fees (G&A, OH, Profit, etc).

Contractor shall provide supporting documents for all travel costs with submitted invoices.

The place of performance for this contract are Reston, VA, and Albuquerque, NM.

All reimbursable travel must be submitted to and approved in writing in advance by the Contracting Officer’s Representative (COR). Requests for travel shall include at a minimum:

a. Name and title of traveler

b. Purpose of travel

c. Dates of travel

d. To/From Locations

e. Mode of transportation

f. Estimated total travel costs broken down by transportation, lodging, meals & incidentals

B.4.1 Federal Travel Regulations

Travel cost incurred for transportation, lodging, meals, and incidental expenses (as defined in the regulation cited in FAR 31.205-46) shall be considered to be reasonable and allowable only to the extent that they do not exceed on a daily basis the maximum per diem rates in effect at the time of travel as set forth in the Federal Travel Regulation.

The Contractor may be reimbursed for travel to provide support at a Government site or other site as may be specified and approved by the COR under this effort. All travel shall be pre-approved in writing by the COR prior to commencement of travel. Consultant shall provide supporting documentation and a detailed breakdown of incurred travel costs with each invoice.

B.5 Non-Personal Services

This contract is a non-personal services contract, under which the contractor is an independent contractor. The Government may evaluate the quality of professional services provided. The Contractor is required to indemnify the Government for any liability producing act or omission by the Contractor, its employees and agents occurring during contract performance. The Contractor shall maintain medical liability insurance, which is not less than the amount normally prevailing within the local community for the specialty concerned.

SECTION C STATEMENT OF WORK

C.1 Statement of Work (SOW)

See Attachment 2

SECTION D PACKAGING AND MARKING

1. Use of this section is not required as this is a Contract for services and the Government does not anticipate packaging or marking requirements for deliveries.

2. All pre-award written and electronic correspondences shall include the solicitation number:

140A1620R0018.

All post-award written and electronic correspondences, invoices, and all other documents shall include the master award number.

Solicitation Number: 140A1620R0018

Contract Number: 140A1620Cxxxx (To be added post award)

For submission of questions and proposals, see Section L.

SECTION E INSPECTION AND ACCEPTANCE

E.1 Authorized Representative for Inspection and Acceptance

Services to be inspected and accepted by the authorized Government Contracting Officer’s Representative (COR).

Clause Title Date 52.246-6 Inspection of Time and Material and Labor-Hour May 2001

E.2 Correspondence

To promote timely and effective administration, correspondence shall be subject to the following procedures:

a) Technical correspondence (where technical issues relating to compliance with the requirements herein) shall be addressed to the Contracting Officer’s Representative (COR) with an information copy to the Contracting Officer (CO) and the Contract Administrator (CA).

b) All other correspondence, including invoices, (that which proposes or otherwise involves waivers, deviations or modifications to the requirements, terms or conditions of this SOW) shall be addressed to the Contracting Officer with an information copy to the COR.

E.3 Points of Contact

Contracting Officer’s Representative (COR)

a) The Contracting Officer’s authorized technical representative for this effort is as follows:

Rolinda Holder

b) The COR is the individual within the Program Management function who has overall technical responsibility for this effort. The COR supports the Contracting Officer (CO) and Contract Specialist (CS) during administration of this effort by:

1) Making final decisions regarding any recommended rejection of deliverables;

2) Providing technical clarification relative to overall workload matters;

3) Providing advice and guidance to the Contractor in the preparation of deliverables and services;

4) Providing acceptance of deliverable products to assure compliance with requirements.

c) The COR also provide technical direction to the Contractor, i.e., shifting work emphasis between areas of work; fills in details, or otherwise serves to accomplish the purposes of this effort. Technical direction shall be within the general statement of work for this effort. The COR does NOT have the authority to and may NOT issue any technical direction which:

1) Constitutes an assignment of work outside the general scope of this effort;

2) Constitutes a change as defined in the “Changes” clause;

3) In any way causes an increase or decrease in cost or the time required for performance;

4) Changes any of the terms, conditions, or other requirements of this effort; and

5) Suspends or terminates any portion of this effort.

d) All technical direction shall be issued in writing by the COR or will be confirmed by the

COR in writing within 10 calendar days after verbal issuance. A copy of the written direction shall be furnished to the CO and the CS.

e) In addition to providing technical direction, the COR will:

1) Monitor the Contractor’s technical progress, including surveillance and assessment of performance, and recommend to the CO and CS, any changes in the requirement;

2) Assist the Contractor in the resolution of technical problems encountered during performance; and

3) Perform inspection and acceptance or recommendation for rejection of Contractor deliverables and identify deficiencies in delivered items. This does not replace any other quality assurance inspection requirements that are specified elsewhere within this SOW.

f) If in the opinion of the Contractor, any instruction or direction issued by the COR is outside of their specific authority, the Contractor shall not proceed but shall notify the CO in writing within 5 working days after receipt of any instruction or direction, with an informational copy to the CS.

Contracting Officer

a) All contract questions and concerns will be directed to the Government Contracting Officer (CO). The Government CO is the only individual with the authority to financially obligate the government and to make changes to original terms and conditions of this contract.

The Contractor is responsible for notifying the contracting officer of any potential issues or concerns – technical, scope or financial, concerning this contract.

The Contracting Officer (CO) for this effort is as follows:

Bureau of Indian Affairs (BIA) Attention: Jeffrey Pearson Email: Jeffrey.Pearson@bia.gov

Contract Administration

a) The Contract Specialist (CS) for this effort is as follows:

Bureau of Indian Affairs (BIA)

Attention: Nicole Rahmer, Contractor, Stafford Consulting Email: Nicole.Rahmer@bia.gov

E.4 Permits and Licenses

In performance of work under this contract, the Contractor must, without additional expense to the Government, be responsible for obtaining any necessary licenses and permits, and for complying with any Federal, State, and municipal laws, codes, and regulations applicable to the performance of the work.

E.5 Confidentiality

All information regarding the procedures developed under this contract must be regarded as sensitive information by the Contractor and not to be disclosed to anyone outside the Contractor’s organization without the written permission of the Contracting Officer.

SECTION F DELIVERIES OR PERFORMANCE

F.1 Period of Performance

In is anticipated that the period of performance for the base period and each option period will be as follows (dates subject to change based on date of award):

Base Period: July 22, 2020 – July 21, 2021 Option Period 1: July 22, 2021 – July 21, 2022 Option Period 2: July 22, 2022 – July 21, 2023 Option Period 3: July 22, 2023 – July 21, 2024 Option Period 4: July 22, 2024 – July 21, 2025

F.2 Exercise of Options

When deciding whether to exercise the option, the DOI, BIA, CO will consider the quality of the Contractor’s performance under this contract, as well as requirements specified at FAR 17.207- Exercise of Options. Options may be exercised in accordance with FAR 52.217-8 and FAR 52.217-9.

F.3 Hours of Performance

Contractor personnel shall maintain a work schedule to normal business schedules except as otherwise agreed upon. The core Government business hours are 8:00 AM to 5:00 PM Local time, Monday through Friday. Services at onsite Government locations shall not occur on Federal holidays or weekends unless authorized in writing in advance by the CO and COR. The Contractor personnel duties shall be performed during normal business hours covering core Government business hours; however, when necessary the Contractor personnel shall be required to provide services outside the normal hours of duty. These occasions will be infrequent and may require services to be performed after normal working hours in the evening and/or weekends. The CO, COR, and the Contractor will mutually agree upon any/all deviations to the schedule.

F.4 Work Products/Deliverable

Correspondence To promote timely and effective administration, correspondence shall be subject to the following procedures:

• Technical correspondence (where technical issues relating to compliance with the requirements herein) shall be addressed to the ACISO with an information copy to the Contracting Officer’s Representative (COR).

• All other correspondence, including invoices, (that which proposes or otherwise involves waivers, deviations, or modifications to the requirements, terms, or conditions of this SOW) shall be addressed to the COR

Attendance at Meetings Contractor personnel will be required to attend meetings or otherwise communicate with Government and/or other contract representatives to meet the requirements of this order.

Contractor personnel must make their contractor status known during introductions.

The Government will hold a Technical Interchange Meeting (TIM) to ensure a common understanding between the contractor and the Government on task order requirements.

All deliverables/work products of the Contractor shall remain categorized as “Official Use Gov’t Only.” The release of any portion must be authorized in writing by the Contracting Officer.

All deliverables are required within 30 days of reception/notification by the contractor, to the applicable date, unless otherwise specified throughout this contract.

Deliverables that may be required during the course of this contract include, but are not limited to, the following:

Contract Deliverable Line Items

Data Item Descriptions Task #

(location in the SOW)

Format or Media

Delivery Date

Deliver to Whom

Non- Disclosure Agreement

Signed statements from each employee and subcontractor agreeing not to disclose information gained due to work assignments

Appendix A

MS Word or Adobe PDF in soft and hard copy

Due prior to start of work on contract

COR

Daily Stand Up Planning and Execution

The Contractor shall provide a daily Security operational status report for presentation to and discussion with other IA stakeholders.

3b Verbal Due daily As Designated

Weekly Status Report

A weekly Incident Response, Service Center ticketing and Sensor grid status report and briefing.

3b MS Word, Excel and/or PowerPoint

Due Weekly

BCISO

Designated Mgmt

Monthly Contract Management Report

A report outlining the expenditures, billings, progress, status, and any problems/issues encountered in the performance of this task.

3b MS Word in soft copy

1 week after close of month

COR

BCISO

Monthly Progress Report

A report outlining the monthly IR and Service Center activity and security tool configuration changes and issues and status of all on-going IA projects involving Security Engineering support activity

3b MS Word, Excel and/or PowerPoint

1 week after close of month

COTR

Contract Deliverable Line Items

Data Item Descriptions Task #

(location in the SOW)

Format or Media

Delivery Date

Deliver to Whom

Quality Control Plan

QCP must include a self-inspection plan, an internal staffing plan, and an outline of the procedures that the Contractor will use to maintain quality, timeliness, responsiveness, customer satisfaction, and any other requirements set forth in this solicitation.

3b MS Word 2 weeks after Task Award

COR

BCISO

Tech. Task Leader

Configuration Setting Management

(CSM)

Upon request, assist with review and recommends for changes or exceptions to existing DOI and/or IA Security Baseline settings.

2a

MS Word In soft copy

When request by BCISO or Designee

Tech. Task Leader

Metrics to support Continuous Monitoring

Identify Metrics which support the continuous monitoring activities.

These will be developed in collaboration with DIS director and other staff.

2a, 2b MS Word or Excel As required BCISO

Technical Analysis and Security Review of Security Tools

Review current configurations and provide assessment concerning the State of Security Tools.

Analyze and provide suggested industry standards to improve IA’s security posture.

2a, 2b, 2c, 2d and 2f

MS Word, Excel or

PowerPoint

When request by BCISO or Designee

BCISO

Tech. Task

Leader

SECTION G CONTRACT ADMINISTRATION DATA

All invoices shall be submitted via https://www.ipp.gov on a monthly basis.

G.1 Electronic Invoicing and Payment Requirements - Invoice Processing Platform (IPP) (April 2013)

Payment requests must be submitted electronically through the U. S. Department of the Treasury's Invoice Processing Platform System (IPP).

"Payment request" means any request for contract financing payment or invoice payment by the Contractor. To constitute a proper invoice, the payment request must comply with the requirements identified in the applicable Prompt Payment clause included in the contract, or the clause 52.212-4 Contract Terms and Conditions - Commercial Items included in commercial item contracts. The IPP website address is: https://www.ipp.gov.

Under this contract, the following documents are required to be submitted as an attachment to the IPP invoice:

- A copy of the contractor’s invoice shall be included with the IPP invoice. If no invoice is attached, the Invoice will be rejected;

- List of deliverables;

- Timesheet - Number of hours worked with corresponding labor category and rate information;

- Any additional information requested at the Individual Task Order level.

The Contractor must use the IPP website to register access and use IPP for submitting requests for payment. The Contractor Government Business Point of Contact (as listed in SAM) will receive enrollment instructions via email from the Federal Reserve Bank of Boston (FRBB) within 3 - 5 business days of the contract award date. Contractor assistance with enrollment can be obtained by contacting the IPP Production Helpdesk via email ippgroup@bos.frb.org or phone (866) 973-3131.

If the Contractor is unable to comply with the requirement to use IPP for submitting invoices for payment, the Contractor must submit a waiver request in writing to the Contracting Officer with its proposal or quotation.

(End of Local Clause)

G.2 Federal Holidays

Unless otherwise notified in writing by the CO or COR, no services will be required on the following list of observed federal holidays:

• New Year’s Day - (January 1st)

• Martin Luther King’s Birthday - (3rd Monday in January)

• President’s Day - (3rd Monday in February)

• Memorial Day - (Last Monday in May)

• Independence Day - (July 4th) https://www.ipp.gov/

• Labor Day - (First Monday in September)

• Columbus Day - (2nd Monday in October)

• Veterans Day - (November 11th)

• Thanksgiving Day - (4th Thursday in November)

• Christmas Day - (December 25th)

The Contractor shall observe Inauguration Day as a holiday for Washington DC based Contractor employees. Federal Agencies in the Washington DC metro area are closed on Inauguration Day. However, Inauguration Day is not observed outside of the Washington DC area and Contractor employees in those areas should report to their established duty station.

NOTE: If a Public Holiday (observed on a specific calendar date) occurs on a Saturday, the holiday is observed on the preceding Friday; if the holiday occurs on Sunday, the holiday is observed by the Federal Government on Monday.

If Government facilities are closed nationwide or in specific locations for other than listed holidays by direction of the U.S. Office of Personnel Management, the Office of Management and Budget, Executive Order of the President or other Official Government entity, Contractor staff shall not report to Government facilities (except for positions designated as 24/7). If Government offices close early and federal employees are dismissed, the COR in consultation with the Program Managers and/or the Contracting Officer will make a determination on a case by case basis regarding dismissal of Contractor employees.

G.3 Reporting Matters Involving Fraud, Mismanagement, Waste and Abuse

Anyone who becomes aware of the existence or apparent existence of fraud, waste and abuse in BIA funded programs is encouraged to report such matters to the DOI Inspector General’s Office in writing or on the Inspector General’s Hotline. The toll free number is 1-800-424-5081. All telephone calls will be handled confidentially. One may also fill out an online form at http://www.doi.gov/oig/index.cfm. Additionally, the IG may be contacted through its mailing address:

U.S. Department of the Interior Office of Inspector General 1849 C Street NW - Mail Stop 4428 Washington, D.C. 20240

G.4 52.232-18 Availability of Funds (Apr 1984)

Funds are not presently available for this contract. The Government’s obligation under this contract is contingent upon the availability of appropriated funds from which payment for contract purposes can be made. No legal liability on the part of the Government for any payment may arise until funds are made available to the Contracting Officer for this contract and until the Contractor receives notice of such availability, to be confirmed in writing by the Contracting Officer.

(End of clause)

SECTION H SPECIAL CONTRACT REQUIREMENTS

H.1 Contractor Identification

Each contract employee shall identify themselves as a Contractor under this contract both orally and in writing. All Contractor emails (to include the emails from the Government account) and all other written correspondences, shall state the following in their signature line:

• The name of the company that they are employed by.

• Clearly identify themselves as a contract employee by stating “Government Contractor.”

The above identification requirement also applies to the following:

• Voicemails

• Placards

• Office Name Plates

• Any material produced under this contract, if a name of a Contractor is provided within.

Under no circumstance shall the Contractor state or imply that they are acting on behalf of the Government.

H.2 Policies and Guidance

All work performed by the Contractor must adhere to the policies and guidance in the following manuals:

Federal Policies and Regulations Website

OMB Circular A-130, Management of Federal Information Resources http://www.whitehouse.gov/omb/circulars/a130/a130.html

OMB Circular A-123, Internal Control Systems http://www.whitehouse.gov/omb/circulars/a123/a123.html

OMB Circular A-127, Revised Financial Management Systems http://www.whitehouse.gov/omb/circulars/a127/a127.html

Federal Electronic Mail, Federal Information Processing Standards, Threats & Vulnerabilities http://www.nist.gov/computer-security-portal.cfm

FY 2004 Reporting Instructions for the Federal Information Security Management Act http://www.whitehouse.gov/sites/default/files/omb/assets/omb/memoranda/fy04/m04- 25.pdf

Section 508 Compliance http://www.access-board.gov/508.htm

Privacy Act Policies http://www.whitehouse.gov/omb/memoranda/m01-05.html

The Computer Security Act of 1987 http://www.csrc.nist.gov/csspab/csa_87.txt

Indian Affairs Policies and Procedures Websites

Departmental Manual, 375 DM 19 http://www.doi.gov/archive/nbc/formsmgt/forms/ROB.pdf

Acceptable Use Policy http://www.doi.gov/ethics/docs/internet.html

Network Account Password Policy http://www.bia.gov/cs/groups/public/documents/text/idc-000473.pdf

Media Protection Policy http://www.bia.gov/cs/groups/public/documents/text/idc-000474.pdf

Portable Device User Policy http://www.bia.gov/cs/groups/public/documents/text/idc-000475.pdf

Personal user of Government Resources Policy http://www.bia.gov/cs/groups/public/documents/text/idc-000476.pdf

Help Desk Use Policy http://www.bia.gov/cs/groups/public/documents/text/idc-000477.pdf

Email User Policy http://www.bia.gov/cs/groups/public/documents/text/idc-000478.pdf

Internet User Policy http://www.bia.gov/cs/groups/public/documents/text/idc-000479.pdf

Remote Access http://www.bia.gov/cs/groups/xraca/documents/text/idc009154.pdf

National Institute of Standards and Technology (NIST) Guidelines Websites

SP 800-37: Guide for Applying the Risk Management Framework to Federal Information Systems: A Security Life Cycle Approach http://csrc.nist.gov/publications/nistpubs/800-37-rev1/sp800-37-rev1-final.pdf

SP 800-44: Guidelines on Securing Public Web Servers http://csrc.nist.gov/publications/nistpubs/800-44-ver2/SP800-44v2.pdf

SP 800-47: Security Guide for Interconnecting Information Technology Systems http://csrc.nist.gov/publications/nistpubs/800-47/sp800-47.pdf

SP 800-53: Recommended Security Controls for Federal Information Systems and Organizations http://csrc.nist.gov/publications/nistpubs/800-53-Rev3/sp800-53-rev3-final_updated-errata_05-01-2010.pdf

The Government reserves the right to add to, change and or remove any of policies listed.

H.3 Personnel Performance and Replacement

The Government reserves the right to judge the technical skills of all individuals assigned to this effort and to request a replacement if such is deemed necessary by the Government. The Government reserves the right to accept or reject any proposed individual with written notification.

The Government reserves the right to judge the qualifications and acceptability of any individual proposed by the Contractor for any position, and may require the Contractor to replace an individual whose qualifications and suitability are judged deficient with written notification.

The Government reserves the right to judge the technical skill and competence of the individual and to require the individual’s replacement if the individual’s qualifications or performance are judged deficient at any time with written notification.

For temporary and/or permanent replacement of personnel, the Contractor shall provide a resume for each individual to the Contracting Officer's Representative (COR) of any changes in personnel assignment at least one week (or as mutually agreed upon) prior to making any personnel changes, prior to that individual’s reporting for work on this effort. The Contractor will afford the Government the opportunity to interview the replacement candidate, if requested.

Also, the Contractor personnel must submit necessary information to be issued a clearance prior to reporting for performance.

For temporary and/or permanent replacement of personnel, the Contractor shall provide a resume for each individual to the Contracting Officer's Technical Representative (COR or Federal Project Officer) of any changes in personnel assignment at least two weeks (or as mutually agreed upon) prior to making any personnel changes, prior to that individual’s reporting for work on this effort. The Contractor will afford the Government the opportunity to interview the replacement candidate, if requested. Also, the Contractor personnel must submit necessary information to be issued a clearance prior to reporting for performance.

H.4 Security Requirements

All Contractor personnel will be required to successfully pass a minimum background investigation for any requirement performed under this contract and all Contractor personnel shall comply with Federal laws, regulations, standards, regarding information and information system security. Security clearance consists of the DOI background check, taking the Federal Information Systems Security Awareness Training (FISSA) training and obtaining a security card.

H.5 Use of Government Computer System

All personnel accessing the Government computer systems can expect their computer activities to be monitored. There should be no reasonable expectation of privacy in the use of any Department of the Interior system. The following notice is posted and provided to each individual upon entry into the IA computer system:

“THIS IS A NOTICE OF MONITORING OF DEPARTMENT OF THE INTERIOR

INFORMATION SYSTEMS. This system and all related equipment may be used only for official US Government business and limited personal use authorized in the Department of the Interior Policy on Limited Personal Use of Government Office Equipment. Notwithstanding this or any other policy guidance, this system may not be connected to the Internet, in any way, unless authorized by the Office of the Secretary. Unauthorized use of this computer system will subject you to disciplinary action or other penalties. Use of this system constitutes consent to monitoring for this purpose.”

Property Rights – IA will own the intellectual property rights to any software developed on its behalf and will retain the right to use, modify, reproduce, perform, display, release, or disclose the data in whole or in part for any purpose, or to have or authorize others to do so. Generally, FAR 52.227-14, Rights in Data-General, and its alternates will be used in the contract. However, deviation from this policy may be necessary as circumstances warrant.

IA data may not be removed from premises without COR written authorization.

The Contractor shall not be allowed to keep any IA Trust Data or copies of Trust Data, reports (draft or final copies). At the time of completion of the project, the Contractor will return electronic and hard copy data and documents, which the Contractor created under this Service Contract.

H.6 Dissemination of Contract Performance Information

The Contractor must not publish, permit to be published, or distribute for public consumption, any information, oral or written, concerning the results or conclusions made pursuant to the performance of this contract, without the prior written consent of the Contracting Officer. Two copies of any material proposed to be published or distributed must be submitted to the Contracting Officer for approval.

H.7 Mandatory Requirement for Contractor Return of all DOI-Owned and Leased Computing and Information Storage Equipment

(a) Within sixty (60) days after the end of the contract performance period or after the contract is suspended or terminated by DOI or by the Contractor for any reason; or within a time period approved by DOI, the Contractor must return all DOI-owned and leased computing and information storage equipment.

(b) Within seventy-five (75) days after the end of the contract performance period or after the contract is suspended or terminated by DOI or the Contractor for any reason, the Contractor must provide DOI with Certification of Verified Return of all DOI-Owned and Leased Computing and Information Storage Equipment. This certification must be provided by a third party firm approved by DOI in advance. All costs and resource allocations required for this third party service must be the sole responsibility of the Contractor.

H.8 Disclosure of Information

Information made available to the Contractor by the Government for the performance or administration of this effort shall be used only for those purposes and shall not be used in any other way without the written agreement of the Contracting Officer

If the Contractor is uncertain about the availability or proposed use of information provided for the performance or administration, the Contractor shall consult with the COR regarding use of that information for other purposes.

The Contractor agrees to assume responsibility for protecting the confidentiality of Government records, which are not public information. Each offeror or employee of the Contractor to whom information may be made available or disclosed shall be notified in writing by the Contractor that such information may be disclosed only for a purpose and to the extent authorized herein.

The Contractor assumes responsibility for maintaining knowledge of and compliance with all Federal, state, and local laws, policies, and procedures regarding data confidentiality and privacy, such as the Federal Education Rights to Privacy Act.

All Contractor employees shall sign and submit a copy of the Non-Disclosure Agreement. The Non-Disclosure agreement that will be required to be signed will be provided after award.

The details of any security safeguards that the Contractor may design or develop under this contract are the property of the Government and shall not be published or disclosed in any manner without the Contracting Officer’s written consent. Likewise, the details of any security safeguards that may be revealed to the Contractor by the Government in the course of performances under this contract shall not be published or disclosed in any manner without the Contracting Officer’s written consent. Any information made available in any format shall be used only for the purpose of carrying out the provisions of this contract. Information contained in such materials shall not be divulged or made known in any manner to any person except as may be necessary in the performance of this contract. Disclosure to anyone other than an authorized officer or employee of the Contractor shall require written approval of the Contracting Officer.

Any information with personal identifiers shall be accounted for upon receipt and properly stored before, during and after processing. In addition, all related output shall be given the same level of protection as required for source materials.

The Contractor shall be held liable for any and all damages resulting from any inappropriate disclosure of information/data by its employees or via any system used by the Contractor.

Should the Contractor become aware of the need for additional safeguards, the Contractor must immediately notify the COR.

H.9 Non-Personal Services and Inherently Governmental Functions

Pursuant to FAR 37.1, no personal services shall be performed under this SOW. All work requirements shall flow only from the COR to the Contractor Project Manager. No Contractor employee will be directly supervised by the Government. All individual employee assignments, and daily work direction, shall be given by the applicable Contractor supervisor. If the Contractor believes any Government action or communication has been given that would create a personal services relationship between the Government and any Contractor employee, the Contractor shall promptly notify the Contracting Officer of this communication or action.

Pursuant to FAR 7.5, the Contractor shall not perform any inherently governmental actions under this SOW. No Contractor employee shall hold him or herself out to be a Government employee, agent, or representative. No Contractor employee shall state orally or in writing at any time that he or she is acting on behalf of the Government. In all communications with third parties in connection with this SOW, Contractor employees shall identify themselves as Contractor employees and specify the name of the company for which they work. In all communications with other Government Contractors in connection with this SOW, the Contractor employee shall state that they have no authority to in any way change this SOW and that if the other Contractor believes this communication to be a direction to change their contract, they should notify the Contracting Officer for that contract and not carry out the direction until a clarification has been issued by the Contracting Officer.

The Contractor shall insure that all of its employees working on this SOW are informed of the substance of this article. Nothing in this article shall limit the Government’s rights in any way under the other provisions of this SOW, including those related to the Government’s right to inspect and accept the services to be performed under this SOW. The substance of this article shall be included in all subcontracts at any tier.

H.10 Limitation of Future Contracting

(a) The Contracting Officer has determined that this acquisition may give rise to potential organizational conflicts of interest.

(b) The nature of this conflict is: the development of requirements analyses, alternatives analyses, Independent Government Cost Estimates (IGCEs), cost/benefit analyses, acquisition plans, Statements of Work (SOW), development of solicitation packages, justifications for non-competitive acquisitions, evaluation plans and handbooks, performance measurement plans, technical, business, cost/price proposal evaluation support, protest support, contract administration, and contract close-out support, scope definition, time/scheduling, cost control, quality control and management, human resource planning, communications, risk management, procurement planning, life cycle project management, investment review process (IRB), best practices in the area of program management, performance work statement and in support of OMB Circular A-76 Studies.

(c) The restrictions upon future contracting are as follows:

(1) If the Contractor, under the terms of the contract is required to develop specifications or statements of work that are incorporated into a solicitation, the Contractor shall be ineligible to perform the work described in that solicitation as a prime or first-tier subcontractor under an ensuing IA contract. This restriction shall remain in effect for a reasonable time, as agreed to by the Contracting Officer and the Contractor, sufficient to avoid unfair competitive advantage or potential IA’s (this time shall in no case be less than the duration of the initial contract), IA shall not unilaterally require the Contractor to prepare such specifications or statements of work under any Task Order.

(2) To the extent that the work under this contract requires access to proprietary, business confidential or financial data of other companies, and as long as the data remain proprietary or confidential, the Contractor shall protect the data from unauthorized use and disclosure and agrees not to use them to compete with those other companies.

H.11 Personal Conflicts of Interest and Procurement Integrity

The Contractor shall ensure that all personnel assigned to the contract sign permanent non-disclosure agreements and procurement integrity certifications as required by the Contracting Officer. All personnel assigned any resulting task(s) shall immediately notify the Contracting Officer in writing of any potential conflicts of interest that may be perceived through their performance on the resulting task(s). The Contracting Officer will determine if the particular individual or group of individuals will be excluded from any task(s). In the event such a determination is made, the Contracting Officer will provide immediate oral notification (followed by written notification within five calendar days thereafter) of the individuals and the situation that precludes their performance under the resulting task(s). The Contractor shall immediately (within five calendar days after receipt of oral notification) remove the individual(s) from the task(s) and identify their replacement. Potential organization conflicts of interest issues shall be carefully scrutinized and dealt with in accordance with FAR 9.5 “Organizational and Consultant conflicts of Interest”.

SECTION I CONTRACT CLAUSES

I.1 Clauses by Reference

Clause Title Date 52.202-1 Definitions Nov 2013 52.203-5 Covenant Against Contingent Fees May 2014 52.203-7 Anti-Kickback Procedures May 2014 52.203-17 Contractor Employee Whistleblower Rights and Requirement to

Inform Employees of Whistleblower Rights Apr 2014

52.204-19 Incorporation by Reference of Representations and Certifications

May 2011

52.204-13 System for Award Management Maintenance Oct 2018 52.216-24 Limitation of Government Liability Apr 1984 52.216-25 Contract Definitization Oct 2010 52.232-23 Assignment of Claims May 2014 52.232-18 Availability of Funds Apr 1984 52.232-39 Unenforceability of Unauthorized Obligations Jun 2013 52.232-40 Providing Accelerated Payments to Small Business

Subcontractors Dec 2013

52.233-1 Disputes May 2014 52.243-3 Changes – Time and Materials or Labor Hours Sep 2000 52.244-6 Subcontracts for Commercial Items Aug 2019

I.2 Clauses in Full Text

FAR 52.212-4 Contract Terms and Conditions-Commercial Items, ALT I (Jan 2017)

(a) Inspection/Acceptance.

(1) The Government has the right to inspect and test all materials furnished and services performed under this contract, to the extent practicable at all places and times, including the period of performance, and in any event before acceptance. The Government may also inspect the plant or plants of the Contractor or any subcontractor engaged in contract performance. The Government will perform inspections and tests in a manner that will not unduly delay the work.

(2) If the Government performs inspection or tests on the premises of the Contractor or a subcontractor, the Contractor shall furnish and shall require subcontractors to furnish all reasonable facilities and assistance for the safe and convenient performance of these duties.

(3) Unless otherwise specified in the contract, the Government will accept or reject services and materials at the place of delivery as promptly as practicable after delivery, and they will be presumed accepted 60 days after the date of delivery, unless accepted earlier.

(4) At any time during contract performance, but not later than 6 months (or such other time as may be specified in the contract) after acceptance of the services or materials last delivered under this contract, the Government may require the Contractor to replace or correct services or materials that at time of delivery failed to meet contract requirements.