Sol_140G0222Q0144.pdf

140G0222Q0144

1. REQUEST NO.

5a. ISSUED BY

NAME

a. NAME

c. STREET ADDRESS

d. CITY

10. PLEASE FURNISH QUOTATIONS TO

THE ISSUING OFFICE IN BLOCK 5a ON

OR BEFORE CLOSE OF BUSINESS (Date)

2. DATE ISSUED 3. REQUISITION/PURCHASE REQUEST NO. 4. CERT. FOR NAT. DEF.

UNDER BDSA REG. 2

AND/OR DMS REG.1

RATING

6. DELIVERY BY (Date)

7. DELIVERY

9. DESTINATION

a. NAME OF CONSIGNEE

b. STREET ADDRESS

PAGE OF PAGES

5b. FOR INFORMATION CALL: (No collect calls)

TELEPHONE NUMBER

AREA CODE NUMBER

8. TO:

b. COMPANY

e. STATE f. ZIP CODE

c. CITY

d. STATE e. ZIP CODE

IMPORTANT: This is a request for information, and quotations furnished are not offers. If you are unable to quote, please so indicate on this form and return it to the address in Block 5a. This request does not commit the Government to pay any costs incurred in the preparation of the submission of this quotation or to contract for supplies or services. Supplies are of domestic origin unless otherwise indicated by quoter. Any representations and/or certifications attached to this Request for Quotations must be completed by the quoter.

11. SCHEDULE (Include applicable Federal, State and local taxes)

THIS RFQ

REQUEST FOR QUOTATION

(THIS IS NOT AN ORDER)

IS IS NOT A SMALL BUSINESS SET ASIDEX

07/20/2022 0040582350

1 54

PO BOX 25046

204 DENVER FEDERAL CENTER

DENVER CO 80225-0046

USGS OAG DENVER ACQUISITION BRANCH

30 Days After Receipt of Order

USGS Fort Collins Science Center

2150 CENTRE AVENUE, BUILDING C

FORT COLLINS

CO 80526-8118

303 236-9327Lisa Williams

07/29/2022 1430 MD

FOB DESTINATION

OTHER

(See Schedule)X

ITEM NO.

(a)

SUPPLIES/SERVICES

(b)

QUANTITY

(c)

UNIT

(d)

UNIT PRICE

(e)

AMOUNT

(f)

Bio-Rad Laboratories QX200 AutoDG Droplet Digital PCR System

1. This solicitation is issued as a Request for Quotations (RFQ). Submit written quotations on RFQ Number 140G0222Q0144. This solicitation will utilize the policies in the Federal Acquisition Regulations (FAR) Part 12, Acquisition of Commercial Products and Commercial Services, and in conjunction with the policies and procedures for evaluation, and award prescribed in FAR Part

13.1 Simplified Procedures, as appropriate for

this acquisition.

2. The solicitation document and incorporated provisions and clauses are those in effect Continued ...

12. DISCOUNT FOR PROMPT PAYMENT

a. 10 CALENDAR DAYS (%) b. 20 CALENDAR DAYS (%) c. 30 CALENDAR DAYS (%) d. CALENDAR DAYS

NUMBER PERCENTAGE

NOTE: Additional provisions and representations

13. NAME AND ADDRESS OF QUOTER

b. STREET ADDRESS

c. COUNTY

d. CITY e. STATE f. ZIP CODE

14. SIGNATURE OF PERSON AUTHORIZED TO

SIGN QUOTATION

16. SIGNER

a. NAME (Type or print)

c. TITLE (Type or print)

a. NAME OF QUOTER

AREA CODE

NUMBER

15. DATE OF QUOTATION

b. TELEPHONE are are not attached

AUTHORIZED FOR LOCAL REPRODUCTION

Previous edition not usable

STANDARD FORM 18 (REV. 6-95)

Prescribed by GSA - FAR (48 CFR) 53.215-1(a)

ITEM NO. SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

NAME OF OFFEROR OR CONTRACTOR

2 54

CONTINUATION SHEET

REFERENCE NO. OF DOCUMENT BEING CONTINUED PAGE OF

(A) (B) (C) (D) (E) (F)

140G0222Q0144 through Federal Acquisition Circular (FAC)

2022-06.

3. The solicitation is a Small Business

Set-Aside. The North American Industry

Classification System (NAICS) code is 334516

(Analytical Laboratory Instrument Manufacturing) and the size standard is 1,000 employees.

4. Vendors are required to be registered in

System for Award Management (SAM) when submitting an offer or quotation. Register at https://www.sam.gov/index.html prior to submitting your quotation. See FAR provision

52.204-7(b)(1).

5. Please download attached Solicitation

140G0222Q0144 for all Clauses and Provisions.

00010 Bio-Rad Laboratories QX200 AutoDG Droplet Digital 1 EA

PCR System per the attached Brand Name

Specifications-Requirements and Terms and

Conditions.

Delivery: 30 Days After Receipt of Order

NSN 7540-01-152-8067 OPTIONAL FORM 336 (4-86)

RFQ 140G0222Q0144

Table of Contents

Brand Name Specifications/Requirements FISMA Information Technology Security Requirements Summary INTERNET PROTOCOL version 6 (June 2012) DOI ELECTRONIC INVOICING Electronic Invoicing and Payment Requirements - Invoice Processing Platform (IPP) (April 2013) GS0199 Prevention of Malicious Code (JUN 2018) GS0339 Green Acquisition (JUL 2018) GS1131 Unilateral Deobligation of Unexpended Funds. (MAY 2013) 52.212-5 Contract Terms and Conditions Required To Implement Statutes or Executive Orders - Commercial Products and Commercial Services. (MAY 2022) 52.252-2 Clauses Incorporated by Reference. (FEB 1998) GS2101 Inquiries (FEB 2007) GS2115 Independent Review of Protests to the Agency (Jul 2001) 52.204-20 Predecessor of Offeror. (AUG 2020) 52.204-24 Representation Regarding Certain Telecommunications and Video Surveillance Services or Equipment. (NOV 2021) 52.204-26 Covered Telecommunications Equipment or Services-Representation. (OCT 2020) 52.209-11 Representation by Corporations Regarding Delinquent Tax Liability or a Felony Conviction under any Federal Law. (FEB 2016) 52.212-3 Offeror Representations and Certifications-Commercial Products and Commercial Services.

(MAY 2022)

52.219-1 Small Business Program Representations. (SEP 2021) 52.222-22 Previous Contracts and Compliance Reports. (FEB 1999) 52.222-25 Affirmative Action Compliance. (APR 1984) 52.233-2 Service of Protest Department of the Interior (Jul 1996) (Deviation) Basis for Award Instructions to Vendors Electronic Submission of Quotations – Required Questions – Cutoff 52.252-1 Solicitation Provisions Incorporated by Reference. (FEB 1998)

Clauses:

Brand Name Specifications/Requirements

A. Introduction:

The United States Geological Survey (USGS), The Molecular Ecology Laboratory at Fort Collins Science Center, Fort Collins, CO has a requirement to purchase one (1) new Bio-Rad Laboratories a QX200 AutoDG Droplet Digital PCR System.

B. Background:

The QX200 AutoDG Droplet Digital PCR System will be used in environmental DNA (eDNA) studies to determine the presence/absence of species in water samples. Digital PCR is an exciting new technological advancement that provided ultrasensitive and absolute nucleic acid quantification without the need for standard curves. It is particularly useful for low-abundance targets like is typically encountered in eDNA studies. Having an automated droplet generator eliminates user-to-user variability and provides more consistent droplet counts across users and plates.

C. Manufacturer:

Bio-Rad Laboratories 1000 Alfred Nobel Dr.

Hercules, CA 94547-1803 www.bio-rad.com

D. Brand Name Specifications: The Contractor shall provide the following brand name Bio-Rad Laboratories a QX200 AutoDG Droplet Digital PCR System:

1: Part Number: 1864100 - QX200 AutoDG Droplet Digital PCR System (1 Each)

AutoDG Droplet Digital PCR System for EvaGreen or probe-based digital PCR applications, includes Automated Droplet Generator, QX200 Droplet Reader, computer, and QX Manager Software, Standard Edition.

2: Part Number: 1863004 - ddPCR™ Droplet Reader Oil (1 Each):

2 L (2 x 1 L), oil for use with droplet reader in the QX200™/QX100™ Droplet Digital™ PCR Systems.

3. Part Number: 12001925 - ddPCR™ 96-Well Plates (1 Each):

Pkg of 25, clear well/clear shell semiskirted plates, for use with QX200™/QX100™ or QX200™ AutoDG™ Droplet Digital™ PCR Systems.

4. Part Number: 1814040 - PCR Plate Heat Seal, foil, pierceable (1 Each):

Pkg of 100, foil seals for PCR and QX200/QX100 Droplet Digital PCR System applications, for use with PX1 PCR Plate Sealer.

5. Part Number: 1863024 - ddPCR Supermix for Probes (No dUTP) (1 Each):

5 ml (5 x 1 ml), 2x supermix, for use in sample preparation for droplet generation in the QX200/QX100 Droplet Digital PCR Systems.

http://www.bio-rad.com/

6. Part Number: 1864108 - DG32 Automated Droplet Generator Cartridges (1 Each):

Pkg of 30, cartridges for use with the Automated Droplet Generator in the QX200 AutoDG Droplet Digital PCR System.

7. Part Number: 1864110 - Automated Droplet Generation Oil for Probes (1 Each):

140 ml, oil for use with the Automated Droplet Generator for probe-based detection with the QX200 AutoDG Droplet Digital PCR System.

8. Part Number: 1864120 - Pipet Tips for the AutoDG System (1 Each):

Pkg of 20, boxes of 96 each, pipet tips for use with the Automated Droplet Generator in the QX200 AutoDG Droplet Digital PCR System.

9. Part Number: 1864125 - Pipet Tip Waste Bins for the AutoDG System (1 Each):

Pkg of 10, pipet tip waste bins for use with the Automated Droplet Generator in the QX200 AutoDG Droplet Digital PCR System.

10. Part Number: 1840197 - 96–Deep Well Reaction Module (1 Each):

96--deep well reaction module, fits C1000, C1000 Touch, and S1000 thermal cyclers, gradient enabled.

11. Part Number: 1814000 - PX1 PCR Plate Sealer (1 Each):

PCR plate sealer, includes heat sealing instrument, plate support block that holds 96-well and 384-well plates, sealing frame, power cord.

E. Requirements – Product Requirements, ICT Accessibility Requirements, and Delivery:

1. Product Requirements:

System should include:

o an automated droplet generator o droplet reader o computer o software o plate sealer o 96-Deep Well head for a C1000 Touch Thermal Cycler.

The automated droplet generator should:

o Generates droplets for 96 ddPCR reactions in under 45 minutes o Partition a 20 µL PCR reaction into 20,000 nanoliter-sized droplets

Can analyze both Taqman Hydrolysis Probes and EvaGreen Assays Able to process samples up to 96 samples in one run Accurately count target copies when multiple target copies are distributed in a droplet.

Droplets are singulated in the detector and each droplet is measured for the presence/absence of the target. Only droplets fitting strict QC criteria are used for concentration measurement.

Analysis software should:

o Display fluorescence amplitude values per droplet o Show multiplex data for up to two targets per fluorophore, with up to two fluorophores o Compute concentration (copies/ µL and copies/20 µL reaction o Calculate copy number for target of interest o Be able to merge results from replicate wells o Allow data to be exported as a .csv file

2. ICT Accessibility Requirements:

Must conform to the Revised Section 508 Standards in accordance with ICT Accessibility Requirements Statement per the Revised Section 508 of the Rehabilitation Act as follows:

Section 508 of the Rehabilitation Act, as amended by the Workforce Investment Act of 1998 (P.L. 105-

220) requires that when Federal agencies develop, procure, maintain, or use information and communication technology (ICT), it shall be accessible to people with disabilities. Federal employees and members of the public who have disabilities must have access to, and use of, information and data that is comparable to people without disabilities.

1. Products, platforms and services delivered as part of the brand name that are ICT, or contain ICT, must conform to the Revised 508 Standards, which are located at 36 C.F.R. § 1194.1 & Apps. A, C & D, and available at https://www.access-board.gov/guidelines-andstandards/communications-and-it/about-the-ict-refresh/final-rule/text-of-the-standards-and-guidelines

Item that contains ICT: Bio-Rad Laboratories a QX200 AutoDG Droplet Digital PCR System:

Applicable Functional Performance Criteria: All functional performance criteria apply when using an alternative design or technology that achieves substantially equivalent or greater accessibility and usability by individuals with disabilities, than would be provided by conformance to one or more of the requirements in Chapters 4-6 of the Revised 508 Standards, or when Chapters 4-6 do not address one or more functions of ICT.

Applicable requirements for software features and components: All WCAG Level AA Success Criteria, 502 Interoperability with Assistive Technology, 503 Application

Applicable requirements for hardware features and components: All requirements apply

Applicable support services and documentation: All requirements apply

General Exceptions

Hardware:

Technical Criteria:

E206.1 General - Where components of ICT are hardware and transmit information or have a user interface, such components shall conform to the requirements in Chapter 4.

E401.1 Scope - The requirements of Chapter 4 shall apply to ICT that is hardware where required by 508 Chapter 2 (Scoping Requirements), 255 Chapter 2 (Scoping Requirements), and where otherwise referenced in any other chapter of the Revised 508 Standards or Revised 255 Guidelines.

E405.1 General - The same degree of privacy of input and output shall be provided to all individuals. When speech output required by 402.2 is enabled, the screen shall not blank automatically.

E406.1 General - Where data connections used for input and output are provided, at least one of each type of connection shall conform to industry standard non-proprietary formats.

E407.1 General - E407.2 Contrast - Where provided, keys and controls shall contrast visually from background surfaces. Characters and symbols shall contrast visually from background surfaces with either https://www.access-board.gov/guidelines-andstandards/communications-and-it/about-the-ict-refresh/final-rule/text-of-the-standards-and-guidelines https://www.access-board.gov/guidelines-andstandards/communications-and-it/about-the-ict-refresh/final-rule/text-of-the-standards-and-guidelines light characters or symbols on a dark background or dark characters or symbols on a light background.

E407.3.1 Tactilely Discernible - Input controls shall be operable by touch and tactilely discernible without activation.

E407.3.2 Alphabetic Keys - Where provided, individual alphabetic keys shall be arranged in a QWERTY-based keyboard layout and the “F” and “J” keys shall be tactility distinct from the other keys.

E407.3.3 Numeric Keys - Where provided, numeric keys shall be arranged in a 12-key ascending or descending keypad layout. The number five key shall be tactilely distinct from the other keys.

Where the ICT provides an alphabetic overlay on numeric keys, the relationships between letters and digits shall conform to ITU-T Recommendation E.161 (incorporated by reference, see 702.7.1).

407.8 Reach Height and Depth - At least one of each type of operable part of stationary ICT shall be at a height conforming to 407.8.2 or 407.8.3 according to its position established by the vertical reference plane specified in 407.8.1 for a side reach or a forward reach. Operable parts used with speech output required by 402.2 shall not be the only type of operable part complying with 407.8 unless that part is the only operable part of its type.

407.8.1 Vertical Reference Plane - Operable parts shall be positioned for a side reach or a forward reach determined with respect to a vertical reference plane. The vertical reference plane shall be located in conformance to 407.8.2 or 407.8.3.

407.8.1.1 Vertical Plane for Side Reach - Where a side reach is provided, the vertical reference plane shall be 48 inches (1220 mm) long minimum.

407.8.1.2 Vertical Plane for Forward Reach - Where a forward reach is provided, the vertical reference plane shall be 30 inches (760 mm) long minimum.

407.8.2 Side Reach - Operable parts of ICT providing a side reach shall conform to 407.8.2.1 or

407.8.2.2. The vertical reference plane shall be centered on the operable part and placed at the leading edge of the maximum protrusion of the ICT within the length of the vertical reference plane. Where a side reach requires a reach over a portion of the ICT, the height of that portion of the ICT shall be 34 inches (865 mm) maximum.

407.8.2.1 Unobstructed Side Reach - Where the operable part is located 10 inches (255 mm) or less beyond the vertical reference plane, the operable part shall be 48 inches (1220 mm) high maximum and 15 inches (380 mm) high minimum above the floor.

407.8.2.2 Obstructed Side Reach - Where the operable part is located more than 10 inches (255 mm), but not more than 24 inches (610 mm), beyond the vertical reference plane, the height of the operable part shall be 46 inches (1170 mm) high maximum and 15 inches (380 mm) high minimum above the floor. The operable part shall not be located more than 24 inches (610 mm) beyond the vertical reference plane.

407.8.3 Forward Reach - Operable parts of ICT providing a forward reach shall conform to

407.8.3.1 or 407.8.3.2. The vertical reference plane shall be centered, and intersect with, the operable part. Where a forward reach allows a reach over a portion of the ICT, the height of that portion of the ICT shall be 34 inches (865 mm) maximum.

407.8.3.1 Unobstructed Forward Reach - Where the operable part is located at the leading edge of the maximum protrusion within the length of the vertical reference plane of the ICT, the operable part shall be 48 inches (1220 mm) high maximum and 15 inches (380 mm) high minimum above the floor.

407.8.3.2 Obstructed Forward Reach - Where the operable part is located beyond the leading edge of the maximum protrusion within the length of the vertical reference plane, the operable part shall conform to 407.8.3.2. The maximum allowable forward reach to an operable part shall be 25 inches (635 mm).

407.8.3.2.1 Operable Part Height for ICT With Obstructed Forward Reach - The height of the operable part shall conform to Table 407.8.3.2.1.

407.8.3.2.2 Knee and Toe Space under ICT with Obstructed Forward Reach - Knee and toe space under ICT shall be 27 inches (685 mm) high minimum, 25 inches (635 mm) deep maximum, and 30 inches (760 mm) wide minimum and shall be clear of obstructions.

E408.2 Visibility - Where stationary ICT provides one or more display screens, at least one of each type of display screen shall be visible from a point located 40 inches (1015 mm) above the floor space where the display screen is viewed.

E409.1 General - Where provided, status indicators shall be discernible visually and by touch or sound.

E410.1 General - Where provided, color coding shall not be used as the only means of conveying information, indicating an action, prompting a response, or distinguishing a visual element.

Software

QX Manager Software

Technical Criteria:

E207.1 General - Where components of ICT are software and transmit information or have a user interface, such components shall conform to E207 and the requirements in Chapter 5 E207.2 WCAG Conformance - User interface components, as well as the content of platforms and applications, shall conform to Level A and Level AA Success Criteria and Conformance Requirements in WCAG 2.0 (incorporated by reference, see 702.10.1).

E207.2.1 Word Substitution - When Applying WCAG to Non-Web Software For non-Web software, wherever the term “Web page” or “page” appears in WCAG 2.0 Level A and AA Success Criteria and Conformance Requirements, the term “software” shall be substituted for the terms “Web page” and “page”. In addition, in Success Criterion in 1.4.2, the phrase “in software” shall be substituted for the phrase “on a Web page.”

E207.3 Complete Process for Non-Web Software - Where non-Web software requires multiple steps to accomplish an activity, all software related to the activity to be accomplished shall conform to WCAG 2.0 as specified in E207.2.

E501.1 Scope - Where Web applications do not have access to platform accessibility services and do not include components that have access to platform accessibility services, they shall not be required to conform to 502 or 503 provided that they conform to Level A and Level AA Success Criteria and Conformance Requirements in WCAG 2.0 (incorporated by reference, see 702.10.1).

E502.1 General - Software shall interoperate with assistive technology and shall conform to 502.

E502.2 Documented Accessibility Features - Software with platform features defined in platform documentation as accessibility features shall conform to 502.2.

E502.3 Accessibility Services - Platform software and software tools that are provided by the platform developer shall provide a documented set of accessibility services that support applications running on the platform to interoperate with assistive technology and shall conform to

502.3. Applications that are also platforms shall expose the underlying platform accessibility services or implement other documented accessibility services.

E502.4 Platform Accessibility Features - Platforms and platform software shall conform to the requirements in ANSI/HFES 200.2, Human Factors Engineering of Software User Interfaces — Part 2: Accessibility (2008) (incorporated by reference, see 702.4.1) listed below:

A. Section 9.3.3 Enable sequential entry of multiple (chorded) keystrokes;

B. Section 9.3.4 Provide adjustment of delay before key acceptance;

C. Section 9.3.5 Provide adjustment of same-key double-strike acceptance;

D. Section 10.6.7 Allow users to choose visual alternative for audio output;

E. Section 10.6.8 Synchronize audio equivalents for visual events;

F. Section 10.6.9 Provide speech output services; and G. Section 10.7.1 Display any captions provided.

503.1 General - Applications shall conform to 503.

503.2 User Preferences - Applications shall permit user preferences from platform settings for color, contrast, font type, font size, and focus cursor.

ICT Support and Services

Technical Criteria:

E208.1 General - Where an agency provides support documentation or services for ICT, such documentation and services shall conform to the requirements in Chapter 6.

E601.1 Scope - The technical requirements in Chapter 6 shall apply to ICT support documentation and services where required by 508 Chapter 2 (Scoping Requirements), 255 Chapter 2 (Scoping Requirements), and where otherwise referenced in any other chapter of the Revised 508 Standards or Revised 255 Guidelines.

E602.1 General - Documentation that supports the use of ICT shall conform to 602.

E602.2 Accessibility and Compatibility Features - Documentation shall list and explain how to use the accessibility and compatibility features required by Chapters 4 and 5. Documentation shall include accessibility features that are built-in and accessibility features that provide compatibility with assistive technology.

E602.3 Electronic Support Documentation - Documentation in electronic format, including Web-based self-service support, shall conform to Level A and Level AA Success Criteria and Conformance Requirements in WCAG 2.0 (incorporated by reference, see 702.10.1).

E602.4 Alternate Formats for Non-Electronic Support Documentation - Where support documentation is only provided in non-electronic formats, alternate formats usable by individuals with disabilities shall be provided upon request.

E602.3 Electronic Support Documentation - Documentation in electronic format, including Web-based self-service support, shall conform to Level A and Level AA Success Criteria and Conformance Requirements in WCAG 2.0 (incorporated by reference, see 702.10.1).

E602.4 Alternate Formats for Non-Electronic Support Documentation - Where support documentation is only provided in non-electronic formats, alternate formats usable by individuals with disabilities shall be provided upon request.

E603.1 General - ICT support services including, but not limited to, help desks, call centers, training services, and automated self-service technical support, shall conform to 603.

E603.2 Information on Accessibility and Compatibility Features - ICT support services shall include information on the accessibility and compatibility features required by 602.2.

E603.3 Accommodation of Communication Needs - Support services shall be provided directly to the user or through a referral to a point of contact. Such ICT support services shall accommodate the communication needs of individuals with disabilities.

Functional Performance Criteria:

301.1 Scope - The requirements of Chapter 3 shall apply to ICT where required by 508 Chapter 2 (Scoping Requirements), 255 Chapter 2 (Scoping Requirements), and where otherwise referenced in any other chapter of the Revised 508 Standards or Revised 255 Guidelines.

302.1 Without Vision - Where a visual mode of operation is provided, ICT shall provide at least one mode of operation that does not require user vision.

302.2 With Limited Vision - Where a visual mode of operation is provided, ICT shall provide at least one mode of operation that enables users to make use of limited vision.

302.3 Without Perception of Color - Where a visual mode of operation is provided, ICT shall provide at least one visual mode of operation that does not require user perception of color.

302.4 Without Hearing - Where an audible mode of operation is provided, ICT shall provide at least one mode of operation that does not require user hearing.

302.5 With Limited Hearing - Where an audible mode of operation is provided, ICT shall provide at least one mode of operation that enables users to make use of limited hearing.

302.6 Without Speech - Where speech is used for input, control, or operation, ICT shall provide at least one mode of operation that does not require user speech.

302.7 With Limited Manipulation - Where a manual mode of operation is provided, ICT shall provide at least one mode of operation that does not require fine motor control or simultaneous manual operations.

302.8 With Limited Reach and Strength - Where a manual mode of operation is provided, ICT shall provide at least one mode of operation that is operable with limited reach and limited strength.

302.9 With Limited Language, Cognitive, and Learning Abilities - ICT shall provide features making its use by individuals with limited cognitive, language, and learning abilities simpler and easier.

3. Delivery:

The products shall be delivered FOB Destination to:

Fort Collins Science Center 2150 Center Ave, Bldg C Fort Collins, CO 80526

FISMA Information Technology Security Requirements Summary

COTS

Hardware or Software

Development or Maintenance of Custom Applications

Outsourced IT Services or On-site Support

Requirements herein are incorporated as part the Statement of Work/ Performance Work Statement:

1 N/A Background Investigations. The Contractor shall perform in accordance with clause “Security Requirements: Facility Access and Information Technology.”

2 N/A

Contractor will have access to Privacy Act System of Records - Work under this contract will involve design, development or operation of (access to) system(s) of records containing personal information protected by the

Non-disclosure Agreement. Prior to receiving access to USGS computers, contractor employees shall be required to sign nondisclosure or other system security agreements, depending on the systems to be used and level of access granted.

Applies whenever any contractor employee has unsupervised access to a USGS system (even if only basic network, internet or email or will develop custom applications) such as:

• User Access to USGS IT Systems known to contain sensitive or proprietary data

• IT Support services (greater than user access)

• Development or Maintenance of Custom

Applications

• On-site contractor support and management of IT system

• Off-site contractor Oversight and Management of IT

System

• IT Security Services

Privacy Act System: [Identify covered system(s) to which the contractor may have access]

Work to be performed: [Summarize nature of the contractor's use of such records, such as]

COTS

Hardware or Software

Development or Maintenance of Custom Applications

Outsourced IT Services or On-site Support

Requirements herein are incorporated as part the Statement of Work/ Performance Work Statement:

Privacy Act (5 U.S.C. Section 552a).

User-level access to system containing protected records

Operation or maintenance of Privacy Act System of records or computers hosting such system

Design or modification of a Privacy Act system of records]

The contractor is not required or permitted to respond to requests for Privacy Act data or to make decisions about releases of data under the Act.

Contractor shall ensure its employees are instructed to safeguard against improper use or release of such data and advise them that violation of the Act may involve criminal penalties. The contractor will comply with FAR clause 52.224-2, Privacy Act, incorporated herein by reference and with DOI Privacy Act regulations at 43 CFR 2, Subpart D

3 N/A Training. The Contractor shall perform in accordance with clause “Security Requirements: Facility Access and Information Technology” - Contractor employees must successfully complete DOI’s end-user computer security awareness training prior to being granted access to DOI data or being issued a user account.

Training must be renewed annually. Additionally, the contract employees must sign a Statement of Responsibility (SOR) that states they have read the appropriate Rules of Behavior and other applicable Information security policies.

COTS

Hardware or Software

Development or Maintenance of Custom Applications

Outsourced IT Services or On-site Support

Requirements herein are incorporated as part the Statement of Work/ Performance Work Statement:

4 N/A Personnel Changes. The Contractor shall perform in accordance with clause “Security Requirements:

Facility Access and Information Technology” - The contractor must notify the COR immediately when an employee working on a DOI system is reassigned or leaves the contractor’s employ.

Applies whenever any contractor employee has unsupervised access to a USGS system (even if only basic network, internet or email or will develop custom applications) such as:

• User Access to USGS IT Systems known to contain sensitive or proprietary data

• IT Support services (greater than user access)

• Development or Maintenance of Custom

Applications *

• On-site contractor support and management of IT system

• Off-site contractor Oversight and Management of IT

System

• IT Security Services *

*May not be applicable for off-site performance.

5 N/A Contractor Location. The Contractor shall perform in accordance with clause “Security Requirements:

Facility Access and Information Technology.”

Applies whenever any contractor employee has unsupervised access to a USGS system (even if only basic network, internet or email or will develop custom applications) such as:

• User Access to USGS IT Systems known to contain sensitive or proprietary data

• IT Support services (greater than user access)

• Development or Maintenance of Custom

Applications

• On-site contractor support and management of IT system

• Off-site contractor Oversight and Management of IT

System

• IT Security Services

No portion of the services to be performed hereunder may be performed outside the United States without the express written permission of the Contracting Officer.

COTS

Hardware or Software

Development or Maintenance of Custom Applications

Outsourced IT Services or On-site Support

Requirements herein are incorporated as part the Statement of Work/ Performance Work Statement:

If services are proposed to be performed abroad, the Contractor shall provide an acceptable security plan that addresses mitigation of problems related to communication, control, and protecting the confidentiality, integrity, and availability of IT systems and information.

A Security Plan Template is available upon request from the Contracting Officer.

6 N/A N/A Applicable Standards. The Contractor shall perform in accordance with clause “Security Requirements:

Facility Access and Information Technology” - Contractor must follow the DOI System Development Life Cycle (SDLC), NIST SP 800-64 and the DOI SDLC Security Integration Guide.

7 N/A Asset Valuation-Security Categorization: The Contractor shall perform in accordance with clause “Security Requirements: Facility Access and Information Technology.”

User Access to USGS IT Systems – The Government is responsible for security categorization on USGS systems to which the Contractor may have access under this contract.

IT Support Services greater than User-Level Services Choose one:

The Government is responsible for security categorization on USGS systems to which the Contractor may have access under this contract.

- The Government has defined the [insert name of system to be developed, operated or maintained by the contractor] to be a [Major Application], [Minor Application] or [General support system] as defined in OMB Circular A- 130, Appendix III and NIST SP800-53. The following risk and sensitivity levels have been assigned based on the FIPS 199 and the NIST SP 800-60.

Mission impact:

Data sensitivity:

Risk level:

Bureau/departmental/national criticality:

https://insight.usgs.gov/aei/offices/oa/oag/AOP/guidefordevelopingsecurityplans.pdf

COTS

Hardware or Software

Development or Maintenance of Custom Applications

Outsourced IT Services or On-site Support

Requirements herein are incorporated as part the Statement of Work/ Performance Work Statement:

Off-Site Oversight and Management of IT System- The Contractor shall use the FIPS 199 and the NIST SP 800- 60 to determine information types and security categorization based on mission impact, data sensitivity, risk level, and bureau / departmental / national criticality for Contractor-owned and operated systems used to provide services under this contract.

Solicitations must include either the complete publication or a reference to public facilities, such as a website or office, where it may be accessed.

IT Security Services - Applies only if the purpose of the contract includes obtaining asset valuation services.

The Contractor shall use the FIPS 199 and the NIST SP 800- 60 to determine information types and security categorization based on mission impact, data sensitivity, risk level, and bureau / departmental / national criticality for Contractor-owned and operated systems used to provide services under this contract.

Solicitations must include either the complete publication or a reference to public facilities, such as a website or office, where it may be accessed.

The Government shall be granted unlimited rights in software or data produced hereunder as described in FAR clause 52.227-17, Rights in Data— Special Works, incorporated by reference herein.

Select either COTS or custom software language as applicable. If both apply, identify software/data deliverables governed by each clause.

Property Rights.

1. For open market contracts, the Government's rights in software delivered hereunder shall be as described in software developer's commercial software license agreement or the clause FAR 52.227-19, Commercial Computer Software- Restricted Rights, whichever is greater.

9 N/A Independent Verification and Validation (IV&V). The Government is responsible for independent software verification and validation prior to being moved into production.

On-Site Contractor Support and Management of IT System Choose one:

COTS

Hardware or Software

Development or Maintenance of Custom Applications

Outsourced IT Services or On-site Support

Requirements herein are incorporated as part the Statement of Work/ Performance Work Statement:

Software will be independently verified and validated by the Government or another selected contractor prior to being moved into production.

Contractor will ensure that independent verification and validation is performed on software deployed on contractor managed systems containing USGS data, in accordance with DOI SDLC Security Integration Guide

Off-Site Contractor Operation and Management of IT System- Contractor will ensure that independent verification and validation is performed on software deployed on contractor managed systems containing USGS data, in accordance with DOI SDLC Security Integration Guide

IT Security Service - Applies only if the purpose of the contract includes obtaining IV&V services.

10 N/A Applies if the purpose of the contract includes obtaining C&A services.

Certification & Accreditation.

User Access to USGS IT Systems or IT Supports Services (Greater than User Access Certification and Accreditation on USGS systems to which the Contractor may have access under this contract will be conducted by the Government or another of its contractors.

Development or Maintenance of Custom Applications The contractor will perform Certification and Accreditation (C&A) services on the application developed or maintained hereunder prior to going into production. The application must be re-accredited every three years or whenever there is a major change that affects security. C&A documents will be provided to the COR in both hard copy and electronic forms. The contractor must follow NIST SP 800-37, 800-18, 800-30, 800-60, 800-53A, Federal Information Processing Standard (FIPS) 199 and 200, the associated DOI guides/templates, the DOI Security Test & Evaluation (ST&E) Guide, and the DOI Privacy Impact Assessment. NIST documents are available on the internet at http://csrc.nist.gov/publications/nistpubs/ FIPS documents are available on the internet at

COTS

Hardware or Software

Development or Maintenance of Custom Applications

Outsourced IT Services or On-site Support

Requirements herein are incorporated as part the Statement of Work/ Performance Work Statement:

http://csrc.nist.gov/publications/nistpubs/. The contractor may request copies of DOI documents by contacting the Contracting Officer. The government reserves the right to conduct the ST&E using either Government personnel or an independent contractor.

The contractor will take immediate and timely action to correct or mitigate any weaknesses discovered as necessary to bring the application or system into compliance with the above requirement.

On-Site Contractor Support and Management of IT System or Off- Site Contractor Operation and Management of IT System The Contractor must maintain systems that are compliant with NIST SP 800-18, 800-30, 800-37, 800-53A, 800-60, Federal Information Processing Standard (FIPS) 199 and 200, the associated DOI guides/templates, the DOI Security Test & Evaluation (ST&E) Guide, and the DOI Privacy Impact Assessment. As required by the above, Major Applications and General Support Systems shall be certified and accredited (C&A) prior to going into production and re-accredited every three years or whenever there is a major change that affects security.

C&A documents will be provided to the COR in both hard copy and electronic forms. NIST documents are available on the internet at http://csrc.nist.gov/publications/nistpubs/. The contractor may request copies of DOI documents by contacting the Contracting Officer. The government will reserve the right to conduct the ST&E, using either Government personnel or an independent contractor. The contractor will take immediate and timely action to correct or mitigate any weaknesses discovered as necessary to bring the application or system into compliance with the above requirement.

11 N/A for

COTS HW &

SW, User Access to

USGS IT

Systems (other than IT services), IT Support Services (User Level or greater access)

N/A Internet Logon Banner. The Contractor shall perform in accordance with clause “Security Requirements: Facility Access and Information Technology.”

Development or Maintenance of Custom Applications OR On-Site Contractor Support and Management of IT System OR Off-site Contractor Oversight and Management of IT System- Web-based applications developed or maintained under this contract must contain a USGS approved logon

COTS

Hardware or Software

Development or Maintenance of Custom Applications

Outsourced IT Services or On-site Support

Requirements herein are incorporated as part the Statement of Work/ Performance Work Statement:

banner:

https://portal.doi.net/CIO/ITPMgmt/Documents/IT Standards/IT Security/DOI Security Control Standards (based on NIST SP 800-53 Revision 3)/Access Control v1.4.pdf

12 N/A Incident Reporting. The Contractor shall perform in accordance with contract clause “Security Requirements: Facility Access and Information Technology” - The contractor must report computer security incidents affecting DOI data or systems in accordance with the DOI Computer Incident Response Guide.

13 Quality Control. All software or hardware purchased must be free of malicious code such as viruses, Trojan horse programs, worms, spyware, etc. Validation of this must be written into the contract.

14 N/A N/A Self-Assessment. The Contractor shall perform in accordance with contract clause “Security Requirements: Facility Access and Information Technology” - The contractor must conduct an annual self-assessment in accordance with annual DOI guidance on all information systems in production.

15 N/A Vulnerability Analysis. Vulnerability Analysis on USGS systems to which the Contractor may have access under this contract will be conducted by the Government or another of its contractors.

16 N/A Logon Banner. Contractor employees who access DOI information systems must acknowledge a government-approved legal warning banner prior to logging on to the system. This includes contractor owned information systems hosting DOI data.

17 N/A Security Controls.

The Contractor shall perform in accordance with contract clause “Security Requirements: Facility Access and Information Technology” – The Contractor shall ensure compliance with the security control requirements of the current version of NIST SP 800-53, Rev.1, which are applicable to the security categorization of the data or system. FIPS 199 and the NIST SP 800-60 will be used to determine information types and security categorizations.

https://portal.doi.net/CIO/ITPMgmt/Documents/IT%20Standards/IT%20Security/DOI%20Security%20Control%20Standards%20(based%20on%20NIST%20SP%20800-53%20Revision%203)/Access%20Control%20v1.4.pdf https://portal.doi.net/CIO/ITPMgmt/Documents/IT%20Standards/IT%20Security/DOI%20Security%20Control%20Standards%20(based%20on%20NIST%20SP%20800-53%20Revision%203)/Access%20Control%20v1.4.pdf https://portal.doi.net/CIO/ITPMgmt/Documents/IT%20Standards/IT%20Security/DOI%20Security%20Control%20Standards%20(based%20on%20NIST%20SP%20800-53%20Revision%203)/Access%20Control%20v1.4.pdf https://portal.doi.net/CIO/ITPMgmt/Documents/IT%20Standards/IT%20Security/DOI%20Security%20Control%20Standards%20(based%20on%20NIST%20SP%20800-53%20Revision%203)/Access%20Control%20v1.4.pdf

COTS

Hardware or Software

Development or Maintenance of Custom Applications

Outsourced IT Services or On-site Support

Requirements herein are incorporated as part the Statement of Work/ Performance Work Statement:

18 N/A N/A Contingency Plan.

The Contractor shall perform in accordance with contract clause “Security Requirements: Facility Access and Information Technology.”

For IT Support Services: The Contractor shall submit a contingency plan in accordance with NIST SP 800-34 and DOI IT Systems Contingency Plan Guide.

INTERNET PROTOCOL version 6 (June 2012)

1. Any system hardware, software, firmware and/or networked component (voice, video or data) developed, procured, or acquired in support and/or performance of this contract shall be capable of transmitting, receiving, processing, forwarding and storing digital information across system boundaries utilizing system packets that are formatted in accordance with commercial standards of Internet Protocol (IP) version 6 (IPv6) as set forth in the USGv6 Profile (NIST Special Publication 500-267) and corresponding declarations of conformance defined in the USGv6 Test Program. In addition, this system shall maintain interoperability with IPv4 systems and provide at least the same level of performance and reliability capabilities of IPv4 products.

2. Specifically, any new IP product or system developed, acquired, or produced must:

a) Interoperate with both IPv6 and IPv4 systems and products, and

b) Have available contractor/vendor IPv6 technical support for development and implementation and fielded product management.

3. As IPv6 evolves, the Contractor commits to upgrading or providing an appropriate migration path for each item developed, delivered or utilized at no additional cost to the Government. The Contractor shall retrofit all non-IPv6 capable equipment, as defined above, that is fielded under this contract with IPv6 capable equipment, at no additional cost to the Government.

4. The contractor shall provide technical support for both IPv4 and IPv6.

5. Any system or software must be able to operate on networks supporting IPv4, IPv6 or one that supports both.

6. Any product whose non-compliance is discovered and made known to the Contractor within one year after acceptance shall be upgraded, modified or replaced to bring it into compliance at no additional cost to the Government.

DOI ELECTRONIC INVOICING Electronic Invoicing and Payment Requirements - Invoice Processing Platform (IPP) (April 2013)

Payment requests must be submitted electronically through the U. S. Department of the Treasury's Invoice Processing Platform System (IPP).

'Payment request' means any request for contract financing payment or invoice payment by the Contractor.

To constitute a proper invoice, the payment request must comply with the requirements identified in the applicable Prompt Payment clause included in the contract, or the clause 52.212-4 Contract Terms and Conditions - Commercial Items included in commercial item contracts. The IPP website address is:

https://www.ipp.gov.

Under this contract, the following documents are required to be submitted as an attachment to the IPP invoice: A copy of the Contractor’s internally generated invoice.

The Contractor must use the IPP website to register access and use IPP for submitting requests for payment. The Contractor Government Business Point of Contact (as listed in SAM) will receive enrollment instructions via email from the Federal Reserve Bank of St. Louis (FRBSTL) within 3 - 5 business days of the contract award date. Contractor assistance with enrollment can be obtained by contacting the IPP Production Helpdesk via email IPPCustomerSupport@fiscal.treasury.gov or phone (866) 973-3131.

If the Contractor is unable to comply with the requirement to use IPP for submitting invoices for payment, the Contractor must submit a waiver request in writing to the Contracting Officer with its proposal or quotation.

GS0199 Prevention of Malicious Code (JUN 2018)

(a) Definitions

Malicious code is a computer code developed for the purpose of causing some form of intentional damage to computer systems or networks. Malicious code may be a complete program or code imbedded in software programs that appear to provide useful functions. The term includes computer viruses and other destructive programs, such as "Trojan Horses" and network "worms."

(b) The contractor must have in place an anti-virus procedure to ensure that media supplied is uncontaminated by malicious code.

(c) The contractor is required to scan all delivered software to insure it is free of malicious code prior to its installation or operation on USGS-owned computers or contractor-owned computers connected to USGS computer systems or networks. Contractors using diagnostics software disks or connecting to a non-USGS computer while performing repairs or upgrades to a USGS computer will scan the serviced computer's drive(s) to insure they are free of malicious code upon completion of the service call, or prior to return of serviced equipment, if servicing is performed off-site.

GS0339 Green Acquisition (JUL 2018)

The USGS is committed to promoting the natural environment and protecting the health and well-being of people. In the performance of work under this contract, the Contractor shall exert its best efforts to provide services in a manner that will promote the natural environment and protect health and well-being. Green purchasing or environmentally preferable contracting includes the initiatives described below:

Alternative Fuels and Vehicles are described at http://www.afdc.energy.gov/afdc/

Biobased Products are described at http://www.biopreferred.gov/

Energy efficient products are described at http://energystar.gov/products for Energy Star products and at http://www.eere.energy.gov/femp/procurement for FEMP designated products.

Environmentally Preferable Computers are described at http://www.epeat.net

Significant New Alternatives Program (SNAP) are described at http://www.epa.gov/snap/overview-snap

The Comprehensive Procurement Guidelines promote the use of recovered and recycled products at https://www.epa.gov/smm/comprehensive-procurement-guideline-cpg-program

Water efficient products and services are described at https://www.epa.gov/watersense

GS1131 Unilateral Deobligation of Unexpended Funds. (MAY 2013)

The contractor shall submit all invoices under the award no later than 90 calendar days after the period of performance has expired, unless a request for extension has been submitted to the Contracting Officer.

After 120 days has passed since the expiration of the performance period, the government reserves the right to issue a unilateral modification deobligating any unexpended funds, and to initiate closeout procedures.

52.212-5 Contract Terms and Conditions Required To Implement Statutes or Executive Orders - Commercial Products and Commercial Services. (MAY 2022)

(a) The Contractor shall comply with the following Federal Acquisition Regulation (FAR) clauses, which are incorporated in this contract by reference, to implement provisions of law or Executive orders applicable to acquisitions of commercial products and commercial services:

(1) 52.203-19, Prohibition on Requiring Certain Internal Confidentiality Agreements or Statements (JAN 2017) (section 743 of Division E, Title VII, of the Consolidated and Further Continuing Appropriations Act, 2015 (Pub. L. 113-235) and its successor provisions in subsequent appropriations acts (and as extended in continuing resolutions)).

(2) 52.204-23, Prohibition on Contracting for Hardware, Software, and Services Developed or Provided by Kaspersky Lab and Other Covered Entities (NOV 2021) (Section 1634 of Pub. L. 115-91).

(3) 52.204-25, Prohibition on Contracting for Certain Telecommunications and Video Surveillance Services or Equipment. (NOV 2021) (Section 889(a)(1)(A) of Pub. L. 115- 232).

(4) 52.209-10, Prohibition on Contracting with Inverted Domestic Corporations (NOV 2015).

(5) 52.233-3, Protest After Award (AUG 1996) (31 U.S.C. 3553).

(6) 52.233-4, Applicable Law for Breach of Contract Claim (OCT 2004) (Public Laws 108-77 and 108-78 (19 U.S.C. 3805 note)).

(b) The Contractor shall comply with the FAR clauses in this…