Sol_140G0225Q0046.pdf

140G0225Q0046

1. REQUEST NO.

5a. ISSUED BY

NAME

a. NAME

c. STREET ADDRESS

d. CITY

10. PLEASE FURNISH QUOTATIONS TO

THE ISSUING OFFICE IN BLOCK 5a ON

OR BEFORE CLOSE OF BUSINESS (Date)

2. DATE ISSUED 3. REQUISITION/PURCHASE REQUEST NO. 4. CERT. FOR NAT. DEF.

UNDER BDSA REG. 2

AND/OR DMS REG.1

RATING

6. DELIVERY BY (Date)

7. DELIVERY

9. DESTINATION

a. NAME OF CONSIGNEE

b. STREET ADDRESS

PAGE OF PAGES

5b. FOR INFORMATION CALL: (No collect calls)

TELEPHONE NUMBER

AREA CODE NUMBER

8. TO:

b. COMPANY

e. STATE f. ZIP CODE

c. CITY

d. STATE e. ZIP CODE

IMPORTANT: This is a request for information, and quotations furnished are not offers. If you are unable to quote, please so indicate on this form and return it to the address in Block 5a. This request does not commit the Government to pay any costs incurred in the preparation of the submission of this quotation or to contract for supplies or services. Supplies are of domestic origin unless otherwise indicated by quoter. Any representations and/or certifications attached to this Request for Quotations must be completed by the quoter.

11. SCHEDULE (Include applicable Federal, State and local taxes)

THIS RFQ

REQUEST FOR QUOTATION

(THIS IS NOT AN ORDER)

IS IS NOT A SMALL BUSINESS SET ASIDEX

07/10/2025 0044011692

1 66

PO BOX 25046

204 DENVER FEDERAL CENTER

DENVER CO 80225-0046

USGS OAG DENVER ACQUISITION BRANCH

180 Days After Receipt of Order

USGS Mineral & Environmental Res.

MS 973

Box 25046 Denver Federal Center

Denver

CO 80225

303 236-9327Lisa Williams

07/21/2025 1430 MD

FOB DESTINATION

OTHER

(See Schedule)X

ITEM NO.

(a)

SUPPLIES/SERVICES

(b)

QUANTITY

(c)

UNIT

(d)

UNIT PRICE

(e)

AMOUNT

(f)

Agilent 8900 ICP-QQQ a tandem inductively coupled plasma mass spectrometer (ICP-MS/MS) for the USGS, Geology, Geophysics, and Geochemistry Science Center (GGGSC), Denver, CO

1. This Solicitation is issued as a Request for Quotations (RFQ). Submit written quotations in response to RFQ Number 140G0225Q0046. This solicitation will utilize the policies in the Federal Acquisition Regulations (FAR) Part 12, Acquisition of Commercial Products and Commercial Services, and in conjunction with the policies and procedures for evaluation, and award prescribed in FAR Part 13.1 Simplified Procedures for Certain Commercial Items, as appropriate for this acquisition.

Continued ...

12. DISCOUNT FOR PROMPT PAYMENT

a. 10 CALENDAR DAYS (%) b. 20 CALENDAR DAYS (%) c. 30 CALENDAR DAYS (%) d. CALENDAR DAYS

NUMBER PERCENTAGE

NOTE: Additional provisions and representations

13. NAME AND ADDRESS OF QUOTER

b. STREET ADDRESS

c. COUNTY

d. CITY e. STATE f. ZIP CODE

14. SIGNATURE OF PERSON AUTHORIZED TO

SIGN QUOTATION

16. SIGNER

a. NAME (Type or print)

c. TITLE (Type or print)

a. NAME OF QUOTER

AREA CODE

NUMBER

15. DATE OF QUOTATION

b. TELEPHONE are are not attached

AUTHORIZED FOR LOCAL REPRODUCTION

Previous edition not usable

STANDARD FORM 18 (REV. 6-95)

Prescribed by GSA - FAR (48 CFR) 53.215-1(a)

ITEM NO. SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

NAME OF OFFEROR OR CONTRACTOR

2 66

CONTINUATION SHEET

REFERENCE NO. OF DOCUMENT BEING CONTINUED PAGE OF

(A) (B) (C) (D) (E) (F)

140G0225Q0046

2. The solicitation document and incorporated provisions and clauses are those in effect through Federal Acquisition Circular (FAC)

2025-04.

3. The solicitation is a Small Business

Set-Aside. The North American Industry

Classification System (NAICS) code is 334516

(Analytical Laboratory Instrument Manufacturing) and the size standard is 1,000 employees.

4. Vendors are required to be registered and active in System for Award Management (SAM) when submitting an offer or quotation. Register at https://www.sam.gov/index.html prior to submitting your quotation. See FAR provision

52.204-7.

00010 Purchase one (1) new Agilent 8900 ICP-QQQ a 1 EA tandem inductively coupled plasma mass spectrometer (ICP-MS/MS) and associated components, all required software, warranty, installation, testing and instrument training for the USGS, Geology, Geophysics, and Geochemistry

Science Center (GGGSC), Denver, CO in accordance with the Brand Name/Requirements and Terms and

Conditions contained herein.

THE GOVERNMENT'S TERMS AND CONDITIONS SHALL

PREVAIL OVER ANY OTHER TERMS AND CONDITIONS

AND/OR AGREEMENT (IF ANY).

Anticipated Award Type: Firm-fixed-price

Delivery: 180 Days After Receipt of Order

NSN 7540-01-152-8067 OPTIONAL FORM 336 (4-86)

RFQ 140G0225Q0046

Table of Contents

Availability of Funds Brand Name/Requirements DOI ELECTRONIC INVOICING Electronic Invoicing and Payment Requirements - Invoice Processing Platform (IPP) (February 2021) FISMA Information Technology Security Requirements Summary ICT Accessibility Requirements Statement per the Revised Section 508 of the Rehabilitation Act INTERNET PROTOCOL INTERNET PROTOCOL version 6 (June 2012) GS0199 Prevention of Malicious Code (JUN 2018) GS0231 Technical Liaison – Technical Clarification (DEC 2024) GS1131 Unilateral Deobligation of Unexpended Funds (MAY 2013) GS1376 Software Licensing Agreements JUL 2001 52.212-4 Contract Terms and Conditions - Commercial Products and Commercial Services. (NOV 2023)22 52.212-5 Contract Terms and Conditions Required To Implement Statutes or Executive Orders— Commercial Products and Commercial Services. (Jan 2025) (DEVIATION FEB 2025) 52.225-8 Duty-Free Entry. (OCT 2010) 52.252-2 Clauses Incorporated by Reference. (FEB 1998) Special Notice GS2101 Inquiries (FEB 2007) GS2115 Independent Review of Protests to the Agency (MAY 2024) 52.204-24 Representation Regarding Certain Telecommunications and Video Surveillance Services or Equipment. (NOV 2021) 52.204-26 Covered Telecommunications Equipment or Services-Representation. (OCT 2020) 52.204-29 Federal Acquisition Supply Chain Security Act Orders-Representation and Disclosures. (DEC 2023) 52.209-11 Representation by Corporations Regarding Delinquent Tax Liability or a Felony Conviction under any Federal Law. (FEB 2016) 52.212-3 Offeror Representations and Certifications-Commercial Products and Commercial Services.

(MAY 2024) (DEVIATION FEB 2025)

52.219-1 Small Business Program Representations. (FEB 2024) 52.225-2 Buy American Certificate. (OCT 2022) 52.229-11 Tax on Certain Foreign Procurements-Notice and Representation. (JUN 2020) 52.233-2 Service of Protest Department of the Interior (Jul 1996) (Deviation) Basis for Award Quotation Instructions to Vendors Questions – Cutoff Electronic Submission of Quotations – Required 52.252-1 Solicitation Provisions Incorporated by Reference. (FEB 1998)

Availability of Funds

Funds are not presently available for this contract. The Government’s obligation under this contract is contingent upon the availability of appropriated funds from which payment for contract purposes can be made. No legal liability on the part of the Government for any payment may arise until funds are made available to the Contracting Officer for this contract and until the Contractor receives notice of such availability, to be confirmed in writing by the Contracting Officer.

Clauses:

Brand Name/Requirements

A. Introduction:

The United States Geological Survey (USGS), Geology, Geophysics, and Geochemistry Science Center (GGGSC), Denver, CO has the requirement to purchase one new Agilent 8900 ICP-QQQ a tandem inductively coupled plasma mass spectrometer (ICP-MS/MS). The instrument will be used for laser ablation ICP-MS trace element and isotopic analyses for a wide variety of applications as part of the Mineral Resources Program and Earth MRI. This instrument will expand capabilities of the existing ICP- MS for laser ablation ICP-MS analyses to accommodate Earth MRI samples.

B. Background:

Within the GGGSC the USGS-LTRACE laboratory provides laser ablation ICP-MS analyses on a wide variety of minerals, glasses and other materials related to the Nation’s mineral resource deposits. This lab and collaborating projects have developed several methods for Re-Os and Lu-Hf dating of mineral phases to better understand critical mineral formation and require ICP-MS/MS to measure these isotopic systems.

These analyses directly contribute to the Mineral Resources Program and the characterization of ore deposits for critical elements.

C. Manufacturer:

Agilent Technologies www.agilent.com

D. Brand Name/Requirements:

Items Description Qty Unit

1 One New Agilent 8900 ICP-MS QQQ with the following configurations:

Upgrade to dry pump (993) No autosampler ICP-MS stock tuning solution for installation and acceptance.

PolyScience Model 6106T (or similar) recirculating chiller.

Mfg. No. G3665A #100

1 Each

2 One New Gas Clean Carrier Gas filter kit (includes 1 connecting unit 1/8 and 2 Carrier Gas filters)

Mfg. No. CP17976

1 Each http://www.agilent.com/

3 One New 1-position Connecting Unit 1/8 in

Mfg. No. CP7988

1 Each

4 One New Stainless-steel tubing, 1/8in od, 6m

Mfg. No. G3270-65035

1 Each

5 One New Wall Mounting Bracket, Gas Clean Wall Mounting Bracket for 1-position connecting unit only

Mfg. No. CP7981

1 Each

6 One New Gas reg. He for ICP-MS, 2 stage, 15 psi

Mfg. No. 0101-1536

1 Each

7 One New Gas reg. H2 for ICP-MS, 2 stage, 15 psi

Mfg. No. 0101-1535

1 Each

8 One New Gas reg. O2 for ICP-MS, 2 stage, 15 psi

Mfg. No. 0101-1537

1 Each

9 One New Gas Regulator for NH3/He for ICP-MS

Mfg. No. 5188-5374

1 Each

E. Requirements – Warranty, Shipping, Delivery, Installation, Testing, and Training:

E.1 Warranty

The instrument and all components provided hereunder shall be covered by a 12-month warranty that includes all parts and labor.

E.2 Shipping:

The instrument and all components provided hereunder shall include all shipping costs and shall be FOB Destination.

E.3 Delivery:

The instrument and all components provided hereunder shall be delivered FOB Destination within one hundred and eighty days (180) days after receipt of the contract.

E.4 Installation:

Installation of the instrument and all components provided hereunder shall be completed within ninety (90) days of delivery.

E.5 Testing:

Testing of the instrument and all components provided hereunder shall be completed within two (2) weeks of installation of instrument.

E.5 Training:

Instrument training shall be completed within two weeks of testing of the instrument.

(End of Brand Name/Requirements)

DOI ELECTRONIC INVOICING Electronic Invoicing and Payment Requirements - Invoice Processing Platform (IPP) (February 2021)

Payment requests must be submitted electronically through the U. S. Department of the Treasury's Invoice Processing Platform System (IPP).

"Payment request" means any request for contract financing payment or invoice payment by the Contractor.

To constitute a proper invoice, the payment request must comply with the requirements identified in the applicable Prompt Payment clause included in the contract, or the clause 52.212-4 Contract Terms and Conditions - Commercial Items included in commercial item contracts. The IPP website address is:

https://www.ipp.gov.

Under this contract, the following documents are required to be submitted as an attachment to the IPP invoice:

A copy of the Contractor’s internally generated invoice.

The Contractor must use the IPP website to register access and use IPP for submitting requests for payment. The Contractor Government Business Point of Contact (as listed in SAM) will receive enrollment instructions via email from the Federal Reserve Bank of St. Louis (FRBSTL) within 3 - 5 business days of the contract award date. Contractor assistance with enrollment can be obtained by contacting the IPP Production Helpdesk via email IPPCustomerSupport@fiscal.treasury.gov or phone (866) 973-3131.

If the Contractor is unable to comply with the requirement to use IPP for submitting invoices for payment, the Contractor must submit a waiver request in writing to the Contracting Officer with its proposal or quotation.

FISMA Information Technology Security Requirements Summary

COTS

Hardware or Software

Development or Maintenance of Custom Applications

Outsourced IT Services or On-site Support

Requirements herein are incorporated as part the Statement of Work/ Performance Work Statement:

1 N/A ☐ ☐ Background Investigations. The Contractor shall perform in accordance with clause “Security Requirements: Facility Access and Information Technology.”

2 N/A ☐ ☐ Non-disclosure Agreement. Prior to receiving access to USGS computers, contractor employees shall be required to sign nondisclosure or other system security agreements, depending on the systems to be used and level of access granted.

Applies whenever any contractor employee has unsupervised access to a USGS system (even if only basic network, internet or email or will develop custom applications) such as:

• User Access to USGS IT Systems known to contain sensitive or proprietary data

• IT Support services (greater than user access)

• Development or Maintenance of Custom Applications

• On-site contractor support and management of IT system

COTS

Hardware or Software

Development or Maintenance of Custom Applications

Outsourced IT Services or On-site Support

Requirements herein are incorporated as part the Statement of Work/ Performance Work Statement:

Contractor will have access to Privacy Act System of Records – Work under this contract will involve design, development or operation of (access to) system(s) of records containing personal information protected by the Privacy Act (5 U.S.C.

Section 552a).

• Off-site contractor Oversight and Management of IT System

• IT Security Services Privacy Act System: [Identify covered system(s) to which the contractor may have access] Click or tap here to enter text.

Work to be performed: [Summarize nature of the contractor's use of such records, such as]

• User-level access to system containing protected records

• Operation or maintenance of Privacy Act System of records or computers hosting such system

• Design or modification of a Privacy Act system of records]

The contractor is not required or permitted to respond to requests for Privacy Act data or to make decisions about releases of data under the Act. Contractor shall ensure its employees are instructed to safeguard against improper use or release of such data and advise them that violation of the Act may involve criminal penalties. The contractor will comply with FAR clause 52.224-2, Privacy Act, incorporated herein by reference and with DOI Privacy Act regulations at 43 CFR 2, Subpart D

3 N/A ☐ ☐ Training. The Contractor shall perform in accordance with clause “Security Requirements:

Facility Access and Information Technology” - Contractor employees must successfully complete DOI’s end- user computer security awareness training prior to being granted access to DOI data or being issued a user account. Training must be renewed annually. Additionally, the contract employees must sign a Statement of Responsibility (SOR) that states they have read the appropriate Rules of Behavior and other applicable Information security policies.

4 N/A ☐ ☐ Personnel Changes. The Contractor shall perform in accordance with clause “Security Requirements: Facility Access and Information Technology” - The contractor must notify the COR immediately when an employee

COTS

Hardware or Software

Development or Maintenance of Custom Applications

Outsourced IT Services or On-site Support

Requirements herein are incorporated as part the Statement of Work/ Performance Work Statement:

working on a DOI system is reassigned or leaves the contractor’s employ.

Applies whenever any contractor employee has unsupervised access to a USGS system (even if only basic network, internet or email or will develop custom applications) such as:

• User Access to USGS IT Systems known to contain sensitive or proprietary data

• IT Support services (greater than user access)

• Development or Maintenance of Custom Applications *

• On-site contractor support and management of IT system

• Off-site contractor Oversight and Management of IT System

• IT Security Services * *May not be applicable for off-site performance.

5 N/A ☐ ☐ Contractor Location. The Contractor shall perform in accordance with clause “Security Requirements: Facility Access and Information Technology.”

Applies whenever any contractor employee has unsupervised access to a USGS system (even if only basic network, internet or email or will develop custom applications) such as:

• User Access to USGS IT Systems known to contain sensitive or proprietary data

• IT Support services (greater than user access)

• Development or Maintenance of Custom Applications

• On-site contractor support and management of IT system

• Off-site contractor Oversight and Management of IT System

• IT Security Services

No portion of the services to be performed hereunder may be performed outside the United States without the express written permission of the Contracting Officer.

If services are proposed to be performed abroad, the Contractor shall provide an acceptable security plan that addresses mitigation of problems related to communication, control, and

COTS

Hardware or Software

Development or Maintenance of Custom Applications

Outsourced IT Services or On-site Support

Requirements herein are incorporated as part the Statement of Work/ Performance Work Statement:

protecting the confidentiality, integrity, and availability of IT systems and information.

A Security Plan Template is available upon request from the Contracting Officer.

6 N/A ☐ N/A Applicable Standards. The Contractor shall perform in accordance with clause “Security Requirements: Facility Access and Information Technology” - Contractor must follow the DOI System Development Life Cycle (SDLC), NIST SP 800-64 and the DOI SDLC Security Integration Guide.

7 N/A ☐ ☐ Asset Valuation-Security Categorization:

The Contractor shall perform in accordance with clause “Security Requirements: Facility Access and Information Technology.”

☐User Access to USGS IT Systems - The Government is responsible for security categorization on USGS systems to which the Contractor may have access under this contract.

☐IT Support Services greater than User- Level Services Choose One:

☐The Government is responsible for security categorization on USGS systems to which the Contractor may have access under this contract.

☐The Government has defined the [insert name of system to be developed, operated or maintained by the contractor] to be a [Major Application], [Minor Application] or [General support system] as defined in OMB Circular A- 130, Appendix III and NIST SP800-53.

The following risk and sensitivity levels have been assigned based on the FIPS 199 and the NIST SP 800-60.

Mission impact: Click or tap here to enter text.

Data sensitivity:Click or tap here to enter text.

Risk Level:Click or tap here to enter text.

https://insight.usgs.gov/aei/offices/oa/oag/AOP/guidefordevelopingsecurityplans.pdf

COTS

Hardware or Software

Development or Maintenance of Custom Applications

Outsourced IT Services or On-site Support

Requirements herein are incorporated as part the Statement of Work/ Performance Work Statement:

Bureau/departmental/national criticality: Click or tap here to enter text.

☐Off-Site Oversight and Management of IT System- The Contractor shall use the FIPS 199 and the NIST SP 800- 60 to determine information types and security categorization based on mission impact, data sensitivity, risk level, and bureau / departmental / national criticality for Contractor-owned and operated systems used to provide services under this contract. Solicitations must include either the complete publication or a reference to public facilities, such as a website or office, where it may be accessed.

☐IT Security Services - Applies only if the purpose of the contract includes obtaining asset valuation services. The Contractor shall use the FIPS 199 and the NIST SP 800- 60 to determine information types and security categorization based on mission impact, data sensitivity, risk level, and bureau / departmental / national criticality for Contractor-owned and operated systems used to provide services under this contract. Solicitations must include either the complete publication or a reference to public facilities, such as a website or office, where it may be accessed.

8 ☒ ☐ The Government shall be granted unlimited rights in software or data produced hereunder as described in FAR clause 52.227-17, Rights in Data— Special Works, incorporated by reference

Select either COTS or custom software language as applicable. If both apply, identify software/data deliverables governed by each clause.

Property Rights.

1. For Federal Supply Schedule orders or orders under an existing contract, rights to software acquired hereunder are set forth in the basic contract.

2. For open market contracts, the Government's rights in software delivered hereunder shall be as described in software developer's commercial software license agreement or the clause FAR 52.227-19, Commercial Computer Software- Restricted Rights, whichever is greater.

COTS

Hardware or Software

Development or Maintenance of Custom Applications

Outsourced IT Services or On-site Support

Requirements herein are incorporated as part the Statement of Work/ Performance Work Statement:

herein.

9 N/A ☐ ☐ Independent Verification and Validation (IV&V). The Government is responsible for independent software verification and validation prior to being moved into production.

On-Site Contractor Support and Management of IT System Choose One:

☐Software will be independently verified and validated by the Government or another selected contractor prior to being moved into production.

☐Contractor will ensure that independent verification and validation is performed on software deployed on contractor managed systems containing USGS data, in accordance with DOI SDLC Security Integration Guide

☐Off-Site Contractor Operation and Management of IT System Contractor will ensure that independent verification and validation is performed on software deployed on contractor managed systems containing USGS data, in accordance with DOI SDLC Security Integration Guide

☐IT Security Service - Applies only if the purpose of the contract includes obtaining IV&V services.

10 N/A ☐ Applies if the purpose of the contract includes obtaining

☐ Certification & Accreditation.

☐User Access to USGS IT Systems or IT Supports Services (Greater than User Access) Certification and Accreditation on USGS systems to which the Contractor may have access under this contract will be conducted by the Government

COTS

Hardware or Software

Development or Maintenance of Custom Applications

Outsourced IT Services or On-site Support

Requirements herein are incorporated as part the Statement of Work/ Performance Work Statement:

C&A services.

or another of its contractors.

☐Development or Maintenance of Custom Applications The contractor will perform Certification and Accreditation (C&A) services on the application developed or maintained hereunder prior to going into production. The application must be re-accredited every three years or whenever there is a major change that affects security. C&A documents will be provided to the COR in both hard copy and electronic forms. The contractor must follow NIST SP 800-37, 800-18, 800-30, 800-60, 800-53A, Federal Information Processing Standard (FIPS) 199 and 200, the associated DOI guides/templates, the DOI Security Test & Evaluation (ST&E) Guide, and the DOI Privacy Impact Assessment. NIST documents are available on the internet at http://csrc.nist.gov/publications/nistpubs/ FIPS documents are available on the internet at http://csrc.nist.gov/publications/nistpubs/. The contractor may request copies of DOI documents by contacting the Contracting Officer. The government reserves the right to conduct the ST&E using either Government personnel or an independent contractor. The contractor will take immediate and timely action to correct or mitigate any weaknesses discovered as necessary to bring the application or system into compliance with the above requirement.

☐On-Site Contractor Support and Management of IT System or Off-Site Contractor Operation and Management of IT System The Contractor must maintain systems that are compliant with NIST SP 800-18, 800-30, 800-37, 800-53A, 800-60, Federal Information Processing Standard (FIPS) 199 and 200, the associated DOI guides/templates, the DOI Security Test & Evaluation (ST&E) Guide, and the DOI Privacy Impact Assessment. As required by the above, Major Applications and General Support Systems shall be certified and accredited (C&A) prior to going into production and re-accredited every three years or whenever there is a major change that affects security. C&A documents will be provided to the COR in both hard copy and electronic forms. NIST documents are available on the internet at http://csrc.nist.gov/publications/nistpubs/ http://csrc.nist.gov/publications/nistpubs/

COTS

Hardware or Software

Development or Maintenance of Custom Applications

Outsourced IT Services or On-site Support

Requirements herein are incorporated as part the Statement of Work/ Performance Work Statement:

http://csrc.nist.gov/publications/nistpubs/. The contractor may request copies of DOI documents by contacting the Contracting Officer. The government will reserve the right to conduct the ST&E, using either Government personnel or an independent contractor. The contractor will take immediate and timely action to correct or mitigate any weaknesses discovered as necessary to bring the application or system into compliance with the above requirement.

11 N/A for COTS

HW & SW,

User Access to

USGS IT

Systems (other than IT services), IT Support Services (User Level or greater access)

N/A ☐ Internet Logon Banner. The Contractor shall perform in accordance with clause “Security Requirements: Facility Access and Information Technology.”

☐Develop or Maintenance of Custom Applications or Onsite Contractor Support and Management of IT System or Off-site Contractor Oversight and Management of IT System – Web based applications developed or maintained under this contract must contain a USGS approved logon Banner:

https://portal.doi.net/CIO/ITPMgmt/Documents/IT Standards/IT Security/DOI Security Control Standards (based on NIST SP 800-53 Revision 3)/Access Control v1.4.pdf

12 N/A ☐ ☐ Incident Reporting. The Contractor shall perform in accordance with contract clause “Security Requirements: Facility Access and Information Technology” - The contractor must report computer security incidents affecting DOI data or systems in accordance with the DOI Computer Incident Response Guide.

13 ☒ ☐ ☐ Quality Control. All software or hardware purchased must be free of malicious code such as viruses, Trojan horse programs, worms, spyware, etc. Validation of this must be written into the contract.

14 N/A N/A ☐ Self-Assessment. The Contractor shall perform in accordance with contract clause “Security Requirements: Facility Access and Information Technology” - The contractor must conduct an annual self-assessment in accordance with annual DOI guidance on all information systems in production.

http://csrc.nist.gov/publications/nistpubs/ https://portal.doi.net/CIO/ITPMgmt/Documents/IT%20Standards/IT%20Security/DOI%20Security%20Control%20Standards%20(based%20on%20NIST%20SP%20800-53%20Revision%203)/Access%20Control%20v1.4.pdf https://portal.doi.net/CIO/ITPMgmt/Documents/IT%20Standards/IT%20Security/DOI%20Security%20Control%20Standards%20(based%20on%20NIST%20SP%20800-53%20Revision%203)/Access%20Control%20v1.4.pdf https://portal.doi.net/CIO/ITPMgmt/Documents/IT%20Standards/IT%20Security/DOI%20Security%20Control%20Standards%20(based%20on%20NIST%20SP%20800-53%20Revision%203)/Access%20Control%20v1.4.pdf https://portal.doi.net/CIO/ITPMgmt/Documents/IT%20Standards/IT%20Security/DOI%20Security%20Control%20Standards%20(based%20on%20NIST%20SP%20800-53%20Revision%203)/Access%20Control%20v1.4.pdf https://portal.doi.net/CIO/ITPMgmt/Documents/IT%20Standards/IT%20Security/DOI%20Security%20Control%20Standards%20(based%20on%20NIST%20SP%20800-53%20Revision%203)/Access%20Control%20v1.4.pdf

COTS

Hardware or Software

Development or Maintenance of Custom Applications

Outsourced IT Services or On-site Support

Requirements herein are incorporated as part the Statement of Work/ Performance Work Statement:

15 N/A ☐ ☐ Vulnerability Analysis. Vulnerability Analysis on USGS systems to which the Contractor may have access under this contract will be conducted by the Government or another of its contractors.

16 N/A ☐ ☐ Logon Banner. Contractor employees who access DOI information systems must acknowledge a government-approved legal warning banner prior to logging on to the system. This includes contractor owned information systems hosting DOI data.

17 N/A ☐ ☐ Security Controls.

The Contractor shall perform in accordance with contract clause “Security Requirements:

Facility Access and Information Technology”

– The Contractor shall ensure compliance with the security control requirements of the current version of NIST SP 800-53, Rev.1, which are applicable to the security categorization of the data or system. FIPS 199 and the NIST SP 800-60 will be used to determine information types and security categorizations.

18 N/A N/A ☐ Contingency Plan.

The Contractor shall perform in accordance with contract clause “Security Requirements:

Facility Access and Information Technology.”

For IT Support Services: The Contractor shall submit a contingency plan in accordance with NIST SP 800-34 and DOI IT Systems Contingency Plan Guide.

ICT Accessibility Requirements Statement per the Revised Section 508 of the Rehabilitation Act

E201 Application

E201.1 Scope. ICT that is procured, developed, maintained, or used by agencies shall conform to the Revised 508 Standards.

E205 Electronic Content

E205.1 General. Electronic content shall comply with E205.

E205.2 Public Facing. Electronic content that is public facing shall conform to the accessibility requirements specified in E205.4.

E205.3 Agency Official Communication. Electronic content that is not public facing shall conform to the accessibility requirements specified in E205.4 when such content constitutes official business and is communicated by an agency through one or more of the following:

● A. An emergency notification;

● B. An initial or final decision adjudicating an administrative claim or proceeding;

● C. An internal or external program or policy announcement;

● D. A notice of benefits, program eligibility, employment opportunity, or personnel action;

● E. A formal acknowledgement of receipt;

● F. A survey questionnaire;

● G. A template or form;

● H. Educational or training materials; or

● I. Intranet content designed as a Web page.

E205.4 Accessibility Standard (WCAG 2.0). Electronic content shall conform to Level A and Level AA Success Criteria and Conformance Requirements in WCAG 2.0 (Incorporated by reference, see 702.10.1).

E205.4.1 Word Substitution when Applying WCAG to Non-Web Documents. For non-Web documents, wherever the term "Web page" or "page" appears in WCAG 2.0 Level A and AA Success Criteria and Conformance Requirements, the term "document" shall be substituted for the terms "Web page" and "page". In addition, in Success Criterion in 1.4.2, the phrase "in a document" shall be substituted for the phrase "on a Web page".

E206 Hardware

E206.1 General. Where components of ICT are hardware and transmit information or have a user interface, such components shall conform to the requirements in Chapter 4.

E208 Support Documentation and Services

E208.1 General. Where an agency provides support documentation or services for ICT, such documentation and services shall conform to the requirements in Chapter 6.

E301 General

E301.1 Scope. The requirements of Chapter 3 shall apply to ICT where required by 508 Chapter 2 (Scoping Requirements), 255 Chapter 2 (Scoping Requirements), and where otherwise referenced in any other chapter of the Revised 508 Standards or Revised 255 Guidelines.

E302 Functional Performance Criteria

302.1 Without Vision. Where a visual mode of operation is provided, ICT shall provide at least one mode of operation that does not require user vision.

302.2 With Limited Vision. Where a visual mode of operation is provided, ICT shall provide at least one mode of operation that enables users to make use of limited vision.

302.3 Without Perception of Color. Where a visual mode of operation is provided, ICT shall provide at least one visual mode of operation that does not require user perception of color.

302.4 Without Hearing. Where an audible mode of operation is provided, ICT shall provide at least one mode of operation that does not require user hearing.

302.5 With Limited Hearing. Where an audible mode of operation is provided, ICT shall provide at least one mode of operation that enables users to make use of limited hearing.

302.6 Without Speech. Where speech is used for input, control, or operation, ICT shall provide at least one mode of operation that does not require user speech.

302.7 With Limited Manipulation. Where a manual mode of operation is provided, ICT shall provide at least one mode of operation that does not require fine motor control or simultaneous manual operations.

302.8 With Limited Reach and Strength. Where a manual mode of operation is provided, ICT shall provide at least one mode of operation that is operable with limited reach and limited strength.

302.9 With Limited Language, Cognitive, and Learning Abilities. ICT shall provide features making its use by individuals with limited cognitive, language, and learning abilities simpler and easier.

401 General

401.1 Scope. The requirements of Chapter 4 shall apply to ICT that is hardware where required by 508 Chapter 2 (Scoping Requirements), 255 Chapter 2 (Scoping Requirements), and where otherwise referenced in any other chapter of the Revised 508 Standards or Revised 255 Guidelines.

Exception from E401.1 Scope: Hardware that is assistive technology shall not be required to conform to the requirements of this chapter.

402 Closed Functionality

402.1 General. ICT with closed functionality shall be operable without requiring the user to attach or install assistive technology other than personal headsets or other audio couplers, and shall conform to 402.

402.2 Speech-Output Enabled. ICT with a display screen shall be speech-output enabled for full and independent use by individuals with vision impairments.

Exceptions from E402.2:

1. Variable message signs conforming to 402.5 shall not be required to be speech-output enabled.

2. Speech output shall not be required where ICT display screens only provide status indicators and those indicators conform to 409.

3. Where speech output cannot be supported due to constraints in available memory or processor capability, ICT shall be permitted to conform to 409 in lieu of 402.2.

4. Audible tones shall be permitted instead of speech output where the content of user input is not displayed as entered for security purposes, including, but not limited to, asterisks representing personal identification numbers.

5. Speech output shall not be required for: the machine location; date and time of transaction; customer account number; and the machine identifier or label.

6. Speech output shall not be required for advertisements and other similar information unless they convey information that can be used for the transaction being conducted.

402.2.1 Information Displayed On-Screen. Speech output shall be provided for all information displayed on-screen.

402.2.2 Transactional Outputs. Where transactional outputs are provided, the speech output shall audibly provide all information necessary to verify a transaction.

402.2.3 Speech Delivery Type and Coordination. Speech output shall be delivered through a mechanism that is readily available to all users, including, but not limited to, an industry standard connector or a telephone handset. Speech shall be recorded or digitized human, or synthesized. Speech output shall be coordinated with information displayed on the screen.

402.2.4 User Control. Speech output for any single function shall be automatically interrupted when a transaction is selected. Speech output shall be capable of being repeated and paused.

402.2.5 Braille Instructions. Where speech output is required by 402.2, braille instructions for initiating the speech mode of operation shall be provided. Braille shall be contracted and shall conform to 36 CFR part 1191, Appendix D, Section 703.3.1.

Exception from E402.2.5 Braille Instructions: Devices for personal use shall not be required to conform to 402.2.5.

402.3 Volume. ICT that delivers sound, including speech output required by 402.2, shall provide volume control and output amplification conforming to 402.3.

402.3.1 Private Listening. Where ICT provides private listening, it shall provide a mode of operation for controlling the volume. Where ICT delivers output by an audio transducer typically held up to the ear, a means for effective magnetic wireless coupling to hearing technologies shall be provided.

402.3.2 Non-private Listening. Where ICT provides non-private listening, incremental volume control shall be provided with output amplification up to a level of at least 65 dB. A function shall be provided to automatically reset the volume to the default level after every use.

402.4 Characters on Display Screens. At least one mode of characters displayed on the screen shall be in a sans serif font. Where ICT does not provide a screen enlargement feature, characters shall be 3/16 inch (4.8 mm) high minimum based on the uppercase letter “I”. Characters shall contrast with their background with either light characters on a dark background or dark characters on a light background.

402.5 Characters on Variable Message Signs. Characters on variable message signs shall conform to section 703.7 Variable Message Signs of ICC A117.1-2009 (incorporated by reference, see 702.6.1).

403 Biometrics

403.1 General. Where provided, biometrics shall not be the only means for user identification or control.

Exception from E403.1 General: Where at least two biometric options that use different biological characteristics are provided, ICT shall be permitted to use biometrics as the only means for user identification or control.

404 Preservation of Information Provided for Accessibility

404.1 General. ICT that transmits or converts information or communication shall not remove non-proprietary information provided for accessibility or shall restore it upon delivery.

405 Privacy

405.1 General. The same degree of privacy of input and output shall be provided to all individuals. When speech output required by 402.2 is enabled, the screen shall not blank automatically.

406 Standard Connections

406.1 General. Where data connections used for input and output are provided, at least one of each type of connection shall conform to industry standard non-proprietary formats.

407 Operable Parts

407.1 General. Where provided, operable parts used in the normal operation of ICT shall conform to 407.

407.2 Contrast. Where provided, keys and controls shall contrast visually from background surfaces.

Characters and symbols shall contrast visually from background surfaces with either light characters or symbols on a dark background or dark characters or symbols on a light background.

407.3 Input Controls. At least one input control conforming to 407.3 shall be provided for each function.

Exception from E407.3 Input Controls: Devices for personal use with input controls that are audibly discernable without activation and operable by touch shall not be required to conform to 407.3.

407.3.1 Tactilely Discernible. Input controls shall be operable by touch and tactilely discernible without activation.

407.3.2 Alphabetic Keys. Where provided, individual alphabetic keys shall be arranged in a QWERTY-based keyboard layout and the “F” and “J” keys shall be tactilely distinct from the other keys.

407.3.3 Numeric Keys. Where provided, numeric keys shall be arranged in a 12-key ascending or descending keypad layout. The number five key shall be tactilely distinct from the other keys. Where the ICT provides an alphabetic overlay on numeric keys, the relationships between letters and digits shall conform to ITU-T Recommendation E.161 (incorporated by reference, see 702.7.1).

407.4 Key Repeat. Where a keyboard with key repeat is provided, the delay before the key repeat feature is activated shall be fixed at, or adjustable to, 2 seconds minimum.

407.5 Timed Response. Where a timed response is required, the user shall be alerted visually, as well as by touch or sound, and shall be given the opportunity to indicate that more time is needed.

407.6 Operation. At least one mode of operation shall be operable with one hand and shall not require tight grasping, pinching, or twisting of the wrist. The force required to activate operable parts shall be 5 pounds (22.2 N) maximum.

407.7 Tickets, Fare Cards, and Keycards. Where tickets, fare cards, or keycards are provided, they shall have an orientation that is tactilely discernible if orientation is important to further use of the ticket, fare card, or keycard.

407.8 Reach Height and Depth. At least one of each type of operable part of stationary ICT shall be at a height conforming to 407.8.2 or 407.8.3 according to its position established by the vertical reference plane specified in 407.8.1 for a side reach or a forward reach. Operable parts used with speech output required by

402.2 shall not be the only type of operable part complying with 407.8 unless that part is the only operable part of its type.

● 407.8.1 Vertical Reference Plane. Operable parts shall be positioned for a side reach or a forward reach determined with respect to a vertical reference plane. The vertical reference plane shall be located in conformance to 407.8.2 or 407.8.3.

○ 407.8.1.1 Vertical Plane for Side Reach. Where a side reach is provided, the vertical reference plane shall be 48 inches (1220 mm) long minimum.

○ 407.8.1.2 Vertical Plane for Forward Reach. Where a forward reach is provided, the vertical reference plane shall be 30 inches (760 mm) long minimum.

● 407.8.2 Side Reach. Operable parts of ICT providing a side reach shall conform to 407.8.2.1 or

407.8.2.2. The vertical reference plane shall be centered on the operable part and placed at the leading edge of the maximum protrusion of the ICT within the length of the vertical reference plane. Where a side reach requires a reach over a portion of the ICT, the height of that portion of the ICT shall be 34 inches (865 mm) maximum.

○ 407.8.2.1 Unobstructed Side Reach. Where the operable part is located 10 inches (255

mm) or less beyond the vertical reference plane, the operable part shall be 48 inches (1220 mm) high maximum and 15 inches (380 mm) high minimum above the floor.

○ 407.8.2.2 Obstructed Side Reach. Where the operable part is located more than 10 inches (255 mm), but not more than 24 inches (610 mm), beyond the vertical reference plane, the height of the operable part shall be 46 inches (1170 mm) high maximum and 15 inches (380 mm) high minimum above the floor. The operable part shall not be located more than 24 inches (610 mm) beyond the vertical reference plane.

● 407.8.3 Forward Reach. Operable parts of ICT providing a forward reach shall conform to

407.8.3.1 or 407.8.3.2. The vertical reference plane shall be centered, and intersect with, the operable part. Where a forward reach allows a reach over a portion of the ICT, the height of that portion of the ICT shall be 34 inches (865 mm) maximum.

○ 407.8.3.1 Unobstructed Forward Reach. Where the operable part is located at the leading edge of the maximum protrusion within the length of the vertical reference plane of the ICT, the operable part shall be 48 inches (1220 mm) high maximum and 15 inches (380 mm) high minimum above the floor.

○ 407.8.3.2 Obstructed Forward Reach. Where the operable part is located beyond the leading edge of the maximum protrusion within the length of the vertical reference plane, the operable part shall conform to 407.8.3.2. The maximum allowable forward reach to an operable part shall be 25 inches (635 mm).

■ 407.8.3.2.1 Operable Part Height for ICT with Obstructed Forward Reach.

The height of the operable part shall conform to Table 407.8.3.2.1.

■ 407.8.3.2.2 Knee and Toe Space under ICT with Obstructed Forward Reach. Knee and toe space under ICT shall be 27 inches (685 mm) high minimum, 25 inches (635 mm) deep maximum, and 30 inches (760 mm) wide minimum and shall be clear of obstructions.

408 Display Screens

408.1 General. Where provided, display screens shall conform to 408.

408.2 Visibility. Where stationary ICT provides one or more display screens, at least one of each type of display screen shall be visible from a point located 40 inches (1015 mm) above the floor space where the display screen is viewed.

408.3 Flashing. Where ICT emits lights in flashes, there shall be no more than three flashes in any one-second period.

Exception from E408.3 Flashing: Flashes that do not exceed the general flash and red flash thresholds defined in WCAG 2.0 (incorporated by reference, see 702.10.1) are not required to conform to 408.3.

409 Status Indicators

409.1 General. Where provided, status indicators shall be discernible visually and by touch or sound.

410 Color Coding

410.1 General. Where provided, color coding shall not be used as the only means of conveying information, indicating an action, prompting a response, or distinguishing a visual element.

411 Audible Signals

411.1 General. Where provided, audible signals or cues shall not be used as the only means of conveying information, indicating an action, or prompting a response

412 ICT with Two-Way Voice Communication

412.1 General. ICT that provides two-way voice communication shall conform to 412.

412.2 Volume Gain. ICT that provides two-way voice communication shall conform to 412.2.1 or 412.2.2.

Exception from E412.2 Volume Gain: ICT conforming to 412.2 shall not be required to conform to 402.3.

412.2.1 Volume Gain for Wireline Telephones. Volume gain conforming to 47 CFR 68.317 shall be provided on analog and digital wireline telephones.

412.2.2 Volume Gain for Non-Wireline ICT. A method for increasing volume shall be provided for non-wireline ICT.

412.3 Interference Reduction and Magnetic Coupling. Where ICT delivers output by a handset or other type of audio transducer that is typically held up to the ear, ICT shall reduce interference with hearing technologies and provide a means for effective magnetic wireless coupling in conformance with 412.3.1 or 412.3.2.

● 412.3.1 Wireless Handsets. ICT in the form of wireless handsets shall conform to ANSI/IEEE C63.19-2011 (incorporated by reference, see 702.5.1).

● 412.3.2 Wireline Handsets. ICT in the form of wireline handsets, including cordless handsets, shall conform to TIA-1083-B (incorporated by reference, see702.9.1).

412.4 Digital Encoding of Speech. ICT in IP-based networks shall transmit and receive speech that is digitally encoded in the manner specified by ITU-T Recommendation G.722.2 (incorporated by reference, see 702.7.2) or IETF RFC 6716 (incorporated by reference, see 702.8.1).

412.5 Real-Time Text Functionality. [Reserved].

412.6 Caller ID. Where provided, caller identification and similar telecommunications functions shall be visible and audible.

412.7 Video Communication. Where ICT provides real-time video functionality, the quality of the video shall be sufficient to support communication using sign language.

413 Closed Caption Processing Technologies

413.1 General. Where ICT displays or processes video with synchronized audio, ICT shall provide closed caption processing technology that conforms to 413.1.1 or 413.1.2.

● 413.1.1 Decoding and Display of Closed Captions. Players and displays shall decode closed caption data and support display of captions.

● 413.1.2 Pass-Through of Closed Caption Data. Cabling and ancillary equipment shall pass through caption data.

414 Audio Description Processing Technologies

414.1 General. Where ICT displays or processes video with synchronized audio, ICT shall provide audio description processing technology conforming to 414.1.1 or 414.1.2.

● 414.1.1 Digital Television Tuners. Digital television tuners shall provide audio description processing that conforms to ATSC A/53 Digital Television Standard, Part 5 (2014) (incorporated by reference, see 702.2.1). Digital television tuners shall provide processing of audio description when encoded as a Visually Impaired (VI) associated audio service that is provided as a complete program mix containing audio description according to the ATSC A/53 standard.

● 414.1.2 Other ICT. ICT other than digital television tuners shall provide audio description processing.

415 User Controls for Captions and Audio Descriptions

415.1 General. Where ICT displays video with synchronized audio, ICT shall provide user controls for closed captions and audio descriptions conforming to 415.1.

Exception from E415.1 General: Devices for personal use shall not be required to conform to 415.1 provided that captions and audio descriptions can be enabled through system-wide platform settings.

● 415.1.1 Caption Controls. Where ICT provides operable parts for volume control, ICT shall also provide operable parts for caption selection.

● 415.1.2 Audio Description Controls. Where ICT provides operable parts for program selection, ICT shall also provide operable parts for the selection of audio description.

INTERNET PROTOCOL INTERNET PROTOCOL version 6 (June 2012)

1. Any system hardware, software, firmware and/or networked component (voice, video or data) developed, procured, or acquired in support and/or performance of this contract shall be capable of transmitting, receiving, processing, forwarding and storing digital information across system boundaries utilizing system packets that are formatted in accordance with commercial standards of Internet Protocol (IP) version 6 (IPv6) as set forth in the USGv6 Profile (NIST Special Publication 500-267) and corresponding declarations of conformance defined in the USGv6 Test Program. In addition, this system shall maintain interoperability with IPv4 systems and provide at least the same level of performance and reliability capabilities of IPv4 products.

2. Specifically, any new IP product or system developed, acquired, or produced must:

a. Interoperate with both IPv6 and…