Sol_140G0225Q0074.pdf

140G0225Q0074

1. REQUEST NO.

5a. ISSUED BY

NAME

a. NAME

c. STREET ADDRESS

d. CITY

10. PLEASE FURNISH QUOTATIONS TO

THE ISSUING OFFICE IN BLOCK 5a ON

OR BEFORE CLOSE OF BUSINESS (Date)

2. DATE ISSUED 3. REQUISITION/PURCHASE REQUEST NO. 4. CERT. FOR NAT. DEF.

UNDER BDSA REG. 2

AND/OR DMS REG.1

RATING

6. DELIVERY BY (Date)

7. DELIVERY

9. DESTINATION

a. NAME OF CONSIGNEE

b. STREET ADDRESS

PAGE OF PAGES

5b. FOR INFORMATION CALL: (No collect calls)

TELEPHONE NUMBER

AREA CODE NUMBER

8. TO:

b. COMPANY

e. STATE f. ZIP CODE

c. CITY

d. STATE e. ZIP CODE

IMPORTANT: This is a request for information, and quotations furnished are not offers. If you are unable to quote, please so indicate on this form and return it to the address in Block 5a. This request does not commit the Government to pay any costs incurred in the preparation of the submission of this quotation or to contract for supplies or services. Supplies are of domestic origin unless otherwise indicated by quoter. Any representations and/or certifications attached to this Request for Quotations must be completed by the quoter.

11. SCHEDULE (Include applicable Federal, State and local taxes)

THIS RFQ

REQUEST FOR QUOTATION

(THIS IS NOT AN ORDER)

IS IS NOT A SMALL BUSINESS SET ASIDEX

06/03/2025

1 55

PO BOX 25046

204 DENVER FEDERAL CENTER

DENVER CO 80225-0046

USGS OAG DENVER ACQUISITION BRANCH

Multiple

303 236-9327Lisa Williams

06/16/2025 1430 MD

FOB DESTINATION

OTHER

(See Schedule)X

ITEM NO.

(a)

SUPPLIES/SERVICES

(b)

QUANTITY

(c)

UNIT

(d)

UNIT PRICE

(e)

AMOUNT

(f)

STARLINK INTERNET SERVICE

1. This is a Solicitation issued as a Request for Quotations (RFQ). Submit written quotations on RFQ Number 140G0225Q0074. This solicitation will utilize the policies in the Federal Acquisition Regulations (FAR) Part 12, Acquisition of Commercial Products and Commercial Services, and in conjunction with the policies and procedures for evaluation, and award prescribed in FAR Part

13.1 Simplified Procedures, as appropriate for

this acquisition.

2. The solicitation document and incorporated provisions and clauses are those in effect through Federal Acquisition Circular (FAC) Continued ...

12. DISCOUNT FOR PROMPT PAYMENT

a. 10 CALENDAR DAYS (%) b. 20 CALENDAR DAYS (%) c. 30 CALENDAR DAYS (%) d. CALENDAR DAYS

NUMBER PERCENTAGE

NOTE: Additional provisions and representations

13. NAME AND ADDRESS OF QUOTER

b. STREET ADDRESS

c. COUNTY

d. CITY e. STATE f. ZIP CODE

14. SIGNATURE OF PERSON AUTHORIZED TO

SIGN QUOTATION

16. SIGNER

a. NAME (Type or print)

c. TITLE (Type or print)

a. NAME OF QUOTER

AREA CODE

NUMBER

15. DATE OF QUOTATION

b. TELEPHONE are are not attached

AUTHORIZED FOR LOCAL REPRODUCTION

Previous edition not usable

STANDARD FORM 18 (REV. 6-95)

Prescribed by GSA - FAR (48 CFR) 53.215-1(a)

ITEM NO. SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

NAME OF OFFEROR OR CONTRACTOR

2 55

CONTINUATION SHEET

REFERENCE NO. OF DOCUMENT BEING CONTINUED PAGE OF

(A) (B) (C) (D) (E) (F)

140G0225Q0074

2025-03.

3. The solicitation is a NOT A Small Business

Set-Aside. The North American Industry

Classification System (NAICS) code is 517410

(Satellite Telecommunications) and the size standard is $44.0 Million).

4. Vendors are required to be registered and active in System for Award Management (SAM) when submitting an offer or quotation. Register at https://www.sam.gov/index.html prior to submitting your quotation. See FAR provision

52.204-7.

00010 Base Year:

Starlink Mobile Priority Service Plan with 50GB

12-months of service which includes priority data and unlimited Mobile data on land - 12-month subscription on Starlink Kit in accordance with the Brand Name Description Starlink Internet

Services and Terms and Conditions contained herein.

Serial Number: HPCP301025801001

Subscription Number: AST-3157399-36736-60

The period of performance shall commence on the date of award through one year thereafter.

Anticipated Award Type: Firm-fixed-price

00020 Base Year:

Starlink Mobile Priority Service Plan with 50GB

12-months of service which includes priority data and unlimited Mobile data on land - 12-month subscription on Starlink Kit in accordance with the Brand Name Description Starlink Internet

Services and Terms and Conditions contained herein.

Serial Number: HPCP300845402301

Subscription Number: AST-3173223-70307-36

The period of performance shall commence on the

Continued ...

NSN 7540-01-152-8067 OPTIONAL FORM 336 (4-86)

3 55

CONTINUATION SHEET

REFERENCE NO. OF DOCUMENT BEING CONTINUED PAGE OF

(A) (B) (C) (D) (E) (F)

140G0225Q0074 date of award through one year thereafter.

Anticipated Award Type: Firm-fixed-price

00030 Base Year:

Starlink Mobile Priority Service Plan with 50GB

12-months of service which includes priority data and unlimited Mobile data on land - 12-month subscription on Starlink Kit in accordance with the Brand Name Description Starlink Internet

Services and Terms and Conditions contained herein.

Serial Number: HPUNE00000028796

Subscription Number: AST-3192819-87766-65

The period of performance shall commence on the date of award through one year thereafter.

Anticipated Award Type: Firm-fixed-price

00040 Base Year:

Starlink Mobile Priority Service Plan with 50GB

12-months of service which includes priority data and unlimited Mobile data on land - 12-month subscription on Starlink Kit in accordance with the Brand Name Description Starlink Internet

Services and Terms and Conditions contained herein.

Serial Number: HPCP403315404201

Subscription Number: SL-1981303-18075-71

The period of performance shall commence on the date of award through one year thereafter.

Anticipated Award Type: Firm-fixed-price

00050 Option Year One:

Starlink Mobile Priority Service Plan with 50GB

12-months of service which includes priority data and unlimited Mobile data on land - 12-month subscription on Starlink Kit in accordance with

4 55

CONTINUATION SHEET

REFERENCE NO. OF DOCUMENT BEING CONTINUED PAGE OF

(A) (B) (C) (D) (E) (F)

140G0225Q0074 the Brand Name Description Starlink Internet

Services and Terms and Conditions contained herein.

Serial Number: HPCP301025801001

Subscription Number: AST-3157399-36736-60

The period of performance for this option year

(One Year) will be added at the time of award.

Anticipated Award Type: Firm-fixed-price

(Option Line Item)

Anticipated Exercise Date 0

00060 Option Year One:

Starlink Mobile Priority Service Plan with 50GB

12-months of service which includes priority data and unlimited Mobile data on land - 12-month subscription on Starlink Kit in accordance with the Brand Name Description Starlink Internet

Services and Terms and Conditions contained herein.

Serial Number: HPCP300845402301

Subscription Number: AST-3173223-70307-36

The period of performance for this option year

(One Year) will be added at the time of award.

Anticipated Award Type: Firm-fixed-price

(Option Line Item)

Anticipated Exercise Date 0

00070 Option Year One:

Starlink Mobile Priority Service Plan with 50GB

12-months of service which includes priority data and unlimited Mobile data on land - 12-month subscription on Starlink Kit in accordance with the Brand Name Description Starlink Internet

Services and Terms and Conditions contained herein.

Serial Number: HPUNE00000028796

Subscription Number: AST-3192819-87766-65

5 55

CONTINUATION SHEET

REFERENCE NO. OF DOCUMENT BEING CONTINUED PAGE OF

(A) (B) (C) (D) (E) (F)

140G0225Q0074

The period of performance for this option year

(One Year) will be added at the time of award.

Anticipated Award Type: Firm-fixed-price

(Option Line Item)

Anticipated Exercise Date 0

00080 Option Year One:

Starlink Mobile Priority Service Plan with 50GB

12-months of service which includes priority data and unlimited Mobile data on land - 12-month subscription on Starlink Kit in accordance with the Brand Name Description Starlink Internet

Services and Terms and Conditions contained herein.

Serial Number: HPCP403315404201

Subscription Number: SL-1981303-18075-71

The period of performance for this option year

(One Year) will be added at the time of award.

Anticipated Award Type: Firm-fixed-price

(Option Line Item)

Anticipated Exercise Date 0

00090 Option Year Two:

Starlink Mobile Priority Service Plan with 50GB

12-months of service which includes priority data and unlimited Mobile data on land - 12-month subscription on Starlink Kit in accordance with the Brand Name Description Starlink Internet

Services and Terms and Conditions contained herein.

Serial Number: HPCP301025801001

Subscription Number: AST-3157399-36736-60

The period of performance for this option year

(One Year) will be added at the time of award.

Anticipated Award Type: Firm-fixed-price

(Option Line Item)

Anticipated Exercise Date 0

6 55

CONTINUATION SHEET

REFERENCE NO. OF DOCUMENT BEING CONTINUED PAGE OF

(A) (B) (C) (D) (E) (F)

140G0225Q0074

00100 Option Year Two:

Starlink Mobile Priority Service Plan with 50GB

12-months of service which includes priority data and unlimited Mobile data on land - 12-month subscription on Starlink Kit in accordance with the Brand Name Description Starlink Internet

Services and Terms and Conditions contained herein.

Serial Number: HPCP300845402301

Subscription Number: AST-3173223-70307-36

The period of performance for this option year

(One Year) will be added at the time of award.

Anticipated Award Type: Firm-fixed-price

(Option Line Item)

Anticipated Exercise Date 0

00110 Option Year Two:

Starlink Mobile Priority Service Plan with 50GB

12-months of service which includes priority data and unlimited Mobile data on land - 12-month subscription on Starlink Kit in accordance with the Brand Name Description Starlink Internet

Services and Terms and Conditions contained herein.

Serial Number: HPUNE00000028796

Subscription Number: AST-3192819-87766-65

The period of performance for this option year

(One Year) will be added at the time of award.

Anticipated Award Type: Firm-fixed-price

(Option Line Item)

Anticipated Exercise Date 0

00120 Option Year Two:

Starlink Mobile Priority Service Plan with 50GB

12-months of service which includes priority data and unlimited Mobile data on land - 12-month

7 55

CONTINUATION SHEET

REFERENCE NO. OF DOCUMENT BEING CONTINUED PAGE OF

(A) (B) (C) (D) (E) (F)

140G0225Q0074 subscription on Starlink Kit in accordance with the Brand Name Description Starlink Internet

Services and Terms and Conditions contained herein.

Serial Number: HPCP403315404201

Subscription Number: SL-1981303-18075-71

The period of performance for this option year

(One Year) will be added at the time of award.

Anticipated Award Type: Firm-fixed-price

(Option Line Item)

Anticipated Exercise Date 0

RFQ 140G0225Q0074

Table of Contents

Background Information DOI ELECTRONIC INVOICING Electronic Invoicing and Payment Requirements - Invoice Processing Platform (IPP) (February 2021) FISMA Information Technology Security Requirements Summary ICT Accessibility Requirements Statement per the Revised Section 508 of the Rehabilitation Act INTERNET PROTOCOL version 6 (June 2012) GS0199 Prevention of Malicious Code (JUN 2018) GS0231 Technical Liaison – Technical Clarification (DEC 2024) GS1131 Unilateral Deobligation of Unexpended Funds (MAY 2013) 52.212-5 Contract Terms and Conditions Required To Implement Statutes or Executive Orders— Commercial Products and Commercial Services. (Jan 2025) (DEVIATION FEB 2025) 52.217-9 Option To Extend the Term of the Contract. (MAR 2000) 52.252-2 Clauses Incorporated by Reference. (FEB 1998) Special Notice GS2101 Inquiries (FEB 2007) GS2115 Independent Review of Protests to the Agency (MAY 2024) 52.204-24 Representation Regarding Certain Telecommunications and Video Surveillance Services or Equipment. (NOV 2021) 52.204-26 Covered Telecommunications Equipment or Services-Representation. (OCT 2020) 52.204-29 Federal Acquisition Supply Chain Security Act Orders-Representation and Disclosures. (DEC 2023) 52.209-11 Representation by Corporations Regarding Delinquent Tax Liability or a Felony Conviction under any Federal Law. (FEB 2016) 52.212-3 Offeror Representations and Certifications-Commercial Products and Commercial Services.

(MAY 2024) (DEVIATION FEB 2025)

52.219-1 Small Business Program Representations. (FEB 2024) Evaluation of Options Basis for Award Quotation Instructions to Vendors Electronic Submission of Quotations – Required Questions – Cutoff 52.252-1 Solicitation Provisions Incorporated by Reference. (FEB 1998)

Clauses:

Background Information

The U.S. Geological Survey (USGS), Geological Hazards Science Center (GHSC) has a requirement for twelve (12) month subscription internet service plans on four (4) previously purchased GSA Starlink Flat High-Performance Kits.

The Geomagnetism Program has been utilizing Starlink internet services at four of its observatories through a subscription. It is necessary to ensure continuation of the current Starlink service to avoid outages at the four observatories, which are a DOI-designated mission essential function.

DOI ELECTRONIC INVOICING Electronic Invoicing and Payment Requirements - Invoice Processing Platform (IPP) (February 2021)

Payment requests must be submitted electronically through the U. S. Department of the Treasury's Invoice Processing Platform System (IPP).

"Payment request" means any request for contract financing payment or invoice payment by the Contractor.

To constitute a proper invoice, the payment request must comply with the requirements identified in the applicable Prompt Payment clause included in the contract, or the clause 52.212-4 Contract Terms and Conditions - Commercial Items included in commercial item contracts. The IPP website address is:

https://www.ipp.gov.

Under this contract, the following documents are required to be submitted as an attachment to the IPP invoice:

A copy of the Contractor’s internally generated invoice.

The Contractor must use the IPP website to register access and use IPP for submitting requests for payment. The Contractor Government Business Point of Contact (as listed in SAM) will receive enrollment instructions via email from the Federal Reserve Bank of St. Louis (FRBSTL) within 3 - 5 business days of the contract award date. Contractor assistance with enrollment can be obtained by contacting the IPP Production Helpdesk via email IPPCustomerSupport@fiscal.treasury.gov or phone (866) 973-3131.

If the Contractor is unable to comply with the requirement to use IPP for submitting invoices for payment, the Contractor must submit a waiver request in writing to the Contracting Officer with its proposal or quotation.

FISMA Information Technology Security Requirements Summary

COTS

Hardware or Software

Development or Maintenance of Custom Applications

Outsourced IT Services or On-site Support

Requirements herein are incorporated as part the Statement of Work/ Performance Work Statement:

1 N/A ☐ ☐ Background Investigations. The Contractor shall perform in accordance with clause “Security Requirements: Facility Access and Information Technology.”

2 N/A ☐ ☐

Contractor will have access to Privacy Act System of Records – Work under this contract will involve design, development or operation of (access to) system(s) of records containing personal information protected by the Privacy Act (5 U.S.C.

Section 552a).

Non-disclosure Agreement. Prior to receiving access to USGS computers, contractor employees shall be required to sign nondisclosure or other system security agreements, depending on the systems to be used and level of access granted.

Applies whenever any contractor employee has unsupervised access to a USGS system (even if only basic network, internet or email or will develop custom applications) such as:

• User Access to USGS IT Systems known to contain sensitive or proprietary data

• IT Support services (greater than user access)

• Development or Maintenance of Custom Applications

• On-site contractor support and management of IT system

• Off-site contractor Oversight and Management of IT System

• IT Security Services Privacy Act System: [Identify covered system(s) to which the contractor may have access] Click or tap here to enter text.

Work to be performed: [Summarize nature of the contractor's use of such records, such as]

• User-level access to system containing protected records

• Operation or maintenance of Privacy Act System of records or computers hosting such system

• Design or modification of a Privacy Act system of records]

The contractor is not required or permitted to respond to requests for Privacy Act data or to make decisions about releases of data under the Act. Contractor shall ensure its employees are instructed to safeguard against improper use or release of such data and advise them that violation of the Act may involve criminal penalties. The contractor will comply with FAR clause 52.224-2, Privacy Act, COTS

Hardware or Software

Development or Maintenance of Custom Applications

Outsourced IT Services or On-site Support

Requirements herein are incorporated as part the Statement of Work/ Performance Work Statement:

incorporated herein by reference and with DOI Privacy Act regulations at 43 CFR 2, Subpart D

3 N/A ☐ ☐ Training. The Contractor shall perform in accordance with clause “Security Requirements:

Facility Access and Information Technology” - Contractor employees must successfully complete DOI’s end- user computer security awareness training prior to being granted access to DOI data or being issued a user account. Training must be renewed annually. Additionally, the contract employees must sign a Statement of Responsibility (SOR) that states they have read the appropriate Rules of Behavior and other applicable Information security policies.

4 N/A ☐ ☐ Personnel Changes. The Contractor shall perform in accordance with clause “Security Requirements: Facility Access and Information Technology” - The contractor must notify the COR immediately when an employee working on a DOI system is reassigned or leaves the contractor’s employ.

Applies whenever any contractor employee has unsupervised access to a USGS system (even if only basic network, internet or email or will develop custom applications) such as:

• User Access to USGS IT Systems known to contain sensitive or proprietary data

• IT Support services (greater than user access)

• Development or Maintenance of Custom Applications *

• On-site contractor support and management of IT system

• Off-site contractor Oversight and Management of IT System

• IT Security Services * *May not be applicable for off-site performance.

5 N/A ☐ ☐ Contractor Location. The Contractor shall perform in accordance with clause “Security Requirements: Facility Access and Information Technology.”

Applies whenever any contractor employee has unsupervised access to a USGS system (even if only basic network, COTS

Hardware or Software

Development or Maintenance of Custom Applications

Outsourced IT Services or On-site Support

Requirements herein are incorporated as part the Statement of Work/ Performance Work Statement:

internet or email or will develop custom applications) such as:

• User Access to USGS IT Systems known to contain sensitive or proprietary data

• IT Support services (greater than user access)

• Development or Maintenance of Custom Applications

• On-site contractor support and management of IT system

• Off-site contractor Oversight and Management of IT System

• IT Security Services

No portion of the services to be performed hereunder may be performed outside the United States without the express written permission of the Contracting Officer.

If services are proposed to be performed abroad, the Contractor shall provide an acceptable security plan that addresses mitigation of problems related to communication, control, and protecting the confidentiality, integrity, and availability of IT systems and information.

A Security Plan Template is available upon request from the Contracting Officer.

6 N/A ☐ N/A Applicable Standards. The Contractor shall perform in accordance with clause “Security Requirements: Facility Access and Information Technology” - Contractor must follow the DOI System Development Life Cycle (SDLC), NIST SP 800-64 and the DOI SDLC Security Integration Guide.

7 N/A ☐ ☐ Asset Valuation-Security Categorization:

The Contractor shall perform in accordance with clause “Security Requirements: Facility Access and Information Technology.”

☐User Access to USGS IT Systems - The Government is responsible for security categorization on USGS systems to which the Contractor may have access under this contract.

☐IT Support Services greater than User- Level Services Choose One:

https://insight.usgs.gov/aei/offices/oa/oag/AOP/guidefordevelopingsecurityplans.pdf

COTS

Hardware or Software

Development or Maintenance of Custom Applications

Outsourced IT Services or On-site Support

Requirements herein are incorporated as part the Statement of Work/ Performance Work Statement:

☐The Government is responsible for security categorization on USGS systems to which the Contractor may have access under this contract.

☐The Government has defined the [insert name of system to be developed, operated or maintained by the contractor] to be a [Major Application], [Minor Application] or [General support system] as defined in OMB Circular A- 130, Appendix III and NIST SP800-53.

The following risk and sensitivity levels have been assigned based on the FIPS 199 and the NIST SP 800-60.

Mission impact: Click or tap here to enter text.

Data sensitivity:Click or tap here to enter text.

Risk Level:Click or tap here to enter text.

Bureau/departmental/national criticality: Click or tap here to enter text.

☐Off-Site Oversight and Management of IT System- The Contractor shall use the FIPS 199 and the NIST SP 800- 60 to determine information types and security categorization based on mission impact, data sensitivity, risk level, and bureau / departmental / national criticality for Contractor-owned and operated systems used to provide services under this contract. Solicitations must include either the complete publication or a reference to public facilities, such as a website or office, where it may be accessed.

☐IT Security Services - Applies only if the purpose of the contract includes obtaining asset valuation services. The Contractor shall use the FIPS 199 and the NIST SP 800- 60 to determine information types and security categorization based on mission impact, data sensitivity, risk level, and bureau / departmental / national criticality for Contractor-owned and operated systems used to provide services under this contract. Solicitations must include either the complete publication or a reference to public facilities, such as a website or office, where it may be accessed.

COTS

Hardware or Software

Development or Maintenance of Custom Applications

Outsourced IT Services or On-site Support

Requirements herein are incorporated as part the Statement of Work/ Performance Work Statement:

8 ☒ ☐ The Government shall be granted unlimited rights in software or data produced hereunder as described in FAR clause 52.227-17, Rights in Data— Special Works, incorporated by reference herein.

Select either COTS or custom software language as applicable. If both apply, identify software/data deliverables governed by each clause.

Property Rights.

1. For Federal Supply Schedule orders or orders under an existing contract, rights to software acquired hereunder are set forth in the basic contract.

2. For open market contracts, the Government's rights in software delivered hereunder shall be as described in software developer's commercial software license agreement or the clause FAR 52.227-19, Commercial Computer Software- Restricted Rights, whichever is greater.

9 N/A ☐ ☐ Independent Verification and Validation (IV&V). The Government is responsible for independent software verification and validation prior to being moved into production.

On-Site Contractor Support and Management of IT System Choose One:

☐Software will be independently verified and validated by the Government or another selected contractor prior to being moved into production.

☐Contractor will ensure that independent verification and validation is performed on software deployed on contractor managed systems containing USGS data, in accordance with DOI SDLC Security Integration Guide

☐Off-Site Contractor Operation and

COTS

Hardware or Software

Development or Maintenance of Custom Applications

Outsourced IT Services or On-site Support

Requirements herein are incorporated as part the Statement of Work/ Performance Work Statement:

Management of IT System Contractor will ensure that independent verification and validation is performed on software deployed on contractor managed systems containing USGS data, in accordance with DOI SDLC Security Integration Guide

☐IT Security Service - Applies only if the purpose of the contract includes obtaining IV&V services.

10 N/A ☐ Applies if the purpose of the contract includes obtaining C&A services.

☐ Certification & Accreditation.

☐User Access to USGS IT Systems or IT Supports Services (Greater than User Access) Certification and Accreditation on USGS systems to which the Contractor may have access under this contract will be conducted by the Government or another of its contractors.

☐Development or Maintenance of Custom Applications The contractor will perform Certification and Accreditation (C&A) services on the application developed or maintained hereunder prior to going into production. The application must be re-accredited every three years or whenever there is a major change that affects security. C&A documents will be provided to the COR in both hard copy and electronic forms. The contractor must follow NIST SP 800-37, 800-18, 800-30, 800-60, 800-53A, Federal Information Processing Standard (FIPS) 199 and 200, the associated DOI guides/templates, the DOI Security Test & Evaluation (ST&E) Guide, and the DOI Privacy Impact Assessment. NIST documents are available on the internet at http://csrc.nist.gov/publications/nistpubs/ FIPS documents are available on the internet at http://csrc.nist.gov/publications/nistpubs/. The contractor may request copies of DOI documents by contacting the Contracting Officer. The government reserves the right to conduct the ST&E using either Government personnel or an independent contractor. The contractor will take immediate and timely action to correct or mitigate any weaknesses discovered as necessary to bring the application or system into compliance with the above requirement.

http://csrc.nist.gov/publications/nistpubs/ http://csrc.nist.gov/publications/nistpubs/

COTS

Hardware or Software

Development or Maintenance of Custom Applications

Outsourced IT Services or On-site Support

Requirements herein are incorporated as part the Statement of Work/ Performance Work Statement:

☐On-Site Contractor Support and Management of IT System or Off-Site Contractor Operation and Management of IT System The Contractor must maintain systems that are compliant with NIST SP 800-18, 800-30, 800-37, 800-53A, 800-60, Federal Information Processing Standard (FIPS) 199 and 200, the associated DOI guides/templates, the DOI Security Test & Evaluation (ST&E) Guide, and the DOI Privacy Impact Assessment. As required by the above, Major Applications and General Support Systems shall be certified and accredited (C&A) prior to going into production and re-accredited every three years or whenever there is a major change that affects security. C&A documents will be provided to the COR in both hard copy and electronic forms. NIST documents are available on the internet at http://csrc.nist.gov/publications/nistpubs/. The contractor may request copies of DOI documents by contacting the Contracting Officer. The government will reserve the right to conduct the ST&E, using either Government personnel or an independent contractor. The contractor will take immediate and timely action to correct or mitigate any weaknesses discovered as necessary to bring the application or system into compliance with the above requirement.

11 N/A for COTS

HW & SW,

User Access to

USGS IT

Systems (other than IT services), IT Support Services (User Level or greater access)

N/A ☐ Internet Logon Banner. The Contractor shall perform in accordance with clause “Security Requirements: Facility Access and Information Technology.”

☐Develop or Maintenance of Custom Applications or Onsite Contractor Support and Management of IT System or Off-site Contractor Oversight and Management of IT System – Web based applications developed or maintained under this contract must contain a USGS approved logon Banner:

https://portal.doi.net/CIO/ITPMgmt/Documents/IT Standards/IT Security/DOI Security Control Standards (based on NIST SP 800-53 Revision 3)/Access Control v1.4.pdf

12 N/A ☐ ☐ Incident Reporting. The Contractor shall perform in accordance with contract clause “Security Requirements: Facility Access and Information Technology” - The contractor must report computer security incidents http://csrc.nist.gov/publications/nistpubs/ https://portal.doi.net/CIO/ITPMgmt/Documents/IT%20Standards/IT%20Security/DOI%20Security%20Control%20Standards%20(based%20on%20NIST%20SP%20800-53%20Revision%203)/Access%20Control%20v1.4.pdf https://portal.doi.net/CIO/ITPMgmt/Documents/IT%20Standards/IT%20Security/DOI%20Security%20Control%20Standards%20(based%20on%20NIST%20SP%20800-53%20Revision%203)/Access%20Control%20v1.4.pdf https://portal.doi.net/CIO/ITPMgmt/Documents/IT%20Standards/IT%20Security/DOI%20Security%20Control%20Standards%20(based%20on%20NIST%20SP%20800-53%20Revision%203)/Access%20Control%20v1.4.pdf https://portal.doi.net/CIO/ITPMgmt/Documents/IT%20Standards/IT%20Security/DOI%20Security%20Control%20Standards%20(based%20on%20NIST%20SP%20800-53%20Revision%203)/Access%20Control%20v1.4.pdf https://portal.doi.net/CIO/ITPMgmt/Documents/IT%20Standards/IT%20Security/DOI%20Security%20Control%20Standards%20(based%20on%20NIST%20SP%20800-53%20Revision%203)/Access%20Control%20v1.4.pdf

COTS

Hardware or Software

Development or Maintenance of Custom Applications

Outsourced IT Services or On-site Support

Requirements herein are incorporated as part the Statement of Work/ Performance Work Statement:

affecting DOI data or systems in accordance with the DOI Computer Incident Response Guide.

13 ☒ ☐ ☐ Quality Control. All software or hardware purchased must be free of malicious code such as viruses, Trojan horse programs, worms, spyware, etc. Validation of this must be written into the contract.

14 N/A N/A ☐ Self-Assessment. The Contractor shall perform in accordance with contract clause “Security Requirements: Facility Access and Information Technology” - The contractor must conduct an annual self-assessment in accordance with annual DOI guidance on all information systems in production.

15 N/A ☐ ☐ Vulnerability Analysis. Vulnerability Analysis on USGS systems to which the Contractor may have access under this contract will be conducted by the Government or another of its contractors.

16 N/A ☐ ☐ Logon Banner. Contractor employees who access DOI information systems must acknowledge a government-approved legal warning banner prior to logging on to the system. This includes contractor owned information systems hosting DOI data.

17 N/A ☐ ☐ Security Controls.

The Contractor shall perform in accordance with contract clause “Security Requirements:

Facility Access and Information Technology”

– The Contractor shall ensure compliance with the security control requirements of the current version of NIST SP 800-53, Rev.1, which are applicable to the security categorization of the data or system. FIPS 199 and the NIST SP 800-60 will be used to determine information types and security categorizations.

18 N/A N/A ☐ Contingency Plan.

The Contractor shall perform in accordance with contract clause “Security Requirements:

Facility Access and Information Technology.”

For IT Support Services: The Contractor shall submit a contingency plan in accordance with NIST SP 800-34 and DOI IT Systems Contingency Plan Guide.

ICT Accessibility Requirements Statement per the Revised Section 508 of the Rehabilitation Act

Starlink internet service purchase

E201.1 Scope ICT that is procured, developed, maintained, or used by agencies shall conform to the Revised 508 Standards.

E206.1 General. Where components of ICT are hardware and transmit information or have a user interface, such components shall conform to the requirements in Chapter 4.

E207.1 General Where components of ICT are software and transmit information or have a user interface, such components shall conform to E207 and the requirements in Chapter 5 Exception from E207.1 General: Software that is assistive technology and that supports the accessibility services of the platform shall not be required to conform to the requirements in Chapter 5.

E207.2 WCAG Conformance User interface components, as well as the content of platforms and applications, shall conform to Level A and Level AA Success Criteria and Conformance Requirements in WCAG 2.0 (incorporated by reference, see 702.10.1).

Exceptions from E207.2 WCAG Conformance:

● Software that is assistive technology and that supports the accessibility services of the platform shall not be required to conform to E207.2.

● Non-web software shall not be required to conform to the following four Success Criteria in WCAG 2.0: 2.4.1 Bypass Blocks; 2.4.5 Multiple Ways; 3.2.3 Consistent Navigation; and 3.2.4 Consistent Identification.

● Non-Web software shall not be required to conform to Conformance Requirement 3 Complete Processes in WCAG 2.0.

E208.1 General Where an agency provides support documentation or services for ICT, such documentation and services shall conform to the requirements in Chapter 6.

E302 Functional Performance Criteria

302.1 Without Vision. Where a visual mode of operation is provided, ICT shall provide at least one mode of operation that does not require user vision.

302.2 With Limited Vision. Where a visual mode of operation is provided, ICT shall provide at least one mode of operation that enables users to make use of limited vision.

302.3 Without Perception of Color. Where a visual mode of operation is provided, ICT shall provide at least one visual mode of operation that does not require user perception of color.

302.4 Without Hearing. Where an audible mode of operation is provided, ICT shall provide at least one mode of operation that does not require user hearing.

302.5 With Limited Hearing. Where an audible mode of operation is provided, ICT shall provide at least one mode of operation that enables users to make use of limited hearing.

302.6 Without Speech. Where speech is used for input, control, or operation, ICT shall provide at least one mode of operation that does not require user speech.

302.7 With Limited Manipulation. Where a manual mode of operation is provided, ICT shall provide at least one mode of operation that does not require fine motor control or simultaneous manual operations.

302.8 With Limited Reach and Strength. Where a manual mode of operation is provided, ICT shall provide at least one mode of operation that is operable with limited reach and limited strength.

302.9 With Limited Language, Cognitive, and Learning Abilities. ICT shall provide features making its use by individuals with limited cognitive, language, and learning abilities simpler and easier.

501.1 Scope - The requirements of Chapter 5 shall apply to software where required by 508 Chapter 2 (Scoping Requirements), 255 Chapter 2 (Scoping Requirements), and where otherwise referenced in any other chapter of the Revised 508 Standards or Revised 255 Guidelines.

Exception from E501.1 Scope: Where Web applications do not have access to platform accessibility services and do not include components that have access to platform accessibility services, they shall not be required to conform to 502 or 503 provided that they conform to Level A and Level AA Success Criteria and Conformance Requirements in WCAG 2.0 (incorporated by reference, see 702.10.1).

INTERNET PROTOCOL version 6 (June 2012)

1. Any system hardware, software, firmware and/or networked component (voice, video or data) developed, procured, or acquired in support and/or performance of this contract shall be capable of transmitting, receiving, processing, forwarding and storing digital information across system boundaries utilizing system packets that are formatted in accordance with commercial standards of Internet Protocol (IP) version 6 (IPv6) as set forth in the USGv6 Profile (NIST Special Publication 500-267) and corresponding declarations of conformance defined in the USGv6 Test Program. In addition, this system shall maintain interoperability with IPv4 systems and provide at least the same level of performance and reliability capabilities of IPv4 products.

2. Specifically, any new IP product or system developed, acquired, or produced must:

a) Interoperate with both IPv6 and IPv4 systems and products, and

b) Have available contractor/vendor IPv6 technical support for development and implementation and fielded product management.

3. As IPv6 evolves, the Contractor commits to upgrading or providing an appropriate migration path for each item developed, delivered or utilized at no additional cost to the Government. The Contractor shall retrofit all non-IPv6 capable equipment, as defined above, that is fielded under this contract with IPv6 capable equipment, at no additional cost to the Government.

4. The contractor shall provide technical support for both IPv4 and IPv6.

5. Any system or software must be able to operate on networks supporting IPv4, IPv6 or one that supports both.

6. Any product whose non-compliance is discovered and made known to the Contractor within one year after acceptance shall be upgraded, modified or replaced to bring it into compliance at no additional cost to the Government.

GS0199 Prevention of Malicious Code (JUN 2018)

(a) Definitions

Malicious code is a computer code developed for the purpose of causing some form of intentional damage to computer systems or networks. Malicious code may be a complete program or code imbedded in software programs that appear to provide useful functions. The term includes computer viruses and other destructive programs, such as "Trojan Horses" and network "worms."

(b) The contractor must have in place an anti-virus procedure to ensure that media supplied is uncontaminated by malicious code.

(c) The contractor is required to scan all delivered software to insure it is free of malicious code prior to its installation or operation on USGS-owned computers or contractor-owned computers connected to USGS computer systems or networks. Contractors using diagnostics software disks or connecting to a non-USGS computer while performing repairs or upgrades to a USGS computer will scan the serviced computer's drive(s) to insure they are free of malicious code upon completion of the service call, or prior to return of serviced equipment, if servicing is performed off-site.

GS0231 Technical Liaison – Technical Clarification (DEC 2024)

a) The performance required herein shall be subject to the technical clarification of the Technical Liaison (TL) as identified below. As used herein, "technical clarification" is defined as communication to help the contractor fully understand the requirements.

(b) The Technical Liaison is not delegated any Contracting Officer’s Representative responsibilities.

(c) The Technical Liaison may not modify the requirements in any way. All modifications must be authorized by the Contracting Officer.

(d) The contractor shall immediately notify the Contracting Officer, in writing, if they believe the Technical Liaison is directing work outside the requirements of this contract. The contractor may not be reimbursed for any work outside the requirements of this contract.

(e) The Technical Liaison assigned for this contract is: (The Technical Liaison will be added at the time of award) Telelphone: [xxx] Email: [xxx] U.S. Geological Survey Address and Mail Stop: [xxx]

(f) Only the Contracting Officer may designate a new Technical Liaison.

GS1131 Unilateral Deobligation of Unexpended Funds (MAY 2013)

The contractor shall submit all invoices under the award no later than 90 calendar days after the period of performance has expired, unless a request for extension has been submitted to the Contracting Officer.

After 120 days has passed since the expiration of the performance period, the government reserves the right to issue a unilateral modification deobligating any unexpended funds, and to initiate closeout procedures.

52.212-5 Contract Terms and Conditions Required To Implement Statutes or Executive Orders— Commercial Products and Commercial Services. (Jan 2025) (DEVIATION FEB 2025)

As prescribed in 12.301(b)(4), insert the following clause:

CONTRACT TERMS AND CONDITIONS REQUIRED TO IMPLEMENT STATUTES OR

EXECUTIVE ORDERS—COMMERCIAL PRODUCTS AND COMMERCIAL SERVICES (JAN 2025)

[(DEVIATION FEB 2025)]

(a) The Contractor shall comply with the following Federal Acquisition Regulation (FAR) clauses, which are incorporated in this contract by reference, to implement provisions of law or Executive orders applicable to acquisitions of commercial products and commercial services:

(1) 52.203-19, Prohibition on Requiring Certain Internal Confidentiality Agreements or Statements (Jan 2017) (section 743 of Division E, Title VII, of the Consolidated and Further Continuing Appropriations Act, 2015 (Pub. L. 113-235) and its successor provisions in subsequent appropriations acts (and as extended in continuing resolutions)).

(2) 52.204-23, Prohibition on Contracting for Hardware, Software, and Services Developed or Provided by Kaspersky Lab Covered Entities (Dec 2023) (Section 1634 of Pub. L. 115-91).

(3) 52.204-25, Prohibition on Contracting for Certain Telecommunications and Video Surveillance Services or Equipment. (Nov 2021) (Section 889(a)(1)(A) of Pub. L. 115-232).

(4) 52.209-10, Prohibition on Contracting with Inverted Domestic Corporations (Nov 2015).

(5) 52.232-40, Providing Accelerated Payments to Small Business Subcontractors (Mar 2023) (31 U.S.C. 3903 and 10 U.S.C. 3801).

(6) 52.233-3, Protest After Award (Aug 1996) (31 U.S.C. 3553).

(7) 52.233-4, Applicable Law for Breach of Contract Claim (Oct 2004) (Public Laws 108-77 and 108-78 ( 19 U.S.C. 3805 note)).

(b) The Contractor shall comply with the FAR clauses in this paragraph (b) that the Contracting Officer has indicated as being incorporated in this contract by reference to implement provisions of law or Executive orders applicable to acquisitions of commercial products and commercial services:

[Contracting Officer check as appropriate.]

☐(1) 52.203-6, Restrictions on Subcontractor Sales to the Government (Jun 2020), with Alternate I (Nov 2021) (41 U.S.C. 4704 and 10 U.S.C. 4655).

☐(2) 52.203-13, Contractor Code of Business Ethics and Conduct (Nov 2021) (41 U.S.C. 3509)).

☐(3) 52.203-15, Whistleblower Protections under the American Recovery and Reinvestment Act of 2009 (Jun 2010) (Section 1553 of Pub. L. 111-5). (Applies to contracts funded by the American Recovery and Reinvestment Act of 2009.)

☒(4) 52.203-17, Contractor Employee Whistleblower Rights (Nov 2023) (41 U.S.C. 4712); this clause does not apply to contracts of DoD, NASA, the Coast Guard, or applicable elements of the intelligence community—see FAR 3.900(a).

☒(5) 52.204-10, Reporting Executive Compensation and First-Tier Subcontract Awards (Jun 2020) (Pub.

L. 109-282) ( 31 U.S.C. 6101 note).

__(6) [Reserved].

☐(7) 52.204-14, Service Contract Reporting Requirements (Oct 2016) (Pub. L. 111-117, section 743 of Div. C).

☐(8) 52.204-15, Service Contract Reporting Requirements for Indefinite-Delivery Contracts (Oct 2016) (Pub. L. 111-117, section 743 of Div. C).

☒(9) 52.204-27, Prohibition on a ByteDance Covered Application (Jun 2023) (Section 102 of Division R of Pub. L. 117-328).

☐(10) 52.204-28, Federal Acquisition Supply Chain Security Act Orders—Federal Supply Schedules, Governmentwide Acquisition Contracts, and Multi-Agency Contracts. (Dec 2023) (Pub. L. 115–390, title II).

☒(11) (i) 52.204-30, Federal Acquisition Supply Chain Security Act Orders—Prohibition. (Dec 2023) (Pub. L. 115–390, title II).

☐(ii) Alternate I (Dec 2023) of 52.204-30.

☒(12) 52.209-6, Protecting the Government’s Interest When Subcontracting with Contractors Debarred, Suspended, or Proposed for Debarment. (Nov 2021) (31 U.S.C. 6101 note).

☐(13) 52.209-9, Updates of Publicly Available Information Regarding Responsibility Matters (Oct 2018) (41 U.S.C. 2313).

__(14) [Reserved].

☐(15) 52.219-3, Notice of HUBZone Set-Aside or Sole-Source Award (Oct 2022) (15 U.S.C. 657a).

☐(16) 52.219-4, Notice of Price Evaluation Preference for HUBZone Small Business Concerns (Oct 2022) (if the offeror elects to waive the preference, it shall so indicate in its offer) (15 U.S.C. 657a).

__(17) [Reserved]

☒(18) (i) 52.219-6, Notice of Total Small Business Set-Aside (Nov 2020) (15 U.S.C. 644).

☐(ii) Alternate I (Mar 2020) of 52.219-6.

☐(19) (i) 52.219-7, Notice of Partial Small Business Set-Aside (Nov 2020) (15 U.S.C. 644).

☐(ii) Alternate I (Mar 2020) of 52.219-7.

☐(20) 52.219-8, Utilization of Small Business Concerns (Feb 2024) (15 U.S.C. 637(d)(2) and (3)).

☐(21) (i) 52.219-9, Small Business Subcontracting Plan (Sep 2023) (15 U.S.C. 637(d)(4)).

☐(ii) Alternate I (Nov 2016) of 52.219-9.

☐(iii) Alternate II (Nov 2016) of 52.219-9.

☐(iv) Alternate III (Jun 2020) of 52.219-9.

☐(v) Alternate IV (Sep 2023) of 52.219-9.

☐(22) (i) 52.219-13, Notice of Set-Aside of Orders (Mar 2020) (15 U.S.C. 644(r)).

☐(ii) Alternate I (Mar 2020) of 52.219-13.

☐(23) 52.219-14, Limitations on Subcontracting (Oct 2022) (15 U.S.C. 657s).

☐(24) 52.219-16, Liquidated Damages—Subcontracting Plan (Sep 2021) (15 U.S.C. 637(d)(4)(F)(i)).

☐(25) 52.219-27, Notice of Set-Aside for, or Sole-Source Award to, Service-Disabled Veteran-Owned Small Business (SDVOSB) Concerns Eligible Under the SDVOSB Program (Feb 2024) (15 U.S.C. 657f).

☒(26) (i) 52.219-28, Post Award Small Business Program Rerepresentation (Feb 2024) (15 U.S.C.

632(a)(2)).

☐(ii) Alternate I (Mar 2020) of 52.219-28.

☐(27) 52.219-29, Notice of Set-Aside for, or Sole-Source Award to, Economically Disadvantaged Women- Owned Small Business Concerns (Oct 2022) (15 U.S.C. 637(m)).

☐(28) 52.219-30, Notice of Set-Aside for, or Sole-Source Award to, Women-Owned Small Business Concerns Eligible Under the Women-Owned Small Business Program (Oct 2022) (15 U.S.C. 637(m)).

☐(29) 52.219-32, Orders Issued Directly Under Small Business Reserves (Mar 2020) (15 U.S.C. 644(r)).

☐(30) 52.219-33, Nonmanufacturer Rule (Sep 2021) (15 U.S.C. 637(a)(17)).

☒(31) 52.222-3, Convict Labor (Jun 2003) (E.O.11755).

☒(32) 52.222-19, Child Labor-Cooperation with Authorities and Remedies (Feb 2024).

☒(33) 52.222-21, Prohibition of Segregated Facilities (Apr 2015).

☒(34) (i) 52.222-26, Equal Opportunity (Sep 2016) (E.O.11246).

☐(ii) Alternate I (Feb 1999) of 52.222-26.

☐(35) (i) 52.222-35, Equal Opportunity for Veterans (Jun 2020) (38 U.S.C. 4212).

☐(ii) Alternate I (Jul 2014) of 52.222-35.

☒(36) (i) 52.222-36, Equal Opportunity for Workers with Disabilities (Jun 2020) (29 U.S.C. 793).

☐(ii) Alternate I (Jul 2014) of 52.222-36.

☐(37) 52.222-37, Employment Reports on Veterans (Jun 2020) (38 U.S.C. 4212).

☐(38) 52.222-40, Notification of Employee Rights Under the National Labor Relations Act (Dec 2010) (E.O. 13496).

☐(39) (i) 52.222-50, Combating Trafficking in Persons (Nov 2021) (22 U.S.C. chapter 78 and E.O.

13627).

☐(ii) Alternate I (Mar 2015) of 52.222-50 (22 U.S.C. chapter 78 and E.O. 13627).

☐(40) 52.222-54, Employment Eligibility Verification (May 2022) (Executive Order 12989). (Not applicable to the acquisition of commercially available off-the-shelf items or certain other types of commercial products or commercial services as prescribed in FAR 22.1803.)

☐(41) (i) 52.223-9, Estimate of Percentage of Recovered Material Content for EPA–Designated Items (May 2008) ( 42 U.S.C. 6962(c)(3)(A)(ii)). (Not applicable to the acquisition of commercially available off the-shelf items.)

☐(ii) Alternate I (May 2008) of 52.223-9 (42 U.S.C. 6962(i)(2)(C)). (Not applicable to the acquisition of commercially available off-the-shelf items.)

☐(42) 52.223-11, Ozone-Depleting Substances and High Global Warming Potential Hydrofluorocarbons (May 2024) (42 U.S.C. 7671, et seq.).

☐(43) 52.223-12, Maintenance, Service, Repair, or Disposal of Refrigeration Equipment and Air Conditioners (May 2024) (42 U.S.C. 7671, et seq.).

☐(44) 52.223-20, Aerosols (May 2024) (42 U.S.C. 7671, et seq.).

☐(45) 52.223-21, Foams (May 2024) (42 U.S.C. 7671, et seq.).

☒(46) 52.223-23, Sustainable Products and Services (May 2024) (DEVIATION FEB 2025) (7 U.S.C.

8102, 42 U.S.C. 6962, 42 U.S.C. 8259b, and 42 U.S.C. 7671l).

☐(47) (i) 52.224-3 Privacy Training (Jan 2017) (5 U.S.C. 552 a).

☐(ii) Alternate I (Jan 2017) of 52.224-3.

☐(48) (i) 52.225-1, Buy American-Supplies (Oct 2022) (41 U.S.C. chapter 83).

☐(ii) Alternate I (Oct 2022) of 52.225-1.

☐(49) (i) 52.225-3, Buy American-Free Trade Agreements-Israeli Trade Act (NOV 2023) (19 U.S.C. 3301 note, 19 U.S.C. 2112 note, 19 U.S.C. 3805 note, 19 U.S.C. 4001 note, 19 U.S.C. chapter 29 (sections 4501- 4732), Public Law 103-182, 108-77, 108-78, 108-286, 108-302, 109-53, 109-169, 109-283, 110-138, 112-41, 112-42, and 112-43.

☐(ii) Alternate I [Reserved].

☐(iii) Alternate II (Jan 2025) of 52.225-3.

☐(iv) Alternate III (Feb 2024) of 52.225-3.

☐(v) Alternate IV (Oct 2022) of 52.225-3.

☐(50) 52.225-5, Trade Agreements (NOV 2023) (19 U.S.C. 2501, et seq., 19 U.S.C. 3301 note).

☒(51) 52.225-13, Restrictions on Certain Foreign Purchases (Feb 2021) (E.O.’s, proclamations, and statutes administered by the Office of Foreign Assets Control of the Department of the Treasury).

☐(52) 52.225-26, Contractors Performing Private Security Functions Outside the United States (Oct 2016) (Section 862, as amended, of the National Defense Authorization Act for Fiscal Year 2008; 10 U.S.C.

Subtitle A, Part V, Subpart G Note).

☐(53) 52.226-4, Notice of Disaster or Emergency Area Set-Aside (Nov 2007) (42 U.S.C. 5150).

☐(54) 52.226-5, Restrictions on Subcontracting Outside Disaster or Emergency Area (Nov 2007) (42 U.S.C. 5150).

☒(55) 52.226-8, Encouraging Contractor Policies to Ban Text Messaging While Driving (May 2024) (E.O.

13513).

☐(56) 52.229-12, Tax on Certain Foreign Procurements (Feb 2021).

☐(57) 52.232-29, Terms for Financing of Purchases of Commercial Products and Commercial…