REQUEST FOR QUOTATION

(THIS IS NOT AN ORDER)

THIS RFQ IS IS NOT A SMALL BUSINESS SET-ASIDE

15. DATE OF QUOTATION

16. SIGNER

a. NAME (Type or print)

c. TITLE (Type or print)

b. TELEPHONE

AREA CODE

NUMBER

STANDARD FORM 18 (REV. 6/1995)

Prescribed by GSA-FAR (48 CFR) 53.215-1(a)

AUTHORIZED FOR LOCAL REPRODUCTION

Previous edition not usable

8. TO:

b. COMPANYa. NAME

c. STREET ADDRESS

d. CITY e. STATE f. ZIP CODE

9. DESTINATION

a. NAME OF CONSIGNEE

b. STREET ADDRESS

d. STATE e. ZIP CODE

7. DELIVERY

FOB DESTINATION

OTHER

(See Schedule)

10. PLEASE FURNISH QUOTATIONS TO THE

ISSUING OFFICE IN BLOCK 5a ON OR BEFORE CLOSE OF BUSINESS (Date)

IMPORTANT: This is a request for information and quotations furnished are not offers. If you are unable to quote, please so indicate on this form and return it to the address in Block 5a. This request does not commit the Government to pay any costs incurred in the preparation of the submission of this quotation or to contract for supplies or service. Supplies are of domestic origin unless otherwise indicated by quoter. Any representations and/or certifications attached to this Request for Quotation must be completed by the quoter.

11. SCHEDULE (Include applicable Federal, State and local taxes)

ITEM NUMBER

(a)

SUPPLIES/SERVICES

(b)

QUANTITY

(c)

UNIT

(d)

UNIT PRICE

(e)

AMOUNT

(f)

12. DISCOUNT FOR PROMPT PAYMENT

a. 10 CALENDAR DAYS (%) b. 20 CALENDAR DAYS (%) c. 30 CALENDAR DAYS (%) d. CALENDAR DAYS

NUMBER PERCENTAGE

NOTE: Additional provisions and representations are are not attached.

13. NAME AND ADDRESS OF QUOTER

a. NAME OF QUOTER

b. STREET ADDRESS

c. COUNTY

d. CITY e. STATE f. ZIP CODE

14. SIGNATURE OF PERSON AUTHORIZED TO

SIGN QUOTATION

PAGE OF PAGES

1. REQUEST NUMBER 2. DATE ISSUED 3. REQUISITION/PURCHASE REQUEST NUMBER 4. CERT. FOR NAT. DEF.

UNDER BDSA REG. 2

AND/OR DMS REG. 1

RATING

5a. ISSUED BY 6. DELIVER BY (Date)

NAME TELEPHONE NUMBER

AREA CODE NUMBER

c. CITY

5b. FOR INFORMATION CALL (NO COLLECT CALLS)

MS 973

Box 25046 Denver Federal Center

USGS OAG DENVER ACQUISITION BRANCH

PO BOX 25046

204 DENVER FEDERAL CENTER

DENVER CO 80225-0046

140G0226Q0038

Lisa Williams

236-9327 USGS Mineral & Environmental Res.

80225

04/22/2026

05/05/2026 1430 MD

Denver

CO

LABVIEW SOFTWARE BRAND NAME OR EQUAL

DEVELOPMENT/TRAINING SERVICES for the

USGS, Denver Argon Geochronology Lab

(DAGL), Denver, CO.

1. This is a Solicitation issued as a

Request for Quotations (RFQ). Submit written quotations on RFQ Number

140G0226Q0038. This solicitation will utilize the policies in the Federal

Acquisition Regulations (FAR) Part 12, Acquisition of Commercial Products and

Commercial Services, and in conjunction with the policies and procedures for evaluation, and award prescribed in FAR

Part 13.1 Simplified Procedures, as

Continued...

1 65

CONTINUATION SHEET

REFERENCE NO. OF DOCUMENT BEING CONTINUED PAGES

NAME OF OFFEROR OR CONTRACTOR

SUPPLIES/SERVICES

(B)

UNIT

(D)

UNIT PRICE

(E)

AMOUNT

(F)

OPTIONAL FORM 336 (4-86)

Sponsored by GSA FAR (48 CFR) 53.110

ITEM NO.

(A)

QUANTITY

(C)

NSN 7540-01-152-8067

appropriate for this acquisition.

2. The solicitation document and incorporated provisions and clauses are those in effect through Federal Acquisition Circular (FAC)

2026-01.

3. The solicitation is a Small Business

Set-Aside. The North American Industry

Classification System (NAICS) code is 541511

(Custom Computer Programming Services) and the size standard is $34.0 Million.

4. Vendors are required to be registered and active in System for Award Management (SAM) when submitting an offer or quotation. Register at https://www.sam.gov/index.html prior to submitting your quotation. See FAR provision

52.204-7.

5. Please download attached Solicitation

140G0226Q0038 for all Clauses and Provisions provided in this announcement.

00010 Labview or equivalent software development services.

Services, non-personal to provide all materials, supervision, labor, tools, equipment, and travel (unless otherwise provided herein) necessary to provide Labview or equivalent software development services in accordance with the Performance Work Statement and Terms and Conditions contained herein.

Vendors shall provide a firm-fixed monthly price for this line item.

THE GOVERNMENT'S TERMS AND CONDITIONS SHALL

PREVAIL OVER ANY OTHER TERMS AND CONDITIONS

AND/OR AGREEMENT (IF ANY).

Anticipated Award Type: Firm-fixed-price

Period of Performance: 05/18/2026 to

05/17/2027

00020 Labview or equivalent software development basic training services.

NAME OF OFFEROR OR CONTRACTOR

SUPPLIES/SERVICES

(B)

UNIT

(D)

UNIT PRICE

(E)

AMOUNT

(F)

OPTIONAL FORM 336 (4-86)

Sponsored by GSA FAR (48 CFR) 53.110

ITEM NO.

(A)

QUANTITY

(C)

Services, non-personal to provide all materials, supervision, labor, tools, equipment, and travel (unless otherwise provided herein) necessary to provide Labview or equivalent software development basic training services in accordance with the

Performance Work Statement and Terms and

Conditions contained herein.

Vendors shall provide a firm-fixed price for this line item.

THE GOVERNMENT'S TERMS AND CONDITIONS SHALL

PREVAIL OVER ANY OTHER TERMS AND CONDITIONS

AND/OR AGREEMENT (IF ANY).

Anticipated Award Type: Firm-fixed-price

Period of Performance: 05/18/2026 to

05/17/2027

00030 Option Year One

Labview or equivalent software maintenance support services.

Services, non-personal to provide all materials, supervision, labor, tools, equipment, and travel (unless otherwise provided herein) necessary to provide Labview or equivalent software maintenance support services in accordance with the Performance

Work Statement and Terms and Conditions contained herein.

Vendors shall provide a firm-fixed price for this line item.

THE GOVERNMENT'S TERMS AND CONDITIONS SHALL

PREVAIL OVER ANY OTHER TERMS AND CONDITIONS

AND/OR AGREEMENT (IF ANY).

Anticipated Award Type: Firm-fixed-price

(Option Line Item)

Anticipated Exercise Date 0

Period of Performance: 05/18/2027 to

05/17/2028

00040 Option Year Two

NAME OF OFFEROR OR CONTRACTOR

SUPPLIES/SERVICES

(B)

UNIT

(D)

UNIT PRICE

(E)

AMOUNT

(F)

OPTIONAL FORM 336 (4-86)

Sponsored by GSA FAR (48 CFR) 53.110

ITEM NO.

(A)

QUANTITY

(C)

Labview or equivalent software maintenance support services.

Services, non-personal to provide all materials, supervision, labor, tools, equipment, and travel (unless otherwise provided herein) necessary to provide Labview or equivalent software maintenance support services in accordance with the Performance

Work Statement and Terms and Conditions contained herein.

Vendors shall provide a firm-fixed price for this line item.

THE GOVERNMENT'S TERMS AND CONDITIONS SHALL

PREVAIL OVER ANY OTHER TERMS AND CONDITIONS

AND/OR AGREEMENT (IF ANY).

Anticipated Award Type: Firm-fixed-price

(Option Line Item)

Anticipated Exercise Date 0

Period of Performance: 05/18/2028 to

05/17/2029

RFQ 140G0226Q0038

Table of Contents

Performance Work Statement DOI ELECTRONIC INVOICING Electronic Invoicing and Payment Requirements - Invoice Processing Platform (IPP) (February 2021) FISMA Information Technology Security Requirements Summary ICT Accessibility Requirements Statement per the Revised Section 508 of the Rehabilitation Act INTERNET PROTOCOL INTERNET PROTOCOL version 6 (June 2012) GS0199 Prevention of Malicious Code (JUN 2018) GS0231 Technical Liaison – Technical Clarification (DEC 2024) GS0919 Legal Holidays (JUN 2021) GS0925 Unscheduled Closures - Fixed Price (MAR 2003) GS1131 Unilateral Deobligation of Unexpended Funds (MAY 2013) GS1332 Contractor’s Representative. (JUL 2001) GS1333 Contractor’s Point of Contact. (JUL 2001) GS1338 Notice to Government of Delays (JUL 2001) GS1346 Compliance with OSHA-Govt owned Facilities/Equipment (APR 2003) GS1348 Accident Reporting (APR 2003) GS1364 Nonpersonal Services and Supervision of Contractor’s Employees (SEP 2017) Use of Government Computers (SEP 2018) GS1440 Wage Determination Applicable (JUL 2001) 52.212-4 Contract Terms and Conditions—Commercial Products and Commercial Services (Nov 2023) 52.212-5 Contract Terms and Conditions Required To Implement Statutes or Executive Orders—Commercial Products and Commercial Services (MAR 2026) (DEVIATION FEB 2025) 52.217-9 Option to Extend the Term of the Contract. (MAR 2000) 52.252-2 Clauses Incorporated by Reference. (FEB 1998) Special Notice GS2101 Inquiries (FEB 2007) GS2115 Independent Review of Protests to the Agency (MAY 2024) 52.204-24 Representation Regarding Certain Telecommunications and Video Surveillance Services or Equipment.

(NOV 2021)

52.204-26 Covered Telecommunications Equipment or Services-Representation. (OCT 2020) 52.204-29 Federal Acquisition Supply Chain Security Act Orders-Representation and Disclosures. (DEC 2023)39 52.209-11 Representation by Corporations Regarding Delinquent Tax Liability or a Felony Conviction under any Federal Law. (FEB 2016) 52.211-6 Brand Name or Equal (AUG 1999) 52.212-3 Offeror Representations and Certifications-Commercial Products and Commercial Services. (OCT 2025)

(DEVIATION FEB 2025)

52.219-1 Small Business Program Representations. (FEB 2024) 52.233-2 Service of Protest Department of the Interior (Jul 1996) (Deviation) Evaluation Factors Basis for Award Quotation Instructions to Vendors Evaluation Process Questions – Cutoff Electronic Submission of Quotations – Required 52.252-1 Solicitation Provisions Incorporated by Reference. (FEB 1998)

Clauses:

Performance Work Statement

A. Introduction:

The US Geological Survey (USGS), Denver Argon Geochronology Lab (DAGL), Denver, CO has a requirement for the automated operation of mass spectrometers and peripheral hardware (e.g. valves, lasers). The DAGL aims to achieve this by developing new, customized automation software modules built using a commercially available programming environment designed to enable construction of applications with graphical user interfaces for hardware automation, such as LabVIEW or an equivalent environment. This effort requires support for developing the overall application architecture, programming the custom automation software, and training laboratory staff in its construction, use, and maintenance.

B. Background:

The US Geological Survey’s (USGS) Denver Argon Geochronology Lab (DAGL), located at the Geology, Geophysics, and Geochemistry Science Center (GGGSC), produces 40Ar/39Ar geochronology data for multiple USGS Programs, including the Mineral Resources Program and National Cooperative Geologic Mapping Program, among others. These data benefit a variety of stakeholders, from federal and state government agencies, to industry and academia.

The DAGL historically used a Macintosh-based, closed-source software application called Mass Spec for operating analytical instruments and associated peripheral hardware. Changes in USGS information technology (IT) regulations forced the DAGL to move away from Macintosh systems in the lab in 2022, and the developer of Mass Spec is nearing retirement and has indicated support will terminate. In response, the DAGL purchased a new open-source software application called Pychron that was being embraced by the 40Ar/39Ar community at that time.

Although Pychron has allowed for intermittent operation of the lab, it has proven to not be sufficient for our needs.

The Pychron developer is not regularly available for required bug fixes (which are abundant, especially following regular mandatory IT patching), and while the code is open-source, we have found the documentation is not sufficient for us to contribute meaningfully to code maintenance, and the lack of transparency of calculations has introduced significant issues for data management and quality.

The pivot to develop a customized LabVIEW (or equivalent)-based software application has the benefit of direct involvement by laboratory staff, enabling ongoing updates and improvements to be made after they are fully trained in the application. We aim to utilize an environment that represents a major software development environment and framework that is successfully deployed as customized applications in similar USGS labs (e.g. Denver Noble Gas lab, Moffett Argon Lab). We intend to build on the shoulders of these existing customized LabVIEW (or equivalent) applications to create new software specific to our analytical systems, but we do not currently have the expertise to do this.

C. Definitions:

40Ar/39Ar geochronology – an analytical method that involves the measurement of isotopes of argon in a material to determine a geologic age.

LabVIEW– a graphical programming environment and software framework provided for purchase by National Instruments that allows users to create custom applications (including graphical user interfaces) for hardware automation/control, and data collection.

D. Scope:

The USGS DAGL requires a complete LabVIEW (or equivalent)-based, custom software solution for acquiring data on the Thermo Scientific Argus VI mass spectrometers located within the DAGL. While developing the software, the Contractor shall actively involve laboratory personnel in the design and implementation of the new application(s) and simultaneously train them in the programming environment with a focus on components that will aid them in the long-term operation and maintenance of the software application(s). In addition to communicating with and operating the Argus mass spectrometers, the software application(s) will communicate with and/or control a variety of hardware peripherals, including Photon Machines lasers (and motorized sample stages), pressure gauges, ion pumps, Agilent DAQs, and thermocouples. The software application(s) will appropriately store analytical data and instrument metadata in files or a database, as needed by lab personnel. The software will integrate instrument/hardware communications and analytical data storage with required sample metadata for 40Ar/39Ar geochronology into an appropriate graphical user interface.

E. Technical Requirements.

The Contractor shall provide the following:

a. Basic Training. Train lab personnel in basic programming environment concepts and design patterns, with a focus on software components relevant to instrument control and data acquisition and storage.

b. Create modules in programming environment for communications with and control of:

i. Thermo Scientific Argus VI Mass Spectrometers

ii. Pressure gauges

iii. Ion pumps

iv. Agilent DAQs for control of valves and readback of thermocouples

v. Photon Machines CO2 and UV laser systems

c. Create graphical user interface for sample metadata entry

d. Create module for data acquisition, to include:

i. Graphical user interface for building and executing run sequences

ii. Live instrument feedback (e.g., visuals of valve states and plots of data as they are acquired)

e. Create module for data storage to files and/or database

f. Create complete solution (including graphical user interface) for integrating the above modules

g. Lab personnel will be proficient in programming environment such that they can maintain and modify the resulting software application(s).

h. Modules will be accepted when they are able to control each piece of hardware.

i. User interface sufficiently captures sample metadata and stores in appropriate locations.

j. Data can be accurately and reliably acquired in an automated run sequence.

k. Data are accurately and reliably stored in appropriate file formats and/or database.

l. The complete solution is user-friendly and accessible to lab personnel. Source code will be version controlled and stored in one or more USGS DAGL GitLab repositories.

m. Contractors shall provide an accessibility conformance report (ACR) for the complete solution built through this contract. The ACR should be created using the Voluntary Product Accessibility Template (VPAT) Version 2.5 Rev 508 (or later), located at https://www.itic.org/policy/accessibility/vpat.

E. Performance standards:

If the Contractor fails to perform any task to the required technical standards, quality standards or time standards, the Government will notify the Contractor of the failure. The Contractor shall re-do or re-perform all substandard activities at no added cost to the Government.

The table below describes the required service, performance standard, acceptable quality level, and surveillance methods used by the USGS to maintain accountability and efficiency with regard to Contractor performance.

https://www.itic.org/policy/accessibility/vpat

Description Performance Standard

Time Period Method of Surveillance

1. Build module for communicating with and controlling mass spectrometers

Full communication and control of mass spectrometer parameters via module.

Within 6 months from start of contract.

Development monitored by laboratory staff.

2. Build module for communicating with pressure gauges

Readback of pressure on gauges via module.

Within 6 months from start of contract.

Development monitored by laboratory staff.

3. Build module for communicating with ion pumps

Readback of pressure or voltage on ion pumps via module.

Within 6 months from start of contract.

Development monitored by laboratory staff.

4. Build module for communicating with Agilent DAQ for valve solenoid control and thermocouple readbacks

Control over operation (open/close) of solenoid valves.

Readback of temperature on thermocouples.

Within 6 months from start of contract.

Development monitored by laboratory staff.

5. Build module for data storage and export

Export of data into data files and/or database.

Within 9 months from start of contract.

Development monitored by laboratory staff.

6. Build graphical user interface

Graphical interface usable for controlling hardware, analyzing samples, storing and accessing data and metadata.

Within 9 months from start of contract.

Development monitored by laboratory staff.

7. Build integrated software solution for modules 1-7.

Fully integrated solution for Ar/Ar geochronology, built in consultation with lab staff.

Within 9 months from start of contract.

Development monitored by laboratory staff.

8. Training laboratory staff Laboratory staff are trained to use, maintain, and continue development of modules and integrated software solution.

Within 12 months from start of contract.

Development monitored by laboratory staff.

9. Accessibility Conformance Report

Voluntary Product Accessibility Template (VPAT) Version 2.5 Rev 508 (or later)

Within 12 months from start of contract.

Development monitored by laboratory staff.

F. Deliverables.

1. Deliverables are the listed modules and interfaces described in Section E.

G. SUPPORTING INFORMATION

A. Place of Performance.

USGS Denver Argon Geochronology Lab Denver Federal Center, Building 95 Denver, CO 80225

• Access hours: to be coordinated with lab personnel, generally M-F business hours.

• Site Contacts (POCs):

o Primary: (Will be added at the time of award) o Secondary: (Will be added at the time of award)

H. Government Furnished Property:

The Government will provide the Contractor with a Government-issued computer, all necessary hardware, and a current license for the appropriate programming environment.

I. Special Considerations:

1. Key Personnel Qualifications:

a. The contractor must have prior experience developing scientific instrument automation applications using LabVIEW or an equivalent platform.

2. Data Rights FAR Clause 52.227-14 – Rights in Data-General is included by reference, Safety, and Environmental Requirements.

3. Security and Privacy Considerations:

a. The contractor will be accompanied by laboratory staff at all times while interacting with laboratory computers.

(End of Performance Work Statement)

DOI ELECTRONIC INVOICING Electronic Invoicing and Payment Requirements - Invoice Processing Platform (IPP) (February 2021)

Payment requests must be submitted electronically through the U. S. Department of the Treasury's Invoice Processing Platform System (IPP).

"Payment request" means any request for contract financing payment or invoice payment by the Contractor. To constitute a proper invoice, the payment request must comply with the requirements identified in the applicable Prompt Payment clause included in the contract, or the clause 52.212-4 Contract Terms and Conditions - Commercial Items included in commercial item contracts. The IPP website address is: https://www.ipp.gov.

Under this contract, the following documents are required to be submitted as an attachment to the IPP invoice: A copy of the Contractor’s internally generated invoice.

The Contractor must use the IPP website to register access and use IPP for submitting requests for payment. The Contractor Government Business Point of Contact (as listed in SAM) will receive enrollment instructions via email from the Federal Reserve Bank of St. Louis (FRBSTL) within 3 - 5 business days of the contract award date.

Contractor assistance with enrollment can be obtained by contacting the IPP Production Helpdesk via email IPPCustomerSupport@fiscal.treasury.gov or phone (866) 973-3131.

If the Contractor is unable to comply with the requirement to use IPP for submitting invoices for payment, the Contractor must submit a waiver request in writing to the Contracting Officer with its proposal or quotation.

FISMA Information Technology Security Requirements Summary

COTS

Hardware or Software

Development or Maintenance of Custom Applications

Outsourced IT Services or On-site Support

Requirements herein are incorporated as part the Statement of Work/ Performance Work Statement:

1 N/A Background Investigations.

The Contractor shall perform in accordance with clause “Security Requirements: Facility Access and Information Technology.”

2 N/A

Contractor will have access to Privacy Act System of Records - Work under this contract will involve design, development or operation of (access to) system(s) of records containing personal information protected by the Privacy Act (5 U.S.C. Section 552a).

Non-disclosure Agreement.

Prior to receiving access to USGS computers, contractor employees shall be required to sign nondisclosure or other system security agreements, depending on the systems to be used and level of access granted.

Applies whenever any contractor employee has unsupervised access to a USGS system (even if only basic network, internet or email or will develop custom applications) such as:

• User Access to USGS IT Systems known to contain sensitive or proprietary data IT Support services (greater than user access)

• Development or Maintenance of Custom Applications

• On-site contractor support and management of IT system

• Off-site contractor Oversight and Management of IT System

• IT Security Services

Privacy Act System: [Identify covered system(s) to which the contractor may have access]

Work to be performed: [Summarize nature of the contractor's use of such records, such as]

• User-level access to system containing protected records

• Operation or maintenance of Privacy Act System of records or computers hosting such system

• Design or modification of a Privacy Act system of records]

The contractor is not required or permitted to

COTS

Hardware or Software

Development or Maintenance of Custom Applications

Outsourced IT Services or On-site Support

Requirements herein are incorporated as part the Statement of Work/ Performance Work Statement:

respond to requests for Privacy Act data or to make decisions about releases of data under the Act.

Contractor shall ensure its employees are instructed to safeguard against improper use or release of such data and advise them that violation of the Act may involve criminal penalties. The contractor will comply with FAR clause 52.224-2, Privacy Act, incorporated herein by reference and with DOI Privacy Act regulations at 43 CFR 2, Subpart D

3 N/A Training.

The Contractor shall perform in accordance with clause “Security Requirements: Facility Access and Information Technology” - Contractor employees must successfully complete DOI’s end-user computer security awareness training prior to being granted access to DOI data or being issued a user account.

Training must be renewed annually. Additionally, the contract employees must sign a Statement of Responsibility (SOR) that states they have read the appropriate Rules of Behavior and other applicable Information security policies.

4 N/A Personnel Changes.

The Contractor shall perform in accordance with clause “Security Requirements: Facility Access and Information Technology” - The contractor must notify the COR immediately when an employee working on a DOI system is reassigned or leaves the contractor’s employ.

Applies whenever any contractor employee has unsupervised access to a USGS system (even if only basic network, internet or email or will develop custom applications) such as:

• User Access to USGS IT Systems known to contain sensitive or proprietary data

• IT Support services (greater than user access)

• Development or Maintenance of Custom

Applications *

• On-site contractor support and management of IT system

• Off-site contractor Oversight and Management of IT

System

• IT Security Services * *May not be applicable for off-site performance.

5 N/A Contractor Location.

COTS

Hardware or Software

Development or Maintenance of Custom Applications

Outsourced IT Services or On-site Support

Requirements herein are incorporated as part the Statement of Work/ Performance Work Statement:

The Contractor shall perform in accordance with clause “Security Requirements: Facility Access and Information Technology.”

Applies whenever any contractor employee has unsupervised access to a USGS system (even if only basic network, internet or email or will develop custom applications) such as:

• User Access to USGS IT Systems known to contain sensitive or proprietary data

• IT Support services (greater than user access)

• Development or Maintenance of Custom

Applications

• On-site contractor support and management of IT system

• Off-site contractor Oversight and Management of IT

System

• IT Security Services

No portion of the services to be performed hereunder may be performed outside the United States without the express written permission of the Contracting Officer.

If services are proposed to be performed abroad, the Contractor shall provide an acceptable security plan that addresses mitigation of problems related to communication, control, and protecting the confidentiality, integrity, and availability of IT systems and information.

A Security Plan Template is available upon request from the Contracting Officer.

6 N/A N/A Applicable Standards.

The Contractor shall perform in accordance with clause “Security Requirements: Facility Access and Information Technology” - Contractor must follow the DOI System Development Life Cycle (SDLC), NIST SP 800-64 and the DOI SDLC Security Integration Guide.

7 N/A Asset Valuation-Security Categorization:

The Contractor shall perform in accordance with clause “Security Requirements: Facility Access and Information Technology.”

User Access to USGS IT Systems – The Government is responsible for https://insight.usgs.gov/aei/offices/oa/oag/AOP/guidefordevelopingsecurityplans.pdf

COTS

Hardware or Software

Development or Maintenance of Custom Applications

Outsourced IT Services or On-site Support

Requirements herein are incorporated as part the Statement of Work/ Performance Work Statement:

security categorization on USGS systems to which the Contractor may have access under this contract.

IT Support Services greater than User-Level Services Choose one:

The Government is responsible for security categorization on USGS systems to which the Contractor may have access under this contract.

- The Government has defined the [insert name of system to be developed, operated or maintained by the contractor] to be a [Major Application], [Minor Application] or [General support system] as defined in OMB Circular A-130, Appendix III and NIST SP800-53. The following risk and sensitivity levels have been assigned based on the FIPS 199 and the NIST SP 800-60.

Mission impact:

Data sensitivity:

Risk level:

Bureau/departmental/national criticality:

Off-Site Oversight and Management of IT System- The Contractor shall use the FIPS 199 and the NIST SP 800- 60 to determine information types and security categorization based on mission impact, data sensitivity, risk level, and bureau / departmental / national criticality for Contractor-owned and operated systems used to provide services under this contract.

Solicitations must include either the complete publication or a reference to public facilities, such as a website or office, where it may be accessed.

IT Security Services - Applies only if the purpose of the contract includes obtaining asset valuation services.

The Contractor shall use the FIPS 199 and the NIST SP 800- 60 to determine information types and security categorization based on mission impact, data sensitivity, risk level, and bureau / departmental / national criticality for Contractor-owned and operated systems used to provide services under this contract. Solicitations must include either the complete publication or a reference to public facilities, such as a website or office, where it may be accessed.

8 X Property Rights.

COTS

Hardware or Software

Development or Maintenance of Custom Applications

Outsourced IT Services or On-site Support

Requirements herein are incorporated as part the Statement of Work/ Performance Work Statement:

The Government shall be granted unlimited rights in software or data produced hereunder as described in FAR clause 52.227-17, Rights in Data— Special Works, incorporated by reference herein.

Select either COTS or custom software language as applicable. If both apply, identify software/data deliverables governed by each clause.

1. For Federal Supply Schedule orders or orders under an existing contract, rights to software acquired hereunder are set forth in the basic contract.

2. For open market contracts, the Government's rights in software delivered hereunder shall be as described in software developer's commercial software license agreement or the clause FAR 52.227-19, Commercial Computer Software- Restricted Rights, whichever is greater.

9 N/A X Independent Verification and Validation (IV&V).

The Government is responsible for independent software verification and validation prior to being moved into production.

On-Site Contractor Support and Management of IT System Choose one:

Software will be independently verified and validated by the Government or another selected contractor prior to being moved into production.

Contractor will ensure that independent verification and validation is performed on software deployed on contractor managed systems containing USGS data, in accordance with DOI SDLC Security Integration Guide

Off-Site Contractor Operation and Management of IT System- Contractor will ensure that independent verification and validation is performed on software deployed on contractor managed systems containing USGS data, in accordance with DOI SDLC Security Integration Guide

IT Security Service - Applies only if the purpose of the contract includes obtaining IV&V services.

COTS

Hardware or Software

Development or Maintenance of Custom Applications

Outsourced IT Services or On-site Support

Requirements herein are incorporated as part the Statement of Work/ Performance Work Statement:

10 N/A Applies if the purpose of the contract includes obtaining C&A services.

Certification & Accreditation.

User Access to USGS IT Systems or IT Supports Services (Greater than User Access Certification and Accreditation on USGS systems to which the Contractor may have access under this contract will be conducted by the Government or another of its contractors.

Development or Maintenance of Custom Applications The contractor will perform Certification and Accreditation (C&A) services on the application developed or maintained hereunder prior to going into production. The application must be re-accredited every three years or whenever there is a major change that affects security. C&A documents will be provided to the COR in both hard copy and electronic forms.

The contractor must follow NIST SP 800-37, 800-18, 800-30, 800-60, 800-53A, Federal Information Processing Standard (FIPS) 199 and 200, the associated DOI guides/templates, the DOI Security Test & Evaluation (ST&E) Guide, and the DOI Privacy Impact Assessment. NIST documents are available on the internet at http://csrc.nist.gov/publications/nistpubs/ FIPS documents are available on the internet at http://csrc.nist.gov/publications/nistpubs/. The contractor may request copies of DOI documents by contacting the Contracting Officer. The government reserves the right to conduct the ST&E using either Government personnel or an independent contractor.

The contractor will take immediate and timely action to correct or mitigate any weaknesses discovered as necessary to bring the application or system into compliance with the above requirement.

On-Site Contractor Support and Management of IT System or Off- Site Contractor Operation and Management of IT System The Contractor must maintain systems that are compliant with NIST SP 800-18, 800-30, 800-37, 800- 53A, 800-60, Federal Information Processing Standard (FIPS) 199 and 200, the associated DOI guides/templates, the DOI Security Test & Evaluation (ST&E) Guide, and the DOI Privacy Impact Assessment. As required by the above, Major Applications and General Support Systems shall be

COTS

Hardware or Software

Development or Maintenance of Custom Applications

Outsourced IT Services or On-site Support

Requirements herein are incorporated as part the Statement of Work/ Performance Work Statement:

certified and accredited (C&A) prior to going into production and re-accredited every three years or whenever there is a major change that affects security.

C&A documents will be provided to the COR in both hard copy and electronic forms. NIST documents are available on the internet at http://csrc.nist.gov/publications/nistpubs/. The contractor may request copies of DOI documents by contacting the Contracting Officer. The government will reserve the right to conduct the ST&E, using either Government personnel or an independent contractor.

The contractor will take immediate and timely action to correct or mitigate any weaknesses discovered as necessary to bring the application or system into compliance with the above requirement.

11 N/A for

COTS HW &

SW, User Access to

USGS IT

Systems (other than IT services), IT Support Services (User Level or greater access)

N/A Internet Logon Banner.

The Contractor shall perform in accordance with clause “Security Requirements: Facility Access and Information Technology.”

Development or Maintenance of Custom Applications OR On-Site Contractor Support and Management of IT System OR Off-site Contractor Oversight and Management of IT System- Web-based applications developed or maintained under this contract must contain a USGS approved logon banner:

https://portal.doi.net/CIO/ITPMgmt/Documents/IT Standards/IT Security/DOI Security Control Standards (based on NIST SP 800-53 Revision 3)/Access Control v1.4.pdf

12 N/A Incident Reporting.

The Contractor shall perform in accordance with contract clause “Security Requirements: Facility Access and Information Technology” - The contractor must report computer security incidents affecting DOI data or systems in accordance with the DOI Computer Incident Response Guide.

13 Quality Control.

All software or hardware purchased must be free of malicious code such as viruses, Trojan horse programs, worms, spyware, etc. Validation of this must be written into the contract.

https://portal.doi.net/CIO/ITPMgmt/Documents/IT%20Standards/IT%20Security/DOI%20Security%20Control%20Standards%20(based%20on%20NIST%20SP%20800-53%20Revision%203)/Access%20Control%20v1.4.pdf https://portal.doi.net/CIO/ITPMgmt/Documents/IT%20Standards/IT%20Security/DOI%20Security%20Control%20Standards%20(based%20on%20NIST%20SP%20800-53%20Revision%203)/Access%20Control%20v1.4.pdf https://portal.doi.net/CIO/ITPMgmt/Documents/IT%20Standards/IT%20Security/DOI%20Security%20Control%20Standards%20(based%20on%20NIST%20SP%20800-53%20Revision%203)/Access%20Control%20v1.4.pdf https://portal.doi.net/CIO/ITPMgmt/Documents/IT%20Standards/IT%20Security/DOI%20Security%20Control%20Standards%20(based%20on%20NIST%20SP%20800-53%20Revision%203)/Access%20Control%20v1.4.pdf

COTS

Hardware or Software

Development or Maintenance of Custom Applications

Outsourced IT Services or On-site Support

Requirements herein are incorporated as part the Statement of Work/ Performance Work Statement:

14 N/A N/A Self-Assessment.

The Contractor shall perform in accordance with contract clause “Security Requirements: Facility Access and Information Technology” - The contractor must conduct an annual self-assessment in accordance with annual DOI guidance on all information systems in production.

15 N/A Vulnerability Analysis.

Vulnerability Analysis on USGS systems to which the Contractor may have access under this contract will be conducted by the Government or another of its contractors.

16 N/A Logon Banner.

Contractor employees who access DOI information systems must acknowledge a government-approved legal warning banner prior to logging on to the system.

This includes contractor owned information systems hosting DOI data.

17 N/A Security Controls.

The Contractor shall perform in accordance with contract clause “Security Requirements: Facility Access and Information Technology” – The Contractor shall ensure compliance with the security control requirements of the current version of NIST SP 800-53, Rev.1, which are applicable to the security categorization of the data or system. FIPS 199 and the NIST SP 800-60 will be used to determine information types and security categorizations.

18 N/A N/A Contingency Plan.

The Contractor shall perform in accordance with contract clause “Security Requirements: Facility Access and Information Technology.”

For IT Support Services: The Contractor shall submit a contingency plan in accordance with NIST SP 800-34 and DOI IT Systems Contingency Plan Guide.

ICT Accessibility Requirements Statement per the Revised Section 508 of the Rehabilitation Act

Section 508 of the Rehabilitation Act of 1973, as amended (29 U.S.C § 794 (d)) requires that when federal agencies develop, procure, maintain, or use information and communication technology (ICT), it must be accessible to people with disabilities. Federal employees and members of the public who have disabilities must have access to and use of information and data that is comparable to people without disabilities.

1. Products, platforms, and services delivered as part of a statement of work that are ICT, or contain ICT, shall conform to the Revised 508 Standards, which are located at 36 CFR § 1194.1 and Appendices A, C and D and available at https://www.access-board.gov/ict/. In the revised regulation, ICT replaced the term Electronic and Information Technology (EIT) used in the original 508 standards.

a. Applicable Functional Performance Criteria: All functional performance criteria in chapter 3 of the Revised 508 Standards apply when using an alternative design or technology that results in substantially equivalent or greater accessibility and usability by individuals with disabilities than would be provided by conformance to one or more of the requirements in chapter 5 of the Revised 508 Standards, or when chapter 5 do not address one or more functions of ICT.

b. Applicable 508 requirements for electronic content features and components (including electronic training materials and invoices): All requirements in E205 of the revised 508 Standards apply, including all Web Content Accessibility Guidelines (WCAG) 2.0 Levels A and

AA Success Criteria.

c. Applicable 508 requirements for software features and components (including Software infrastructure): All requirements in chapter 5 apply, including all WCAG 2.0 Levels A and AA Success Criteria (except 2.4.1 Bypass Blocks, 2.4.5 Multiple Ways, 3.2.3 Consistent Navigation, and 3.2.4 Consistent Identification) , 502 Interoperability with Assistive Technology, and 503 Application.

d. Applicable 508 requirements for support services and documentation: All requirements in chapter 6 apply.

2. Contractors shall provide an accessibility conformance report (ACR) for each ICT item offered through this contract. The ACR should be created using the Voluntary Product Accessibility Template (VPAT) Version 2.5 Rev 508 (or later), located at https://www.itic.org/policy/accessibility/vpat.

3. When developing or modifying ICT for the government, the Contractor shall ensure the ICT fully conforms to the applicable Section 508 Standards. When modifying a commercially available or government-owned ICT, the Contractor shall not reduce the original ICT item’s level of Section 508 conformance.

4. When developing or modifying web and software ICT, the Contractor shall demonstrate Section 508 conformance by providing Section 508 test results, or ACR, based on the versions of the DHS Trusted Tester Methodology currently approved for use, as defined at https://www.dhs.gov/compliance-test-processes. The Contractor shall use testers who are certified by DHS on how to use the DHS Trusted Tester Methodology (e.g., “DHS Certified Trusted Testers”) to conduct accessibility testing. Information on how testers can become certified is located at https://www.dhs.gov/publication/trusted-tester-resources.

5. Contractor personnel shall possess the knowledge, skills, and abilities necessary to address the applicable revised Section 508 Standards for each ICT.

6. Contractor personnel shall provide a demonstration of their capability to develop accessible ICT solutions.

https://www.access-board.gov/ict/ https://www.access-board.gov/ict/#301.1 https://www.access-board.gov/ict/#E205.1 https://www.access-board.gov/ict/#E205.1 https://www.w3.org/WAI/WCAG22/quickref/?versions=2.0#guidelines https://www.w3.org/WAI/WCAG22/quickref/?versions=2.0#guidelines https://www.access-board.gov/ict/#501-general https://www.access-board.gov/ict/#601-general https://www.itic.org/policy/accessibility/vpat https://www.dhs.gov/compliance-test-processes https://www.dhs.gov/publication/trusted-tester-resources

INTERNET PROTOCOL INTERNET PROTOCOL version 6 (June 2012)

1. Any system hardware, software, firmware and/or networked component (voice, video or data) developed, procured, or acquired in support and/or performance of this contract shall be capable of transmitting, receiving, processing, forwarding and storing digital information across system boundaries utilizing system packets that are formatted in accordance with commercial standards of Internet Protocol (IP) version 6 (IPv6) as set forth in the USGv6 Profile (NIST Special Publication 500-267) and corresponding declarations of conformance defined in the USGv6 Test Program. In addition, this system shall maintain interoperability with IPv4 systems and provide at least the same level of performance and reliability capabilities of IPv4 products.

2. Specifically, any new IP product or system developed, acquired, or produced must:

a) Interoperate with both IPv6 and IPv4 systems and products, and

b) Have available contractor/vendor IPv6 technical support for development and implementation and fielded product management.

3. As IPv6 evolves, the Contractor commits to upgrading or providing an appropriate migration path for each item developed, delivered or utilized at no additional cost to the Government. The Contractor shall retrofit all non-IPv6 capable equipment, as defined above, that is fielded under this contract with IPv6 capable equipment, at no additional cost to the Government.

4. The contractor shall provide technical support for both IPv4 and IPv6.

5. Any system or software must be able to operate on networks supporting IPv4, IPv6 or one that supports both.

6. Any product whose non-compliance is discovered and made known to the Contractor within one year after acceptance shall be upgraded, modified or replaced to bring it into compliance at no additional cost to the Government.

GS0199 Prevention of Malicious Code (JUN 2018)

(a) Definitions

Malicious code is a computer code developed for the purpose of causing some form of intentional damage to computer systems or networks. Malicious code may be a complete program or code imbedded in software programs that appear to provide useful functions. The term includes computer viruses and other destructive programs, such as "Trojan Horses" and network "worms."

(b) The contractor must have in place an anti-virus procedure to ensure that media supplied is uncontaminated by malicious code.

(c) The contractor is required to scan all delivered software to insure it is free of malicious code prior to its installation or operation on USGS-owned computers or contractor-owned computers connected to USGS computer systems or networks. Contractors using diagnostics software disks or connecting to a non-USGS computer while performing repairs or upgrades to a USGS computer will scan the serviced computer's drive(s) to insure they are free of malicious code upon completion of the service call, or prior to return of serviced equipment, if servicing is performed off-site.

GS0231 Technical Liaison – Technical Clarification (DEC 2024)

a) The performance required herein shall be subject to the technical clarification of the Technical Liaison (TL) as identified below. As used herein, "technical clarification" is defined as communication to help the contractor fully understand the requirements.

(b) The Technical Liaison is not delegated any Contracting Officer’s Representative responsibilities.

(c) The Technical Liaison may not modify the requirements in any way. All modifications must be authorized by the Contracting Officer.

(d) The contractor shall immediately notify the Contracting Officer, in writing, if they believe the Technical Liaison is directing work outside the requirements of this contract. The contractor may not be reimbursed for any work outside the requirements of this contract.

(e) The Technical Liaison assigned for this contract is: (The Technical Liaison will be added at the time of award) Telelphone: [xxx] Email: [xxx] U.S. Geological Survey Address and Mail Stop: [xxx]

(f) Only the Contracting Officer may designate a new Technical Liaison."

GS0919 Legal Holidays (JUN 2021)

The following legal holidays are observed by this Government agency:

New Year's Day January 01

Martin Luther King's Birthday 3rd Monday in January

Presidents Day 3rd Monday in February

Memorial Day Last Monday in May

Juneteenth National Independence Day June 19

Independence Day July 04

Labor Day 1st Monday in September

Columbus Day 2nd Monday in October

Veterans Day November 11

Thanksgiving Day 4th Thursday in November

Christmas Day December 25

When a holiday falls on Saturday or Sunday, it is observed on the adjacent Friday or Monday, respectively.

In addition to the holidays listed above, the contractor agrees to observe leave days or closures designated by Federal Statute, Executive Order, or Presidential Proclamation.

GS0925 Unscheduled Closures - Fixed Price (MAR 2003)

(a) The USGS facility where contractor employees are working may occasionally be closed temporarily and federal employees dismissed, such as for inclement weather, holiday early closings, power outages, or other emergencies.

In these cases, the Contracting Officer or COR will advise the contractor whether any of the contractor's activities on Government facilities are considered critical and require continued performance. In most cases, the Contractor will be required to dismiss employees at Government facilities who are performing noncritical tasks after federal employees are dismissed.

(b) If the unscheduled closure causes an increase in the cost of contract performance or if any contract term or condition is affected by the closure, the Contractor may request an adjustment pursuant to Clause FAR 52.242-17 Government Delay of Work.

(c) Contractor performance at locations that are not affected by the unscheduled closure will not be subject to this clause.

GS1131 Unilateral Deobligation of Unexpended Funds (MAY 2013)

The contractor shall submit all invoices under the award no later than 90 calendar days after the period of performance has expired, unless a request for extension has been submitted to the Contracting Officer. After 120 days has passed since the expiration of the performance period, the government reserves the right to issue a unilateral modification deobligating any unexpended funds, and to initiate closeout procedures.

GS1332 Contractor’s Representative. (JUL 2001)

(a) Upon contract award, the contractor shall furnish to the contracting officer the name of the person he has designated and assigned exclusively to this contract as his agent or representative. The contractor's representative shall exercise overall management responsibility for the contract effort, receive technical direction, and handle problems arising under the contract, such as dismissals, disciplinary matters, etc. The contractor's representative is further responsible for coordinating matters of mutual concern with the Technical Liaison (TL). In the event questions of responsibility arise, they shall be resolved by the contracting officer or his authorized representative.

(b) When the Contractor's Representative is temporarily unavailable to manage the contract effort for a period longer than 72 hours, including but not limited to absences due to vacation or illness, the contractor will provide to the COR a written designation of an alternate representative, itemizing any limitations in the alternate's authority. The procedures of paragraph (b) above do not apply to such temporary designations unless they are expected to exceed the time period indicated in that paragraph.

GS1333 Contractor’s Point of Contact. (JUL 2001)

The contractor must establish a designated point of contact, answering service or other continuous telephone coverage to insure that 1) all calls from the Government are answered, and 2) the maintenance representative receives any telephone communications from the Government within sufficient time to meet the contract response time requirements. Such continuous coverage must be provided during the period of performance of one year.

GS1338 Notice to Government of Delays (JUL 2001)

In the event the contractor encounters difficulty in meeting performance requirements, or when it anticipates difficulty…