Sol_140G0226Q0139.pdf

REQUEST FOR QUOTATION

(THIS IS NOT AN ORDER)

THIS RFQ IS IS NOT A SMALL BUSINESS SET-ASIDE

15. DATE OF QUOTATION

16. SIGNER

a. NAME (Type or print)

c. TITLE (Type or print)

b. TELEPHONE

AREA CODE

NUMBER

STANDARD FORM 18 (REV. 6/1995)

Prescribed by GSA-FAR (48 CFR) 53.215-1(a)

AUTHORIZED FOR LOCAL REPRODUCTION

Previous edition not usable

8. TO:

b. COMPANYa. NAME

c. STREET ADDRESS

d. CITY e. STATE f. ZIP CODE

9. DESTINATION

a. NAME OF CONSIGNEE

b. STREET ADDRESS

d. STATE e. ZIP CODE

7. DELIVERY

FOB DESTINATION

OTHER

(See Schedule)

10. PLEASE FURNISH QUOTATIONS TO THE

ISSUING OFFICE IN BLOCK 5a ON OR BEFORE CLOSE OF BUSINESS (Date)

IMPORTANT: This is a request for information and quotations furnished are not offers. If you are unable to quote, please so indicate on this form and return it to the address in Block 5a. This request does not commit the Government to pay any costs incurred in the preparation of the submission of this quotation or to contract for supplies or service. Supplies are of domestic origin unless otherwise indicated by quoter. Any representations and/or certifications attached to this Request for Quotation must be completed by the quoter.

11. SCHEDULE (Include applicable Federal, State and local taxes)

ITEM NUMBER

(a)

SUPPLIES/SERVICES

(b)

QUANTITY

(c)

UNIT

(d)

UNIT PRICE

(e)

AMOUNT

(f)

12. DISCOUNT FOR PROMPT PAYMENT

a. 10 CALENDAR DAYS (%) b. 20 CALENDAR DAYS (%) c. 30 CALENDAR DAYS (%) d. CALENDAR DAYS

NUMBER PERCENTAGE

NOTE: Additional provisions and representations are are not attached.

13. NAME AND ADDRESS OF QUOTER

a. NAME OF QUOTER

b. STREET ADDRESS

c. COUNTY

d. CITY e. STATE f. ZIP CODE

14. SIGNATURE OF PERSON AUTHORIZED TO

SIGN QUOTATION

PAGE OF PAGES

1. REQUEST NUMBER 2. DATE ISSUED 3. REQUISITION/PURCHASE REQUEST NUMBER 4. CERT. FOR NAT. DEF.

UNDER BDSA REG. 2

AND/OR DMS REG. 1

RATING

5a. ISSUED BY 6. DELIVER BY (Date)

NAME TELEPHONE NUMBER

AREA CODE NUMBER

c. CITY

5b. FOR INFORMATION CALL (NO COLLECT CALLS)

1 Denver Federal Center, Bldg. 95 Entrance E3

USGS OAG DENVER ACQUISITION BRANCH

PO BOX 25046

204 DENVER FEDERAL CENTER

DENVER CO 80225-0046

0044045698140G0226Q0139

Lisa Williams

236-9327

USGS LASD NWQL

80225

08/27/2026

09/11/2026 1430 MD

Multiple

Denver

CO

Purchase two (2) new Agilent 8890 5977C

Gas Chromatograph Mass Spectrometer

(GC/MS) System and associated components, all required software, warranty, installation, and instrument training for the USGS, National Water

Quality Laboratory (NWQL) Brand Name.

1. This is a Solicitation issued as a

Request for Quotations (RFQ). Submit written quotations on RFQ Number

140G0226Q0139. This solicitation will utilize FAR Overhaul Part 12, Acquisition of Commercial Products and

Commercial Services, using streamlined evaluation and award procedures.

Continued...

1 48

CONTINUATION SHEET

REFERENCE NO. OF DOCUMENT BEING CONTINUED PAGES

NAME OF OFFEROR OR CONTRACTOR

SUPPLIES/SERVICES

(B)

UNIT

(D)

UNIT PRICE

(E)

AMOUNT

(F)

OPTIONAL FORM 336 (4-86)

Sponsored by GSA FAR (48 CFR) 53.110

ITEM NO.

(A)

QUANTITY

(C)

NSN 7540-01-152-8067

140G0226Q0139

2. The solicitation document and incorporated provisions and clauses are those in effect through Federal Acquisition Circular (FAC)

2026-01 and the FAR Overhaul deviations.

3. The solicitation is a Small Business

Set-Aside. The North American Industry

Classification System (NAICS) code is 334516

(Analytical Laboratory Instrument

Manufacturing) and the size standard is 1,000 employees.

4. In accordance with FAR Provision 52.204-7

System for Award Management. (NOV 2024)

(Deviation MAR 2026), Vendors shall have an active Federal Government contracts registration in the System for Award Management

(SAM) when submitting an offer or quotation in response to this solicitation and at the time of award. To register in SAM, go to https://www.sam.gov. Allow for processing time when registering in SAM. If the Offeror is not registered in SAM, it should register immediately after receiving this solicitation.

5. Please download attached Solicitation

140G0226Q0139 for all Clauses and Provisions provided in this announcement.

00010 1 EAPurchase one (1) new Agilent 8890 5977C Gas

Chromatograph Mass Spectrometer (GC/MS) System and associated components, all required software, warranty, installation, and instrument training for the USGS, National

Water Quality Laboratory (NWQL), located on the

Denver Federal Center, Lakewood, CO in accordance with the Brand Name/Requirements and

Terms and Conditions contained herein.

THE GOVERNMENT'S TERMS AND CONDITIONS SHALL

PREVAIL OVER ANY OTHER TERMS AND CONDITIONS

AND/OR AGREEMENT (IF ANY).

Anticipated Award Type: Firm-fixed-price

Delivery: 06/15/2026

00020 1 EAPurchase one (1) new Agilent 8890 5977C Gas

Continued...

CONTINUATION SHEET

REFERENCE NO. OF DOCUMENT BEING CONTINUED PAGES

NAME OF OFFEROR OR CONTRACTOR

SUPPLIES/SERVICES

(B)

UNIT

(D)

UNIT PRICE

(E)

AMOUNT

(F)

OPTIONAL FORM 336 (4-86)

Sponsored by GSA FAR (48 CFR) 53.110

ITEM NO.

(A)

QUANTITY

(C)

NSN 7540-01-152-8067

140G0226Q0139

Chromatograph Mass Spectrometer (GC/MS) System and associated components, all required software, warranty, installation, and instrument training for the USGS, National

Water Quality Laboratory (NWQL), located on the

Denver Federal Center, Lakewood, CO in accordance with the Brand Name/Requirements and

Terms and Conditions contained herein.

THE GOVERNMENT'S TERMS AND CONDITIONS SHALL

PREVAIL OVER ANY OTHER TERMS AND CONDITIONS

AND/OR AGREEMENT (IF ANY).

Anticipated Award Type: Firm-fixed-price

Delivery: 10/31/2026

RFQ 140G0226Q0139

Table of Contents

Brand Name/Requirements DOI ELECTRONIC INVOICING Electronic Invoicing and Payment Requirements - Invoice Processing Platform (IPP) (February 2021) FISMA Information Technology Security Requirements Summary ICT Accessibility Requirements Statement per the Revised Section 508 of the Rehabilitation Act INTERNET PROTOCOL version 6 (June 2012) GS0199 Prevention of Malicious Code (JUN 2018) GS0231 Technical Liaison – Technical Clarification (DEC 2024) GS0919 Legal Holidays (JUN 2021) GS1131 Unilateral Deobligation of Unexpended Funds (MAY 2013) GS1376 Software Licensing Agreements JUL 2001 52.212-4 Contract Terms and Conditions - Commercial Products and Commercial Services. (NOV 2023) (Deviation MAR 2026) 52.222-90 Addressing DEI Discrimination by Federal Contractors (Deviation April 2026) 52.240-91 Security Prohibitions and Exclusions (Deviation MAR 2026) 52.252-2 Clauses Incorporated by Reference. (FEB 1998)

52.252-6 AUTHORIZED DEVIATIONS IN CLAUSES (NOV 2020)

GS2101 Inquiries (NOV 2020) GS2115 Independent Review of Protests to the Agency (MAY 2024) 52.212-1 Instructions to Offerors—Commercial Products and Commercial Services (SEPT 2023) (Deviation MAR 2026) 52.216-1 Type of Contract. (APR 1984) 52.219-1 Small Business Program Representations. (FEB 2024) (Deviation JAN 2026) 52.240-90 Security Prohibitions and Exclusions Representations and Certifications (RFO DEVIATION MAR 2026) Basis for Award Quotation Submission Instructions to Vendors Questions – Cutoff Electronic Submission of Quotations – Required 52.252-1 Solicitation Provisions Incorporated by Reference. (FEB 1998) 52.252-5 Authorized Deviations in Provisions (Nov 2020)

Clauses:

Brand Name/Requirements

A. Introduction:

The United States Geological Survey (USGS), National Water Quality Laboratory (NWQL), located on the Denver Federal Center, Lakewood, CO has the requirement to purchase two (2) new Agilent 8890 Gas Chromatograph/5977C Mass Spectrometers (GC/MS) to include warranty, installation, and Training.

B. Manufacturer:

Agilent Technologies www.agilent.com

Items Description Qty Unit

1 G7363A Lumin Purge and Trap Concentrator with the following configuration:

Sample Heater Assembly (200) - Selected 200 - Sample Heater Assembly Installation (44K) Introduction (44L)

2 Each

2 G8161A AQUATek LVA Liquid Autosampler. Teledyne Tekmar AQUATek LVA Liquid Vial Autosampler. Includes 5 mL PEEK sample loop, 84-vial capacity, two-way dosing standard valves, chiller tray, blank water reservoir, start-up kit, and software with the following configuration:

Installation (44K) Introduction (44L)

2 Each

3 5191-6770 Sample Loop, PEEK, 25 mL AQUATek LVA

2 Each

4 5191-6770 Sample Loop, PEEK, 25 mL AQUATek LVA

2 Each

5 5188-8820 Trap, VOCARB 3000, Stratum and Atomx P+T

2 Each

6 G3540A Agilent 8890 GC System Custom with the following configuration:

MSD interface (201,202,204,207) - MSD interface (201) Factory Plumbing (305) - Included (305) Exhaust deflector assy (306) - Included (306) Inlet 1 - 100 psi inert cap S/Sl (114) 114 - INERT Cap S/Sl inlet with EPC - 100 psi 201 - MSD Interface 305 - Factory plumbing for quick installation 306 - Exhaust Deflector Assy Installation (44K) Introduction (44L)

2 Each

7 G7077CA

5977C Inert Plus MSD Turbo EI Bundle with the following configuration:

Choose GC/MS for 8890 GC (245) Sub Pfeiffer Duo 3 pump (994) - Selected

2 Each http://www.agilent.com/

245 - GC/MSD INERTPLUS EI FOR 8890 GC

994 - Substitute Pfeiffer Duo 3 oil pump Installation (44K) Introduction (44L)

8 G3870-20448 EXTRACTOR LENS, 6 mm DIAMETER 2 Each

9 M5890AA

MassHunter Workstation for GC/MS Systems with the following configuration:

100 - For GC/MSD with MassHunter DA Installation (44K) Introduction (44L) 1 Year SW Update/Phone Assist (44W)

10 G1033C Latest NIST MS Library Bundle includes over 350K EI spectra for over 300K compounds (40K increase) and GC Methods/Retention indices library (nist_ri) with 139K compounds

2 Each

11 H2149A Method and Application Consulting On-site consulting for a maximum of 4 participants. Certificates and manuals not included with the following configuration:

003 - 3 Day On-Site (Consecutive, Incl Travel)

1 Each

E. Requirements – Warranty, Shipping, Delivery, Installation, and Training:

E.1 Warranty

The instrument and all components provided hereunder shall be covered by a standard one-year warranty.

E.2 Shipping:

The instrument and all components provided hereunder shall be shipped FOB Destination. All shipping costs shall be included.

E.3 Delivery Address:

The instrument and all associated components shall be delivered FOB Destination within fifty (50) days after receipt of award to the following address:

USGS

Building 95 Denver Federal Center Denver, CO 80226

E.4 Installation/Training:

Installation and training of the instrument and all components provided hereunder shall occur within five (5) weeks of delivery, or at a time that is mutually agreeable to the Government and Contractor. Installation and all training conducted shall be accomplished between the hours of 8:00 a.m. and 5:00 p.m., local time, Monday through Friday, except for Federal holidays. Contractor personnel shall be required to sign in upon arrival and out upon leaving Bldg. 95. Contractor personnel shall comply with all NWQL safety requirements. The Contractor shall comply with all Denver Federal Center security protocols.

Hands-on, on-site training shall be offered. The on-site training shall be for three (3) or more days for at least four

(4) analysts for the system provided hereunder and shall cover, at a minimum, basic familiarization, operation, software, maintenance of instrument, data acquisition, qualitative and quantitative analysis. This training shall be offered by someone who has expertise in GC/MS operations.

This training shall also require customizable application development support by a system expert to help optimize instrumental and software configuration of methods to be developed with the unit.

(End of Brand Name/Requirements)

DOI ELECTRONIC INVOICING Electronic Invoicing and Payment Requirements - Invoice Processing Platform (IPP) (February 2021)

Payment requests must be submitted electronically through the U. S. Department of the Treasury's Invoice Processing Platform System (IPP).

"Payment request" means any request for contract financing payment or invoice payment by the Contractor. To constitute a proper invoice, the payment request must comply with the requirements identified in the applicable Prompt Payment clause included in the contract, or the clause 52.212-4 Contract Terms and Conditions - Commercial Items included in commercial item contracts. The IPP website address is: https://www.ipp.gov.

Under this contract, the following documents are required to be submitted as an attachment to the IPP invoice: A copy of the Contractor’s internally generated invoice.

The Contractor must use the IPP website to register access and use IPP for submitting requests for payment. The Contractor Government Business Point of Contact (as listed in SAM) will receive enrollment instructions via email from the Federal Reserve Bank of St. Louis (FRBSTL) within 3 - 5 business days of the contract award date.

Contractor assistance with enrollment can be obtained by contacting the IPP Production Helpdesk via email IPPCustomerSupport@fiscal.treasury.gov or phone (866) 973-3131.

If the Contractor is unable to comply with the requirement to use IPP for submitting invoices for payment, the Contractor must submit a waiver request in writing to the Contracting Officer with its proposal or quotation.

FISMA Information Technology Security Requirements Summary

COTS

Hardware or Software

Development or Maintenance of Custom Applications

Outsourced IT Services or On-site Support

Requirements herein are incorporated as part the Statement of Work/ Performance Work Statement:

1 N/A ☐ ☐ Background Investigations. The Contractor shall perform in accordance with clause “Security Requirements: Facility Access and Information Technology.”

2 N/A ☐ ☐ Non-disclosure Agreement. Prior to receiving access to USGS computers, contractor employees shall be required to sign nondisclosure or other system security agreements, depending on the systems to be used and level of access granted.

Applies whenever any contractor employee has unsupervised access to a USGS system (even if only basic network, internet or email or will develop custom applications) such as:

• User Access to USGS IT Systems known to contain sensitive or proprietary data

COTS

Hardware or Software

Development or Maintenance of Custom Applications

Outsourced IT Services or On-site Support

Requirements herein are incorporated as part the Statement of Work/ Performance Work Statement:

Contractor will have access to Privacy Act System of Records – Work under this contract will involve design, development or operation of (access to) system(s) of records containing personal information protected by the Privacy Act (5 U.S.C.

Section 552a).

• IT Support services (greater than user access)

• Development or Maintenance of Custom Applications

• On-site contractor support and management of IT system

• Off-site contractor Oversight and Management of IT System

• IT Security Services Privacy Act System: [Identify covered system(s) to which the contractor may have access] Click or tap here to enter text.

Work to be performed: [Summarize nature of the contractor's use of such records, such as]

• User-level access to system containing protected records

• Operation or maintenance of Privacy Act System of records or computers hosting such system

• Design or modification of a Privacy Act system of records]

The contractor is not required or permitted to respond to requests for Privacy Act data or to make decisions about releases of data under the Act. Contractor shall ensure its employees are instructed to safeguard against improper use or release of such data and advise them that violation of the Act may involve criminal penalties. The contractor will comply with FAR clause 52.224-2, Privacy Act, incorporated herein by reference and with DOI Privacy Act regulations at 43 CFR 2, Subpart D

3 N/A ☐ ☐ Training. The Contractor shall perform in accordance with clause “Security Requirements:

Facility Access and Information Technology” - Contractor employees must successfully complete DOI’s end- user computer security awareness training prior to being granted access to DOI data or being issued a user account. Training must be renewed annually. Additionally, the contract employees must sign a Statement of Responsibility (SOR) that states they have read the appropriate Rules of Behavior and other applicable Information security policies.

4 N/A ☐ ☐ Personnel Changes. The Contractor shall perform in accordance with clause “Security

COTS

Hardware or Software

Development or Maintenance of Custom Applications

Outsourced IT Services or On-site Support

Requirements herein are incorporated as part the Statement of Work/ Performance Work Statement:

Requirements: Facility Access and Information Technology” - The contractor must notify the COR immediately when an employee working on a DOI system is reassigned or leaves the contractor’s employ.

Applies whenever any contractor employee has unsupervised access to a USGS system (even if only basic network, internet or email or will develop custom applications) such as:

• User Access to USGS IT Systems known to contain sensitive or proprietary data

• IT Support services (greater than user access)

• Development or Maintenance of Custom Applications *

• On-site contractor support and management of IT system

• Off-site contractor Oversight and Management of IT System

• IT Security Services * *May not be applicable for off-site performance.

5 N/A ☐ ☐ Contractor Location. The Contractor shall perform in accordance with clause “Security Requirements: Facility Access and Information Technology.”

Applies whenever any contractor employee has unsupervised access to a USGS system (even if only basic network, internet or email or will develop custom applications) such as:

• User Access to USGS IT Systems known to contain sensitive or proprietary data

• IT Support services (greater than user access)

• Development or Maintenance of Custom Applications

• On-site contractor support and management of IT system

• Off-site contractor Oversight and Management of IT System

• IT Security Services

No portion of the services to be performed hereunder may be performed outside the United States without the express written

COTS

Hardware or Software

Development or Maintenance of Custom Applications

Outsourced IT Services or On-site Support

Requirements herein are incorporated as part the Statement of Work/ Performance Work Statement:

permission of the Contracting Officer.

If services are proposed to be performed abroad, the Contractor shall provide an acceptable security plan that addresses mitigation of problems related to communication, control, and protecting the confidentiality, integrity, and availability of IT systems and information.

A Security Plan Template is available upon request from the Contracting Officer.

6 N/A ☐ N/A Applicable Standards. The Contractor shall perform in accordance with clause “Security Requirements: Facility Access and Information Technology” - Contractor must follow the DOI System Development Life Cycle (SDLC), NIST SP 800-64 and the DOI SDLC Security Integration Guide.

7 N/A ☐ ☐ Asset Valuation-Security Categorization:

The Contractor shall perform in accordance with clause “Security Requirements: Facility Access and Information Technology.”

☐User Access to USGS IT Systems - The Government is responsible for security categorization on USGS systems to which the Contractor may have access under this contract.

☐IT Support Services greater than User- Level Services Choose One:

☐The Government is responsible for security categorization on USGS systems to which the Contractor may have access under this contract.

☐The Government has defined the [insert name of system to be developed, operated or maintained by the contractor] to be a [Major Application], [Minor Application] or [General support system] as defined in OMB Circular A- 130, Appendix III and NIST SP800-53.

The following risk and sensitivity levels have been assigned based on the FIPS 199 and the NIST SP 800-60.

Mission impact: Click or tap here to https://insight.usgs.gov/aei/offices/oa/oag/AOP/guidefordevelopingsecurityplans.pdf

COTS

Hardware or Software

Development or Maintenance of Custom Applications

Outsourced IT Services or On-site Support

Requirements herein are incorporated as part the Statement of Work/ Performance Work Statement:

enter text.

Data sensitivity:Click or tap here to enter text.

Risk Level:Click or tap here to enter text.

Bureau/departmental/national criticality: Click or tap here to enter text.

☐Off-Site Oversight and Management of IT System- The Contractor shall use the FIPS 199 and the NIST SP 800- 60 to determine information types and security categorization based on mission impact, data sensitivity, risk level, and bureau / departmental / national criticality for Contractor-owned and operated systems used to provide services under this contract. Solicitations must include either the complete publication or a reference to public facilities, such as a website or office, where it may be accessed.

☐IT Security Services - Applies only if the purpose of the contract includes obtaining asset valuation services. The Contractor shall use the FIPS 199 and the NIST SP 800- 60 to determine information types and security categorization based on mission impact, data sensitivity, risk level, and bureau / departmental / national criticality for Contractor-owned and operated systems used to provide services under this contract. Solicitations must include either the complete publication or a reference to public facilities, such as a website or office, where it may be accessed.

8 ☒ ☐ The Government shall be granted unlimited rights in software or data produced hereunder as described in FAR clause 52.227-17, Rights in

Select either COTS or custom software language as applicable. If both apply, identify software/data deliverables governed by each clause.

Property Rights.

1. For Federal Supply Schedule orders or orders under an existing contract, rights to software acquired hereunder are set forth in the basic contract.

2. For open market contracts, the Government's rights in software delivered hereunder shall be as described in software developer's commercial software license agreement or the clause FAR 52.227-19, Commercial Computer Software- Restricted Rights, whichever is greater.

COTS

Hardware or Software

Development or Maintenance of Custom Applications

Outsourced IT Services or On-site Support

Requirements herein are incorporated as part the Statement of Work/ Performance Work Statement:

Data— Special Works, incorporated by reference herein.

9 N/A ☐ ☐ Independent Verification and Validation (IV&V). The Government is responsible for independent software verification and validation prior to being moved into production.

On-Site Contractor Support and Management of IT System Choose One:

☐Software will be independently verified and validated by the Government or another selected contractor prior to being moved into production.

☐Contractor will ensure that independent verification and validation is performed on software deployed on contractor managed systems containing USGS data, in accordance with DOI SDLC Security Integration Guide

☐Off-Site Contractor Operation and Management of IT System Contractor will ensure that independent verification and validation is performed on software deployed on contractor managed systems containing USGS data, in accordance with DOI SDLC Security Integration Guide

☐IT Security Service - Applies only if the purpose of the contract includes obtaining IV&V services.

10 N/A ☐ ☐ Certification & Accreditation.

COTS

Hardware or Software

Development or Maintenance of Custom Applications

Outsourced IT Services or On-site Support

Requirements herein are incorporated as part the Statement of Work/ Performance Work Statement:

Applies if the purpose of the contract includes obtaining C&A services.

☐User Access to USGS IT Systems or IT Supports Services (Greater than User Access) Certification and Accreditation on USGS systems to which the Contractor may have access under this contract will be conducted by the Government or another of its contractors.

☐Development or Maintenance of Custom Applications The contractor will perform Certification and Accreditation (C&A) services on the application developed or maintained hereunder prior to going into production. The application must be re-accredited every three years or whenever there is a major change that affects security. C&A documents will be provided to the COR in both hard copy and electronic forms. The contractor must follow NIST SP 800-37, 800-18, 800-30, 800-60, 800-53A, Federal Information Processing Standard (FIPS) 199 and 200, the associated DOI guides/templates, the DOI Security Test & Evaluation (ST&E) Guide, and the DOI Privacy Impact Assessment. NIST documents are available on the internet at http://csrc.nist.gov/publications/nistpubs/ FIPS documents are available on the internet at http://csrc.nist.gov/publications/nistpubs/. The contractor may request copies of DOI documents by contacting the Contracting Officer. The government reserves the right to conduct the ST&E using either Government personnel or an independent contractor. The contractor will take immediate and timely action to correct or mitigate any weaknesses discovered as necessary to bring the application or system into compliance with the above requirement.

☐On-Site Contractor Support and Management of IT System or Off-Site Contractor Operation and Management of IT System The Contractor must maintain systems that are compliant with NIST SP 800-18, 800-30, 800-37, 800-53A, 800-60, Federal Information Processing Standard (FIPS) 199 and 200, the associated DOI guides/templates, the DOI Security Test & Evaluation (ST&E) Guide, and the DOI Privacy Impact Assessment. As required by the above, Major Applications and General Support Systems shall be certified and accredited (C&A) prior to http://csrc.nist.gov/publications/nistpubs/ http://csrc.nist.gov/publications/nistpubs/

COTS

Hardware or Software

Development or Maintenance of Custom Applications

Outsourced IT Services or On-site Support

Requirements herein are incorporated as part the Statement of Work/ Performance Work Statement:

going into production and re-accredited every three years or whenever there is a major change that affects security. C&A documents will be provided to the COR in both hard copy and electronic forms. NIST documents are available on the internet at http://csrc.nist.gov/publications/nistpubs/. The contractor may request copies of DOI documents by contacting the Contracting Officer. The government will reserve the right to conduct the ST&E, using either Government personnel or an independent contractor. The contractor will take immediate and timely action to correct or mitigate any weaknesses discovered as necessary to bring the application or system into compliance with the above requirement.

11 N/A for COTS HW & SW, User Access to USGS IT Systems (other than IT services), IT Support Services (User Level or greater access)

N/A ☐ Internet Logon Banner. The Contractor shall perform in accordance with clause “Security Requirements: Facility Access and Information Technology.”

☐Develop or Maintenance of Custom Applications or Onsite Contractor Support and Management of IT System or Off-site Contractor Oversight and Management of IT System – Web based applications developed or maintained under this contract must contain a USGS approved logon Banner:

https://portal.doi.net/CIO/ITPMgmt/Documents/IT Standards/IT Security/DOI Security Control Standards (based on NIST SP 800-53 Revision 3)/Access Control v1.4.pdf

12 N/A ☐ ☐ Incident Reporting. The Contractor shall perform in accordance with contract clause “Security Requirements: Facility Access and Information Technology” - The contractor must report computer security incidents affecting DOI data or systems in accordance with the DOI Computer Incident Response Guide.

13 ☒ ☐ ☐ Quality Control. All software or hardware purchased must be free of malicious code such as viruses, Trojan horse programs, worms, spyware, etc. Validation of this must be written into the contract.

14 N/A N/A ☐ Self-Assessment. The Contractor shall perform in accordance with contract clause “Security Requirements: Facility Access and http://csrc.nist.gov/publications/nistpubs/ https://portal.doi.net/CIO/ITPMgmt/Documents/IT%20Standards/IT%20Security/DOI%20Security%20Control%20Standards%20(based%20on%20NIST%20SP%20800-53%20Revision%203)/Access%20Control%20v1.4.pdf https://portal.doi.net/CIO/ITPMgmt/Documents/IT%20Standards/IT%20Security/DOI%20Security%20Control%20Standards%20(based%20on%20NIST%20SP%20800-53%20Revision%203)/Access%20Control%20v1.4.pdf https://portal.doi.net/CIO/ITPMgmt/Documents/IT%20Standards/IT%20Security/DOI%20Security%20Control%20Standards%20(based%20on%20NIST%20SP%20800-53%20Revision%203)/Access%20Control%20v1.4.pdf https://portal.doi.net/CIO/ITPMgmt/Documents/IT%20Standards/IT%20Security/DOI%20Security%20Control%20Standards%20(based%20on%20NIST%20SP%20800-53%20Revision%203)/Access%20Control%20v1.4.pdf https://portal.doi.net/CIO/ITPMgmt/Documents/IT%20Standards/IT%20Security/DOI%20Security%20Control%20Standards%20(based%20on%20NIST%20SP%20800-53%20Revision%203)/Access%20Control%20v1.4.pdf

COTS

Hardware or Software

Development or Maintenance of Custom Applications

Outsourced IT Services or On-site Support

Requirements herein are incorporated as part the Statement of Work/ Performance Work Statement:

Information Technology” - The contractor must conduct an annual self-assessment in accordance with annual DOI guidance on all information systems in production.

15 N/A ☐ ☐ Vulnerability Analysis. Vulnerability Analysis on USGS systems to which the Contractor may have access under this contract will be conducted by the Government or another of its contractors.

16 N/A ☐ ☐ Logon Banner. Contractor employees who access DOI information systems must acknowledge a government-approved legal warning banner prior to logging on to the system. This includes contractor owned information systems hosting DOI data.

17 N/A ☐ ☐ Security Controls.

The Contractor shall perform in accordance with contract clause “Security Requirements:

Facility Access and Information Technology”

– The Contractor shall ensure compliance with the security control requirements of the current version of NIST SP 800-53, Rev.1, which are applicable to the security categorization of the data or system. FIPS 199 and the NIST SP 800-60 will be used to determine information types and security categorizations.

18 N/A N/A ☐ Contingency Plan.

The Contractor shall perform in accordance with contract clause “Security Requirements:

Facility Access and Information Technology.”

For IT Support Services: The Contractor shall submit a contingency plan in accordance with NIST SP 800-34 and DOI IT Systems Contingency Plan Guide.

ICT Accessibility Requirements Statement per the Revised Section 508 of the Rehabilitation Act

Agilent 8890 GC 9977 MS

E201 Application

E201.1 Scope. ICT that is procured, developed, maintained, or used by agencies shall conform to the Revised 508 Standards.

E206 Hardware

E206.1 General. Where components of ICT are hardware and transmit information or have a user interface, such components shall conform to the requirements in Chapter 4.

E207 Software

E207.1 General. Where components of ICT are software and transmit information or have a user interface, such components shall conform to E207 and the requirements in Chapter 5

Exception from E207.1 General: Software that is assistive technology and that supports the accessibility services of the platform shall not be required to conform to the requirements in Chapter 5.

E207.2 WCAG Conformance. User interface components, as well as the content of platforms and applications, shall conform to Level A and Level AA Success Criteria and Conformance Requirements in WCAG 2.0 (incorporated by reference, see 702.10.1).

Exceptions from E207.2 WCAG Conformance:

● Software that is assistive technology and that supports the accessibility services of the platform shall not be required to conform to E207.2.

● Non-web software shall not be required to conform to the following four Success Criteria in WCAG 2.0:

2.4.1 Bypass Blocks; 2.4.5 Multiple Ways; 3.2.3 Consistent Navigation; and 3.2.4 Consistent Identification.

● Non-Web software shall not be required to conform to Conformance Requirement 3 Complete Processes in WCAG 2.0.

E207.3 Complete Process for Non-Web Software Where non-Web software requires multiple steps to accomplish an activity, all software related to the activity to be accomplished shall conform to WCAG 2.0 as specified in E207.2.

E208 Support Documentation and Services

E208.1 General. Where an agency provides support documentation or services for ICT, such documentation and services shall conform to the requirements in Chapter 6.

E301 General

E301.1 Scope. The requirements of Chapter 3 shall apply to ICT where required by 508 Chapter 2 (Scoping Requirements), 255 Chapter 2 (Scoping Requirements), and where otherwise referenced in any other chapter of the Revised 508 Standards or Revised 255 Guidelines.

E302 Functional Performance Criteria

302.1 Without Vision. Where a visual mode of operation is provided, ICT shall provide at least one mode of operation that does not require user vision.

302.2 With Limited Vision. Where a visual mode of operation is provided, ICT shall provide at least one mode of operation that enables users to make use of limited vision.

302.3 Without Perception of Color. Where a visual mode of operation is provided, ICT shall provide at least one visual mode of operation that does not require user perception of color.

302.4 Without Hearing. Where an audible mode of operation is provided, ICT shall provide at least one mode of operation that does not require user hearing.

302.5 With Limited Hearing. Where an audible mode of operation is provided, ICT shall provide at least one mode of operation that enables users to make use of limited hearing.

302.6 Without Speech. Where speech is used for input, control, or operation, ICT shall provide at least one mode of operation that does not require user speech.

302.7 With Limited Manipulation. Where a manual mode of operation is provided, ICT shall provide at least one mode of operation that does not require fine motor control or simultaneous manual operations.

302.8 With Limited Reach and Strength. Where a manual mode of operation is provided, ICT shall provide at least one mode of operation that is operable with limited reach and limited strength.

302.9 With Limited Language, Cognitive, and Learning Abilities. ICT shall provide features making its use by individuals with limited cognitive, language, and learning abilities simpler and easier.

401 General

401.1 Scope. The requirements of Chapter 4 shall apply to ICT that is hardware where required by 508 Chapter 2 (Scoping Requirements), 255 Chapter 2 (Scoping Requirements), and where otherwise referenced in any other chapter of the Revised 508 Standards or Revised 255 Guidelines.

Exception from E401.1 Scope: Hardware that is assistive technology shall not be required to conform to the requirements of this chapter.

402 Closed Functionality

402.1 General. ICT with closed functionality shall be operable without requiring the user to attach or install assistive technology other than personal headsets or other audio couplers, and shall conform to 402.

402.2 Speech-Output Enabled. ICT with a display screen shall be speech-output enabled for full and independent use by individuals with vision impairments.

Exceptions from E402.2:

1. Variable message signs conforming to 402.5 shall not be required to be speech-output enabled.

2. Speech output shall not be required where ICT display screens only provide status indicators and those indicators conform to 409.

3. Where speech output cannot be supported due to constraints in available memory or processor capability, ICT shall be permitted to conform to 409 in lieu of 402.2.

4. Audible tones shall be permitted instead of speech output where the content of user input is not displayed as entered for security purposes, including, but not limited to, asterisks representing personal identification numbers.

5. Speech output shall not be required for: the machine location; date and time of transaction; customer account number; and the machine identifier or label.

6. Speech output shall not be required for advertisements and other similar information unless they convey information that can be used for the transaction being conducted.

402.2.1 Information Displayed On-Screen. Speech output shall be provided for all information displayed on-screen.

402.2.2 Transactional Outputs. Where transactional outputs are provided, the speech output shall audibly provide all information necessary to verify a transaction.

402.2.3 Speech Delivery Type and Coordination. Speech output shall be delivered through a mechanism that is readily available to all users, including, but not limited to, an industry standard connector or a telephone handset.

Speech shall be recorded or digitized human, or synthesized. Speech output shall be coordinated with information displayed on the screen.

402.2.4 User Control. Speech output for any single function shall be automatically interrupted when a transaction is selected. Speech output shall be capable of being repeated and paused.

402.2.5 Braille Instructions. Where speech output is required by 402.2, braille instructions for initiating the speech mode of operation shall be provided. Braille shall be contracted and shall conform to 36 CFR part 1191, Appendix D, Section 703.3.1.

Exception from E402.2.5 Braille Instructions: Devices for personal use shall not be required to conform to 402.2.5.

402.3 Volume. ICT that delivers sound, including speech output required by 402.2, shall provide volume control and output amplification conforming to 402.3.

402.3.1 Private Listening. Where ICT provides private listening, it shall provide a mode of operation for controlling the volume. Where ICT delivers output by an audio transducer typically held up to the ear, a means for effective magnetic wireless coupling to hearing technologies shall be provided.

402.3.2 Non-private Listening. Where ICT provides non-private listening, incremental volume control shall be provided with output amplification up to a level of at least 65 dB. A function shall be provided to automatically reset the volume to the default level after every use.

402.4 Characters on Display Screens. At least one mode of characters displayed on the screen shall be in a sans serif font. Where ICT does not provide a screen enlargement feature, characters shall be 3/16 inch (4.8 mm) high minimum based on the uppercase letter “I”. Characters shall contrast with their background with either light characters on a dark background or dark characters on a light background.

402.5 Characters on Variable Message Signs. Characters on variable message signs shall conform to section

703.7 Variable Message Signs of ICC A117.1-2009 (incorporated by reference, see 702.6.1).

403 Biometrics

403.1 General. Where provided, biometrics shall not be the only means for user identification or control.

Exception from E403.1 General: Where at least two biometric options that use different biological characteristics are provided, ICT shall be permitted to use biometrics as the only means for user identification or control.

404 Preservation of Information Provided for Accessibility

404.1 General. ICT that transmits or converts information or communication shall not remove non-proprietary information provided for accessibility or shall restore it upon delivery.

405 Privacy

405.1 General. The same degree of privacy of input and output shall be provided to all individuals. When speech output required by 402.2 is enabled, the screen shall not blank automatically.

406 Standard Connections

406.1 General. Where data connections used for input and output are provided, at least one of each type of connection shall conform to industry standard non-proprietary formats.

407 Operable Parts

407.1 General. Where provided, operable parts used in the normal operation of ICT shall conform to 407.

407.2 Contrast. Where provided, keys and controls shall contrast visually from background surfaces. Characters and symbols shall contrast visually from background surfaces with either light characters or symbols on a dark background or dark characters or symbols on a light background.

407.3 Input Controls. At least one input control conforming to 407.3 shall be provided for each function.

Exception from E407.3 Input Controls: Devices for personal use with input controls that are audibly discernable without activation and operable by touch shall not be required to conform to 407.3.

407.3.1 Tactilely Discernible. Input controls shall be operable by touch and tactilely discernible without activation.

407.3.2 Alphabetic Keys. Where provided, individual alphabetic keys shall be arranged in a QWERTY-based keyboard layout and the “F” and “J” keys shall be tactilely distinct from the other keys.

407.3.3 Numeric Keys. Where provided, numeric keys shall be arranged in a 12-key ascending or descending keypad layout. The number five key shall be tactilely distinct from the other keys. Where the ICT provides an alphabetic overlay on numeric keys, the relationships between letters and digits shall conform to ITU-T Recommendation E.161 (incorporated by reference, see 702.7.1).

407.4 Key Repeat. Where a keyboard with key repeat is provided, the delay before the key repeat feature is activated shall be fixed at, or adjustable to, 2 seconds minimum.

407.5 Timed Response. Where a timed response is required, the user shall be alerted visually, as well as by touch or sound, and shall be given the opportunity to indicate that more time is needed.

407.6 Operation. At least one mode of operation shall be operable with one hand and shall not require tight grasping, pinching, or twisting of the wrist. The force required to activate operable parts shall be 5 pounds (22.2 N) maximum.

407.7 Tickets, Fare Cards, and Keycards. Where tickets, fare cards, or keycards are provided, they shall have an orientation that is tactilely discernible if orientation is important to further use of the ticket, fare card, or keycard.

407.8 Reach Height and Depth. At least one of each type of operable part of stationary ICT shall be at a height conforming to 407.8.2 or 407.8.3 according to its position established by the vertical reference plane specified in

407.8.1 for a side reach or a forward reach. Operable parts used with speech output required by 402.2 shall not be the only type of operable part complying with 407.8 unless that part is the only operable part of its type.

● 407.8.1 Vertical Reference Plane. Operable parts shall be positioned for a side reach or a forward reach determined with respect to a vertical reference plane. The vertical reference plane shall be located in conformance to 407.8.2 or 407.8.3.

○ 407.8.1.1 Vertical Plane for Side Reach. Where a side reach is provided, the vertical reference plane shall be 48 inches (1220 mm) long minimum.

○ 407.8.1.2 Vertical Plane for Forward Reach. Where a forward reach is provided, the vertical reference plane shall be 30 inches (760 mm) long minimum.

● 407.8.2 Side Reach. Operable parts of ICT providing a side reach shall conform to 407.8.2.1 or 407.8.2.2.

The vertical reference plane shall be centered on the operable part and placed at the leading edge of the maximum protrusion of the ICT within the length of the vertical reference plane. Where a side reach requires a reach over a portion of the ICT, the height of that portion of the ICT shall be 34 inches (865

mm) maximum.

○ 407.8.2.1 Unobstructed Side Reach. Where the operable part is located 10 inches (255 mm) or less beyond the vertical reference plane, the operable part shall be 48 inches (1220 mm) high maximum and 15 inches (380 mm) high minimum above the floor.

○ 407.8.2.2 Obstructed Side Reach. Where the operable part is located more than 10 inches (255 mm), but not more than 24 inches (610 mm), beyond the vertical reference plane, the height of the operable part shall be 46 inches (1170 mm) high maximum and 15 inches (380 mm) high minimum above the floor. The operable part shall not be located more than 24 inches (610 mm) beyond the vertical reference plane.

● 407.8.3 Forward Reach. Operable parts of ICT providing a forward reach shall conform to 407.8.3.1 or

407.8.3.2. The vertical reference plane shall be centered, and intersect with, the operable part. Where a forward reach allows a reach over a portion of the ICT, the height of that portion of the ICT shall be 34 inches (865 mm) maximum.

○ 407.8.3.1 Unobstructed Forward Reach. Where the operable part is located at the leading edge of the maximum protrusion within the length of the vertical reference plane of the ICT, the operable part shall be 48 inches (1220 mm) high maximum and 15 inches (380 mm) high minimum above the floor.

○ 407.8.3.2 Obstructed Forward Reach. Where the operable part is located beyond the leading edge of the maximum protrusion within the length of the vertical reference plane, the operable part shall conform to 407.8.3.2. The maximum allowable forward reach to an operable part shall be 25 inches (635 mm).

■ 407.8.3.2.1 Operable Part Height for ICT with Obstructed Forward Reach. The height of the operable part shall conform to Table 407.8.3.2.1.

■ 407.8.3.2.2 Knee and Toe Space under ICT with Obstructed Forward Reach. Knee and toe space under ICT shall be 27 inches (685 mm) high minimum, 25 inches (635

mm) deep maximum, and 30 inches (760 mm) wide minimum and shall be clear of obstructions.

408 Display Screens

408.1 General. Where provided, display screens shall conform to 408.

408.2 Visibility. Where stationary ICT provides one or more display screens, at least one of each type of display screen shall be visible from a point located 40 inches (1015 mm) above the floor space where the display screen is viewed.

408.3 Flashing. Where ICT emits lights in flashes, there shall be no more than three flashes in any one-second period.

Exception from E408.3 Flashing: Flashes that do not exceed the general flash and red flash thresholds defined in WCAG 2.0 (incorporated by reference, see 702.10.1) are not required to conform to 408.3.

409 Status Indicators

409.1 General. Where provided, status indicators shall be discernible visually and by touch or sound.

410 Color Coding

410.1 General. Where provided, color coding shall not be used as the only means of conveying information, indicating an action, prompting a response, or distinguishing a visual element.

411 Audible Signals

411.1 General. Where provided, audible signals or cues shall not be used as the only means of conveying information, indicating an action, or prompting a response

412 ICT with Two-Way Voice Communication

412.1 General. ICT that provides two-way voice communication shall conform to 412.

412.2 Volume Gain. ICT that provides two-way voice communication shall conform to 412.2.1 or 412.2.2.

Exception from E412.2 Volume Gain: ICT conforming to 412.2 shall not be required to conform to 402.3.

412.2.1 Volume Gain for Wireline Telephones. Volume gain conforming to 47 CFR 68.317 shall be provided on analog and digital wireline telephones.

412.2.2 Volume Gain for Non-Wireline ICT. A method for increasing volume shall be provided for non-wireline

ICT.

412.3 Interference Reduction and Magnetic Coupling. Where ICT delivers output by a handset or other type of audio transducer that is typically held up to the ear, ICT shall reduce interference with hearing technologies and provide a means for effective magnetic wireless coupling in conformance with 412.3.1 or 412.3.2.

● 412.3.1 Wireless Handsets. ICT in the form of wireless handsets shall conform to ANSI/IEEE C63.19- 2011 (incorporated by reference, see 702.5.1).

● 412.3.2 Wireline Handsets. ICT in the form of wireline handsets, including cordless handsets, shall conform to TIA-1083-B (incorporated by reference, see702.9.1).

412.4 Digital Encoding of Speech. ICT in IP-based networks shall transmit and receive speech that is digitally encoded in the manner specified by ITU-T Recommendation G.722.2 (incorporated by reference, see 702.7.2) or IETF RFC 6716 (incorporated by reference, see 702.8.1).

412.5 Real-Time Text Functionality. [Reserved].

412.6 Caller ID. Where provided, caller identification and similar telecommunications functions shall be visible and audible.

412.7 Video Communication. Where ICT provides real-time video functionality, the quality of the video shall be sufficient to support communication using sign language.

413 Closed Caption Processing Technologies

413.1 General. Where ICT displays or processes video with synchronized audio, ICT shall provide closed caption processing technology that conforms to 413.1.1 or 413.1.2.

● 413.1.1 Decoding and Display of Closed Captions. Players and displays shall decode closed caption data and support display of captions.

● 413.1.2 Pass-Through of Closed Caption Data. Cabling and ancillary equipment shall pass through caption data.

414 Audio Description Processing Technologies

414.1 General. Where ICT displays or processes video with synchronized audio, ICT shall provide audio description processing technology conforming to 414.1.1 or 414.1.2.

● 414.1.1 Digital Television Tuners. Digital television tuners shall provide audio description processing that conforms to ATSC A/53 Digital Television Standard, Part 5 (2014) (incorporated by reference, see

702.2.1). Digital television tuners shall provide processing of audio description when encoded as a Visually Impaired (VI) associated audio service that is provided as a complete program mix containing audio description according to the ATSC A/53 standard.

● 414.1.2 Other ICT. ICT other than digital television tuners shall provide audio description processing.

415 User Controls for Captions and Audio Descriptions

415.1 General. Where ICT displays video with synchronized audio, ICT shall provide user controls for closed captions and audio descriptions conforming to 415.1.

Exception from E415.1 General: Devices for personal use shall not be required to conform to 415.1 provided that captions and audio descriptions can be enabled through system-wide platform settings.

● 415.1.1 Caption Controls. Where ICT provides operable parts for volume control, ICT shall also…