SOL_RFP.pdf

i

STATEMENT OF WORK

Table of Contents

1 Background

2 Objective

3 Scope

4 Tasks

4.1 Task One: Kickoff Meeting

4.2 Task Two: Dataset Tailoring and Integration

4.2.1 Subtask One: Test Dataset

4.2.2 Subtask One: Final Dataset

4.3 Task Three: Encryption, Automated Push, and Decryption

4.4 Task Four: Package Analysis Requests

5 Deliverables

5.1 Format Of Deliverables

5.2 Deliverables Submission Procedure

5.3 Summary Of Deliverables

6 Contract Type

7 Period Of Performance

8 Place of Performance

9 Holidays & Government Closures

10 Government Furnished Property

11 Government Points of Contact

12 Invoicing procedures

13 FAR/HHSAR Clauses & Provisions

14 Instructions to offeror

15 Award Determination

FDA RFP #75F40124R00130

Page #1

1 BACKGROUND

The Food and Drug Administration (FDA) is responsible for protecting the public health by assuring the safety, efficacy, and security of human and veterinary drugs, biological products, medical devices, our nation’s food supply, cosmetics, and products that emit radiation. The FDA is also responsible for advancing the public health by helping to speed innovations that make medicines and foods more effective, safer, and more affordable, and helping the public get the accurate, science-based information they need to use medicines and foods to improve their health.

The mission of the Center for Devices and Radiological Health (CDRH) is to protect and promote the public health. CDRH assure that patients and providers have timely and continued access to safe, effective, and high-quality medical devices and safe radiation-emitting products. We provide consumers, patients, their caregivers, and providers with understandable and accessible science-based information about the products we oversee. We facilitate medical device innovation by advancing regulatory science, providing industry with predictable, consistent, transparent, and efficient regulatory pathways, and assuring consumer confidence in devices marketed in the U.S.

Section 3305 of the Food and Drug Omnibus Reform Act of 2022 (“FDORA”), enacted on December 29, 2022, added section 524B “Ensuring Cybersecurity of Medical Devices” to the Federal Food, Drug, and Cosmetic Act (FD&C Act). Under section 524B(a) of the FD&C Act, a person who submits a 510(k), PMA, PDP, De Novo, or HDE for a device that meets the definition of a cyber device, as defined under section 524B(c) of the FD&C Act, is required to submit information to ensure that cyber devices meet the cybersecurity requirements under section 524B(b) of the FD&C Act, and to submit an associated Software Bill of Materials (SBOM) under section 524B(c) of the FD&C Act. For devices that are not cyber devices that nonetheless may be exposed to cyber risk, FDA recommends that SBOMs be included as part of their premarket submissions to help demonstrate a reasonable assurance of safety and effectiveness. An SBOM is a nested inventory that makes up a full listing of all of the software components (components, packages, and libraries) which are part of a medical device (when applicable).

SBOMs are typically provided in a machine-readable format, and will be part of premarket submissions (510(k), premarket approval application (PMA), Product Development Protocol (PDP), De Novo, and Humanitarian Device Exemption (HDE)) for review. It will be imperative for the reviewers to have a way to easily determine if the software components associated with the device present risks that could impact the device’s safety, effectiveness, or cybersecurity, including whether the components have any known vulnerabilities.

Known vulnerabilities, risks, and exploitations are different than more typical anomalies or defects in devices in that they are largely unseen, and they can “appear” at any point in time based on the technology that is being used, including technology that may be added as the device is modified or maintained. The product can work perfectly throughout clinical trials and thereafter, but then tremendous adverse effects can be introduced with the exploitation of a single vulnerability all at once.

This could potentially impact all users of the device at once and cause multitudes of adverse events in a very short period of time.

2 OBJECTIVE

The Medical Device Cybersecurity Team (Cybersecurity Team) within the Food and Drug Administration’s (FDA) Center for Devices and Radiological Health (CDRH) is seeking to develop and implement a new process which will support data analysis and reporting, and provide detailed information on cybersecurity vulnerability, risk, and exploitation, which will inform reviewers and the Cybersecurity team of potential issues within devices that contain or otherwise leverage software, hardware, or firmware.

Page #2

To accomplish this goal, the objective of this requirement is to acquire a data subscription to a service, which reports known vulnerabilities, that can be compared to vulnerabilities discovered within our own data, as well as to determine the severity of said vulnerabilities.

Data on known vulnerabilities, risks, and exploitations are available through multiple sources, and are updated on a timely basis (typically daily) with the latest issues and concerns that have been identified.

These data will need to be integrated into the solution, allowing for the ability to consider risks across the total product lifecycle.

3 SCOPE

CDRH seeks a data source which will facilitate and support the CDRH automated SBOM analysis solution in which the data reporting on software risks is cohesively integrated into the point of review as well as in an ongoing feedback loop of known vulnerabilities, risks, and exploitations, which are constantly being found (or added) within devices that contain or leverage software, hardware, or firmware. The data source must provide risk factors that are calculated based on a variety of factors, such as age of the software, exploit issue, length of time the issue has been open, etc. This information will be included within CDRH reporting to more clearly display and quickly expose the threat status and risk of a software enabled device when an SBOM is received and evaluated. The risk factors of interest are imperative to a facile and nimble evaluation for reviewers so there is no guesswork in their analysis and they can specifically determine if a software enabled device does or does not have an issue to be concerned with prior to approval. This contract will involve specialized and proprietary data which provides insights into vulnerabilities which exist within software components on a daily basis, as well as information on the severity of said vulnerabilities. Similarly, the risk factor information will be necessitated to ensure that the vulnerabilities which are described are correctly categorized and specified to the threat level.

4 TASKS

The contractor, though online data subscriptions and correspondences with government personnel, shall provide/accomplish the following:

4.1 TASK ONE: KICKOFF MEETING

Within five (5) business days after the effective date of the Order, the Contractor shall participate in a Kick-Off Meeting with the Technical POC, the COR, the CO, and other CDRH Staff. The Contractor shall provide meeting materials and agenda two (2) days prior to the Kick-off meeting.

The Contractor shall prepare summary meeting minutes, detailing the discussion held, and provide a copy of the minutes to the COR and the Technical POC within five (5) business days after the meeting.

4.2 TASK TWO: DATASET TAILORING AND INTEGRATION

The contractor shall begin by creating consumable test files, coordinating with CDRH personnel until they are presented in an acceptable form. Upon acceptance, the contractor shall provide a dataset that shall refresh daily to be delivered to the CDRH at least once every 24 hours.

4.2.1 Subtask One: Test Dataset

The contractor shall extract and transform their data format into a flat relational format consumable by the CDRH. Contractor will work with the CDRH to provide test files to ensure accuracy and reliability of data and react to any issues by rectifying the concerns.

4.2.2 Subtask One: Final Dataset

The contractor shall extract and transform their data format into a flat relational format consumable by CDRH. After CDRH approves test files and contractor finalizes data files a final dataset will be developed.

The final relational data format agreed upon will be refreshed and delivered to the FDA at least once every 24 hours.

Page #3

4.3 TASK THREE: ENCRYPTION, AUTOMATED PUSH, AND DECRYPTION

An automatic encrypted flat relational database will be delivered to CDRH on a regular schedule (up to once every 24-hour period). An encryption key exchange will also be executed and instructions will be provided to decrypt the encrypted flat relational database for internal use.

4.4 TASK FOUR: PACKAGE ANALYSIS REQUESTS

An anonymous submission endpoint for CDRH to submit package requests for analysis. This analysis will be performed by the Contractor will then include requests subsequently packaged into the next available database update, extraction, encryption, and pushed and decrypted as soon as the analysis is complete.

5 DELIVERABLES

5.1 FORMAT OF DELIVERABLES

Deliverables (both in draft and final versions) shall be provided in hard and soft copy using MS Office products as specified below. Weekly, interim, informal, and working-copy products may be provided by e-mail to the COR. Final soft copies of deliverables shall be developed using the current FDA version of Microsoft Office products and/or other standard application software Final hard copies of deliverables shall be typewritten on 8-1/2"x11" white paper. The Contractor shall not use spiral binding or other binding that interferes with photocopying.

5.2 DELIVERABLES SUBMISSION PROCEDURE

The Contractor shall submit all deliverables to the COR, unless otherwise stated. The COR will be responsible for the review of all draft and final deliverables to ensure accuracy, functionality, completeness, professional quality, and overall compliance with the guidelines requirements of the task.

The Contractor shall ensure the accuracy and completeness of all deliverables in accordance with referenced policy, regulations, laws, and directives. Reports and presentations shall be concise and clearly written; errors, misleading or unclear statements, incomplete or irrelevant information, and/or excessive rhetoric, repetition, and "padding,” or excessive length if a page limit is imposed, shall be considered deficiencies and will be subject to correction by the Contractor at no additional cost to the government. Unless specified otherwise, the government shall have ten (10) working days to complete the review and approve the deliverables. If deficiencies are found or areas require modification, the Contractor will be notified and shall have five (5) calendar days to correct the deficiencies. Upon re-submission by the Contractor, the government will reapply the same acceptance criteria. If the deliverable does not meet the acceptance criteria a second time, the government may consider the Contractor as having deficient performance with respect to the subject task.

5.3 SUMMARY OF DELIVERABLES

Table 1: Deliverables

Task Deliverables Quantity/Frequency Due Date

4.1 Kickoff Meeting

Notes Once Within (5) days of Kickoff Meeting

4.2.1 Dataset Tailoring and Integration –

Test Dataset Recurring

Within (30) days of effective award date Subsequent fixes shall be returned within

(10) business days of reported issue.

4.2.2 Dataset Tailoring and Integration –

Final Dataset

At least once every 24 hours

Within (20) business days of acceptance of format

After acceptance, ongoing daily

Page #4

4.3 Automatic

Encrypted Flat Relational Database

Recurring Ongoing

4.4 Package Analysis Recurring Ongoing

6 CONTRACT TYPE

Firm Fixed Price

7 PERIOD OF PERFORMANCE

The anticipated period of performance for this order is one (1) twelve (12) month BASE period with four

(4) twelve (12) month OPTION periods at the time of award.

8 PLACE OF PERFORMANCE

Services shall be provided both on and off-premises.

Due to the increased remote work flexibilities throughout the COVID-19 Pandemic, it is expected most work will be performed remotely. The majority of the work to be performed will occur off-site at the contractor’s facilities within the Washington DC area. The contractor shall work remotely using FDA furnished property on the FDA network.

However, pending the ongoing Return 2 Facilities program, on-site work may be required to perform key interactions with FDA personnel.

Space will be provided at FDA's White Oak Headquarters:

White Oak Campus Building 66 10903 New Hampshire Avenue, Silver Spring, Maryland 20993.

9 HOLIDAYS & GOVERNMENT CLOSURES

The Contractor is not required to provide on-site services on the following days that are Federal Holidays or on any other day designated as a Federal holiday, Government closure, or shut-down for the Washington, D.C. area:

New Year's Day Martin Luther King Day President 's Day Memorial Day Juneteenth Independence Day Labor Day Columbus Day Veteran 's Day Thanksgiving Day Christmas Day

The Contractor shall not schedule training during federal holidays or Government closure. As necessary, training scheduled during unexpected Government closures may be rescheduled following coordination with the COR. The contractor shall not bill the Government for any training that the Contractor did not perform due to any Government closures.

Page #5

10 GOVERNMENT FURNISHED PROPERTY

Government furnished property (materials, equipment, and/or information) is to be provided in conjunction with required performance under this contract as determined by mutual agreement between FDA and the Contractor.

When the Government provides equipment, then the Contractor shall maintain a detailed inventory accounting system for Government Furnished Property (GFP) following contract award. The inventory accounting system must specify, at a minimum:

• Product description (make, model)

• Government tag number

• Date of receipt

• Name of receipt

• Location of receipt

• Current location

• Contract/order number under which the equipment is being used

The Contractor shall attach an update inventory report to each MPR unless otherwise specified by the COR. In either case, the Contractor’s inventory listing must be available for Government review within one (1) business day of COR request. The Contractor shall remain responsible and accountable for all GFP for the duration of the contract and ensure the return of the property upon completion of all work required under this contract.

All property, data and information provided by the Government in the performance of this order remains the property of the Government and shall be surrendered to the Government upon completion or termination of this requirement.

11 GOVERNMENT POINTS OF CONTACT

Contract Specialist (CS): Brian Wodzisz / Brian.Wodzisz@fda.hhs.gov / 301-796-7376 Contracting Officer (CO): TBD @ time of award Contracting Officers Representative (COR): TBD @ time of award

11.1 Contracting Officer’s Representative (COR) Authority

The Contracting Officer may designate other Government personnel (known as the Contracting Officers Representative) to act as her authorized representative for contract administration functions which do not involve changes to the scope, price, schedule, or terms and conditions of the contract. The designation will be in writing, signed by the Contracting Officer, and will set forth the authorities and limitations of the representative(s) under the contract. Such designation will not contain authority to sign contractual documents, order contract changes, modify contract terms, or create any commitment or liability on the part of the Government different from that set forth in the contract. The Contractor shall immediately contact the Contracting Officer if there is any question regarding the authority of an individual to act on behalf of the Contracting Officer under this contract.

12 INVOICING PROCEDURES

FDA Electronic Invoicing and Payment Requirements - Invoice Processing Platform (IPP) (Jan 2022)

(a) All Invoice submissions for goods and or services must be made electronically through the U.S. Department of Treasury’s Invoice Processing Platform System (IPP). http://www.ipp.gov/vendors/index.htm

(b) Invoice Submission for Payment means any request for contract financing payment or invoice payment by the Contractor. To constitute a proper invoice, the payment request must http://www.ipp.gov/vendors/index.htm

Page #6 comply with the requirements identified in in FAR 32.905(b), “Content of Invoices” and the applicable Payment clause included in this contract, or the clause 52.212-4 Contract Terms and Conditions – Commercial Items included in commercial items contracts. The IPP website address is: https://www.ipp.gov.

(c) -----

(1) The Agency will enroll the Contractors new to IPP. The Contractor must follow the IPP registration email instructions for enrollment to register the Collector Account for submitting invoice requests for payment. The Contractor Government Business Point of Contact (as listed in SAM) will receive Registration email from the Federal Reserve Bank of St. Louis (FRBSTL) within 3 – 5 business days of the contract award for new contracts or date of modification for existing contracts.

(2) Registration emails are sent via email from ipp.noreply@mail.eroc.twai.gov. Contractor assistance with enrollment can be obtained by contacting the IPP Production Helpdesk via email to IPPCustomerSupport@fiscal.treasury.gov or phone (866) 973-3131.

(3) The Contractor POC will receive two emails from IPP Customer Support, the first email contains the initial administrative IPP User ID. The second email, sent within 24 hours of receipt of the first email, contains a temporary password. You must log in with the temporary password within 30 days.

(4) If your company is already registered to use IPP, you will not be required to re-register.

(5) If the Contractor is unable to comply with the requirement to use IPP for submitting invoices for payment as authorized by HHSAR 332.7002, a written request must be submitted to the Contracting Officer to explain the circumstances that require the authorization of alternate payment procedures.

(d) Invoices that include time and materials or labor hours Line Items must include supporting documentation to (1) substantiate the number of labor hours invoiced for each labor category, and (2) substantiate material costs incurred (when applicable).

(a) Invoices that include cost-reimbursement Line Items must be submitted in a format showing expenditures for that month, as well as contract cumulative amounts.

(1) At a minimum the following cost information shall be included, in addition to supporting documentation to substantiate costs incurred.

- Direct Labor - include all persons, listing the person's name, title, number of hours worked, hourly rate, the total cost per person and a total amount for this category;

- Indirect Costs (i.e., Fringe Benefits, Overhead, General and Administrative, Other Indirect)- show rate, base and total amount;

- Consultants (if applicable) - include the name, number of days or hours worked, daily or hourly rate, and a total amount per consultant;

- Travel - include for each airplane or train trip taken the name of the traveler, date of travel, destination, the transportation costs including ground transportation shown separately and the per diem costs. Other travel costs shall also be listed;

- Subcontractors (if applicable) - include, for each subcontractor, the same data as required for the prime Contractor;

- Other Direct Costs - include a listing of all other direct charges to the contract, i.e., office supplies, telephone, duplication, postage; and

- Fee – amount as allowable in accordance with the Schedule and FAR 52.216-8 if applicable.

(b) Contractor is required to attach an invoice log addendum to each invoice which shall https://www.ipp.gov/ mailto:ipp.noreply@mail.eroc.twai.gov mailto:IPPCustomerSupport@fiscal.treasury.gov

Page #7 include, at a minimum, the following information for contract administration and reconciliation purposes:

(1) list of all invoices submitted to date under the subject award, including the following:

- invoice number, amount, & date submitted

- corresponding payment amount & date received

- total amount of all payments received to date under the subject contract or order

- and, for definitized contracts or orders only, total estimated amounts yet to be invoiced for the current, active period of performance.

(c) Payment of invoices will be made based upon acceptance by the Government of the entire task or the tangible product deliverable(s) invoiced. Payments shall be based on the Government certifying that satisfactory services were provided, and the Contractor has certified that labor charges are accurate.

(d) If the services are rejected for failure to conform to the technical requirements of the task order, or any other contractually legitimate reason, the Contractor shall not be paid, or shall be paid an amount negotiated by the CO.

(e) Payment to the Contractor will not be made for temporary work stoppage due to circumstances beyond the control of U.S. Food and Drug Administration such as acts of God, inclement weather, power outages, and results thereof, or temporary closings of facilities at which Contractor personnel are performing. This may, however, be justification for excusable delays.

(f) The Contractor agrees that the submission of an invoice to the Government for payment is a certification that the services for which the Government is being billed, have been delivered in accordance with the hours shown on the invoices, and the services are of the quality required for timely and successful completion of the effort.

Questions regarding invoice payments that cannot be resolved by the IPP Helpdesk should be directed to the FDA Employee Resource and Information Center (ERIC) Helpdesk at 301-827-ERIC (3742) or toll-free 866-807-ERIC (3742); or, by email at ERIC@fda.hhs.gov. Refer to the Call-in menu options and follow the phone prompts to dial the option that corresponds to the service that's needed. All ERIC Service Now Tickets will either be responded to or resolved within 48 hours (2 business days) of being received. When emailing, please be sure to include the contract number, invoice number and date of invoice, as well as your name, phone number, and a detailed description of the issue.

13 FAR/HHSAR CLAUSES & PROVISIONS

FAR CLAUSES

The clause at 52.212-5, Contract Terms and Conditions Required to Implement Statutes or Executive Orders—Commercial Items (May 2024), applies to this acquisition.

(a) The Contractor shall comply with the following Federal Acquisition Regulation (FAR) clauses, which are incorporated in this contract by reference, to implement provisions of law or Executive orders applicable to acquisitions of commercial products and commercial services:

(1) 52.203-19, Prohibition on Requiring Certain Internal Confidentiality Agreements or Statements (JAN 2017) (section 743 of Division E, Title VII, of the Consolidated and Further Continuing Appropriations Act, 2015 (Pub. L. 113-235) and its successor provisions in subsequent appropriations acts (and as extended in continuing resolutions)).

(2) 52.204-23, Prohibition on Contracting for Hardware, Software, and Services Developed or Provided by Kaspersky Lab Covered Entities (DEC 2023) (Section 1634 of Pub. L. 115-91).

mailto:ERIC@fda.hhs.gov https://www.acquisition.gov/far/part-52#FAR_52_203_19 https://www.acquisition.gov/far/part-52#FAR_52_204_23

Page #8

(3) 52.204-25, Prohibition on Contracting for Certain Telecommunications and Video Surveillance Services or Equipment. (NOV 2021) (Section 889(a)(1)(A) of Pub. L. 115-232).

(4) 52.209-10, Prohibition on Contracting with Inverted Domestic Corporations (NOV 2015).

(5) 52.232-40, Providing Accelerated Payments to Small Business Subcontractors (MAR 2023) ( 31

U.S.C. 3903 and 10 U.S.C. 3801).

(6) 52.233-3, Protest After Award (AUG 1996) ( 31 U.S.C. 3553).

(7) 52.233-4, Applicable Law for Breach of Contract Claim (OCT 2004) (Public Laws 108-77 and

108-78 ( 19 U.S.C. 3805 note)).

(b) The Contractor shall comply with the FAR clauses in this paragraph (b) that the Contracting

Officer has indicated as being incorporated in this contract by reference to implement provisions of law or Executive orders applicable to acquisitions of commercial products and commercial services:

_X_ (1) 52.203-6, Restrictions on Subcontractor Sales to the Government (JUN 2020), with Alternate I (NOV 2021) ( 41 U.S.C. 4704 and 10 U.S.C. 4655).

_X_ (2) 52.203-13, Contractor Code of Business Ethics and Conduct (NOV 2021) ( 41 U.S.C. 3509)).

__ (3) 52.203-15, Whistleblower Protections under the American Recovery and Reinvestment Act of 2009 (JUN 2010) (Section 1553 of Pub. L. 111-5). (Applies to contracts funded by the American Recovery and Reinvestment Act of 2009.)

__ (4) 52.203-17, Contractor Employee Whistleblower Rights (NOV 2023) ( 41 U.S.C. 4712); this clause does not apply to contracts of DoD, NASA, the Coast Guard, or applicable elements of the intelligence community—see FAR 3.900(a).

_X_ (5) 52.204-10, Reporting Executive Compensation and First-Tier Subcontract Awards (JUN 2020) (Pub. L. 109-282) ( 31 U.S.C. 6101 note).

__ (6) [Reserved].

_ X_ (7) 52.204-14, Service Contract Reporting Requirements (OCT 2016) (Pub. L. 111-117, section 743 of Div. C).

__ (8) 52.204-15, Service Contract Reporting Requirements for Indefinite-Delivery

Contracts (OCT 2016) (Pub. L. 111-117, section 743 of Div. C).

_X_ (9) 52.204-27, Prohibition on a ByteDance Covered Application (JUN 2023) (Section 102 of

Division R of Pub. L. 117-328).

__ (10) 52.204-28, Federal Acquisition Supply Chain Security Act Orders—Federal Supply

Schedules, Governmentwide Acquisition Contracts, and Multi-Agency Contracts. (DEC 2023) ( Pub. L.

115–390, title II).

__ (11) (i) 52.204-30, Federal Acquisition Supply Chain Security Act Orders—Prohibition. (DEC 2023) ( Pub. L. 115–390, title II).

__ (ii) Alternate I (DEC 2023) of 52.204-30.

_ X_ (12) 52.209-6, Protecting the Government’s Interest When Subcontracting with Contractors

Debarred, Suspended, or Proposed for Debarment. (NOV 2021) ( 31 U.S.C. 6101 note).

_ X_ (13) 52.209-9, Updates of Publicly Available Information Regarding Responsibility

Matters (OCT 2018) ( 41 U.S.C. 2313).

__ (14) [Reserved].

__ (15) 52.219-3, Notice of HUBZone Set-Aside or Sole-Source Award (OCT 2022)

( 15 U.S.C. 657a).

__ (16) 52.219-4, Notice of Price Evaluation Preference for HUBZone Small Business Concerns

(OCT 2022) (if the offeror elects to waive the preference, it shall so indicate in its offer) ( 15 U.S.C. 657a).

__ (17) [Reserved] __ (18) (i) 52.219-6, Notice of Total Small Business Set-Aside (NOV 2020) ( 15 U.S.C. 644).

https://www.acquisition.gov/far/part-52#FAR_52_204_25 https://www.acquisition.gov/far/part-52#FAR_52_209_10 https://www.acquisition.gov/far/part-52#FAR_52_232_40 https://www.govinfo.gov/link/uscode/31/3903 https://www.govinfo.gov/link/uscode/31/3903 https://www.govinfo.gov/link/uscode/10/3801 https://www.acquisition.gov/far/part-52#FAR_52_233_3 http://uscode.house.gov/browse.xhtml;jsessionid=114A3287C7B3359E597506A31FC855B3 https://www.acquisition.gov/far/part-52#FAR_52_233_4 http://uscode.house.gov/browse.xhtml;jsessionid=114A3287C7B3359E597506A31FC855B3 https://www.acquisition.gov/far/part-52#FAR_52_203_6 http://uscode.house.gov/browse.xhtml;jsessionid=114A3287C7B3359E597506A31FC855B3 https://www.govinfo.gov/link/uscode/10/4655 https://www.acquisition.gov/far/part-52#FAR_52_203_13 http://uscode.house.gov/browse.xhtml;jsessionid=114A3287C7B3359E597506A31FC855B3 https://www.acquisition.gov/far/part-52#FAR_52_203_15 https://www.acquisition.gov/far/part-52#FAR_52_203_17 https://www.govinfo.gov/link/uscode/41/4712 https://www.acquisition.gov/far/part-3#FAR_3_900 https://www.acquisition.gov/far/part-52#FAR_52_204_10 http://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title31-section6101&num=0&edition=prelim https://www.acquisition.gov/far/part-52#FAR_52_204_14 https://www.acquisition.gov/far/part-52#FAR_52_204_15 https://www.acquisition.gov/far/part-52#FAR_52_204_27 https://www.acquisition.gov/far/part-52#FAR_52_204_28 https://www.govinfo.gov/link/plaw/115/public/390 https://www.govinfo.gov/link/plaw/115/public/390 https://www.acquisition.gov/far/part-52#FAR_52_204_30 https://www.govinfo.gov/link/plaw/115/public/390 https://www.acquisition.gov/far/part-52#FAR_52_204_30 https://www.acquisition.gov/far/part-52#FAR_52_209_6 http://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title31-section6101&num=0&edition=prelim https://www.acquisition.gov/far/part-52#FAR_52_209_9 http://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title41-section2313&num=0&edition=prelim https://www.acquisition.gov/far/part-52#FAR_52_219_3 http://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title15-section637a&num=0&edition=prelim https://www.acquisition.gov/far/part-52#FAR_52_219_4 http://uscode.house.gov/browse.xhtml;jsessionid=114A3287C7B3359E597506A31FC855B3 https://www.acquisition.gov/far/part-52#FAR_52_219_6 http://uscode.house.gov/browse.xhtml;jsessionid=114A3287C7B3359E597506A31FC855B3

Page #9

__ (ii) Alternate I (MAR 2020) of 52.219-6.

__ (19) (i) 52.219-7, Notice of Partial Small Business Set-Aside (NOV 2020) ( 15 U.S.C. 644).

__ (ii) Alternate I (MAR 2020) of 52.219-7.

_X_ (20) 52.219-8, Utilization of Small Business Concerns (FEB 2024) ( 15 U.S.C. 637(d)(2) and

(3)).

_X_ (21) (i) 52.219-9, Small Business Subcontracting Plan (SEP 2023) ( 15 U.S.C. 637(d)(4)).

__ (ii) Alternate I (NOV 2016) of 52.219-9.

__ (iii) Alternate II (NOV 2016) of 52.219-9.

__ (iv) Alternate III (JUN 2020) of 52.219-9.

__ (v) Alternate IV (SEP 2023) of 52.219-9.

__ (22) (i) 52.219-13, Notice of Set-Aside of Orders (MAR 2020) ( 15 U.S.C. 644(r)).

__ (ii) Alternate I (MAR 2020) of 52.219-13.

__ (23) 52.219-14, Limitations on Subcontracting (OCT 2022) ( 15 U.S.C. 637s).

__ (24) 52.219-16, Liquidated Damages—Subcontracting Plan (SEP

2021) ( 15 U.S.C. 637(d)(4)(F)(i)).

__ (25) 52.219-27, Notice of Set-Aside for, or Sole-Source Award to, Service-Disabled Veteran-

Owned Small Business (SDVOSB) Concerns Eligible Under the SDVOSB Program (FEB 2024) ( 15 U.S.C. 657f).

__ (26) (i) 52.219-28, Post Award Small Business Program Rerepresentation (FEB 2024) ( 15 U.S.C. 632(a)(2)).

__ (ii) Alternate I (MAR 2020) of 52.219-28.

__ (27) 52.219-29, Notice of Set-Aside for, or Sole-Source Award to, Economically

Disadvantaged Women-Owned Small Business Concerns (OCT 2022) ( 15 U.S.C. 637(m)).

__ (28) 52.219-30, Notice of Set-Aside for, or Sole-Source Award to, Women-Owned Small

Business Concerns Eligible Under the Women-Owned Small Business Program (OCT 2022) ( 15 U.S.C. 637(m)).

__ (29) 52.219-32, Orders Issued Directly Under Small Business Reserves (MAR 2020) ( 15 U.S.C. 644(r)).

__ (30) 52.219-33, Nonmanufacturer Rule (SEP 2021) ( 15U.S.C. 637(a)(17)).

_X_ (31) 52.222-3, Convict Labor (JUN 2003) (E.O.11755).

_X_ (32) 52.222-19, Child Labor-Cooperation with Authorities and Remedies (FEB 2024).

_X_ (33) 52.222-21, Prohibition of Segregated Facilities (APR 2015).

_X_ (34) (i) 52.222-26, Equal Opportunity (SEP 2016) (E.O.11246).

__ (ii) Alternate I (FEB 1999) of 52.222-26.

__ (35) (i) 52.222-35, Equal Opportunity for Veterans (JUN 2020) ( 38 U.S.C. 4212).

__ (ii) Alternate I (JUL 2014) of 52.222-35.

_ X_ (36) (i) 52.222-36, Equal Opportunity for Workers with Disabilities (JUN

2020) ( 29 U.S.C. 793).

__ (ii) Alternate I (JUL 2014) of 52.222-36.

_ X_ (37) 52.222-37, Employment Reports on Veterans (JUN 2020) ( 38 U.S.C. 4212).

_ X_ (38) 52.222-40, Notification of Employee Rights Under the National Labor Relations

Act (DEC 2010) (E.O. 13496).

_X_ (39) (i) 52.222-50, Combating Trafficking in Persons (NOV 2021) ( 22 U.S.C. chapter 78 and

E.O. 13627).

__ (ii) Alternate I (MAR 2015) of 52.222-50 ( 22 U.S.C. chapter 78 and E.O. 13627).

https://www.acquisition.gov/far/part-52#FAR_52_219_6 https://www.acquisition.gov/far/part-52#FAR_52_219_7 http://uscode.house.gov/browse.xhtml;jsessionid=114A3287C7B3359E597506A31FC855B3 https://www.acquisition.gov/far/part-52#FAR_52_219_7 https://www.acquisition.gov/far/part-52#FAR_52_219_8 http://uscode.house.gov/browse.xhtml;jsessionid=114A3287C7B3359E597506A31FC855B3 https://www.acquisition.gov/far/part-52#FAR_52_219_9 http://uscode.house.gov/browse.xhtml;jsessionid=114A3287C7B3359E597506A31FC855B3 https://www.acquisition.gov/far/part-52#FAR_52_219_9 https://www.acquisition.gov/far/part-52#FAR_52_219_9 https://www.acquisition.gov/far/part-52#FAR_52_219_9 https://www.acquisition.gov/far/part-52#FAR_52_219_9 https://www.acquisition.gov/far/part-52#FAR_52_219_13 http://uscode.house.gov/browse.xhtml;jsessionid=114A3287C7B3359E597506A31FC855B3 https://www.acquisition.gov/far/part-52#FAR_52_219_13 https://www.acquisition.gov/far/part-52#FAR_52_219_14 http://uscode.house.gov/browse.xhtml;jsessionid=114A3287C7B3359E597506A31FC855B3 https://www.acquisition.gov/far/part-52#FAR_52_219_16 http://uscode.house.gov/browse.xhtml;jsessionid=114A3287C7B3359E597506A31FC855B3 https://www.acquisition.gov/far/part-52#FAR_52_219_27 http://uscode.house.gov/browse.xhtml;jsessionid=114A3287C7B3359E597506A31FC855B3 https://www.acquisition.gov/far/part-52#FAR_52_219_28 http://uscode.house.gov/browse.xhtml;jsessionid=114A3287C7B3359E597506A31FC855B3 https://www.acquisition.gov/far/part-52#FAR_52_219_28 https://www.acquisition.gov/far/part-52#FAR_52_219_29 http://uscode.house.gov/browse.xhtml;jsessionid=114A3287C7B3359E597506A31FC855B3 https://www.acquisition.gov/far/part-52#FAR_52_219_30 http://uscode.house.gov/browse.xhtml;jsessionid=114A3287C7B3359E597506A31FC855B3 https://www.acquisition.gov/far/part-52#FAR_52_219_32 https://www.govinfo.gov/content/pkg/USCODE-2018-title15/html/USCODE-2018-title15-chap14A-sec644.htm https://www.acquisition.gov/far/part-52#FAR_52_219_33 https://www.govinfo.gov/content/pkg/USCODE-2018-title15/html/USCODE-2018-title15-chap14A-sec637.htm https://www.acquisition.gov/far/part-52#FAR_52_222_3 https://www.acquisition.gov/far/part-52#FAR_52_222_19 https://www.acquisition.gov/far/part-52#FAR_52_222_21 https://www.acquisition.gov/far/part-52#FAR_52_222_26 https://www.acquisition.gov/far/part-52#FAR_52_222_26 https://www.acquisition.gov/far/part-52#FAR_52_222_35 http://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title38-section4212&num=0&edition=prelim https://www.acquisition.gov/far/part-52#FAR_52_222_35 https://www.acquisition.gov/far/part-52#FAR_52_222_36 http://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title29-section793&num=0&edition=prelim https://www.acquisition.gov/far/part-52#FAR_52_222_36 https://www.acquisition.gov/far/part-52#FAR_52_222_37 http://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title38-section4212&num=0&edition=prelim https://www.acquisition.gov/far/part-52#FAR_52_222_40 https://www.acquisition.gov/far/part-52#FAR_52_222_50 http://uscode.house.gov/browse.xhtml;jsessionid=114A3287C7B3359E597506A31FC855B3 https://www.acquisition.gov/far/part-52#FAR_52_222_50 http://uscode.house.gov/browse.xhtml;jsessionid=114A3287C7B3359E597506A31FC855B3

Page #10

_ X_ (40) 52.222-54, Employment Eligibility Verification (MAY 2022) (Executive Order 12989).

(Not applicable to the acquisition of commercially available off-the-shelf items or certain other types of commercial products or commercial services as prescribed in FAR 22.1803.)

__ (41) (i) 52.223-9, Estimate of Percentage of Recovered Material Content for EPA–Designated Items (May 2008) ( 42 U.S.C. 6962(c)(3)(A)(ii)). (Not applicable to the acquisition of commercially available off-the-shelf items.)

__ (ii) Alternate I (MAY 2008) of 52.223-9 ( 42 U.S.C. 6962(i)(2)(C)). (Not applicable to the acquisition of commercially available off-the-shelf items.)

__ (42) 52.223-11, Ozone-Depleting Substances and High Global Warming Potential Hydrofluorocarbons (MAY 2024) ( 42 U.S.C. 7671, et seq.).

__ (43) 52.223-12, Maintenance, Service, Repair, or Disposal of Refrigeration Equipment and Air Conditioners (MAY 2024) ( 42 U.S.C. 7671, et seq.).

__ (44) 52.223-20, Aerosols (MAY 2024) ( 42 U.S.C. 7671, et seq.).

__ (45) 52.223-21, Foams (MAY 2024) ( 42 U.S.C. 7671, et seq.).

__ (46) 52.223-23, Sustainable Products and Services (MAY 2024) ( E.O. 14057, 7 U.S.C. 8102, 42

U.S.C. 6962, 42 U.S.C. 8259b, and 42 U.S.C. 7671l).

__ (47) (i) 52.224-3 Privacy Training (JAN 2017) (5 U.S.C. 552 a).

__ (ii) Alternate I (JAN 2017) of 52.224-3.

_ X_ (48) (i) 52.225-1, Buy American-Supplies (OCT 2022) ( 41 U.S.C. chapter 83).

__ (ii) Alternate I (OCT 2022) of 52.225-1.

__ (49) (i) 52.225-3, Buy American-Free Trade Agreements-Israeli Trade Act (NOV 2023) ( 19

U.S.C. 3301 note, 19 U.S.C. 2112 note, 19 U.S.C. 3805 note, 19 U.S.C. 4001 note, 19 U.S.C. chapter 29 (sections 4501-4732), Public Law 103-182, 108-77, 108-78, 108-286, 108-302, 109-53, 109-169, 109-283, 110-138, 112-41, 112-42, and 112-43.

__ (ii) Alternate I [Reserved].

__ (iii) Alternate II (DEC 2022) of 52.225-3.

__ (iv) Alternate III (FEB 2024) of 52.225-3.

__ (v) Alternate IV (Oct 2022) of 52.225-3.

__ (50) 52.225-5, Trade Agreements (NOV 2023) ( 19 U.S.C. 2501, et seq., 19 U.S.C. 3301 note).

_X_ (51) 52.225-13, Restrictions on Certain Foreign Purchases (FEB 2021) (E.O.’s, proclamations, and statutes administered by the Office of Foreign Assets Control of the Department of the Treasury).

__ (52) 52.225-26, Contractors Performing Private Security Functions Outside the United

States (Oct 2016) (Section 862, as amended, of the National Defense Authorization Act for Fiscal Year 2008; 10 U.S.C. Subtitle A, Part V, Subpart G Note).

__ (53) 52.226-4, Notice of Disaster or Emergency Area Set-Aside (Nov 2007) ( 42 U.S.C. 5150).

__ (54) 52.226-5, Restrictions on Subcontracting Outside Disaster or Emergency Area (NOV

2007) ( 42 U.S.C. 5150).

_X_ (55) 52.226-8, Encouraging Contractor Policies to Ban Text Messaging While

Driving (MAY 2024) ( E.O. 13513).

__ (56) 52.229-12, Tax on Certain Foreign Procurements (FEB 2021).

__ (57) 52.232-29, Terms for Financing of Purchases of Commercial Products and Commercial

Services (NOV 2021) ( 41 U.S.C. 4505, 10 U.S.C. 3805).

__ (58) 52.232-30, Installment Payments for Commercial Products and Commercial

Services (NOV 2021) ( 41 U.S.C. 4505, 10 U.S.C. 3805).

_X_ (59) 52.232-33, Payment by Electronic Funds Transfer-System for Award

Management (OCT2018) ( 31 U.S.C. 3332).

https://www.acquisition.gov/far/part-52#FAR_52_222_54 https://www.acquisition.gov/far/part-22#FAR_22_1803 https://www.acquisition.gov/far/part-52#FAR_52_223_9 http://uscode.house.gov/browse.xhtml;jsessionid=114A3287C7B3359E597506A31FC855B3 https://www.acquisition.gov/far/part-52#FAR_52_223_9 http://uscode.house.gov/browse.xhtml;jsessionid=114A3287C7B3359E597506A31FC855B3 https://www.acquisition.gov/far/part-52#FAR_52_223_11 https://www.govinfo.gov/link/uscode/42/7671 https://www.acquisition.gov/far/part-52#FAR_52_223_12 https://www.govinfo.gov/link/uscode/42/7671 https://www.acquisition.gov/far/part-52#FAR_52_223_20 https://www.govinfo.gov/link/uscode/42/7671 https://www.acquisition.gov/far/part-52#FAR_52_223_21 https://www.govinfo.gov/link/uscode/42/7671 https://www.acquisition.gov/far/part-52#FAR_52_223_23 https://www.federalregister.gov/executive-order/14057 https://www.govinfo.gov/link/uscode/7/8102 https://www.govinfo.gov/link/uscode/42/6962 https://www.govinfo.gov/link/uscode/42/6962 https://www.govinfo.gov/link/uscode/42/8259b https://www.govinfo.gov/link/uscode/42/7671l https://www.acquisition.gov/far/part-52#FAR_52_224_3 https://www.acquisition.gov/far/part-52#FAR_52_224_3 https://www.acquisition.gov/far/part-52#FAR_52_225_1 http://uscode.house.gov/browse.xhtml;jsessionid=114A3287C7B3359E597506A31FC855B3 https://www.acquisition.gov/far/part-52#FAR_52_225_1 https://www.acquisition.gov/far/part-52#FAR_52_225_3 https://www.govinfo.gov/link/uscode/19/3301 https://www.govinfo.gov/link/uscode/19/3301 https://www.govinfo.gov/link/uscode/19/2112 https://www.govinfo.gov/link/uscode/19/3805 https://www.govinfo.gov/link/uscode/19/4001 https://www.acquisition.gov/far/part-52#FAR_52_225_3 https://www.acquisition.gov/far/part-52#FAR_52_225_3 https://www.acquisition.gov/far/part-52#FAR_52_225_3 https://www.acquisition.gov/far/part-52#FAR_52_225_5 http://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title19-section2501&num=0&edition=prelim http://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title19-section3301&num=0&edition=prelim https://www.acquisition.gov/far/part-52#FAR_52_225_13 https://www.acquisition.gov/far/part-52#FAR_52_225_26 https://www.acquisition.gov/far/part-52#FAR_52_226_4 http://uscode.house.gov/browse.xhtml;jsessionid=114A3287C7B3359E597506A31FC855B3 https://www.acquisition.gov/far/part-52#FAR_52_226_5 http://uscode.house.gov/browse.xhtml;jsessionid=114A3287C7B3359E597506A31FC855B3 https://www.acquisition.gov/far/part-52#FAR_52_226_8 https://www.federalregister.gov/executive-order/13513 https://www.acquisition.gov/far/part-52#FAR_52_229_12 https://www.acquisition.gov/far/part-52#FAR_52_232_29 http://uscode.house.gov/browse.xhtml;jsessionid=114A3287C7B3359E597506A31FC855B3 https://www.govinfo.gov/link/uscode/10/3805 https://www.acquisition.gov/far/part-52#FAR_52_232_30 http://uscode.house.gov/browse.xhtml;jsessionid=114A3287C7B3359E597506A31FC855B3 https://www.govinfo.gov/link/uscode/10/3805 https://www.acquisition.gov/far/part-52#FAR_52_232_33 http://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title31-section3332&num=0&edition=prelim

Page #11

__ (60) 52.232-34, Payment by Electronic Funds Transfer-Other than System for Award Management (Jul 2013) ( 31 U.S.C. 3332).

__ (61) 52.232-36, Payment by Third Party (MAY 2014) ( 31 U.S.C. 3332).

_ X_ (62) 52.239-1, Privacy or Security Safeguards (AUG 1996) ( 5 U.S.C. 552a).

__ (63) 52.242-5, Payments to Small Business Subcontractors (JAN 2017) ( 15 U.S.C. 637(d)(13)).

__ (64) (i) 52.247-64, Preference for Privately Owned U.S.-Flag Commercial Vessels (NOV

2021) ( 46 U.S.C. 55305 and 10 U.S.C. 2631).

__ (ii) Alternate I (APR 2003) of 52.247-64.

__ (iii) Alternate II (NOV 2021) of 52.247-64.

(c) The Contractor shall comply with the FAR clauses in this paragraph (c), applicable to commercial services, that the Contracting Officer has indicated as being incorporated in this contract by reference to implement provisions of law or Executive orders applicable to acquisitions of commercial products and commercial services:

__ (1) 52.222-41, Service Contract Labor Standards (AUG 2018) ( 41 U.S.C. chapter67).

__ (2) 52.222-42, Statement of Equivalent Rates for Federal

Hires (MAY 2014) ( 29 U.S.C. 206 and 41 U.S.C. chapter 67).

__ (3) 52.222-43, Fair Labor Standards Act and Service Contract Labor Standards-Price

Adjustment (Multiple Year and Option Contracts) (AUG 2018) ( 29 U.S.C. 206 and 41 U.S.C. chapter 67).

__ (4) 52.222-44, Fair Labor Standards Act and Service Contract Labor Standards-Price

Adjustment (May 2014) ( 29U.S.C.206 and 41 U.S.C. chapter 67).

__ (5) 52.222-51, Exemption from Application of the Service Contract Labor Standards to

Contracts for Maintenance, Calibration, or Repair of Certain Equipment-Requirements (May 2014) ( 41 U.S.C. chapter 67).

__ (6) 52.222-53, Exemption from Application of the Service Contract Labor Standards to Contracts for Certain Services-Requirements (MAY 2014) ( 41 U.S.C. chapter 67).

__ (7) 52.222-55, Minimum Wages for Contractor Workers Under Executive Order 14026 (JAN 2022).

__ (8) 52.222-62, Paid Sick Leave Under Executive Order 13706 (JAN 2022) (E.O. 13706).

__ (9) 52.226-6, Promoting Excess Food Donation to Nonprofit Organizations (Jun 2020)

( 42 U.S.C. 1792).

(d) Comptroller General Examination of Record. The Contractor shall comply with the provisions of this paragraph (d) if this contract was awarded using other than sealed bid, is in excess of the simplified acquisition threshold, as defined in FAR 2.101, on the date of award of this contract, and does not contain the clause at 52.215-2, Audit and Records-Negotiation.

(1) The Comptroller General of the United States, or an authorized representative of the Comptroller General, shall have access to and right to examine any of the Contractor’s directly pertinent records involving transactions related to this contract.

(2) The Contractor shall make available at its offices at all reasonable times the records, materials, and other evidence for examination, audit, or reproduction, until 3 years after final payment under this contract or for any shorter period specified in FAR subpart 4.7, Contractor Records Retention, of the other clauses of this contract. If this contract is completely or partially terminated, the records relating to the work terminated shall be made available for 3 years after any resulting final termination settlement. Records relating to appeals under the disputes clause or to litigation or the settlement of claims arising under or relating to this contract shall be made available until such appeals, litigation, or claims are finally resolved.

(3) As used in this clause, records include books, documents, accounting procedures and practices, and other data, regardless of type and regardless of form. This does not require the https://www.acquisition.gov/far/part-52#FAR_52_232_34 http://uscode.house.gov/browse.xhtml;jsessionid=114A3287C7B3359E597506A31FC855B3 https://www.acquisition.gov/far/part-52#FAR_52_232_36 http://uscode.house.gov/browse.xhtml;jsessionid=114A3287C7B3359E597506A31FC855B3 https://www.acquisition.gov/far/part-52#FAR_52_239_1 http://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title5-section552a&num=0&edition=prelim https://www.acquisition.gov/far/part-52#FAR_52_242_5 http://uscode.house.gov/browse.xhtml;jsessionid=114A3287C7B3359E597506A31FC855B3 https://www.acquisition.gov/far/part-52#FAR_52_247_64 https://www.govinfo.gov/content/pkg/USCODE-2019-title46/html/USCODE-2019-title46-subtitleV-partD-chap553-subchapI-sec55305.htm http://uscode.house.gov/browse.xhtml;jsessionid=114A3287C7B3359E597506A31FC855B3 https://www.acquisition.gov/far/part-52#FAR_52_247_64 https://www.acquisition.gov/far/part-52#FAR_52_247_64 https://www.acquisition.gov/far/part-52#FAR_52_222_41 http://uscode.house.gov/browse.xhtml;jsessionid=114A3287C7B3359E597506A31FC855B3 https://www.acquisition.gov/far/part-52#FAR_52_222_42 http://uscode.house.gov/browse.xhtml;jsessionid=114A3287C7B3359E597506A31FC855B3 http://uscode.house.gov/browse.xhtml;jsessionid=114A3287C7B3359E597506A31FC855B3 https://www.acquisition.gov/far/part-52#FAR_52_222_43 http://uscode.house.gov/browse.xhtml;jsessionid=114A3287C7B3359E597506A31FC855B3 http://uscode.house.gov/browse.xhtml;jsessionid=114A3287C7B3359E597506A31FC855B3 https://www.acquisition.gov/far/part-52#FAR_52_222_44 http://uscode.house.gov/browse.xhtml;jsessionid=114A3287C7B3359E597506A31FC855B3 http://uscode.house.gov/browse.xhtml;jsessionid=114A3287C7B3359E597506A31FC855B3 https://www.acquisition.gov/far/part-52#FAR_52_222_51 http://uscode.house.gov/browse.xhtml;jsessionid=114A3287C7B3359E597506A31FC855B3 https://www.acquisition.gov/far/part-52#FAR_52_222_53 http://uscode.house.gov/browse.xhtml;jsessionid=114A3287C7B3359E597506A31FC855B3 https://www.acquisition.gov/far/part-52#FAR_52_222_55 https://www.acquisition.gov/far/part-52#FAR_52_222_62 https://www.acquisition.gov/far/part-52#FAR_52_226_6 http://uscode.house.gov/browse.xhtml;jsessionid=114A3287C7B3359E597506A31FC855B3 https://www.acquisition.gov/far/part-2#FAR_2_101 https://www.acquisition.gov/far/part-52#FAR_52_215_2 https://www.acquisition.gov/far/part-4#FAR_Subpart_4_7

Page #12

Contractor to create or maintain any record that the Contractor does not maintain in the ordinary course of business or pursuant to a provision of law.

(e) (1) Notwithstanding the requirements of the clauses in paragraphs (a), (b), (c), and (d) of this clause, the Contractor is not required to flow down any FAR clause, other than those in this paragraph (e)(1), in a subcontract for commercial products or commercial services. Unless otherwise indicated below, the extent of the flow down shall be as required by the clause-

(i) 52.203-13, Contractor Code of Business Ethics and Conduct (NOV 2021) ( 41 U.S.C. 3509).

(ii) 52.203-17, Contractor Employee Whistleblower Rights (NOV 2023) ( 41 U.S.C. 4712).

(iii) 52.203-19, Prohibition on Requiring Certain Internal Confidentiality Agreements or

Statements (Jan 2017) (section 743 of Division E, Title VII, of the Consolidated and Further Continuing Appropriations Act, 2015 (Pub. L. 113-235) and its successor provisions in subsequent appropriations acts (and as extended in continuing resolutions)).

(iv) 52.204-23, Prohibition on Contracting for Hardware, Software, and Services Developed or Provided by Kaspersky Lab Covered Entities (DEC 2023) (Section 1634 of Pub. L. 115-91).

(v) 52.204-25, Prohibition on Contracting for Certain Telecommunications and Video Surveillance Services or Equipment. (NOV 2021) (Section 889(a)(1)(A) of Pub. L. 115-232).

(vi) 52.204-27, Prohibition on a ByteDance Covered Application (JUN 2023) (Section 102 of Division R of Pub. L. 117-328).

(vii)

(A) 52.204–30, Federal Acquisition Supply Chain Security Act Orders—Prohibition. (DEC

2023) ( Pub. L. 115–390, title II).

(B) Alternate I (DEC 2023) of 52.204–30.

(viii) 52.219-8, Utilization of Small Business Concerns (FEB 2024) ( 15 U.S.C. 637(d)(2) and (3)), in all subcontracts that offer further subcontracting opportunities. If the subcontract (except subcontracts to small business concerns) exceeds the applicable threshold specified in FAR 19.702(a) on the date of subcontract award, the subcontractor must include 52.219-8 in lower tier subcontracts that offer subcontracting opportunities.

(ix) 52.222-21, Prohibition of Segregated Facilities (APR 2015).

(x) 52.222-26, Equal Opportunity (SEP 2015) (E.O.11246).

(xi) 52.222-35, Equal Opportunity for Veterans (JUN 2020) ( 38 U.S.C. 4212).

(xii) 52.222-36, Equal Opportunity for Workers…