Solicitation 030ADV24R0054 - MAM System 06122024.pdf

PAGE 1 OF1. REQUISITION NO.

2. CONTRACT NO. 3. AWARD/EFFECTIVE DATE 4. ORDER NO. 5. SOLICITATION NUMBER 6. SOLICITATION ISSUE DATE

a. NAME b. TELEPHONE NO. (No Collect Calls) 8. OFFER DUE DATE/LOCAL

TIME

9. ISSUED BY CODE 10. THIS ACQUISITION IS UNRESTRICTED OR SET ASIDE: % FOR:

SMALL BUSINESS

HUBZONE SMALL

BUSINESS

SERVICE-DISABLED

VETERAN-OWNED

SMALL BUSINESS

WOMEN-OWNED SMALL BUSINESS

(WOSB) ELIGIBLE UNDER THE WOMEN-OWNED

SMALL BUSINESS PROGRAM

EDWOSB

8(A)

NAICS:

SIZE STANDARD:

11. DELIVERY FOR FOB DESTINA-

TION UNLESS BLOCK IS

MARKED

SEE SCHEDULE

12. DISCOUNT TERMS

13a. THIS CONTRACT IS A

RATED ORDER UNDER

DPAS (15 CFR 700)

13b. RATING

14. METHOD OF SOLICITATION

RFQ IFB RFP

15. DELIVER TO CODE 16. ADMINISTERED BY CODE

17a. CONTRACTOR/OFFEROR CODE FACILITY CODE 18a. PAYMENT WILL BE MADE BY CODE

TELEPHONE NO. UEI: EFT:

PHONE: FAX:

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT SUCH ADDRESS IN OFFER

18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a UNLESS BLOCK BELOW IS CHECKED

SEE ADDENDUM

19. 20. 21. 22. 23. 24.

ITEM NO. SCHEDULE OF SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

(Use Reverse and/or Attach Additional Sheets as Necessary)

25. ACCOUNTING AND APPROPRIATION DATA 26. TOTAL AWARD AMOUNT (For Govt. Use Only)

27a. SOLICITATION INCORPORATES BY REFERENCE FAR 52.212-1, 52.212-4. FAR 52.212-3 AND 52.212-5 ARE ATTACHED. ADDENDA ARE ARE NOT ATTACHED.

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA ARE ARE NOT ATTACHED

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN _______________ 29. AWARD OF CONTRACT: REF. ___________________________________ OFFER COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND DATED ________________________________. YOUR OFFER ON SOLICITATION DELIVER ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND ON ANY (BLOCK 5), INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE ADDITIONAL SHEETS SUBJECT TO THE TERMS AND CONDITIONS SPECIFIED SET FORTH HEREIN IS ACCEPTED AS TO ITEMS:

30a. SIGNATURE OF OFFEROR/CONTRACTOR 31a. UNITED STATES OF AMERICA (SIGNATURE OF CONTRACTING OFFICER)

30b. NAME AND TITLE OF SIGNER (TYPE OR PRINT) 30c. DATE SIGNED 31b. NAME OF CONTRACTING OFFICER (TYPE OR PRINT) 31c. DATE SIGNED

AUTHORIZED FOR LOCAL REPRODUCTION (REV. NOV 2021)

PREVIOUS EDITION IS NOT USABLE Prescribed by GSA - FAR (48 CFR) 53.212

7. FOR SOLICITATION

INFORMATION CALL:

STANDARD FORM 1449

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL PRODUCTS AND COMMERCIAL SERVICES

OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, & 30

See SCHEDULE

030ADV24R0054 06-12-2024

Samuel, Ramon (202) 707-3086 07-15-2024

12:00PM EST

Contracts and Grants Directorate Library of Congress

101 Independence Ave. SE LA 325 Washington DC 20540-9411

X

N/A

X

DELIVERY

See Sections D&F for delivery instructions.

Contracts & Grants Directorate Library of Congress

LA 325

101 Independence Av SE Washington DC 20540-9411

Submit Invoices through https://www.ipp.gov Washington DC 20540

See CONTINUATION Page

See CONTINUATION Page

X X

X 1

Samuel, Ramon

030ADV24R0054

Table of Contents

SECTION A

A.1 SF 1449 SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL PRODUCTS AND COMMERCIAL SERVICES

SECTION B - SUPPLIES OR SERVICES AND PRICE/COSTS

B.1 LC52.216-3 CONTRACT TYPE (JUN 2016)

B.2 PRICE/COST SCHEDULE

ITEM INFORMATION

SECTION C - DESCRIPTION/SPECIFICATIONS/STATEMENT OF WORK

Section C Statement of Work

C.4.3. ACCEPTANCE OF HARDWARE

SECTION D - PACKAGING AND MARKING

D.1 LC52.211-1 DELIVERIES (APR 2015)

D.2 LC52.211-2 DELIVERIES TO THE LIBRARY OF CONGRESS, CAPITOL HILL CAMPUS (JUN 2021)

D.3 LC52.231-1 PAYMENT OF POSTAGE FEES (MAY 2015)

SECTION F - DELIVERIES OR PERFORMANCE

F.1 Schedule of Deliverables

F.2 LC52.215-5 PLACE AND PERIOD OF PERFORMANCE (JAN 2019)

SECTION G - CONTRACT ADMINISTRATION DATA

G.1 LC52.201-3 CONTRACT ADMINISTRATION (AUG 2015)

G.2 LC52.232-1 LIBRARY OF CONGRESS INVOICE INSTRUCTIONS (DEC 2022)

G.3 LC52.232-2 SCHEDULE OF PAYMENTS (JUN 2015)

SECTION H - SPECIAL CONTRACT REQUIREMENTS

H.1 LC52.203-1 CONTRACTOR PUBLICITY (OCT 2013)

H.2 LC52.204-2 CONDUCT ON LIBRARY PREMISES (JUL 2021)

H.3 LC52.204-3 INFORMATION SYSTEMS SECURITY (SEP 2018)

H.4 LC52.204-4 CONTRACTOR EMPLOYEE FITNESS (AUG 2023)

H.5 LC52.212-2 SUPPLEMENTAL LICENSE AGREEMENTS (JUL 2017)

H.6 LC52.239-1 INFORMATION SECURITY (APR 2021)

H.7 LC52.239-3A ASSESSMENT AND AUTHORIZATION (ALT I) (JAN 2016)

H.8 LC52.239-4 SECTION 508 COMPLIANCE (JAN 2015)

H.9 LC52.239-5 SYSTEMS HOSTED BY EXTERNAL HOSTING PROVIDERS (SEP 2018)

H.10 LC52.239-6 ASSESSMENT AND AUTHORIZATION PRIVACY REQUIREMENTS (JUL 2016)

030ADV24R0054

H.11 LC52.204-27 HANDLING OF FEDERAL RECORDS (JUL 2021)

H.12 LC52.239-2 SYSTEMS DEVELOPMENT LIFE CYCLE (SEP 2018)

PART II - CONTRACT CLAUSES

SECTION I - CONTRACT CLAUSES

I.1 52.252-2 CLAUSES INCORPORATED BY REFERENCE (FEB 1998)

I.2 52.212-5 CONTRACT TERMS AND CONDITIONS REQUIRED TO IMPLEMENT STATUTES OR EXECUTIVE

ORDERS—COMMERCIAL PRODUCTS AND COMMERCIAL SERVICES (MAY 2024)

I.3 LC52.212-4 CONTRACT TERMS AND CONDITIONS - COMMERCIAL ITEMS (DEV) (FEB 2016)

I.4 LC52.212-5 CONTRACT TERMS AND CONDITIONS REQUIRED TO IMPLEMENT STATUTES OR EXECUTIVE

ORDERS - COMMERCIAL ITEMS (DEV) (MAY 2015)

I.5 LC52.232-25 PROMPT PAYMENT (DEV) (JUL 2013)

I.6 LC52.233-1 52.233-1 (DEV) DISPUTES (MAY 2014)

PART III - LIST OF DOCUMENTS, EXHIBITS AND OTHER ATTACHMENTS

SECTION J - LIST OF ATTACHMENTS

PART IV - REPRESENTATIONS AND INSTRUCTIONS

SECTION K - REPRESENTATIONS, CERTIFICATIONS AND OTHER STATEMENTS OF OFFERORS

K.1 52.212-3 OFFEROR REPRESENTATIONS AND CERTIFICATIONS—COMMERCIAL PRODUCTS AND

COMMERCIAL SERVICES (MAY 2024)

SECTION L - INSTRUCTIONS, CONDITIONS, AND NOTICES TO OFFERORS

L.1 PROPOSAL SUBMISSION INSTRUCTIONS - BEST VALUE TRADE-OFF

L.2 LC52.233-2 PROTESTS TO THE LIBRARY OF CONGRESS (DEC 2013)

SECTION M - EVALUATION FACTORS FOR AWARD

M.1 LC52.215-2 EVALUATION - BEST VALUE TRADE-OFF (FEB 2020)

030ADV24R0054 Section B

SECTION B - SUPPLIES OR SERVICES AND PRICE/COSTS

B.1 LC52.216-3 CONTRACT TYPE (JUN 2016)

This is a Firm Fixed Price contract.

(End of Clause)

B.2 PRICE/COST SCHEDULE

ITEM INFORMATION

ITEM

NUMBER

DESCRIPTION OF

SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

0001 1.00 LOT _______________

Media Asset Management system, media ingest stations, delivery, and installation.

Contract Period: Base POP Begin: 09-02-2024 POP End: 12-31-2024

0002 1.00 YR _______________

One (1) Year of MAM System Maintenance and Technical Support Contract Period: Base POP Begin: 12-31-2024 POP End: 12-30-2025

GRAND TOTAL _______________

030ADV24R0054 Section C

SECTION C - DESCRIPTION/SPECIFICATIONS/STATEMENT OF WORK

Section C Statement of Work

C.1. OVERVIEW / BACKGROUND.

The Library of Congress (Library) is seeking a centralized Media Asset Management (MAM) solution that will integrate a sophisticated software layer over its existing hardware storage systems. The Multimedia Group, Office of Communications, and Design Office all manage a vast array of digital media assets. At present, there is no cohesion between these offices and the digital media assets held by each, creating gaps in the effort to streamline the sharing of digital assets to complete mission critical tasks. The current process requires manual management of media assets.

The MAM solution sought will replace this manual process and provide a central automated solution to enhance file sharing and organization, retrieval, metadata tagging, quality control and the approval process. This new system will serve as the primary media assets repository for these multiple departments, each with varying metadata types and workflows. The solution must aim to optimize current on-premises hardware storage solutions in use. The current on-prem storage systems are sufficient for the needs of the various divisions at the Library that will be using this MAM system. To avoid a loss of access if a funding lapse occurs, the Library requires a system that is not based on monthly or annual subscriptions. The data that will be ingested by the system will originate from the Library’s fleet of Sony photography cameras, Sony ENG cameras, Sony Cinema cameras, and a variety of SD and microSD cards.

C.2. SCOPE

The Contractor shall provide a MAM system capable of storing, categorizing, and tracking various types of digital media assets.

C.3. REQUIREMENTS

Contractor shall provide a MAM System to include audio files, video files, and still images--as well as supporting descriptive metadata for each digital asset. The system must be available for personnel on-site and telework employees working remotely via virtual private network (VPN).

The Contractor shall deliver both hardware and software to support the system. Library of Congress personnel will install the hardware for the solution; however, the Contractor shall install the software on-site at the Library of Congress (see Section C.4 for additional information on the hardware and software services). When installing the software, the Contractor shall consult with the three Library service units that will use the software—the Multimedia Group, Office of Communications, and Design Office—to understand their requirements and configure the software accordingly.

The MAM system must be capable of managing all digital media assets, supporting versioning control, metadata input, archive functions, video playback, and integrating with current software and hardware. To support uploading from physical media, the system shall include two ingest workstations, along with media card readers compatible with Sony Still, ENG, and Cinema camera media cards.

C.3.1 Asset Management

The system shall provide comprehensive asset management functionality, including multiple file import methods, duplication avoidance, and the ability to handle various file sizes and file formats. In addition to these requirements, the proposed system must provide the capability to:

Import a single file or multiple files simultaneously;

Recognize the Sony ENG and Cinema cameras’ XML files, codecs, and folder/file structure system;

Recognize drop frame and non-drop frame timecodes;

Manage multiple file sizes and/or formats of the same asset, including proxy versions of video files;

Create sub-clips from video assets;

Customize views and searches, and organize assets into folder-like structures;

Place files in multiple folders without creating duplicate media; and

C.3.2 Metadata Management and Conflict Resolution

The MAM system must allow for the creation of custom metadata fields and multiple schemas and support advanced search capabilities across all metadata fields. To ensure data integrity, The system must prevent metadata entry conflicts when multiple users are working on the same data.

The system must have the ability to extract existing technical metadata from assets with and without sidecar XML files.

Metadata entry and updates shall be possible on both single files and multiple files/assets, at once. Metadata types shall include at a minimum: date, time, timecode, text, Boolean, drop-down, tags, single select and multi-select. Metadata fields shall also be capable of handling diacritics.

C.3.3 Version Control and File Association

The system shall provide the capability for version control and linking of related files, such as derivative assets.

C.3.4 Archiving and Recall

The system shall provide a method to archive original/native content, while retaining a proxy/representation file in the system; and can recall original/native content. It shall also provide the ability to set archival rules based on metadata.

C.3.5 Integrated Video Player

The system shall have an integrated player for viewing audiovisual assets. The player shall support timecode specific comments and provide the option to playback overlaid SRT captions. The integrated player shall also allow for video scrubbing during playback.

C.3.6 Adobe Software Integration

The system shall support direct import into applications within the Adobe Creative Suite (at minimum After Effects, Lightroom Classic, Photoshop and Premiere) and allow for export from applications within the Adobe Creative suite back into the system.

C.3.7 Event Scheduling System Compatibility

The Contractor shall identify a solution to Integrate their proposed MAM system with the Library’s existing Event Management application, hosted on ServiceNow. The Library’s Event Management system contains detailed descriptive metadata about each event the Library hosts. This metadata will frequently apply to the various assets to be tracked by the MAM system. The API should have the capability to pull descriptive metadata fields from tables within ServiceNow and associate it with pieces of media in the proposed solution.

C.3.8 Workflow Automation

The system shall provide the ability to create and monitor custom workflows and automations. This shall include the ability to send notifications, the ability to customize workflows based on metadata changes, and the ability to customize archival rules.

C.3.9 Database Integrity

The system shall offer functions for scheduling automated system backups of its system database and restoring from the system backups.

C.3.10 Account Control

The system shall support role-based system user access. To meet the Library’s IT Security regulations, account access shall support Active Directory/LDAP and/or Single Sign On (SSO). The system shall integrate with MS Entra ID, formerly Azure AD.

C.3.11 Interoperability - Software

The MAM system shall seamlessly integrate with various software tools used across the Library, including applications within the Adobe Creative Suite (at minimum: After Effects, Lightroom Classic, Photoshop and Premiere) and Telestream Vantage. This interoperability is required to aid smooth workflows and efficient file handling among the different divisions. Telestream Vantage is used to transcode all video content for internal use, external use, and records management.

The system should include an operator interface presented as an intranet page that is compatible with modern browsers on both Windows and Mac OS.

C.3.12 Interoperability - Hardware

The MAM system shall seamlessly integrate with multiple existing division-specific hardware storage systems, including, Quantum StorNext Xcellis fiber storage arrays and general local Storage Area Networks (SAN). The system shall support a variety of connection protocols to ensure full compatibility with both Mac and PC environments, including SMB for network file sharing across all platforms, NFS for integration with Linux/Unix systems, and iSCSI for high-performance SAN connections.

C.3.13 On-Site and Remote Access

The MAM system shall be accessible for on-site and remote (telework) Library employees.

C.3.14 Maintenance

Contractor shall provide manufacturer maintenance for ongoing support, including software / firmware upgrades. Support shall also include remote technical support response time within 24 hours, via phone or email Monday through Friday, excluding holidays.

C.3.15 Media Ingest Stations

The Contractor shall provide a quantity of two (2) PC Computer ingest stations, for the sole purpose of ingesting media from Sony media card types. Each ingest station shall include the following:

A Small form-factor computer with a minimum of 512 GB of internal storage, a minimum of 16GB of memory, at least one (1) USB 3.0 type C port, and at least two (2) USB 3.0 type A ports;

A compatible keyboard and mouse;

Compatible 20” inch LCD computer monitor with VESA mount;

One (1) two-unit rack shelf;

One (1) CFexpress Type A/SD Memory Card Reader, data transfer rate up to 10 Gb/s, USB 3.1 Gen 2, and includes both USB Type-C to Type-C and USB Type-C to Type-A cables;

One (1) USB 3.0 Reader/Writer for SxS PRO+ and SxS-1 Memory Cards, with read speeds up to 440 MB/s, write speeds up to 350 MB/s, bus powered, USB 2.0 compatible, Windows and Mac compatible, and includes a USB-

3.0 cable; and

One (1) pair of headphones with 40mm Neodymium drivers, a closed design, swiveling earcups, and a single-sided coiled cable.

C.3.16 Accessibility

The solution must meet or exceed applicable Revised Section 508 Standards and WCAG 2.1 A or AA standards.

C.3.17 Administrative Access

Administrative access for Library administrators must be initiated from Library networks over a secure VPN connection.

C.3.18 Alerting and Monitoring

The system shall provide real-time up/down alerts, as well as time-based availability metrics.

C.3.19 Application Programming Interface (API)

The solution shall provide a fully documented API that allows for (1) extraction/insertion of data into the platform, and

(2) execution of business functions.

C.3.20 Configurations

If the system includes the ability to extend features/configuration via user-defined configuration items, these configurations must not interfere with future platform upgrades.

These user configurations are version-controlled either via an internal tool, or via an external repository such as GIT.

If a specific requirement would cause a potential problem with platform upgrades, the Contractor shall bring this to the attention of the Contracting Officer’s Representative (COR) immediately. The Library will then work with the Contractor to discuss the situation and possible alternative approaches or modifications to the requirements to maintain the integrity of the platform.

C.3.21 Remediation of Software Vulnerabilities

As part of the Library’s continuous security monitoring program, software used by the agency is subject to routine security scanning, whether it is hosted internally or externally. These security scans may result in the identification of software security vulnerabilities that need to be mitigated within the following timeframes:

High-Priority Vulnerabilities 30 calendar days

Medium-Priority Vulnerabilities 180 calendar days

Low-Priority Vulnerabilities 360 calendar days

Upon notification of a security vulnerability, the Contractor will correct the vulnerability within the specified timeframes, including the modification, testing, and installation of code on all Library instances of the software. The Contractor will also provide documentation, such as release notes, installation guides and user guides, to document the changes made to the software to address the identified vulnerability(ies). Costs associated with addressing software security vulnerabilities are not reimbursable separately and should be included as part of the Contractor’s price for provisioning the Library’s software licenses or software maintenance.

C.3.22 Infrastructure

The system’s physical hardware designs must be in accordance with the approved hardware defined in the LOC Enterprise Architecture (Storage/Server/Network/Peripherals). For reference, currently approved products by the Library include:

1) Server OS = RHEL 9 or Windows Server 2022

2) DB = MySQL 8/8.4 or Oracle 19 or SQL Server 2019

3) For integration purposes, the Library’s Network and Storage infrastructure are mainly

a. Storage: Nimble and EMC Unity

b. Network: Cisco

The system’s database architecture must be in accordance with the approved databases and supported versions defined in the LOC Enterprise Architecture (i.e., Oracle X, SQL Server X, and My SQL X).

The operating system (OS) for the application must be in accordance with the approved operating systems defined in the LOC Enterprise Architecture and deployed on hardened OS images in accordance with the agency’s IT Security Directives (i.e., Red Hat version 7,8 or higher; Windows Server 2019 or higher; and Exchange 2019 or higher).

If the system is installed on premise, it must support the Application Centric Infrastructure (ACI) network model.

If the system is installed on premise, the design for the application must be in accordance with the Zero Trust methodology and provide IPV6 support.

C.3.23 System Uptime Requirements

The system shall support 99.9% uptime for the Production environment.

System downtime for software updates, patches, and release deployments shall be performed during approved maintenance periods.

The Contractor shall provide advance notification to the COR for its scheduled maintenance periods.

The Contractor shall alert the COR of any unanticipated service disruptions as soon as the outage is identified and provide hourly status updates until the resolution of the outage.

C.4. CONTRACT PERFORMANCE

C.4.1 HARDWARE DELIVERY

The Contractor shall deliver the MAM system software and media ingest station hardware to the following address:

The Library of Congress – Multimedia Group Attn: To be provided at contract award The Library of Congress – James Madison Building 101 Independence Avenue S.E.

Office: To be provided at contract award Washington, DC 20540 Phone: To be provided at contract award

The Contractor shall contact the COR at least two (2) business days before delivering any hardware to confirm that staff will be available to receive the equipment.

C.4.2 HARDWARE INSTALLATION

The contractor shall provide installation and integration for all on-premises hardware items listed in section C.3. This includes racking and cabling of hardware that shall be installed in equipment racks. Onsite installation shall occur at the Library of Congress James Madison Building, in Washington, DC.

C.4.3. ACCEPTANCE OF HARDWARE

Library users will test all the hardware delivered by the Contractor within 10 business days of receipt by the agency. The Contractor shall replace any defective hardware with equipment that is in good working order within 10 business days of notification of the defect(s) by the COR, at no additional cost.

(End of Clause)

030ADV24R0054 Section D

SECTION D - PACKAGING AND MARKING

D.1 LC52.211-1 DELIVERIES (APR 2015)

All deliveries submitted to the CO or the COR or other Library personnel designated to receive deliverables shall clearly indicate the following information:

a. Agency/Requiring Library Service Unit and MAIL STOP/Room Number

b. Description of information/data being submitted

c. Contract Number

d. Contractor Name and Address

(End of Clause)

D.2 LC52.211-2 DELIVERIES TO THE LIBRARY OF CONGRESS, CAPITOL HILL CAMPUS (JUN

2021)

(a) SAFETY. Trucks making deliveries to the Library of Congress must meet the following minimum clearances: 13 ft high, 9 ft wide and 20 ft long. Contractor vehicles exceeding that limitation shall not be permitted access to the Loading Dock area. The Contractor shall ensure that ceiling; doors or walls are not disturbed or damaged. The Contractor shall be held responsible for all costs of repairs to ceiling, doors, etc. and any secondary damage resulting from that damage. The maximum ceiling height inside the loading dock is 14′-8″.

(b) SECURITY. The contractor must adhere to all Library of Congress and U.S. Capitol Police physical security protocols and offsite screening procedures. These requirements may change during the course of the contract and it is the responsibility of the contractor to stay in compliance with current regulations. The most current procedures for accessing only the Madison Loading Dock are as follows:

(c) SCREENING PROCESS FOR ALL VEHICLES COMING TO LIBRARY OF CONGRESS LOADING DOCKS & JEFFERSON EAST

PARKING LOT FREIGHT ELEVATOR

Process includes all trucks, cars and vans coming to the LC Capitol Hill campus. All contractors are now required to notify the Off-Site Delivery Center (OSDC) no later than 24 HOURS PRIOR TO ARRIVAL (48-72 hours if possible)

Contractors are required to have a letter on file with the U.S. Capitol Police. The letter must be on company letterhead accompanied by signature of the owner, president or manager and sent directly to the OSDC email:

OSDCAdmin@USCP.GOV and the COR. The letter shall be protected with a password, and the password shall be sent separately. Requests for access must be renewed every year and should contain the following information:

1. Company Name,

2. Drivers/Employee Names requiring access,

3. Social Security Number for each Driver/Employee,

4. Date of Birth for each Drive Employee,

5. Driver License Number,

6. Vehicle make, model, tag number,

7. Building(s) to be accessed,

8. COR’s name and phone number, 030ADV24R0054 Section D

9. Contract number

All deliveries must include a Bill of Lading and designate a Library Point of Contact (POC) name and telephone number for deliveries. If making more than one delivery on the Hill, make the Library of Congress your last stop. If you do not, you will have to go through the screening process again after leaving the Library.

Vehicles leaving the Library are not resealed.

(d) DELIVERIES BEFORE 3:00 P.M. – OFF-SITE DELIVERY CENTER (OSDC)

The OSDC is open Mon-Fri. 4:30 a.m. to 3:00 p.m. at 4700 Shepherd Parkway S.W. for screening by the U.S. Capitol Police. Once cleared, proceed to D Street and Delaware Avenue S.W. (open Mon-Fri.4:45 am – 3:00 pm) to gain access to Capitol Hill. The OSDC phone number is (202)224-0202.

When a vehicle enters the OSDC:

1. Drivers information is checked.

2. Truck unloaded and material X-rayed and screened.

3. Material is replaced and the vehicle is sealed.

4. Vehicle proceeds to Delaware Avenue, seal is verified, and truck is cleared to first destination.

5. If multiple deliveries on the Hill the vehicle will be resealed upon departure from each delivery location – except the Library of Congress.

6. Vehicle arrives at the Library of Congress. The seal is verified and removed by the police.

(e) DELIVERIE S AFTER 3:00 P.M. Weekdays or Saturday – ALL DELIVERIES / WITH COORDINATION WITH USCP LIBRARY DIVISION (Exception basis for same day delivery only)

Provide all information as above and copy the Library Division at police_support@loc.gov (underscore between police and support) and a fax to (202) 707-1030 and include the estimated arrival time. The inspection location is the 600 block of New Jersey Ave. S.E., and C St NW near the power plant. Call the Library Division at (202) 707-1000 who will arrange for the vehicle to be swept. The vehicle will then be escorted to the Library. All containers have a designated placement location and the Contractor shall not leave any container in any area except those identified in this contract. This expressly designates Independence Avenue, C Street, 1st, 2nd, 3rd Streets and East Capitol Street, SE as areas off limits for staging of containers. All delivery vehicles shall have clearly identified company signage. Driver and all onsite staff shall wear distinguishable company uniform and/or company ID. The Contractor shall not travel beyond the dock area of the Madison Loading Dock. The Contractor shall comply with the Library security procedures. Contractor will be briefed by the COR on Library’s security procedures currently in effect. The security procedures vary periodically.

(End of Clause)

D.3 LC52.231-1 PAYMENT OF POSTAGE FEES (MAY 2015)

All postage and fees related to submission of information, including forms, and reports, etc., to the Contracting Officer or Contracting Officer’s Representative (COR) or other persons designated to receive, shall be paid by the Contractor.

030ADV24R0054 Section F

SECTION F - DELIVERIES OR PERFORMANCE

F.1 Schedule of Deliverables

The contractor shall deliver the following deliverables:

Paragraph reference

Description of Event/Deliverable

Due date Payment

C.3.1 – C.3.13, C.3.15, C.4.1, C.4.2

Media Asset Management System and all associated functions, Media ingest stations, delivery, and installation.

9/1/2024 - 12/31/2024

C.3.14 One (1) Year of Maintenance/Technical Support

12/31/2024 – 12/30/2025

F.2 LC52.215-5 PLACE AND PERIOD OF PERFORMANCE (JAN 2019)

Place of Performance: At the Library of Congress and Contractor’s place of business.

The overall period of performance shall be as stated in section B.

The contractor is responsible for determining its hours of operation in fulfilling the requirements of this contract. The Library’s standard operating hours are from 8:30 AM through 5:30 PM, Monday through Friday, excluding Federal holidays. The contractor shall coordinate with the COR for any work to be conducted at Library facilities.

(End of Clause)

FAR Number Title Date

52.247-34 F.O.B. DESTINATION NOV 1991

52.242-15 STOP-WORK ORDER AUG 1989

030ADV24R0054 Section G

SECTION G - CONTRACT ADMINISTRATION DATA

G.1 LC52.201-3 CONTRACT ADMINISTRATION (AUG 2015)

This contract will be administered by:

Library Contracting Officer: Ramon Samuel

Address: The Library of Congress, Contracts and Grants Directorate, 101 Independence Ave., S.E.

Washington D.C. 20540-9414

Email: rsamuel@loc.gov

Library Contract Specialist: Olexiy Levchuk

Address: The Library of Congress, Contracts and Grants Directorate, 101 Independence Ave., S.E.

Washington D.C. 20540-9414

Email: olevchuk@loc.gov

Library Contracting Officer Representative: TBD

Address: The Library of Congress, 101 Independence Ave., S.E. Washington D.C. 20540-9414

Phone: TBD

Email: TBD

Contractor Contract Administrator: TBD

Address: TBD

Phone: TBD

Email: TBD

(End of Clause)

G.2 LC52.232-1 LIBRARY OF CONGRESS INVOICE INSTRUCTIONS (DEC 2022)

The Contractor must prepare and submit invoices electronically to: https://www.ipp.gov. The Contractor may submit payment requests using other than electronic means only when alternate procedures are authorized by the contracting officer in writing. Assistance is available via the IPP Help Desk via email at: ippcustomersupport@fiscal.treasury.gov or by commercial telephone at (866) 973-3131. Invoices shall contain the information required in FAR 52.212-4, paragraph (g).

030ADV24R0054 Section G

(End of Clause)

G.3 LC52.232-2 SCHEDULE OF PAYMENTS (JUN 2015)

The contractor must submit invoices for payment upon delivery of the items or successful performance of the events identified in Section F pursuant to the standards and acceptance criteria defined in this contract.

030ADV24R0054 Section H

SECTION H - SPECIAL CONTRACT REQUIREMENTS

H.1 LC52.203-1 CONTRACTOR PUBLICITY (OCT 2013)

The Contractor, or any entity or representative acting on behalf of the Contractor, may not refer to the equipment or services furnished pursuant to the provisions of this contract in any news release or commercial advertising, or in connection with any news release or commercial advertising, without first obtaining explicit written consent to do so from the Contracting Officer. Should any reference to such equipment or services appear in any news release or commercial advertising issued by or on behalf of the Contractor without the required consent, the Government will consider institution of all remedies available under applicable law.

(End of Clause)

H.2 LC52.204-2 CONDUCT ON LIBRARY PREMISES (JUL 2021)

1. Access to Library buildings and grounds is governed by 36 C.F.R. part 702 - Conduct on Library Premises. Contractor staff must comply with these requirements and restrictions and related Library of Congress Regulations and Directives.

2. The Library is committed to preventing and addressing all forms of discriminatory harassment and to ensuring that Equal Employment Opportunity (EEO) principles are fundamental to Library culture. Everyone — employees, interns, volunteers, contractors, researchers, and visitors — is expected to help make the Library a respectful environment free from offensive behavior.

a. Library of Congress employees, contractors, interns, volunteers, researchers, patrons, and other visitors have a right to Library facilities that are free from discrimination based on their race, color, national origin, religion, sex, sexual orientation, gender identity, age (40 and over), disability, genetic information, union affiliation, political affiliation, or marital status.

b. The Library does not tolerate discrimination – including sexual harassment, other forms of harassment, or a hostile work environment – based on these factors. The Library does not tolerate retaliation against anyone who engages in any form of protected EEO activity.

c. Contractor (including subcontractor) staff alleged to have engaged in discrimination or retaliation in the performance of this contract may be prohibited from entering Library facilities to perform work under their contracts.

Contractors are required to promptly respond to all Library inquiries into allegations of discrimination, and must, in good faith, cooperate with Library investigations. Good faith cooperation includes, but is not limited to, making contractor staff available for:

1. Formal and informal interviews by Library agents investigating allegations of discrimination;

2. Reviewing and signing appropriate affidavits or declarations summarizing statements provided by such contractor staff during the course of an investigation;

3. Producing documents requested by the Library agents conducting the investigation; and

4. Preparing for and providing testimony in depositions or in administrative hearings.

H.3 LC52.204-3 INFORMATION SYSTEMS SECURITY (SEP 2018)

(1) Computer Security Policy. The Library requires anyone using or accessing its digital assets (including networks, servers, workstations, systems, data, web pages, and email) to protect them and use them only for official business, and only in accordance with Library regulations and applicable Library bargaining agreements. Unauthorized or inappropriate use may be grounds for termination or other contractual remedy.

(2) Privacy Policy. No one has the right to privacy while using any Library computer system, including internet or email services. Usage may be monitored.

(3) Level of Access. The Host Office will determine the level of access to the Library’s IT equipment, staff and software needed to successfully perform under this Contract. Access may include, for example, email, word processing, internet, and intranet.

(4) Mandatory IT Security Training. Contractor personnel must successfully complete mandatory information systems security training prior to use of or access to any of the Library’s digital assets. The required training is available online at http://www.loc.gov/extranet/cld/. Contractor staff with access to Library digital assets shall complete the information systems security training annually. The training is available on the Library intranet at: http://www.loc.gov/staff/cld/.

(End of Clause)

H.4 LC52.204-4 CONTRACTOR EMPLOYEE FITNESS (AUG 2023)

“Contractor employee fitness” means fitness based on character and conduct for work for or on behalf of the Government as a contractor employee.

Work under this contract is unclassified. However, the Library of Congress has a contractor employee fitness program, which includes background investigations of contractor personnel who will have 1) regular, ongoing, unescorted access to the Library’s buildings, grounds, or collections, 2) access to Library information technology systems, and/or 3) access to Library information not available to the public including information determined to be Controlled Unclassified Information (CUI) to ensure they meet basic standards of honesty and trustworthiness pursuant to Library regulations.

(1) Any access to non-public Library facilities, Library information technology systems, or non-public Library information will require completion and successful vetting of a security application request (release forms, fingerprints, and, if applicable, a full background investigation). Contractors should anticipate a minimum of two weeks for the process, provided all requested information is timely, accurate and complete and that no adverse information is received.

(2) The Library does not determine the fitness of employees to work for the contractor firm that hires them. The Library’s interest is in determining whether contractor personnel should be granted greater access than the general public to Library facilities, Library information technology systems and/or non-public Library information.

(3) To facilitate the fitness determination, contractors shall submit complete and accurate information as identified on the National Background Investigation Services (NBIS)’s eAPP https://www.dcsa.mil/Systems-Applications/NBIS-eApp- NBIS-Agency/) as provided by the Personnel Security Division. Contractors should anticipate a minimum of two weeks for the process, provided all requested information is timely, accurate and complete and that no adverse information is received.

(4) The contractor will ensure the Library’s Personnel Security Division is notified of all changes to personnel performing work on this contract. The Personnel Security Division can be notified at the following email address:

PSD@loc.gov and contacted via phone at: (202) 707-5618.

(5) The fact that the Library may conduct background investigations on assigned contractor personnel does not relieve the contractor of the responsibility to provide qualified, reliable personnel of sound character and conduct.

(6) The Library may require removal of contractor staff from Library facilities and revocation of access to Library information technology systems and non-public Library information if investigative results raise concerns regarding a contractor employee’s fitness. In such cases, the Contracting Officer or Contracting Officer Representative (COR) will notify the contractor of the unfit determination and need for the contractor employee to return all government equipment such as badges, keys and network tokens if issued. Contractor management staff may be required to escort the contractor employee from the premises.

(End of Clause)

H.5 LC52.212-2 SUPPLEMENTAL LICENSE AGREEMENTS (JUL 2017)

The Library does not agree to licensing agreements or any other provisions that attempt to: (1) replace an order as the governing contract; (2) establish new or supplemental payment terms; or, (3) affect the legal relationships of the parties.

Notwithstanding any clauses in this contract or order, or the contractual vehicles against which the order is placed, that establish order of precedence, the rights and obligations provided by this contract or order take precedence over the rights and obligations set forth in any licensing agreements provided to the Library.

The Library’s incorporation of a licensing agreement into this contract or order excludes all terms of the licensing agreement that contravene, modify or conflict with the terms of 36 C.F.R. 701.7 available at: https://www.ecfr.gov/cgi-bin/text-idx?SID=87a865ce2bd109313a951a3d477895d8&mc=true&node=se36.3.701_17&rgn=div8.

(End of Clause)

H.6 LC52.239-1 INFORMATION SECURITY (APR 2021)

The work to be conducted is considered Controlled Unclassified Information (CUI) pursuant to National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53 (rev 4) or current version. The Contractor shall ensure that all non-public Library information processed under this contract shall be protected from unauthorized use and mishandling by the Contractor. Information includes both hard copy (paper) formats and soft copy (stored in electronic form, e.g., hard disks, tapes, flash drives, CD-ROM/CD-R, etc.)

(a) The Contractor shall store hard copies and soft copies contained on removable media (e.g., tapes, floppy disks, flash drives, CD-ROM/CD-R, etc.) in a government-approved storage container per the direction of the Contracting Officer Representative (COR) or the Library of Congress Project Manager when not under the direct control of Contractor Key Personnel.

(b) The Contractor shall treat any information developed on security vulnerabilities and any Government provided non-public information as “CUI”.

(c) The Contractor personnel shall label and protect this information as “Security Category: Moderate”, placing this designation in the footer.

(d) The Contractor shall ensure that all documents designated “Security Category: Moderate”, “Security Category:

High” and “Limited Official Use Only” are not emailed to or from an external email system. These documents may only be emailed between Library of Congress email accounts, or within a secured corporate email network.

(e) The Contractor shall ensure that all documents designated “Security Category: Moderate”, “Security Category:

High” and “Limited Official Use Only” are shredded, burned, or otherwise destroyed before being disposed of in accordance with applicable corporate and federal records management policies.

(f) The Contractor shall dispose of all documents designated “Security Category: Moderate”, “Security Category: High” and “Limited Official Use Only” remaining in the Contractor’s possession at the end of the contract term.

(g) The Contractor shall ensure that all Contractor workstations used to process Library information utilizes anti-virus and anti-spyware utilities that are configured to continuously monitor and to automatically update as well as having automatic operating system patching in place.

(h) The Contractor shall ensure that all Contractor workstations used to process Library information employ a firewall that can either be software running on the workstation or a stand-alone firewall that protects the workstation from unauthorized access from any other devices, including devices on the Contractor’s corporate network.

(i) The Contractor shall ensure that all Library information that is labeled “Security Category: Moderate”, “Security Category: High” and “Limited Official Use Only” is encrypted using a Federal Information Processing Standards Publication (FIPS) 140-2 validated application configured in FIPS mode. This includes information stored on internal hard drives and removable devices (e.g., CD-Rs, flash drives, etc.)

(j) The Contractor must provide a written list of anti-virus, anti-spyware, firewall, encryption products, versions and proof of licenses, along with the automatic operating system patching status, MAC address (if applicable) and user name for each system being used to process Library information.

(k) In accordance with NIST SP 800-61 (rev 2, as updated), the Contractor shall report to infosec@loc.gov, the Contracting Officer, and the COR any adverse events (adverse events are currently defined as events with a negative consequence, such as system crashes, packet floods, unauthorized use of system privileges, unauthorized access to sensitive data, and execution of malware that destroys data) that are computer security related or computer security incidents (computer security incident is currently a violation or imminent threat of violation of computer security polices, acceptable use policies, or standard security practices) concerning Library CUI within 24-hours of its discovery.

The contractor shall coordinate its response to such an event or incident with the Library.

(l) The Contractor shall not provide any government-furnished non-public documents, information, or licensed material in any form to anyone other than the Contracting Officer, the COR, or the Library of Congress Project Manager without the written approval of the Contracting Officer, the COR, or the Library of Congress Project Manager during the period of this contract or at any time afterwards.

(m) The Contractor shall not release any government documents or information related to IT Security in any form without the written approval of the Library’s IT Security Group.

(n) The Contractor shall ensure that all Contractor personnel sign nondisclosure agreements (NDAs).

(o) The Contractor shall ensure that all Contractor personnel complete the Library of Congress IT Security Awareness Training on an annual basis.

(End of Clause)

H.7 LC52.239-3A ASSESSMENT AND AUTHORIZATION (ALT I) (JAN 2016)

The information technology identified in this contract will be subject to review and approval of Assessment and Authorization (A&A) prior to connecting the system(s) to the Library of Congress Network.

(a) The contractor shall provide the COR with documentation demonstrating Authorization.

(b) The Library will perform a security assessment, assessment, risk assessment, and security testing & evaluation pursuant to NIST SP 800-37.

(c) The Contractor shall provide Authorization support to the Authorizing Official, including producing copies of the Assessment Package, drafting memorandums and assisting in the briefing of the Designated Approving Authority.

(d) The Contractor shall ensure that the IT system is not connected to the Library of Congress Data Network until accredited.

(End of Clause)

H.8 LC52.239-4 SECTION 508 COMPLIANCE (JAN 2015)

All contract deliverables shall comply with accessibility standards set forth in the Architectural and Transportation Barriers Compliance Board Electronic and Information Technology (EIT) Accessibility Standards (36 CFR part 1194).

(End of Clause)

H.9 LC52.239-5 SYSTEMS HOSTED BY EXTERNAL HOSTING PROVIDERS (SEP 2018)

For any non-Library of Congress owned and operated systems supporting a hosted application, including cloud services, security devices, shared servers, backup devices, and management systems, the Contractor shall provide:

(a) Design documentation demonstrating that the environment is Federal Risk and Authorization Management Program (FedRAMP) compliant

(b) Assessment and Authorization documentation for the operating environment

(c) Documented test results, including individual test items, showing that the applications, hosting platforms and associated management systems have implemented the minimum security controls per FIPS 199) of the system.

(d) Access for the Library to conduct scanning, security testing and assessment, and penetration testing of the operating environment, including support for any remediation issues in accordance with the Library policy on remediation documented in Library of Congress Directive (LCD) 5-410.1, Information Technology Security Policy.

(e) The contractor shall sign a Memorandum of Understanding (MOU)/Interconnection Security Agreement (ISA) with the Library of Congress in accordance with NIST SP 800-47, Security Guide for Interconnecting Information Technology Systems. This may be an addendum to the contract between the Library and the Contractor.

(End of Clause)

H.10 LC52.239-6 ASSESSMENT AND AUTHORIZATION PRIVACY REQUIREMENTS (JUL

2016) The contractor shall be responsible for the following privacy and security safeguards:

1. To the extent required to carry out the assessment and authorization process and continuous monitoring, to safeguard against threats and hazards to the security, integrity, and confidentiality of any non-public Library data collected and stored by the contractor, the contractor shall afford the Library access to the contractor’s facilities, installations, technical capabilities, operations, documentation, records, and databases.

2. The Library has the right to perform manual or automated audits, scans, reviews, or other inspections of the contractor’s IT environment being used to provide or facilitate services for the Library. In accordance with the Federal Acquisitions Regulations (FAR) clause 52.239-1, contractor shall be responsible for the following privacy and security safeguards:

(a) The contractor shall not publish or disclose in any manner, without the Contracting Officer’s written consent, the details of any safeguards either designed or developed by the contractor under this contract or otherwise provided by the Library.

(b) To the extent required to carry out a program of inspection to safeguard against threats and hazards to the security, integrity, and confidentiality of Library data, the contractor shall afford the Library access to the contractor’s facilities, installations, technical capabilities, operations, documentation, records, and databases within 72 hours. The program of inspection shall include:

i. Authenticated and unauthenticated operating system/network vulnerability scans

ii. Authenticated and unauthenticated web application vulnerability scans

iii. Authenticated and unauthenticated database application vulnerability scans

iv. Automated scans can be performed by Library personnel, or agents acting on behalf of the Library, using Library operated equipment, and Library specified tools.

(c) If new or unanticipated threats or hazards are discovered by either the Library or the contractor, or if existing safeguards have ceased to function, the discoverer shall immediately bring the situation to the attention of the other party.

3. If the contractor chooses to run its own automated scans or audits, results from these scans may, at the Library’s discretion, be accepted in lieu of Library performed vulnerability scans. In these cases, scanning tools and their configuration shall be approved by the Library. In addition, the results of contractor-conducted scans shall be provided, in full, to the Library.

4. SENSITIVE INFORMATION STORAGE. In addition to the requirements of LC52.239-1, Sensitive But Unclassified (SBU) information, data, and/or equipment will only be disclosed to authorized personnel on a Need-To-Know basis. The contractor shall establish appropriate administrative, technical, and physical safeguards to ensure the security and confidentiality of this information, data, and/or equipment is properly protected. When no longer required, this information, data, and/or equipment will be returned to Library control, destroyed, or held until otherwise directed.

Destruction of items shall be accomplished by following LC52.239-1 and applicable provisions of NIST Special Publication 800-88, Guidelines for Media Sanitization. The disposition of all data will be at the written direction of the Contracting Officer Representative (COR), this may include documents returned to Library control; destroyed; or held as specified until otherwise directed. Items returned to the Library shall be hand carried or sent by certified mail to the COR.

5. PROTECTION OF INFORMATION. The contractor shall be responsible for properly protecting all information used, gathered, or developed as a result of work under this contract. The contractor shall also protect all Library data, equipment, etc. by treating the information as sensitive. All information about the systems gathered or created under this contract should be considered as SBU information. It is anticipated that this information will be gathered, created, and stored within the primary work location. If contractor personnel must remove any information from the primary work area they should protect it to the same extent they would their proprietary data and/or company trade secrets.

The use of any…