U.S. Department of Justice Federal Bureau of Prisons Administration Division

Field Acquisition Office Grand Prairie, Texas 75051

Dear Quoter:

Attached is a solicitation package prepared by the Federal Bureau of Prisons (BOP), Field Acquisition Office (FAO), for the provision of Temporary Physician Services at the Federal Correctional Institution (FCI) Marion, located in Marion, Illinois. This package contains all necessary information to submit a quote.

Quoters should consider all information provided herein when submitting quotes. Please carefully follow all instructions located in the solicitation package concerning the content, format and submission requirements of your quotes. Failure to provide all required documentation detailed in Section L, Quote Submission Requirements and Instructions, of the solicitation document may result in your quote being considered non-responsive and eliminated from consideration for award.

All potential quoters are advised that this solicitation includes the provision at FAR 52.204-7, System for Award Management (SAM). This provision requires that all quoters doing business with the Federal Government to be registered in the SAM database for “All Awards”. Quoters should include their Unique Entity Identification (UEI) number with their quotes. The Contracting Officer will verify registration in the SAM database prior to award by entering the potential awardees UEI number into the SAM database.

Failure to complete the registration procedures outlined in the clause may result in elimination from consideration for award. For the purposes of this solicitation, all quoter’s SAM registration shall include NAICS code 621111.

If you have questions regarding the System for Award Management (SAM), Government procurements in general, or need assistance in the preparation of your quote, the APEX Accelerators program may be able to help. The APEX Accelerators was authorized by Congress in 1985 in an effort to expand the number of businesses capable of participating in the Government marketplace. To locate an APEX Accelerator near you, go to https://www.apexaccelerators.us/#/contact.

Contractors must comply with FAR 52.222-54, E-Verify Requirements, by enrolling in E-Verify within 30 days of contract award and beginning verification within 90 days of enrollment.

Quotes shall be received on or before the deadline specified in Block 8 of the Standard Form (SF) 1449, page 1 of this solicitation. Quotes shall be submitted electronically, via email to ptolliver@bop.gov in pdf format only and will be deemed received at the time indicated on the email notification. Faxed and hand delivered quotes will not be accepted.

Please submit any questions you may have, in writing, via email to ptolliver@bop.gov.

Sincerely, Philip Tolliver Contracting Officer https://www.apexaccelerators.us/#/contact mailto:ptolliver@bop.gov mailto:ptolliver@bop.gov

15BGCS26Q40900001 Page 1 of 47

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL PRODUCTS AND COMMERCIAL SERVICES

NOTE: OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24 AND 30.

1. REQUISITION NUMBER

15B40925PR000077

PAGE 1 OF

5. SOLICITATION NUMBER

15BGCS26Q40900001

2. CONTRACT NUMBER 3. AWARD/EFFECTIVE

DATE

4. ORDER NUMBER 6. SOLICITATION ISSUE

DATE

08/24/2026

7. FOR SOLICITATION

INFORMATION CALL:

a. NAME

Philip Tolliver ptolliver@bop.gov

b. TELEPHONE NUMBER (No collect calls) 8. OFFER DUE DATE / LOCAL

TIME

09/18/2026 15:00 ET

CODE 15BGCS

Federal Bureau of Prisons

Field Acquisition Office

U.S. Armed Forces Reserve Complex

346 Marine Forces Drive

Grand Prairie, TX 75051

9. ISSUED BY UNRESTRICTED OR X SET ASIDE:100.00 % FOR

X SMALL BUSINESS

HUBZONE SMALL

BUSINESS

SERVICE-DISABLED

VETERAN-OWNED

SMALL BUSINESS

(SDVOSB)

WOMEN-OWNED SMALL

BUSINESS (WOSB)

ECONOMICALLY DISADVANTAGED

WOMEN-OWNED SMALL BUSINESS

(EDWOSB)

8(A)

NORTH AMERICAN

INDUSTRY CLASSIFICATION

STANDARD (NAICS):

621111

SIZE STANDARD:

$16.0M

10. THE ACQUISITION IS

SEE SCHEDULE

11. DELIVERY FOR FREE ON BOARD

(FOB) DESTINATION UNLESS

BLOCK IS MARKED

12. DISCOUNT TERMS

13a. THIS CONTRACT IS A

RATED ORDER UNDER THE

DEFENSE PRIORITIES AND

ALLOCATIONS SYSTEM -

DPAS (15 CFR 700)

13b. RATING

X REQUEST

FOR QUOTE

(RFQ)

INVITATION

FOR BID

(IFB)

REQUEST

FOR

PROPOSAL

(RFP)

14. METHOD OF SOLICITATION

15B409CODE15. DELIVER TO

Federal Bureau of Prisons USP Marion 4500 Prison Rd.

Marion, IL 62959

CODE 15B40916. ADMINISTERED BY

Federal Bureau of Prisons USP Marion 4500 Prison Rd.

Marion, IL 62959

FACILITY

CODE

CODE

TELEPHONE NUMBER

17a. CONTRACTOR/

OFFEROR

15B409CODE18a. PAYMENT WILL BE MADE BY

Federal Bureau of Prisons USP Marion 4500 Prison Rd.

Marion, IL 62959

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT SUCH ADDRESS IN

OFFER SEE ADDENDUM

18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a UNLESS BLOCK

BELOW IS CHECKED

19.

ITEM NUMBER

20.

SCHEDULE OF SUPPLIES/SERVICES

21.

QUANTITY

22.

UNIT

23.

UNIT PRICE

24.

AMOUNT

To provide Temporary Physician Services for FCI Marion, IL in accordance with the Statement of Work.

UEI # _____________________________________

Email ______________________________________ Firm Fixed Price

See Continuation Sheet(s) (Use Reverse and/or Attach Additional Sheets as Necessary)

25. ACCOUNTING AND APPROPRIATION DATA 26. TOTAL AWARD AMOUNT (For Government Use Only)

X 27a. SOLICITATION INCORPORATES BY REFERENCE (FEDERAL ACQUISITION REGULATION) FAR 52.212-1, 52.212-4. FAR 52.212-3

AND 52.212-5 ARE ATTACHED. ADDENDA

X ARE ARE NOT ATTACHED

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA ARE ARE NOT ATTACHED

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN ____ COPIES TO

ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND DELIVER ALL ITEMS SET FORTH

OR OTHERWISE IDENTIFIED ABOVE AND ON ANY ADDITIONAL SHEETS SUBJECT TO THE

TERMS AND CONDITIONS SPECIFIED.

29. AWARD OF CONTRACT: REFERENCE _____________________________

OFFER DATED _________________ . YOUR OFFER ON SOLICITATION (BLOCK

5) INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE SET FORTH

HEREIN, IS ACCEPTED AS TO ITEMS:

30a. SIGNATURE OF OFFEROR/CONTRACTOR 31a. UNITED STATES OF AMERICA (SIGNATURE OF CONTRACTING OFFICER)

30b. NAME AND TITLE OF SIGNER (Type or print) 30c. DATE SIGNED 31b. NAME OF THE CONTRACTING OFFICER (Type or print)

Philip Tolliver

31c. DATE SIGNED

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

STANDARD FORM 1449 (REV. 11/2021)

Prescribed by GSA - FAR (48 CFR) 53.212

BOP15034

Cross-Out

15BGCS26Q40900001 Page 2 of 47

19.

ITEM NUMBER

20.

SCHEDULE OF SUPPLIES/SERVICES

21.

QUANTITY

22.

UNIT

23.

UNIT PRICE

24.

AMOUNT

32a. QUANTITY IN COLUMN 21 HAS BEEN

RECEIVED INSPECTED ACCEPTED, AND CONFORMS TO THE CONTRACT, EXCEPT AS NOTED: _________________________________

32b. SIGNATURE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32c. DATE 32d. PRINTED NAME AND TITLE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32e. MAILING ADDRESS OF AUTHORIZED GOVERNMENT REPRESENTATIVE 32f. TELEPHONE NUMBER OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32g. E-MAIL OF AUTHORIZED GOVERNMENT REPRESENTATIVE

PARTIAL FINAL

33. SHIP NUMBER 34. VOUCHER NUMBER 35. AMOUNT VERIFIED

CORRECT FOR

COMPLETE PARTIAL FINAL

36. PAYMENT 37. CHECK NUMBER

38. S/R ACCOUNT NUMBER 39. S/R VOUCHER NUMBER 40. PAID BY

41a. I CERTIFY THIS ACCOUNT IS CORRECT AND PROPER FOR PAYMENT 42a. RECEIVED BY (Print)

41b. SIGNATURE AND TITLE OF CERTIFYING OFFICER 41c. DATE

42b. RECEIVED AT (Location)

42c. DATE REC'D (YY/MM/DD) 42d. TOTAL CONTAINERS

STANDARD FORM 1449 (REV. 11/2021) BACK

15BGCS26Q40900001 Page 3 of 47

Table of Contents

Section Description Page Number

A Solicitation/Contract Form B Supplies or Services and Prices/Costs C Description/Specifications/Statement of Work

Statement of Work - Temporary Physician Services D Packaging and Marking E Inspection and Acceptance F Deliveries and Performance G Contract Administration Data

2852.201-70 Contracting Officer's Representative (COR) (NOV 2020) Contract Administration Data

H Special Contract Requirements 2852.222-70 Domestic Violence, Sexual Assault, and Stalking (DEC 2014) 2852.223-70 Unsafe Conditions Due to the Presence of Hazardous Material (NOV 2020) DOJ-05 Security of Department Information and Systems (OCT 2023) DOJ-07 Prohibition On Access By Non-U.S. Citizens To DOJ IT Systems (MAR 2002)

I Contract Clauses 52.203-6 Alt I Restrictions on Subcontractor Sales to the Government (Jun 2020) - Alternate I (Nov 2021) 52.203-17 Contractor Employee Whistleblower Rights (Nov 2023) 52.204-13 (DEV) System for Award Management-Maintenance (Oct 2018) (DEVIATION NOV 2025) 52.209-6 (DEV) Protecting the Government's Interest When Subcontracting with Contractors Debarred, Suspended, Proposed for Debarment, or Voluntarily Excluded (Jan 2025)

(DEVIATION NOV 2025)

52.209-10 (DEV) Prohibition on Contracting With Inverted Domestic Corporations (Nov 2015)

(DEVIATION NOV 2025)

52.212-4 (DEV) Terms and Conditions-Commercial Products and Commercial Services (Nov

2023) (DEVIATION NOV 2025)

52.216-18 Ordering (Aug 2020) 52.216-19 Order Limitations (Oct 1995) 52.216-21 (DEV) Requirements (Oct 1995) (DEVIATION DEC 2025) 52.217-9 Option to Extend the Term of the Contract (Mar 2000) 52.219-6 (DEV) Notice of Total Small Business Set-Aside (Nov 2020) (DEVIATION DEC 2025) 52.219-8 (DEV) Utilization of Small Business Concerns (Jan 2025) (DEVIATION DEC 2025) 52.219-14 (DEV) Limitations on Subcontracting (Oct 2022) (DEVIATION DEC 2025) 52.222-3 (DEV) Convict Labor (June 2003) (DEVIATION DEC 2025) 52.222-35 (DEV) Equal Opportunity for Veterans (Jun 2020) (DEVIATION DEC 2025) 52.222-36 (DEV) Equal Opportunity for Workers with Disabilities (Jun 2020) (DEVIATION

DEC 2025)

52.222-37 (DEV) Employment Reports on Veterans (Jun 2020) (DEVIATION DEC 2025) 52.222-40 (DEV) Notification of Employee Rights Under the National Labor Relations Act (Dec

2010) (DEVIATION DEC 2025)

52.222-50 (DEV) Combating Trafficking in Persons (Oct 2025) (DEVIATION DEC 2025) 52.222-54 (DEV) Employment Eligibility Verification (Jan 2025) (DEVIATION DEC 2025) 52.222-90 Addressing DEI Discrimination by Federal Contractors (APR 2026) 52.224-3 Privacy Training (Jan 2017) 52.226-8 Encouraging Contractor Policies To Ban Text Messaging While Driving (May 2024) 52.232-33 Payment by Electronic Funds Transfer-System for Award Management (Oct 2018) 52.232-40 Providing Accelerated Payments to Small Business Subcontractors (Mar 2023) 52.233-3 (DEV) Protest after Award (Aug 1996) (DEVIATION NOV 2025)

15BGCS26Q40900001 Page 4 of 47

52.233-4 (DEV) Applicable Law for Breach of Contract Claim (Oct 2004) (DEVIATION NOV 2025) 52.240-91 (DEV) Security Prohibitions and Exclusions (DEVIATION NOV 2025) 2852.212-4 Contract Terms and Conditions, Commercial Items (FAR Deviation) (NOV 2020) BOP 2852.237-77 Contractors Classified as Common Law Employees for Federal Income Tax Purposes (July 2017)

BOP 2852.242-71 EVALUATION OF CONTRACTOR PERFORMANCE UTILIZING CPARS

(APR 2011)

DOJ-01 Whistleblower Information Distribution (Oct 2021) DOJ-02 Contractor Privacy Requirements (JAN 2022) DOJ-03 Personnel Security Requirements For Contractor Employees (Nov 2021) DOJ-08 Continuing Contract Performance During a Pandemic Influenza or other National Emergency (OCT 2007)

J List of Attachments K Representations, Certifications and Other Statements of Offerors

52.240-90 (DEV) Security Prohibitions and Exclusions Representations and Certifications

(DEVIATION NOV 2025)

L Instructions, Conditions and Notices to Offerors 52.204-7 (DEV) System for Award Management-Registration (Nov 2024) (DEVIATION NOV 2025) 52.212-1 (DEV) Instructions to Offerors-Commercial Products and Commercial Services (Sep

2023) (DEVIATION NOV 2025)

2852.233-70 Protests Filed Directly with the Department of Justice (NOV 2020) BOP 2852.237-78 Submission/Evaluation of Quotations/Offers by Individuals (Nov 2014) Quote Submission Instructions/Evaluation and Award Methodology/SAM Registration/APEX/

FOIA

M Evaluation Factors for Award 52.212-2 (DEV) Evaluation-Commercial Products and Commercial Services (Nov 2021)

(DEVIATION NOV 2025)

52.217-5 (DEV) Evaluation of Options (July 1990) (DEVIATION AUG 2025)

15BGCS26Q40900001 Page 5 of 47

Section B - Supplies or Services and Prices/Costs

SCHEDULE OF SUPPLIES/SERVICES

CONTINUATION SHEET

ITEM NO. SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

0001 (1) Temporary Physician Services Effective Date of Award (EDOA) through 120 workdays.

Not to exceed 20 hours (sessions) per week.

Not to exceed 120 workdays per 12-month period.

Estimated Maximum

PSC: Q201

Base Period

960 SS $________ $_________________

ITEM NO. SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

0002 (1) Temporary Physician Services 121 workdays through 240 workdays from EDOA.

Not to exceed 20 hours (sessions) per week.

Not to exceed 120 workdays per 12-month period.

Estimated Maximum

PSC: Q201

Unexercised Option 1

Delivery Schedule:

Quantity: 960.000000

Place of Performance Address:

Federal Bureau of Prisons USP Marion 4500 Prison Rd.

Marion, IL 62959

960 SS $________ $_________________

Aggregate Total: $ _________________________ (Base + all Performance Periods)

15BGCS26Q40900001 Page 6 of 47

Section C - Description/Specifications/Statement of Work

Clauses By Full Text

Statement of Work - Temporary Physician Services

Subject

The Federal Bureau of Prisons (BOP), Field Acquisition Office (FAO), in Grand Prairie, Texas, intends to make a single award of indefinite delivery requirements type contract with firm fixed pricing to a firm for the provision of one (1) Physician for Temporary Physician Services for the Adults in Custody (AIC) at the Federal Correctional Institution (FCI) Marion, located at 4500 Prison Road, Marion, IL 62959. General information regarding the Federal Bureau of Prisons (BOP) facilities can be located at www.bop.gov.

Place of Performance

FCI Marion 4500 Prison Road Marion, IL 62959 The Physician Services will be performed in the Health Services Department at FCI Marion.

Schedule

A session is defined as one hour. The contractor is estimated to provide twenty (20) sessions per week. They will work two (2) days per week for 48 weeks in a calendar year. The schedule will consist of 10 session days, Monday through Friday (except Federal Holidays), with a 30-minute unpaid lunch period, on a as needed basis for 120 workdays within the first year, and 120 workdays in Performance Period 1, not to exceed 240 workdays in a 24-month period. Any time worked in a day, constitutes one (1) day. The Contracting Officer’s Representative (COR) and the Health Services Administrator (HSA) will be responsible for defining the weekly schedule. These schedules are subject to change based on the variable needs of the institution and the unpredictable nature of the correctional environment. Upon agreement, any changes to the schedules must be coordinated with the COR assigned under the contract.

Due to the nature of the correctional setting, work performance delays may be experienced. Such delays may include but are not limited to inclement weather, electrical or mechanical problems, or other security matters. When the contractor reports to the institution but is unable to perform services due to such delays, the contractor will be paid for one session.

Normally, any remaining sessions for that day will be suspended, the contractor will be free to leave, and the contractor will not be paid for the remaining unperformed sessions. However, if the institution requests that the contractor remain at the institution for eventual performance, the contractor shall be paid for such sessions. In the event of any absence, the contractor may make up his/her time so long as it does not exceed 40 hours in any given week. The government may seek contractual remedy if the contractor fails to provide coverage.

Education and Experience

The contractor will provide a Physician with knowledge, skills, abilities, and a current and valid license to practice medicine. The contractor must specifically identify the individual who will be performing these services under any subsequent contract award. The contractor must provide proof that the candidate meets all qualifications. The candidate’s name and qualifications must be submitted at the time the quote is submitted. The contractor must submit a resume with their quote and photocopies of documents evidencing education, license, certification, and training. The contract Physician is responsible for submitting an updated license to the HSA as the license is renewed.

Health Requirements

The contractor shall be free of communicable diseases. Any individual who subsequently develops a medical condition that might reasonably be expected to place other workers, AICs, or the public at risk shall be immediately removed

15BGCS26Q40900001 Page 7 of 47 from affected activities. In any such case, the contractor shall be responsible, at no additional cost to the institution, for securing the services of any replacement personnel required to perform this contract.

The contractor may be required to submit to testing for/or provide evidence acceptable to the clinical director of recent testing for tuberculosis or other communicable diseases. Failure to submit to testing for or providing acceptable evidence of recent testing for or immunity to selected communicable diseases shall be grounds for denying access to AICs. The contractor shall immediately inform the Contract Officer’s Representative (COR) and Administrative Contracting Officer, in writing, of any adverse action taken by any regulatory body involving certification. This includes, but is not limited to, suspensions, revocations, and restrictions on licensure as a Physician.

Description of Duties

The contractor will be responsible for providing in-house medical care for the AIC population. The contractor will perform complete physical examinations, collect comprehensive medical and social history to include a review of all body systems, perform physical assessment in correlation with historical findings, record preliminary objective findings, examine and order appropriate diagnostic testing, and provide necessary treatment and/or medications as required. The contractor will refer selected cases to consultant specialists when necessary and refer AICs requiring hospitalization to a community hospital and to an appropriate admitting physician. All duties shall be performed in accordance with standards and methods generally accepted within the field of medicine and in compliance with all Federal and State policies and regulations. The contractor shall adhere to all standards and regulations associated with any Accrediting Body and American Correctional Association Foundation/Core Standards for Adult Correctional Institutions. Due to BOP Health Services policies, history, and evaluations, they shall be completed as scheduled. Detailed medical record documentation must be maintained. The HSA and the COR shall monitor the contractor’s performance.

The contractor will document accurately and thoroughly in the electronic medical record and complete all documentation by the end of the workday. Any recommendations for further diagnostic testing and/or treatment will be made in the appropriate section of the electronic record, pending review by the Utilization Review Committee.

Attire

The contractor is expected to wear professional clothing while on duty (scrub uniforms are approved). The attire worn shall also be appropriate for the correctional environment where the contractor will perform.

Patient Management

The contractor will receive patients, explain procedures to alleviate undue anxiety and submit reports and evaluations as requested. The contractor will be responsible for following directives and complying with the Bureau of Prisons Health Services Manual, local institutional mandates, and the Health Services Department’s policies in the management of all patient encounters.

Patients shall be afforded impartial access to treatment or accommodations that are available or medically indicated, regardless of race, creed, sex, national origin, or religion. Staffing shall be commensurate with the expected needs of the patients and within the scope of services offered. The contractor shall NOT provide information to the AIC(s).

If the situation arises where AIC(s) are required to be provided with information, the Clinical Director, Health Services Administrator (HSA), or COR shall provide any information the AIC(s) are to receive. The contractor is required to maintain an open line of communication with the Clinical Director, HSA, and COR.

Adults in Custody (AIC) Management

The provision of services will require frequent and unsupervised contact with AICs. The contractor shall not be responsible for the management of any AICs other than to ensure AICs involved within the contract’s scope of work abide by all rules to ensure their safety and well-being. The successful contractor shall attend the Institution Familiarization Orientation program prior to assuming institution involvement. Reimbursement to the contractor for the time spent in the institution orientation or other specific security-related training will be at the contract rate, prorated hourly. The contractor may, at any time, be removed from the institution at the discretion of the CEO. The contractor is to constantly be aware of security and maintain a professional relationship with AICs at all times. Any violation of the institution's rules and regulations is to be brought immediately to the attention of any Government employee employed at the institution. The contractor will be required to provide documentation to the COR, or designee, of any infractions of institutional rules and regulations by AICs for proper action.

Institution Security

15BGCS26Q40900001 Page 8 of 47

The contractor shall agree to all regulations prescribed by the institution for AICs' safety, custody, and conduct. The contractor will be required to operate a system of records as identified for medical treatment documentation and will require adherence to the Privacy Act of 1974. The contractor will be required to sign in and out of the institution for accountability purposes. A badge will be issued and always worn for proper identification.

15BGCS26Q40900001 Page 9 of 47

Section D - Packaging and Marking

This Section Is Intentionally Left Blank

15BGCS26Q40900001 Page 10 of 47

Section E - Inspection and Acceptance

15BGCS26Q40900001 Page 11 of 47

Section F - Deliveries and Performance

15BGCS26Q40900001 Page 12 of 47

Section G - Contract Administration Data

Clauses By Reference

52.252-2 CLAUSES INCORPORATED BY REFERENCE (FEB 1998)

This contract incorporates one or more clauses by reference, with the same force and effect as if they were given in full text. Upon request, the Contracting Officer will make their full text available. Also, the full text of a clause may be accessed electronically at this/these address(es): www.acquisition.gov

Clause Title Fill-ins (if applicable)

2852.201-70 Contracting Officer's Representative (COR) (NOV 2020) COR Name: "Charity Lewis"

Org: "FCI Marion"

Address: "4500 Prison Road, Marion, IL, 62959"

Phone: "618-964-1441 x 1241"

Contract: "TBD"

Period: "EDOA through 24 months from EDOA"

Clauses By Full Text

Contract Administration Data

The Government contemplates a single award of an indefinite delivery/requirements type contract with firm fixed unitprices resulting from this solicitation.

The quantity of services to be provided by the Contractor is estimated. These estimates are not a representation toaquoter or contractor that the estimated quantities will be required or ordered, or that conditions affecting requirements willremain stable or normal. Contract pricing shall include all charges to the Government for providing the services requiredby this solicitation."

Pursuant to FAR 17.203(c), the Government’s evaluation shall be inclusive of options. The Government willevaluatequotes for award purposes by adding the total price of all options to the total price of the base year requirement.Quoters may offer varying prices for options, depending on the quantities actually ordered and the dates when ordered.

It is anticipated that the contract resulting from this solicitation will be awarded in October 2026, with an anticipated Effective Date of Award (EDOA) of November 01, 2026. On or about the EDOA, FCI Marion will issue a delivery/task order tothe contractor. The contractor shall commence full performance services on the EDOA.

The resulting contract will include a base year period from the effective date of award (EDOA) through 12 months from the EDOA with one (1) possible 12-month option year for renewal at the unilateral discretion of the Government. Quoters areadvised that the Government has the unilateral right to exercise option periods in accordance with FAR 52.217-9, "Optionto Extend the Term of the Contract”.

15BGCS26Q40900001 Page 13 of 47

Performance Periods:

Base Period : Effective Date of Award (EDOA) through 12 months from the EDOA; Not to exceed 120 workdays.

Performance Period 1: 13 months from the EDOA through 24 months from the EDOA; Not to exceed 120 workdays.

***NOTE: Not to exceed 240 workdays in a 24-month period.

Point of Acceptance: The point of acceptance for services is Federal Correctional Institution (FCI) Marion.

Service Contracting Information: This service is a contactual arrangement and not a personal appointment. Paymentis based on the provison of an end product or the accomplishment of a specific task. The service does not constitute anemployer/employee relationship. The contractor will not be subject to Government supervision, except for security relatedmatters. However, contractor performance shall be monitored. The contractor shall attend all training required by theBureau of Prisons for contract workers. The contractor will not be permitted to attend institution meetings, staff recalls orGovernment training sessions for institution staff.

Healthcare Providers Status: The resultant award is for a non-personal healthcare service provider. The contractor will be an independent contractor. The Government may evaluate the quality of professional and administrative services provided, but retains no control over the medical, professional aspects of services rendered. The contractor must indemnify the Government for any liability producing act of omission by the contractor, its employees and agents occurring during performance. The contractor must maintain medical liability insurance in the amount of $1,000,000 per occurrence/ $3,000,000 aggregate. Any subcontracts for the provision of services must contain the requirements of the clause at FAR 52.237-7, "Indemnification and Medical Liability Insurance," including the maintenance of medical liability insurance.

Medical Malpractice. Except as provided elsewhere in this contract, the contractor shall provide and maintain medical malpractice and such other insurance during the period of this contract. If the contractor or physician who is providing services under this contract has pending litigation or administrative proceedings that may affect his/her license to practice medicine or standing as a fellow member in a professional organization, full disclosure shall be provided to the CM, COR, and CO within five calendar days upon official notification. If it is determined by the medical legal review that the standard of care has not been met or there is substantial evidence of negligence on the part of the Contractor or contract employee, regardless of the final judicial decision, the physician may lose his/her privileges to practice at the BOP.

Quality of Patient Care/Non-Discrimination: The professional service providers will provide Bureau patients under the terms of this contract the same or equal services to those provided to non--Bureau patients. Professional service providers shall be provided within accepted professional standards. The contractor agrees to make no distinction among patients under this award on the basis of race, color, creed, national origin, or physical condition. For this contract, distinctions on the grounds of race, color, creed, national origin, or physical condition include but are not limited to the following: denying any service or benefit; providing any service or benefit to a patient which is different; or if provided in a different manner or at a different time from that provided to other patients under this contract; subjecting a patient to segregation or separate treatment in any manner related to his receipt of any service; restricting a patient in any way in the enjoyment of an advantage or privilege enjoyed by others in determining whether he satisfies any admission, enrollment quota, eligibility, membership or other requirement or condition which an individual must meet in order to be provided any service or benefit; the assignment of time or places for the provision of services on the basis of race, color, creed, or national origin of the patients served.

Third Party Liability: Public Law 87-693 (42 U.S.C. 2651) provides that the United States shall be entitled to recover the reasonable value of hospital and medical care and treatment furnished or to be furnished to a person who suffers any injury or disease under circumstances indicating the potential legal liability of another person. This other person is commonly referred to as the "third party" since his/her negligent act or failure to act caused an injury or disease to the "first party" requiring medical treatment by or at the expense of the United States, the "second party". Health Care Provider Credential Verification, Privileges, and Practice Agreement Program: Health care service employees are subject to Program Statement 6027.02, Health .Care Provider Credential Verification, Privileges, and Practice Agreement Program, dated 10/12/2016. This program statement is available at www.bop.gov

Health Care Provider Credential Verification, Privileges, and Practice Agreement Program: All medical personnel providing services under this contract shall meet applicable credentialing and privileging requirements and shall be

15BGCS26Q40900001 Page 14 of 47 verified and approved in accordance with Federal Bureau of Prisons policies and procedures prior to the delivery of services. Providers shall maintain all required licenses, certifications, and privileges throughout the period of performance.

Reviews: The Contracting Officer or designee is authorized to review by on-site survey, review of records, or by any other reasonable manner, the quality of services rendered under this BPA. All records shall be subject to review by the Contracting Officer or other representative of the BOP.

Contracting Officer Responsibility: Authority to negotiate changes in the terms, conditions, or amounts citedin thiscontract is reserved to the Contracting Officer. This responsibility may be delegated to an AdministrativeContractingOfficer by the Contracting Officer.

Contract Administration Office (CAO): The Contracting Office at FCI Marion is assigned to be the CAO for a resultantcontract. This assignment carries with it the authority to perform all normal contract administration functions as listed inFAR 42.302(a), items 1 through 71; to the extent those functions apply to this contract. This assignment also includesdelegation of authority to perform functions specified in FAR 42.302(b), items 1 through 11.

Authorized Ordering Official: Individual task orders may be issued only by the Contracting Officer, Administrative Contracting Officer, or an ordering official for FCI Marion with an appropriate certificate of appointment. Each task orderwill identify the services schedule for that period. Orders can be issued orally, by facsimile, mail, or electronic commercemethods. Task orders will take the form of an SF-1449.

Delivery Tickets and Invoices: An itemized invoice shall be submitted on a per month basis and/or upon expirationthe contract, whichever occurs first, for all services received during a billing period to include total dollar values and fromwhich payment has not been received. A proper invoice shall consist of:

Name and address of the contractor;

Invoice date and number;

Contract Number:

Terms of any discount for prompt payment offered;

Name, title, and phone number of person to notify in event of defective invoice;

Dates of service with itemized list of services provided

The individual invoice will be paid once monthly. The period of discount will commence on the final date of the billing period or the date of the receipt of the invoice for all services accepted during the billing period, whichever is later. An invoice will be considered received on the date it is received by the Financial Management Department. These invoices are to be submitted to the following address:

Federal Correctional Institution (FCI) Marion 4500 Prison Road, Marion, IL 62959 Attn: Accounting Department or email: MAR-BusinessOffice-S@bop.gov

Requirements for Security Clearances: The Contractor will not be subject to Government supervision, except forsecurity related matters and monitoring of contract performance. The following investigative procedures may be appliedand appropriate forms completed before any Contractor employees are permitted inside an institution:

(1) National Crime Information Center (NCIC) check;

(2) Declaration of Federal Employment (OF-306);

(3) FD-258 (fingerprint check);

(4) Law Enforcement Agency checks;

(5) Vouchering of Employers;

(6) Employment Resume;

(7) Completed Contractor Pre-employment Questionnaire;

(8) Release of Information;

(9) Questionnaire for Sensitive Positions;

(10) Credit Check, if applicable;

(11) Urinalysis, if applicable.

15BGCS26Q40900001 Page 15 of 47

Quoters should also note that clause DOJ-03, Personal Security Requirements for Contractor Employees (Nov 2021) requires that contractor personnel have a "favorable credit report." Quoters are strongly encouraged to pre-screen potential candidates for credit issues before submitting the candidate to FCI Marion.

By submitting a quote for service, the contractor and its employees agree to complete the required documents and undergo the listed procedures. An individual who does not pass the security clearance will be unable to enter the Bureau facility. Any individual employed by the contractor who is deemed not suitable by the Bureau requirements will not be granted access to perform services under the BPA. This is a condition of the BPA. Finally, the contractor shall be in compliance with 8 CFR 274a regarding employment of aliens

System of Records: (Privacy Act Notification) The contract will require contracted staff to operate a system of recordsand maintain documentation that will require adherence to the Privacy Act of 1974. The system of records will bemaintained in accordance with community standards for adult health care. The contractor and/or staff are not authorizedto disclose this or any information pertaining to an inmate to any non-Bureau source. Any request for such informationshall be forwarded to the Contracting Officer or COR for proper disposition.

15BGCS26Q40900001 Page 16 of 47

Section H - Special Contract Requirements

Clauses By Reference

52.252-2 CLAUSES INCORPORATED BY REFERENCE (FEB 1998)

This contract incorporates one or more clauses by reference, with the same force and effect as if they were given in full text. Upon request, the Contracting Officer will make their full text available. Also, the full text of a clause may be accessed electronically at this/these address(es): www.acquisition.gov

Clause Title Fill-ins (if applicable)

2852.222-70 Domestic Violence, Sexual Assault, and Stalking (DEC

2014)

2852.223-70 Unsafe Conditions Due to the Presence of Hazardous

Material (NOV 2020)

Clauses By Full Text

DOJ-05 Security of Department Information and Systems (OCT 2023)

I. Applicability to Contractors and Subcontractors Section 2839.102 of the Justice Acquisition Regulation (JAR), (48 C.F.R. § 2839.102), applies to this contract. Accordingly, all contractors are obligated to comply with all applicable DOJ security policies, directives, or guidance documents, including the security requirements in the provisions in this contract clause. This contract clause applies to all contractors and subcontractors, including cloud service providers (“CSPs”), and personnel of the contractors and subcontractors (hereinafter collectively, “Contractor”) that may access, collect, store, process, maintain, use, share, retrieve, disseminate, transmit, or dispose of DOJ Information. The security requirements set forth herein are in addition to those required by the Federal Acquisition Regulation (“FAR”), and any other applicable laws, mandates, contract clauses, DOJ policies, directives or guidance documents and Executive Orders pertaining to the development and operation of Information Systems and/or the protection of Government Information. This clause does not alter or diminish any existing rights, obligations, or liability under any other civil and/or criminal law, rule, regulation, or mandate.

II. General Definitions The following general definitions apply to this clause. Specific definitions also apply as set forth in other paragraphs.

A. Authorization to Operate (“ATO”), as defined in National Institute of Standards and Technology (“NIST”) Special Publication (“SP”) 800-37 Revision 2, is the official management decision given by a senior Federal official or officials to authorize operation of an information system and to explicitly accept the risk to agency operations (including mission, functions, image, or reputation), agency assets, individuals, other organizations, and the Nation based on the implementation of an agreed-upon set of security and privacy controls.

B. Cloud Computing, as defined in DOJ Order 0904 Cybersecurity Program, is a model for enabling ubiquitous, convenient, on-demand network access to a shared pool of configurable computing resources (e.g., networks, servers, storage, applications, and services) that can be rapidly provisioned and released with minimal management effort or service provider interaction. This cloud model is composed of five essential characteristics, three service models, and four deployment models in accordance with NIST SP 800-145.

C. Covered Contract is any contract, order or other agreement under which the contractor, or a subcontractor at any tier, including a cloud service provider, may access, collect, store, process, maintain, use, share, retrieve, 15BGCS26Q40900001 Page 17 of 47 disseminate, transmit, or dispose of DOJ Information (as defined below) in the course of providing a product or service to the Department, with the exception of acquisitions under the micro-purchase threshold.

D. Covered Information System means any information system used for, involved with, or allowing, the processing, storing, or transmitting of DOJ Information under a Covered Contract.

E. Data means recorded information, regardless of form or the media on which it may be recorded. The term includes technical data, computer software, and personally identifiable information (PII) (defined below). The term does not include information incidental to contract administration, such as financial, administrative, cost or pricing, or management information.

F. DOJ Information, as defined in DOJ Order 0904, means any Information that is owned, produced, controlled, protected by, or otherwise within the custody or responsibility of the DOJ, including, without limitation, information related to DOJ programs or personnel. It includes, without limitation, Information (1) provided by or generated for the DOJ, (2) managed or acquired by the Contractor for the DOJ in connection with the performance of the contract, and/or (3) acquired to perform the contract.

G. Information, as defined in DOJ Order 0904, is any communication or representation of knowledge such as facts, data, or opinions, in any form or medium, including textual, numerical, graphic, cartographic, narrative, or audiovisual. This includes any communication or representation of knowledge in an electronic format that allows it to be stored, retrieved, or transmitted.

H. Information System, means a discrete set of information resources organized for the collection, processing, maintenance, use, sharing, dissemination, or disposition of information (44 U.S.C. 3502(8)).

I. Personally Identifiable Information (“PII”), as defined in the FAR 24.101, means information that can be used to distinguish or trace an individual's identity, either alone or when combined with other information that is linked or linkable to a specific individual. It includes but is not limited to common data elements such as names, addresses, dates of birth, and places of employment, to identity documents, Social Security numbers or other government-issued identifiers, precise location information, medical history, and biometric records.

This definition covers all PII that is created by or becomes available to the contractor, including its employees, subcontractors, or affiliates, as a result of performing under this contract. PII, as supplementally defined in DOJ Order 0904, also includes information about an individual maintained by an agency, including, but not limited to, information related to education, financial transactions, medical history, and criminal or employment history and information, which can be used to distinguish or trace an individual’s identity.

J. Private Cloud, as defined in NIST SP 800-145, is the deployment model for cloud infrastructure provisioned for exclusive use by a single organization comprising multiple consumers (e.g., business units). It may be owned, managed, and operated by the organization, a third party, or some combination of them, and it may exist on or off premises.

K. Security Breach means any security incident (as defined below) that directly relates to the loss of control, compromise, exfiltration, manipulation, unauthorized disclosure, unauthorized acquisition, unauthorized exposure or unauthorized access or any similar occurrence of any Covered Information System or any DOJ Information or any PII accessed by, retrievable from, processed by, stored on, or transmitted within, to or from any such system. This includes incidents where (1) a person other than an authorized user accesses or potentially accesses PII or DOJ Information or (2) an authorized user accesses or potentially accesses PII or DOJ Information for an unauthorized purpose.

a. Potential Security Breach (hereinafter, “Potential Breach”) means any suspected, but unconfirmed security breach (as defined above).

b. Confirmed Security Breach (hereinafter, “Confirmed Breach”) means any confirmed security breach (as defined above).

L. Security Incident means any occurrence that (1) may actually or imminently jeopardize, without lawful authority, the availability, integrity, authentication, confidentiality, or nonrepudiation of DOJ Information or a Covered Information System; or (2) may constitute a violation or imminent threat of violation of law, security policies, security procedures, or acceptable use policies.

15BGCS26Q40900001 Page 18 of 47

a. Potential Security Incident means any suspected, but unconfirmed security incident (as defined above).

b. Confirmed Security Incident means any confirmed security incident (as defined above).

M. Vulnerability, as defined in DOJ Vulnerability Management Plan, and the OCIO Information Security Management Procedure, means a weakness or flaw discovered in the design of a system that, when exploited, may result in a loss of confidentially, integrity, or availability of DOJ Information or an Information System.

III. Confidentiality and Non-Disclosure of DOJ Information A. Preliminary and final contract deliverables and all associated working papers and material generated by the Contractor developed using DOJ Information, product, source code, and/or methods of operations, are the property of the U.S. Government and must be submitted to the Contracting Officer (“CO”) or the CO’s Representative (“COR”) at the conclusion of the contract. The U.S. Government has unlimited data rights to all such deliverables and associated working papers and materials in accordance with FAR 52.227-14 (Rights in Data-General). The Contractor will define a method of monitoring the development activity to include any activity associated with DOJ Information, product, source code, and methods of operations. The data rights and development details shall be defined within the Contract.

If the Contractor intends to utilize its existing data, for which it has a patent or copyright, to develop a contract deliverable, it is incumbent upon the Contractor to negotiate with the CO the proper FAR Part 27 clauses in the contract to protect its existing data.

B. Pursuant to FAR 52.227-14(d)(2), all documents and data produced in the performance of this contract containing DOJ Information, product code, source code, and/or methods of operations are the property of the U.S. Government and, without the prior written permission of the CO, the Contractor shall neither reproduce nor release such information to any third-party at any time, including during performance or following expiration and/ or termination of the contract.

C. Any DOJ Information made available to the Contractor under this contract shall be used only for the purpose of performance of this contract and shall not be divulged or made known in any manner to any persons except as may be necessary in the performance of this contract. In performance of this contract, the Contractor assumes responsibility for the protection of the confidentiality of all DOJ Information processed, stored, or transmitted by the Contractor. The Contractor shall comply with information security responsibilities and duties throughout the contract and after expiration/termination as appropriate per contract close-out activities. When requested by the CO (typically no more than annually), the Contractor shall provide a report to the CO identifying, to the best of the Contractor’s knowledge and belief, the type, amount, and level of sensitivity of the DOJ Information processed, stored, or transmitted under the Contract, including an estimate of the number of individuals for whom PII has been processed, stored or transmitted under the Contract and whether such information includes social security numbers (in whole or in part).

IV. Compliance with Information Technology Security Policies, Procedures and Requirements A. For all Covered Information Systems, in addition to any other applicable requirements, as set forth in Part I, the Contractor shall comply with the security requirements of the Federal Information Security Modernization Act of 2014 (“FISMA”), Privacy Act of 1974, E-Government Act of 2002, National Institute of Standards and Technology (“NIST”) Special Publications (“SP”), including NIST SP 800-37, 800-53, and 800-60 Volumes I and II, Federal Information Processing Standards (“FIPS”) Publications 140-2, 199, and 200, Federal Risk and Authorization Management Program (“FedRAMP”), DOJ IT Security Standards as amended, and OMB Memoranda relating to the security of information and/or Federal Information Systems.

B. In addition, for all Covered Information Systems, the Contractor shall comply with the following requirements, which are listed here only to highlight certain specific applicable requirements from one of the sources identified in the first paragraph of this Section. This is not an exhaustive list of all such requirements with which the Contractor is obligated to comply, and the omission of a requirement from this list should not be construed as negating the materiality of that requirement. These requirements and those in the authorities in the prior paragraph should be read together.

15BGCS26Q40900001 Page 19 of 47

1. Limiting access to DOJ Information and Covered Information Systems to authorized users and to transactions and functions that authorized users are permitted to exercise.

2. Providing security awareness training at least annually to all Contractor employees and contractors involved with the Covered Contract. Such training shall include, but not be limited to, recognizing and reporting potential indicators of insider threats to users and managers of DOJ Information and Covered Information Systems.

3. Creating, protecting, and retaining, in accordance with applicable requirements but in any event at least until the expiration of the contract, Covered Information System audit records, reports, and supporting documentation to enable reviewing, monitoring, analysis, investigation, reconstruction, and reporting of unlawful, unauthorized, or inappropriate activity related to such Covered Information Systems and/or DOJ Information.

4. Maintaining authorizations to operate any Covered Information System.

5. Performing continuous monitoring on all Covered Information Systems, to include but not be limited to, collecting, reviewing, and analyzing appropriate logs and timely investigating security alerts and potential security incidents.

6. Establishing and maintaining baseline configurations and current inventories of Covered Information Systems, including hardware, software, firmware, and documentation, throughout the Information System Development Lifecycle, and establishing and enforcing security configuration settings for IT products employed in Covered Information Systems.

7. Ensuring appropriate contingency planning has been performed, including DOJ Information and Covered Information System backups.

8. Identifying Covered Information System users, processes acting on behalf of users, or devices, and authenticating and verifying the identities of such users, processes, or devices, using multifactor authentication or HSPD-12 compliant authentication methods as defined by NIST 800-63-3, Digital Identity Guidelines or current revision.

9. Establishing and maintaining an operational incident handling capability for Covered Information Systems that includes adequate and timely development, logging, detection, analysis, containment, recovery, and user response activities, and tracking, documenting, and timely reporting incidents to appropriate officials and authorities within the…