Solicitation 9594CS26Q0016.pdf

WOMEN-OWNED SMALL

BUSINESS (WOSB)

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL PRODUCTS AND COMMERCIAL SERVICES

1. REQUISITION NUMBER PAGE 1 OF

2. CONTRACT NUMBER 3. AWARD/EFFECTIVE

DATE

4. ORDER NUMBER 5. SOLICITATION NUMBER 6. SOLICITATION ISSUE

DATE

7. FOR SOLICITATION

INFORMATION CALL:

a. NAME b. TELEPHONE NUMBER (No collect calls)

8. OFFER DUE DATE/

LOCAL TIME

9. ISSUED BY

13b. RATING

14. METHOD OF SOLICITATION

CODE

15. DELIVER TO 16. ADMINISTERED BY CODE

18a. PAYMENT WILL BE MADE BY CODE17a. CONTRACTOR/

OFFEROR

CODE

FACILITY

CODE

CODE

TELEPHONE NUMBER

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT SUCH ADDRESS IN

OFFER

18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a UNLESS BLOCK

BELOW IS CHECKED

REQUEST

FOR QUOTE

(RFQ)

INVITATION

FOR BID

(IFB)

REQUEST

FOR

PROPOSAL

(RFP)

SEE ADDENDUM

19.

ITEM NUMBER

20.

SCHEDULE OF SUPPLIES/SERVICES

21.

QUANTITY

22.

UNIT

23.

UNIT PRICE

24.

AMOUNT

(Use Reverse and/or Attach Additional Sheets as Necessary)

25. ACCOUNTING AND APPROPRIATION DATA 26. TOTAL AWARD AMOUNT (For Government Use Only)

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN

COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH

AND DELIVER ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND

ON ANY ADDITIONAL SHEETS SUBJECT TO THE TERMS AND CONDITIONS

SPECIFIED

29. AWARD OF CONTRACT: REFERENCE OFFER

DATED . . YOUR OFFER ON SOLICITATION

(BLOCK 5), INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE

SET FORTH HEREIN, IS ACCEPTED AS TO ITEMS:

30a. SIGNATURE OF OFFEROR/CONTRACTOR

30b. NAME AND TITLE OF SIGNER (Type or print) 30c. DATE SIGNED

31a. UNITED STATES OF AMERICA (SIGNATURE OF CONTRACTING OFFICER)

31b. NAME OF CONTRACTING OFFICER (Type or print) 31c. DATE SIGNED

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

STANDARD FORM 1449 (REV. 11/2021)

Prescribed by GSA - FAR (48 CFR) 53.212

10. THIS ACQUISITION IS UNRESTRICTED OR

NORTH AMERICAN

INDUSTRY CLASSIFICATION

STANDARD (NAICS):

SIZE STANDARD:

13a. THIS CONTRACT IS A

RATED ORDER UNDER

THE DEFENSE PRIORITIES

AND ALLOCATIONS

SYSTEM - DPAS (15 CFR 700)

SET ASIDE: % FOR:

11. DELIVERY FOR FREE ON

BOARD (FOB) DESTINATION

UNLESS BLOCK IS MARKED

SEE SCHEDULE

12. DISCOUNT TERMS

ARE ARE NOT ATTACHED

ARE ARE NOT ATTACHED

27a. SOLICITATION INCORPORATES BY REFERENCE (FEDERAL ACQUISITION REGULATION) FAR 52.212-1, 52.212-4. FAR 52.212-3

AND 52.212-5 ARE ATTACHED. ADDENDA

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA

8(A)

ECONOMICALLY

DISADVANTAGED

WOMEN-OWNED SMALL

BUSINESS (EDWOSB)

SERVICE-DISABLED

VETERAN-OWNED

SMALL BUSINESS

(SDVOSB)

HUBZONE SMALL

BUSINESS

SMALL BUSINESS

NOTE: OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, AND 30. OCS260002 28

9594CS26Q0016

Matt Collins 202.369.7635

See Section F See Block 9

Court Services and Offender Supervision Agency Office of Financial Management 800 North Capitol Street, NW Washington, DC 20002

See Continuation Sheet

334220

1,250

5/13/2026

6/08/2026 See Section L

Court Services and Offender Supervision Agency Office of Procurement 800 North Capitol Street, NW Washington, DC 20002 Matt Collins; (202) 369-7635; matthew.collins@csosa.gov

Location Tracking Services Utilizing Global Position System (GPS) and Related Technologies Solicitation 9594CS26Q0016

Continuation of SF1449

Section B - Supplies or Services and Prices/Costs

B.1 Services. The Contractor shall provide all services required for all contract line items (CLINs) included in this award in accordance with Attachment J-1, Statement of Work.

B.2 Type of Contract. This is a firm-fixed unit price (FFUP) purchase order with estimated quantities.

B.3 North American Industry Classification System (NAICS) and Small Business Size Standard The NAICS Code for this acquisition is 334220, Radio and Television Broadcasting and Wireless Communications Equipment Manufacturing, and the small business size standard is 1,250 employees.

B.4 Contract Line Item Number (CLIN) Breakdown. The table below is the breakdown for the purchase order CLINs 0001, 1001, 2001, 3001, and 4001. The quantities included in the table below are estimates.

The Government reserves the right to reallocate funding between the breakdown lines within a CLIN at no additional cost, provided the CLIN total not-to-exceed amount is not exceeded. No modification for any reallocation within a CLIN is required. Other than the minimum guarantee identified in section B.5 below, the Contractor will only receive payment for quantities of services provided.

CLIN Description QTY Unit Unit Price NTE Amount

0001 Location Tracking Services GPS Tracking Services – Active Device

Monitoring 109,500 Day TBD TBD

RF Beacon Support 3,000 Day TBD TBD Training (Initial + Annual Refresher) 2 Each TBD TBD Expert Testimony 5 Each TBD TBD API/Data Integration Access 12 Each TBD TBD

Total Not-to-Exceed Amount Base Period TBD at Award

1001 Location Tracking Services GPS Tracking Services – Active Device

Monitoring 109,500 Day TBD TBD

RF Beacon Support 3,000 Day TBD TBD Training (Initial + Annual Refresher) 2 Each TBD TBD Expert Testimony 5 Each TBD TBD API/Data Integration Access 12 Each TBD TBD

Total Not-to-Exceed Amount Option Period 1 TBD at Award

ITEM DESCRIPTION QTY UNIT

UNIT

PRICE

Not-to-Exceed (NTE)

AMOUNT

0001 Base Period: Location Tracking Services 1 Lot $TBD at award 1001 Option Period 1: Location Tracking Services 1 Lot $TBD at award 2001 Option Period 2: Location Tracking Services 1 Lot $TBD at award 3001 Option Period 3: Location Tracking Services 1 Lot $TBD at award 4001 Option Period 4: Location Tracking Services 1 Lot $TBD at award

Total Purchase Order NTE Amount (Base Period and All Option Periods) $TBD at award

CLIN Description QTY Unit Unit Price NTE Amount

2001 Location Tracking Services GPS Tracking Services – Active Device

Monitoring 109,500 Day TBD TBD

RF Beacon Support 3,000 Day TBD TBD Training (Initial + Annual Refresher) 2 Each TBD TBD Expert Testimony 5 Each TBD TBD API/Data Integration Access 12 Each TBD TBD

Total Not-to-Exceed Amount Option Period 2 TBD at Award

3001 Location Tracking Services GPS Tracking Services – Active Device

Monitoring 109,500 Day TBD TBD

RF Beacon Support 3,000 Day TBD TBD Training (Initial + Annual Refresher) 2 Each TBD TBD Expert Testimony 5 Each TBD TBD

Total Not-to-Exceed Amount Option Period 3 TBD at Award

4001 Location Tracking Services GPS Tracking Services – Active Device

Monitoring 109,500 Day TBD TBD

RF Beacon Support 3,000 Day TBD TBD Training (Initial + Annual Refresher) 2 Each TBD TBD Expert Testimony 5 Each TBD TBD

Total Not-to-Exceed Amount Option Period 3 TBD at Award

Total Not-to-Exceed Amount Base + All Option Periods TBD at Award

B.5 Guaranteed Minimum: The government will guarantee, at a minimum, the value of GPS Tracking Services – Active Device Monitoring for each period exercised of the awarded purchase order.

B.6 Purchase Order Ceiling (Not-to-Exceed) Amount. This purchase order sets a ceiling price. The ceiling represents the total dollar amount that may be incurred and expended for all efforts on this purchase order, including the base and all option periods. The ceiling price is the “Total Purchase Order NTE Amount (Base Period and Option Periods)” identified above. Notwithstanding the purchase order’s stated ceiling price, the Government's liability to the Contractor is limited the total obligated (funded) amount on the purchase order. The Contractor shall not perform work under this purchase order that will cause it to exceed the total obligated amount on the purchase order.

B.7 This award includes FAR 52.217-8, Option to Extend Services in Section I. As authorized by this clause, the Government has the unilateral right to exercise up to six additional months of performance at the same price as the price awarded for the last effective period of performance (other than any rate adjustments resulting from revisions to prevailing labor rates provided by the Secretary of Labor). The option period authorized by FAR 52.217-8 was evaluated at the time of award.

Section C - Description/Specifications/Work Statement

The Statement of Work for this award is included as Attachment J-1.

Section D – Packaging and Marking

Deliverables. The Contractor shall provide all written deliverables in electronic format with read/write capability using Microsoft WORD 2010 format, or other than text files any other application compatible with software included Microsoft Office Suite applications. Font type of Times New Roman with a font size of 12 shall be used throughout the document. The Contractor shall minimize additional formatting as much as possible (e.g. avoid use of columns) and avoid using any design/layout elements.

Section E – Inspection and Acceptance

Inspection will be in accordance with FAR 52.212-4(a) and per Attachment J-1, section C.9.

Section F – Deliveries and Performance

F.1 Period of Performance. The period of performance for this purchase order is as follows:

Base Period – September 29, 2026 thru September 28, 2027 Option Period 1 – September 29, 2027 thru September 28, 2028 Option Period 2 – September 29, 2028 thru September 28, 2029 Option Period 3 – September 29, 2029 thru September 28, 2030 Option Period 4 – September 29, 2030 thru September 28, 2031

F.2 Place of Performance. The Contractor will perform the work under this purchase order at the Contractor’s facility.

F.3 Notice of Contractor Delays. In the event the Contractor encounters, or anticipates encountering, difficulty in meeting performance requirements, or in complying with the award delivery schedule or completion date, or whether the Contractor has knowledge that any actual or potential situation is delaying, or threatens to delay, timely performance, the Contractor shall immediately, within one (1) business day, notify the Contracting Officer and the COR, in writing, giving pertinent details; provided, however, that this notification shall be informational only in character, and that this provision shall not be construed as a waiver by CSOSA of any delivery schedule or date, or any rights or remedies provided by law or under this award.

F.4 Deliverables. The deliverables for this award shall be provided in accordance with all the requirements identified in Section C, Section D, and Section F.

SOW

Section Description Method Delivery Date

C.8.1.14 Standard CMS Reports CMS On-demand C.8.1.15 Daily Violation Report CMS Daily

C.8.1.16-17 Customized and New Reports CMS Within 7 days of request by

COR

C.8.1.19 Monthly Lost Equipment Report Encrypted Email 10th Day of the Month

SOW

Section Description Method Delivery Date

C.8.3.19(e) Monitoring Center Security Policies and Procedures PDF, Encrypted Email Within 3 days of award

C.8.3 Monitoring Center Services Software-based (phone/email support)

Before first offender enrollment (recommend updating to 24/7 ongoing)

C.8.3.4 Disaster Recovery Plan Encrypted Email Within thirty (30) days of Task Order execution

C.8.3.4 Disaster Recovery Plan – Annual Evaluation Encrypted Email

Annually, within thirty (30) days of start date of each option period

C.8.3.9 Audio files of recorded monitoring center communications

.wav or other sound file On-demand

C.8.3 10 Monitoring Center Event Report Searchable CMS File On-demand

C.8.3.19.e Copy of security policies and procedures for network security PDF Within three (3) days of task order

C.8.5 Fifty (50) replacement tracking devices when inventory falls below 100 devices

Trackable overnight delivery As directed by COR

C.8.6 Application Programming Interface (API) CMS Within 30 days of Task

Order execution

C.8.7 Testimony Preparation and Appearance In person As needed

C.8.8.1 Initial Training Sessions In person Within 14 days of award C.8.8.3.a All CSOSA Users Training Live or web-based As directed by COR C.8.8.3.b Web-based Users Training Web-based As directed by COR C.8.8.4 Proposed Training Schedule Encrypted Email At post-award meeting

C.8.9.2 Data Return Trackable delivery Within 60 days after Task Order expiration

C.8.9.3 Transition Plans Electronic With proposal submission (recommend updating to “within 7 days of award”)

C.10.1 Status Meetings & Minutes In person/teleconference, email As agreed by COR

C.10.2 Post-Award Meeting In person or teleconference Within 10 days of award

C.11 Contractor Quality Assurance Plan (QAP) Encrypted Email Within 10 days of award

C.13 FedRAMP Compliance Matrix Compliance Matrix and supporting documents With proposal submission

Section G – Contract Administration Data

G.1 Contracting Officer’s Representative.

G.1.1 The Contracting Officer’s Representative (COR) for this award is:

Name of COR - TBD at award Office of Behavioral Intervention COR’s Address – TBD at award Washington, DC zip code TBD at award Telephone Number: TBD at award Email Address: TBD at award

G.1.2 The COR is responsible for the technical aspects of the award and serves as the liaison with the Contractor. The COR is responsible for the final inspection and acceptance of all work performed and such other responsibilities as may be specified in this award.

G.1.3 The COR is not authorized to make any commitments or otherwise obligate the Government or authorize any changes which affect the award price, terms, or conditions. Any Contractor request for changes shall be referred to the Contracting Officer directly or through the COR. No such changes shall be made without the express written prior authorization of the Contacting Officer.

G.2 Contracting Officer.

G.2.1 The Contracting Officer is the only person authorized to approve changes to any of the terms and conditions of this award. In the event the Contractor effects any changes at the direction of any person other than the Contracting Officer, the changes will be considered to have been made without authority and no adjustment will be made in the award price to cover any increase in costs incurred as a result thereof. The Contracting Officer shall be the only individual authorized to accept nonconforming work, waive any requirement of the award, or to modify any term or condition of this award. The Contracting Officer is the only individual who can legally obligate Government funds. No cost chargeable to the proposed award can be incurred before receipt of a fully executed award, which includes any subsequent modifications to the award or other specific written authorization from the Contracting Officer.

G.2.2 The Contractor shall not comply with any order, direction, or request of Government personnel unless it is issued in writing and signed by the Contracting Officer or is pursuant to specific authority otherwise included as a part of this award. No order, statement, or conduct of Government personnel, other than the Contracting Officer, who visit the Contractor’s facilities or in any other manner communicate with Contractor personnel during the performance of this award, shall constitute a change under the terms for changes included in FAR 52.212-4 of this award.

G.2.3 The procuring and administering Contracting Officer for this award is:

Elijah Anderson Office of Procurement Court Services and Offender Supervision Agency (CSOSA) 800 North Capitol Street, NW Washington, DC 20002-4260 Phone: (202) 220.5795 (o) / (202) 352.0537 (m) Email Address: Elijah.anderson@csosa.gov

G.3 Electronic Invoicing and Payment Requirements – Invoice Processing Platform

G.3.1 Payment requests must be submitted electronically through the U.S. Department of Treasury’s Invoice Processing Platform (IPP) system using the “Bill to Agency” of Interior Business Center – FMD.

G.3.2 Definitions.

G.3.2.1 “Contract” as used throughout this clause means the type of contract identified in Section B.1 above.

G.3.2.2 “Payment request” means a bill, voucher, invoice, or request for contract financing payment with associated supporting documentation.

G.3.3 To constitute a proper invoice, the payment request must comply with the requirements identified in the applicable Prompt Payment clause included in the contract or the clause GSAR 552.212-4, Contract Terms and Conditions – Commercial Items, included in commercial item contracts.

G.3.4 IPP Registration. The IPP website address is: https://www.ipp.gov.The Contractor must use the IPP website to register, access, and use IPP for submitting requests for payment. The Contractor Government Business Point of Contact (as listed in SAM) will receive enrollment instructions via email from the Federal Reserve normally within 3-5 business days of the contract award date. Assistance with enrollment may be obtained by contacting the IPP Production Helpdesk via email at IPPCustomerSupport@fiscal.treasury.gov or by phone at (866) 973-3131.

G.3.5 Payment Request/Invoice Submission.

G.3.5.1 Invoices shall be submitted in IPP with a unique invoice number on a monthly basis.

G.3.5.2 The payment request/invoice submission must identify the specific Contract Line Item Number (CLIN) for which the Contractor is seeking payment under the contract.

G.3.5.3 In addition to providing the information required by IPP, the Contractor shall include in IPP as an attachment(s) to the specific payment request the following:

1. Contractor’s Contact Information:

• Name of point of contact;

• Contractor’s mailing address;

• Contractor phone number;

2. CSOSA’s Billing Information, i.e.:

CSOSA, Office of Financial Management 800 North Capitol Street, NW, 6th Floor Washington, DC 20002-4260

3. Unique Invoice Number and date of invoice;

4. CSOSA Contract / Purchase Order Number (i.e., 9594CS26PXXXX);

5. CSOSA Contract Line Item Number (CLIN) or item number and description as it appears on the purchase order, including price and quantity billed.

G.3.6 CSOSA is bound by the Prompt Payment Act (5 CFR Part 1315) to reimburse Contractors on the 30th calendar day after a proper and valid invoice is officially received by the Agency.

G.3.6.1 Invoices submitted in IPP to incorrect CLINs and/or without required or valid attachment information are not considered proper.

mailto:IPPCustomerSupport@fiscal.treasury.gov

G.3.6.2 Improper or invalid IPP invoices shall be disputed / rejected by CSOSA in their entirety. If the invoice is disputed / rejected by CSOSA, the Contracting Officer or COR appointed to the contract will notify the Contractor in writing of the dispute within seven (7) days of the CSOSA invoice official receipt date (the received date stamped on the invoice by OFM). CSOSA’s written dispute / rejection notification will identify the specific invoice items and amounts being disputed, reason the items or amounts are disputed, a reference to the specific terms of the contract which supports the government’s dispute and a request for an immediate explanation and / or corrected invoice. In addition, the invoice will be rejected by CSOSA in IPP. The Contractor shall re-submit corrected invoices in IPP, with required attachments, using a new, unique invoice number.

G.3.6.3 Properly disputed invoice amounts are not subject to late payment interest computations during the period of dispute. Per FAR Part 32 the Contracting Officer has the final authority to approve payment of an invoice.

G.3.7 The Contractor should review IPP to determine the current status of a submitted invoice.

Contractor inquiries concerning an invoice payment may be made to the CSOSA Office of Financial Management (OFM) thirty (30) calendar days after a proper invoice has been submitted. The Contractor may make payment inquires to by calling OFM, Ms. Rolanda White, at (202) 220-5464 or emailing OFM at Rolanda.White@csosa.gov.

Section H – Special Requirements

H.1 Confidentiality of Reports and Other Data. Neither the Contractor, nor any affiliate, subsidiary, consultant, subcontractor, nor personnel thereof, shall divulge to any third party any information concerning deliverables produced, work performed, results obtained, or any information provided by the Government in connection with this award without the prior written approval of the Contracting Officer.

H.2 Review of Announcements or Publishing. Neither the Contractor, nor any affiliate, subsidiary, consultant, subcontractor, nor personnel thereof, shall make public releases of information or any matter pertaining to this award, including, but not limited to, advertising in any medium, or presentation before technical, scientific, or industry groups, without the prior written approval of the Contracting Officer. The provisions of this clause shall survive the expiration of this award.

H.3 Period of Claim. Notwithstanding the claim period stated in GSAR 552.212-4(d), Disputes, and pursuant to FAR 33.206, Initiation of a Claim, the Contractor agrees to submit any claim related to this BPA within 12 months after accrual of the claim.

H.4 Data Safeguard and Disposal.

H.4.1 The Contractor shall safely store and protect from unauthorized disclosure and destruction, either direct or as a result of negligence, data collected during the duration of the award. Within five days after completion of the award period of performance, the Contractor shall purge all PII or sensitive data provided to the Contractor, including any backed-up data and any other PII or sensitive data held by the Contractor pursuant to this award. The Contractor shall certify in writing the date information was deleted and method used for deletion. All PII or sensitive will be maintained, handled, disclosed, and disposed of in accordance with the Privacy Act of 1974, 5 U.S.C. 552a and Public Law 107-347 titled E-Government Act of 2002.

H.4.2 The Contractor will guarantee strict confidentiality of the information/data that is provided by the government during the performance of this award. The government has determined that the information/data that the Contractor will be provided during the performance of this effort is of a sensitive nature and cannot be disclosed in any manner.

mailto:Rolanda.White@csosa.gov

H.4.3 The Contractor, in whole or in part, can only make disclosure of the information/data, after the Contractor receives prior written approval from the Contracting Officer. Whenever the Contractor is uncertain with regard to the proper handling of information/data under this effort, the Contractor will obtain a written determination from the Contracting Officer. Contractor personnel assigned to perform work must be acceptable to the government in terms of personal and professional conduct. If at any time during performance of this award, Contractor personnel are deemed a security risk, the Contractor will be responsible for immediate removal and replacement with acceptable personnel. Upon removal or completion, the Contractor will immediately return any facility access materials/passes to the COR.

H.4.4 The Contractor agrees to assume responsibility for protecting the confidentiality of government records, which are not public information. Each Contractor, employee of the Contractor, or Contractor's subcontractor or partner to whom information may be made available or disclosed will be notified in writing by the Contractor that such information may be disclosed only for a purpose and to the extent authorized herein.

H.4.5 The Contractor will keep the information confidential, use appropriate safeguards to maintain its security in accordance with minimum Federal standards. The Contractor must also explain and certify that its subcontractor(s) or partners will adhere to the same minimum Federal standards when working with sensitive data.

H.5 Indemnification.

H.5.1 The Contractor agrees for itself, its employees, and approved subcontractors to save, defend, hold harmless and indemnify the Government and all of its elected and appointed officials, officers, current and former employees, agents, departments, agencies, boards, and commissions (collectively the "Government") from and against any and all claims made by third parties or by the Government for any and all losses, damages, injuries, fines, penalties, costs (including court costs and attorney's fees), charges, liability, demands or exposure, however caused, resulting from, arising out of, or in any way connected with the Contractor's acts or omissions, including the acts or omissions of its employees and/or approved subcontractors, in performance or nonperformance of its work called for by the contract.

H.5.2 The Contractor shall:

H.5.2.1 Promptly notify the Contracting Officer of any claim or action against, or any loss by, the Contractor or any approved subcontractors that may reasonably be expected to involve indemnification under this clause;

H.5.2.2 Immediately furnish to the Contracting Officer copies of all pertinent papers of the Contractor that pertain to any indemnification matter;

H.5.2.3 Furnish evidence or proof of any claim, loss, or damage covered by this clause in the manner and form the Contracting Officer requires; and

H.5.2.4 Comply with the Contracting Officer's directions and execute any authorizations required in connection with settlement or defense of claims or actions.

H.5.3 The Government may direct, control, or assist in settling or defending any claim or action that may involve indemnification under this clause.

H.5.4 This indemnification shall survive the termination of this contract.

H.5.5 Hold Harmless and Indemnification Agreement. The Contractor shall be solely liable for, and expressly agrees to indemnify the Government, with respect to any liability-producing acts or omissions by its employees or agents. Specifically, the Contractor shall save and hold harmless and indemnify the Government against any and all liability claims, and cost of whatsoever kind and nature, for injury to or death of any person or persons and for loss or damage to any Contractor equipment or property or property owned by a third party occurring in connection with, or in any way incident to or arising out of the occupancy, use, service, operation, or performance of work under the terms of this contract, resulting in whole or in part from the acts or omissions of the Contractor, any subcontractor, or any employee, agent, or representative of the Contractor or subcontractor.

H.5.6 Government Liability. The Government shall not be liable for any injury or damages to Contractor or subcontractor personnel, or damage to Contractor or subcontractor equipment or property resulting from the delivery of services required under this award, unless such injury or damage is due to negligence on the part of the Government and is recoverable under the Federal Torts Claims Act, or pursuant to other Federal statutory authority.

H.6 Disclosure of Information.

H.6.1 Any information made available to the Contractor by CSOSA shall be used only for the purpose of carrying out the provisions of this award and shall not be divulged or made known in any manner to any person except as may be necessary in the performance of this award.

H.6.2 In performance of this award, the Contractor assumes responsibility for protection of the confidentiality of CSOSA and offender data/records and shall ensure that all work performed by its approved subcontractors shall be under the supervision of the Contractor.

H.6.3 Each officer or employee of the Contractor, or any of its approved subcontractors, to whom any CSOSA or offender data/record may be made available or disclosed shall be notified in writing by the Contractor that information disclosed to such officer or employee can be used only for a purpose, and to the extent, authorized herein. Further disclosure of any such information, by any means, for a purpose or to an extent unauthorized herein, may subject the Contractor and offender to criminal sanctions imposed by 19 U.S.C. 641. That section provides, in pertinent part, that whoever knowingly converts to their use, or the use of another, or without authority, sells, conveys, or disposes of any record of the United States, or whoever receives the same with intent to convert it to their use or gain, knowing it to have been converted, shall be guilty of a crime punishable by a fine of up to $10,000, or imprisoned up to ten years, or both.

H.7 Access to Sensitive Information.

H.7.1 Work under this award may involve access to sensitive information* which shall not be disclosed by the Contractor unless authorized by the Contracting Officer. To protect sensitive information, the Contractor shall provide training to any Contractor employee authorized access to sensitive information and, upon request of CSOSA, provide information as to an individual’s suitability to have such authorization. Contractor employees found by CSOSA to be unsuitable, or whose employment is deemed contrary to the public interest or inconsistent with the best interest of national security, may be prevented from performing work under this award when requested by the Contracting Officer.

H.7.2 The Contractor shall ensure that Contractor employees are citizens of the United States of America, or an alien who has been lawfully admitted for permanent residence or employment (indicated by immigration status). The Contractor shall include the above requirements in any approved subcontract awarded involving access to CSOSA facilities, sensitive information, or resources.

*Sensitive Information is Personally Identifiable Information (PII), Personal Health Information (PHI), proprietary data or other information that, if subject to unauthorized access, modification, loss, or misuse, could adversely affect the national interest, conduct of Federal programs, or the privacy of individuals specified in the Privacy Act, but has not been specifically authorized to be kept secret in the interest of national defense or foreign policy under an Executive Order or Act of Congress.

H.8 CSOSA Contractor Information Security Requirements.

H.8.1 The Contractor shall implement an information security program for the secure storage of all offender records which are created, stored, or transmitted in an electronic format. The Contractor’s information security program shall be in compliance with “Confidentiality of Alcohol and Drug Abuse Patient Records” 42 C.F.R. Part 2, and local and federal laws and regulations regarding the confidentiality of offender records to include, but not be limited to, the Health Insurance Portability and Accountability Act (HIPAA) 45 C.F.R. Part 160 and 45 C.F.R. Part 164, Subpart C. All electronic files shall be properly stored, protected, and maintained in accordance with applicable local, state, and federal law, including HIPPA and Certified Clinical Health Information Technology (CCHIT).

H.8.2 The term “personally identifiable information” or PII refers to information which can be used to distinguish or trace an individual's identity, such as their name, social security number, biometric records, etc. alone, or when combined with other personal or identifying information which is linked or linkable to a specific individual, such as date and place of birth, mother’s maiden name, etc.

H.8.3 Data Security: Loss or Disclosure of Personally Identifiable Information (PII) –Notification of Data Breach. By acceptance of, or performance on, this award, the Contractor agrees that in the event of any actual or suspected breach of such data (i.e., loss of control, compromise, unauthorized disclosure, access for an unauthorized purpose, or other unauthorized access, whether physical or electronic), the Contractor will immediately (and in no event later than within one hour of discovery) report the breach to the COR and the Contracting Officer.

H.8.4 Transmission of PII (Personally Identifiable Information) and PHI (Protected Health Information. Documents and email attachments that contain CSOSA PII or CSOSA PHI must be encrypted with a password and utilize Advanced Encryption Standard (AES) 256-level encryption. To transmit encrypted documents and email attachments to CSOSA, inform the CSOSA recipient that the document or email attachment is password-protected and the password will be provided separately. Do not include the password in the same email containing the password-protected document or attachment. Provide the password to the CSOSA recipient in a telephone call, or in a separate email

H.9 Records Management.

H.9.1 The Contractor must manage Federal records in accordance with applicable records management laws and regulations, including, but not limited to, the Federal Records Act 44 U.S.C.

Chapters 21, 29, 31 and 33; Freedom of Information Act (5 U.S.C. 552); Privacy Act (5 U.S.C. 552a);

and 36 CFR Part 1222 and Part 1228.

H.9.2 The Contractor shall treat all deliverables under the purchase order as the property of the U.S.

Government for which CSOSA shall have unlimited rights to inspect, use, dispose of, or disclose such data contained therein as it determines to be in CSOSA’s or the public interest.

H.9.3 The Contractor shall not retain, use, sell, or disseminate copies of any deliverable that contains information covered by the Privacy Act of 1974, or that which is generally protected by the Freedom of Information Act.

H.9.4 The Contractor shall not create or maintain any records containing any CSOSA or Client data/records that are not specifically tied to, or authorized by, the purchase order.

H.9.5 CSOSA owns the rights to all data/records and electronic information (electronic data, electronic information systems, electronic databases, etc.), and all supporting documentation created as part of this purchase order. The Contractor must deliver sufficient technical documentation with all data deliverables to permit CSOSA to use the data.

H.9.6 The Contractor agrees to comply with Federal and CSOSA records management policies, including those policies associated with the safeguarding of records covered by the Privacy Act of 1974. These policies include the preservation of all records created or received regardless of format [paper, electronic, etc.] or mode of transmission [e-mail, fax, etc.] or state of completion [draft, final, etc.],in accordance with www.archives.gov/records-mgmt/ardor/records-schedules.html .

H.9.7 The Contractor is responsible for preventing unauthorized destruction of data or records, including all forms of mutilation. Willful and unlawful destruction, damage or alienation of Federal records is subject to the fines and penalties imposed by 18 U.S.C. 2701. CSOSA Client records may not be removed from the legal custody of the Contractor or destroyed.

H.9.8 The Contractor is required to obtain the Contracting Officer's approval prior to engaging in any 3rd party contractual relationship (subcontractor) in support of this purchase order requiring the disclosure of information, documentary material, or records generated under, or relating to, this purchase order. The Contractor and any subcontractor are required to abide by CSOSA guidance for protecting sensitive or proprietary information.

H.10 Independent Contractor Status. The Contractor is an independent contractor, and neither Contractor nor Contractor's employees or approved subcontract personnel are, or shall be deemed, Government's employees. In its capacity as an independent contractor, Contractor agrees and represents, and the Government agrees, as follows:

H.10.1 Contractor has the right to control and direct the means, manner, and method in which to perform services required by CSOSA through this purchase order.

H.10.2 Contractor has the right to hire assistants as subcontractors to provide the services required by this purchase order provided Contractor notifies the Contracting Officer in writing of the need to hire subcontractors and receives the expressed written permission from the Contracting Officer before hiring any subcontractor under this purchase order.

H.10.3 The services required by this purchase order shall be performed by Contractor, Contractor's employees, and approved subcontract personnel, and the Government shall not hire, supervise, or pay any assistants or subcontractors to help Contractor.

H.11 CSOSA Contractor Information Security Requirements.

H.11.1 The Contractor shall meet and comply with Federal laws, Executive Orders, directives, policies, regulations, standards, and guidance, as amended and extended, for the protection of the information system and information during processing, while in storage, and during transmission. The Contractor shall be required to comply with, at a minimum:

a. Federal Information Security Modernization Act of 2014 (FISMA)

b. Office of Management and Budget (OMB) Circular and Memoranda (e.g. Circular A- 130)

c. U.S. Department of Homeland Security Directives (e.g. US-CERT and HSPD- 12)

d. National Institute of Standards and Technology (NIST) Federal Information Processing Standards (FIPS) and Special Publication (SP) 800 Series (e.g. FIPS 200, FIPS 199, FIPS 140-2, SP 800-18, SP 800-37, SP 800-53A, SP 800-60)

e. CSOSA PS-4060 Personnel Security Program, (12/17/2015) http://www.archives.gov/records-mgmt/ardor/records-schedules.html

f. CSOSA PS-5500 Information Technology Security, (12/21/2016)

g. CSOSA PS-5002 Safeguarding Personally Identifiable Information, (7/1/2015)

H.11.2 The Federal Information Security Modernization Act of 2014 (FISMA), requires the head of each agency to provide information security protections commensurate with the risk and magnitude of the harm resulting from unauthorized access, use, disclosure, disruption, modification, or destruction of information. It requires those measures to be in place for information collected or maintained by or on behalf of the agency; and information systems used or operated by an agency or by a contractor of an agency or other organization on behalf of an agency.

H.11.2.1 The law defines the term "information security" to mean protecting information and information systems from unauthorized access, use, disclosure, disruption, modification, or destruction in order to provide:

a. Integrity, which means guarding against improper information modification or destruction, and includes ensuring information nonrepudiation and authenticity;

b. Confidentiality, which means preserving authorized restrictions on access and disclosure, including means for protecting personal privacy and proprietary information; and

c. Availability, which means ensuring timely and reliable access to and use of information.

H.11.2.2 The Contractor shall provide and implement security controls, as selected by CSOSA, to meet the security requirements for a Moderate impact level system as defined in NIST SP 800-53 (as amended), Security and Privacy Controls for Federal Information Systems and Organizations. The Contractor shall apply the appropriate set of baseline security controls as required by CSOSA's policy statement # 5500 Information Technology Security to ensure compliance with security standards.

H.11.2.3 Executive departments and agencies procuring commercial and non-commercial cloud services, or systems provided or managed by other departments or agencies, contractors, or other sources shall comply with FISMA requirements. The Federal Risk and Authorization Management Program (Fed RAMP) is a government-wide program that provides a standardized approach to FISMA compliance as it applies to cloud-based computing services. It oversees and standardizes how to do security assessments, authorizations, and continuous monitoring for cloud products and services. Fed RAMP requirements apply to all cloud deployment models (e.g., Public Clouds, Community Clouds, Private Clouds, Hybrid Clouds); and all cloud service models (e.g., Infrastructure as a Service, Platform as a Service, Software as a Service) as defined by the National Institute of Standards and Technology (NIST).

Section I – Contract Clauses

I.1 FAR 52.252-2 Clauses Incorporated By Reference (Feb 1998)

This contract incorporates one or more clauses by reference, with the same force and effect as if they were given in full text. Upon request, the Contracting Officer will make their full text available. Also, the full text of a clause may be accessed electronically at this address:

https://www.acquisition.gov/browsefar

(End of Clause) https://www.acquisition.gov/browsefar

I.2 The following clauses are incorporated by reference:

FAR Clause No.

Title Date

52.204-13 System for Award Management Maintenance Oct 2018 52.204-18 Commercial and Government Entity Code Reporting Aug 2020 52.204-21 Basic Safeguarding of Covered Contractor Information Systems Nov 2021 52.212-4 Contract Terms and Conditions – Commercial Items Nov 2023 52.215-8 Order of Precedence – Uniform Contract Format Oct 1997 52.224-1 Privacy Act Notification Apr 1984 52.224-2 Privacy Act Apr 1984

52.232.39 Unenforceability of Unauthorized Obligations Jun 2013 52.242-15 Stop-Work Order Aug 1989

FAR 52.212-5 Contract Terms and Conditions Required To Implement Statutes or Executive Orders—Commercial Products and Commercial Services (MAR 2026)

(a) The Contractor shall comply with the following Federal Acquisition Regulation (FAR) clauses, which are incorporated in this contract by reference, to implement provisions of law or Executive orders applicable to acquisitions of commercial products and commercial services:

(1) 52.203-19, Prohibition on Requiring Certain Internal Confidentiality Agreements or Statements (JAN 2017) (section 743 of Division E, Title VII, of the Consolidated and Further Continuing Appropriations Act, 2015 (Pub. L. 113-235) and its successor provisions in subsequent appropriations acts (and as extended in continuing resolutions)).

(2) 52.204-23, Prohibition on Contracting for Hardware, Software, and Services Developed or Provided by Kaspersky Lab Covered Entities (DEC 2023) (Section 1634 of Pub. L. 115-91).

(3) 52.204-25, Prohibition on Contracting for Certain Telecommunications and Video Surveillance Services or Equipment. (NOV 2021) (Section 889(a)(1)(A) of Pub. L. 115-232).

(4) 52.209-10, Prohibition on Contracting with Inverted Domestic Corporations (NOV 2015).

(5) 52.232-40, Providing Accelerated Payments to Small Business Subcontractors (MAR 2023) (31 U.S.C. 3903 and 10 U.S.C. 3801).

(6) 52.233-3, Protest After Award (AUG 1996) (31 U.S.C. 3553).

(7) 52.233-4, Applicable Law for Breach of Contract Claim (OCT 2004) (Public Laws 108-77 and 108-78 ( 19 U.S.C. 3805 note)).

(b) The Contractor shall comply with the FAR clauses in this paragraph (b) that the Contracting Officer has indicated as being incorporated in this contract by reference to implement provisions of law or Executive orders applicable to acquisitions of commercial products and commercial services:

[Contracting Officer check as appropriate.]

_X_ (1) 52.203-6, Restrictions on Subcontractor Sales to the Government (JUN 2020), with Alternate I (NOV 2021) (41 U.S.C. 4704 and 10 U.S.C. 4655).

https://www.acquisition.gov/far/52.203-19#FAR_52_203_19 https://www.acquisition.gov/far/52.204-23#FAR_52_204_23 https://www.acquisition.gov/far/52.204-25#FAR_52_204_25 https://www.acquisition.gov/far/52.209-10#FAR_52_209_10 https://www.acquisition.gov/far/52.232-40#FAR_52_232_40 https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title31-section3903&num=0&edition=prelim https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title10-section3801&num=0&edition=prelim https://www.acquisition.gov/far/52.233-3#FAR_52_233_3 https://www.acquisition.gov/far/52.233-4#FAR_52_233_4 https://www.acquisition.gov/far/52.203-6#FAR_52_203_6 https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title10-section4655&num=0&edition=prelim

__ (2) 52.203-13, Contractor Code of Business Ethics and Conduct (NOV 2021) (41 U.S.C. 3509)).

__ (3) 52.203-15, Whistleblower Protections under the American Recovery and Reinvestment Act of 2009 (JUN 2010) (Section 1553 of Pub. L. 111-5). (Applies to contracts funded by the American Recovery and Reinvestment Act of 2009.)

_X_ (4) 52.203-17, Contractor Employee Whistleblower Rights (NOV 2023) (41 U.S.C. 4712); this clause does not apply to contracts of DoD, NASA, the Coast Guard, or applicable elements of the intelligence community—see FAR 3.900(a).

_X_ (5) 52.204-10, Reporting Executive Compensation and First-Tier Subcontract Awards (JUN 2020) (Pub. L. 109-282) ( 31 U.S.C. 6101 note).

__ (6) [Reserved].

__ (7) 52.204-14, Service Contract Reporting Requirements (OCT 2016) (Pub. L. 111-117, section 743 of Div. C).

__ (8) 52.204-15, Service Contract Reporting Requirements for Indefinite-Delivery Contracts (OCT 2016) (Pub. L. 111-117, section 743 of Div. C).

_X_ (9) 52.204-27, Prohibition on a ByteDance Covered Application (JUN 2023) (Section 102 of Division R of Pub. L. 117-328).

__ (10) 52.204-28, Federal Acquisition Supply Chain Security Act Orders—Federal Supply Schedules, Governmentwide Acquisition Contracts, and Multi-Agency Contracts. (DEC 2023) (Pub. L.

115–390, title II).

__ (11) (i) 52.204-30, Federal Acquisition Supply Chain Security Act Orders—Prohibition. (DEC 2023) (Pub. L. 115–390, title II).

__ (ii) Alternate I (DEC 2023) of 52.204-30.

_X_ (12) 52.209-6, Protecting the Government's Interest When Subcontracting With Contractors Debarred, Suspended, Proposed for Debarment, or Voluntarily Excluded. (JAN 2025) (31 U.S.C. 6101 note).

_X_ (13) 52.209-9, Updates of Publicly Available Information Regarding Responsibility Matters (OCT 2018) (41 U.S.C. 2313).

__ (14) [Reserved].

__ (15) 52.219-3, Notice of HUBZone Set-Aside or Sole-Source Award (OCT 2022) (15 U.S.C. 657a).

__ (16) 52.219-4, Notice of Price Evaluation Preference for HUBZone Small Business Concerns (OCT 2022) (if the offeror elects to waive the preference, it shall so indicate in its offer) (15 U.S.C. 657a).

__ (17) [Reserved]

_X_ (18) (i) 52.219-6, Notice of Total Small Business Set-Aside (NOV 2020) (15 U.S.C. 644).

https://www.acquisition.gov/far/52.203-13#FAR_52_203_13 https://www.acquisition.gov/far/52.203-15#FAR_52_203_15 https://www.acquisition.gov/far/52.203-17#FAR_52_203_17 https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title41-section4712&num=0&edition=prelim https://www.acquisition.gov/far/3.900#FAR_3_900 https://www.acquisition.gov/far/52.204-10#FAR_52_204_10 http://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title31-section6101&num=0&edition=prelim https://www.acquisition.gov/far/52.204-14#FAR_52_204_14 https://www.acquisition.gov/far/52.204-15#FAR_52_204_15 https://www.acquisition.gov/far/52.204-27#FAR_52_204_27 https://www.acquisition.gov/far/52.204-28#FAR_52_204_28 https://www.govinfo.gov/link/plaw/115/public/390 https://www.govinfo.gov/link/plaw/115/public/390 https://www.acquisition.gov/far/52.204-30#FAR_52_204_30 https://www.govinfo.gov/link/plaw/115/public/390 https://www.acquisition.gov/far/52.204-30#FAR_52_204_30 https://www.acquisition.gov/far/52.209-6#FAR_52_209_6 https://www.govinfo.gov/link/uscode/31/6101 https://www.acquisition.gov/far/52.209-9#FAR_52_209_9 http://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title41-section2313&num=0&edition=prelim https://www.acquisition.gov/far/52.219-3#FAR_52_219_3 http://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title15-section637a&num=0&edition=prelim https://www.acquisition.gov/far/52.219-4#FAR_52_219_4 https://www.acquisition.gov/far/52.219-6#FAR_52_219_6

__ (ii) Alternate I (MAR 2020) of 52.219-6.

__ (19) (i) 52.219-7, Notice of Partial Small Business Set-Aside (NOV 2020) (15 U.S.C. 644).

__ (ii) Alternate I (MAR 2020) of 52.219-7.

_X_ (20) 52.219-8, Utilization of Small Business Concerns (JAN 2025)(15 U.S.C. 637(d)(2) and (3)).

__ (21) (i) 52.219-9, Small Business Subcontracting Plan (JAN 2025) (15 U.S.C. 637(d)(4)).

__ (ii) Alternate I (NOV 2016) of 52.219-9.

__ (iii) Alternate II (NOV 2016) of 52.219-9.

__ (iv) Alternate III (JUN 2020) of 52.219-9.

__ (v) Alternate IV (JAN 2025) of 52.219-9.

__ (22) (i) 52.219-13, Notice of Set-Aside of Orders (MAR 2020) (15 U.S.C. 644(r)).

__ (ii) Alternate I (MAR 2020) of 52.219-13.

_X_ (23) 52.219-14, Limitations on Subcontracting (OCT 2022) (15 U.S.C. 657s).

__ (24) 52.219-16, Liquidated Damages—Subcontracting Plan (SEP 2021) (15 U.S.C. 637(d)(4)(F)(i)).

__ (25) 52.219-27, Notice of Set-Aside for, or Sole-Source Award to, Service-Disabled Veteran- Owned Small Business (SDVOSB) Concerns Eligible Under the SDVOSB Program (FEB 2024) (15 U.S.C. 657f).

_X_ (26) (i) 52.219-28, Postaward Small Business Program Rerepresentation (JAN 2025) (15 U.S.C. 632(a)(2)).

__ (ii) Alternate I (MAR 2020) of 52.219-28.

__ (27) 52.219-29, Notice of Set-Aside for, or Sole-Source Award to, Economically Disadvantaged Women-Owned Small Business Concerns (OCT 2022) (15 U.S.C. 637(m)).

__ (28) 52.219-30, Notice of Set-Aside for, or Sole-Source Award to, Women-Owned Small Business Concerns Eligible Under the Women-Owned Small Business Program (OCT 2022) (15 U.S.C. 637(m)).

__ (29) 52.219-32, Orders Issued Directly Under Small Business Reserves (MAR 2020) (15 U.S.C. 644(r)).

__ (30) 52.219-33, Nonmanufacturer Rule (SEP 2021) (15 U.S.C. 637(a)(17)).

_X_ (31) 52.222-3, Convict Labor (JUN 2003) (E.O. 11755).

https://www.acquisition.gov/far/52.219-6#FAR_52_219_6 https://www.acquisition.gov/far/52.219-7#FAR_52_219_7 https://www.acquisition.gov/far/52.219-7#FAR_52_219_7 https://www.acquisition.gov/far/52.219-8#FAR_52_219_8 https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title15-section637&num=0&edition=prelim https://www.acquisition.gov/far/52.219-9#FAR_52_219_9 https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title15-section637&num=0&edition=prelim https://www.acquisition.gov/far/52.219-9#FAR_52_219_9 https://www.acquisition.gov/far/52.219-9#FAR_52_219_9 https://www.acquisition.gov/far/52.219-9#FAR_52_219_9 https://www.acquisition.gov/far/52.219-9#FAR_52_219_9 https://www.acquisition.gov/far/52.219-13#FAR_52_219_13 https://www.acquisition.gov/far/52.219-13#FAR_52_219_13 https://www.acquisition.gov/far/52.219-14#FAR_52_219_14 https://www.acquisition.gov/far/52.219-16#FAR_52_219_16 https://www.acquisition.gov/far/52.219-27#FAR_52_219_27 https://www.acquisition.gov/far/52.219-28#FAR_52_219_28 https://www.acquisition.gov/far/52.219-28#FAR_52_219_28 https://www.acquisition.gov/far/52.219-29#FAR_52_219_29 https://www.acquisition.gov/far/52.219-30#FAR_52_219_30 https://www.acquisition.gov/far/52.219-32#FAR_52_219_32 https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title15-section644&num=0&edition=prelim…