Solicitation Amendment - W91QF426QA0210002.pdf

W91QF4-26-Q-A021 Combined Synopsis/Solicitation – ACB Inmate Call Monitoring Software

(i) This is a combined synopsis/solicitation for commercial items prepared in accordance with the format in RFO FAR 12.202, as supplemented with additional information included in this notice. This announcement constitutes the only solicitation;

proposals are being requested and a written solicitation will not be issued.

(ii) This solicitation # W91QF4-26-Q-A021 is issued as a Request for Quote (RFQ).

(iii) Federal Acquisition Circular: This solicitation document incorporates provisions and clauses in effect through Federal Acquisition Circular 2025-06 effective as of 27 August 2025.

(iv) NAICS code: The corresponding NAICS code for this solicitation is 513210 –

“Software Publishers” with a size standard of $47M (PSC of 7B21 – IT & Telecom- Computer (Hardware and Perpetual License Software)). An Offeror must be registered on the System for Award Management (SAM) before an award could be made to them.

If a company is not registered in SAM, they must do so by going to SAM web site (https://www.sam.gov) and registering prior to submission of a proposal. This requirement is being advertised as an Unrestricted (Full and Open Competition).

(v) Contract Line Items:

Add TEXT LAST PAGE

(xiv) A statement regarding the Defense Priorities and Allocations System (DPAS) and assigned rating, if applicable.

(xv) The date, time and place of offers are due.

(xvi) The name and telephone number of the individual to contact for information regarding the solicitation.

https://www.sam.gov/

Solicitation/Contract Form Continuation

ACB - Inmate CB Communications MonitoringInstrument Name:

Product Service Code : 7B21

Local Instructions

RESPONSIBILITY FORADMINISTRATION OFCONTRACT

1. The Contracting Officer is responsible for the administration of this contract. The ContractingOfficer alone is authorized to the extent indicated in the contract to act on behalfof the government which results in changes in the terms of the contract,including deviations from specifications, details and delivery schedules.Communications pertaining to contractual administrative matters will beaddressed to the Contracting Officer. No changes in our deviation from thescope of work shall be affected without a written modification to the contractdrawn up by the Contracting Officer. Delivery/Task orders will be issued by theContract Administration Division.

2. No oralstatement of any person will modify or otherwise affect the terms of thiscontract. The Contracting Officer is the only person authorized to approvechanges in any of the requirements under this contract, and notwithstanding anyprovisions contained elsewhere in this contract, the said authority remainssolely with the Contracting Officer.

3. All matterspertaining to the Government administration of this contract should be directedat:

Attn: ChesterServiora, Contracting Specialist

MICC FortLeavenworth

731 McClellan Ave, Bldg. 48

Fort Leavenworth,KS 66027

Telephone Number:520-944-3403

Fax Number:913-684-1610

E-Mail:chester.1.serviora.civ@army.mil

OR

Attn: RobertParvin, Contracting Officer

MICC FortLeavenworth

731 McClellan Ave, Bldg. 48

Fort Leavenworth,KS 66027-1417

W91QF426QA0210002

Telephone Number:913-684-1624

Fax Number:913-684-1610

E-Mail:robert.m.parvin.civ@army.mil

RESTRICTED ACCESSTO MILITARY INSTALLATION - COOPERATION WITH FORCE PROTECTION MEASURES

a. The contractoragrees to abide by and cooperate with Force Protection measures that areimplemented on the military installation.

b. The Contractorshall comply with, and in the instance of contractor/sub-contractor employees,shall ensure compliance with the following instructions when access to the FortLeavenworth installation/facilities are required for contract performance.These local instructions are incorporated in this contract, to implement localinstallation antiterrorism/operations security policies and procedures, and tosupplement Federal Acquisition Regulation (FAR) clause 52.204-9, which, ifapplicable to this contract, is in Section I of the contract. In the event ofconflict between any portion of this supplement and/or FAR 52.204-9; and anyother provision within the PWS, or specifications; clause 52.204-9 (if listed)shall take precedence. In the event of conflict between this supplement and anyother provision within the PWS, or specifications, this supplement shall take precedence.

(i) An un-cleared contractor is an individual whofalls into one of two categories: (1) CAC-eligible; and (2) non- CAC eligible.The Common Access Card (CAC) is the DoD federal personal identity verificationcredential. CAC Eligibility is defined in Army Directive2014-05, dated March 7,2014.

(ii) Army Directive 2014-05 provides that allcontractor and/or subcontractor personnel who do not possess a CAC, anotherFederal personal identity verification card, or other authorized DoDidentification cards and who require unescorted access to Army installationsmust have a validated need for such access and undergo a vetting process todetermine their fitness for access. Accordingly, non-CAC eligible, un-clearedcontractor and /or subcontractor personnel requiring access to the FortLeavenworth installation and facilities, to perform under this contract, willsubmit personal identity information through the Fort Leavenworth InstallationPass implementation.

c. Contractors andContract Employees may obtain a Locally Approved Credential (LAC) for up to 365days for entry through Grant or Hancock Gates. See location and hours of operationat the following -https://home.army.mil /leavenworth/index.php/my-fort/all-services/gate-information.

d. Primecontractors can direct their Sub-contractors to the Visitor Control Center toobtain a 30-day pass. See location & hours of operation at the following-https://home.army.mil/leavenworth/about/visitor-information/gate-information

e. FortLeavenworth no longer accepts for access purposes the state issued driver'slicenses (DL) or state issued IDs that do not meet the Real ID Act of 2005standards. People requesting access with a non-compliant state DL or ID willneed to call ahead to the Visitor Control Center at (913) 684-3600 for inquiryof needed additional documentation.

LEGAL PUBLIC HOLIDAYS

Normal Working Hours: The Contractor shall schedule delivery or service hours to coincide withthe working hours of the military installation, 7:30 am to 4:00 pm, a normal 5-day, 40-hour week, Monday through Friday, except legal holidays which includethe following -

Federal Government holidays are:

New Year's Day 1stday of January

Martin Luther King Jr.'s Birthday 3rd Monday of January

Presidents' Day 3rdMonday of February

Memorial Day lastMonday of May

Juneteenth 19th day of June

Independence Day 4th dayof July

Labor Day 1st Monday ofSeptember

Columbus Day 2ndMonday of October

Veterans Day 11thday of November

Thanksgiving Day4th Thursday of November

Christmas Day 25thday of December

NOTE: Any of theabove holidays falling on a Saturday will be observed on the preceding Friday.Holidays falling on a Sunday will be observed on the following Monday.

KANSAS SALES AND USE TAX- Notwithstanding any other provisions of the contract, the contractprice excludes the Kansas retailer's sales tax and compensates (use) tax on allsales of tangible personal property or services purchased by the Contractor orsubcontractors for the sustainment, restoration, or repairs of buildings orother projects called for by this contract. In accordance with Kan. Stats.Anno. Sec79-3606 (e), the Contracting Officer will upon request from theContractor obtain from the State and furnish an exemption certificate for thisproject for the use by the Contractor and subcontractors in the purchase ofmaterials for incorporation in the project and of services. The Contractor andthe subcontractors shall furnish the number of such certificate to allsuppliers from whom such purchases are made, and the suppliers shall executeinvoices covering the same bearing the number of such certificate. Pursuant toa 1977 amendment to K.S.A., l 976Supp., 79-3606 (e), effective I July 1977, theContractor is required to retain all invoices for a period of yearsduring which time these invoices are subject to audit by the Kansas Director ofTaxation. Upon 5 completion of the project, the Contractor shall complete theProject Completion Certificate (Form STD 77, REV.6/77) in duplicate, returningone copy to the Contracting Officer, and forwarding the other to the KansasDirector of Taxation.

CONDUCT OF EMPLOYEES -The contractor is fully responsible for the performance and alwaysconduct of their employees while on or off post in the performance of serviceswhen in performance under this contract. Daily courtesies, to include customarygreetings or professional interactions with Government employees are expectedof the Contractor and their employees. The contractor shall not allow anyemployee to perform work under this contract while under the influence ofalcohol, drugs, or any other incapacitating agent. Military police and otherlaw enforcement personnel on post have the right to deny entry to post orremove from post any contractor employee for misconduct, which endangers thehealth or safety of people or property, or for reasons of security. Health andsafety compliance of contractors provided, and contractors wore PersonalProtective Equipment (PPE). At such times where a PPE posture mandated forinstallation personnel, all contract employees shall observe the same policieswhile prosecuting work on the installation.

The Post Commandermay bar any individual from entering the post under the authority of 18 U.S.C.1382. Removal from the post of contractor employee in accordance with the aboveshall not relieve the contractor of the requirements to meet all the terms andconditions of the contract; nor shall such removal be grounds for thecontractor to file a claim.

The Post Commandermay bar any individual from entering the post under the authority of 18 U.S.C.1382. Removal from the post of contractor employee in accordance with the aboveshall not relieve the contractor of the requirements to meet all the terms andconditions of the contract; nor shall such removal be grounds for thecontractor to file a claim.

PROJECT LABELINGFOR OFFICIAL CORRESPONDENCE - The Government singularly identifies each TaskOrder with a Task Order number at time of award. The Task Order number is aunique identifier to purposely and permanently represent an awarded project.The Government issued Task Order number is to be referenced on all official communicationsstarting upon notice of award.

- ContractNumber: Possible CHESS Contract Number

- Delivery/Purchase Order Number: W91QF4-26-P-Axxx

- GovernmentDelivery POC Receiving: William Lacuniak, william.g.lacuniak.civ@army.mil, 913-758-3693

WORK AT THEMILITARY CORRECTIONAL COMPLEX (MCC) FACILITIES

a. MCC facilitiesconsist of the United States Disciplinary Barracks (USDB), its satellite TrustyUnit (TU) and the Joint Regional Correctional Facility (JRCF). The USDB is a maximum-securitymilitary prison and the JRCF is a medium security military prison. Paramountconsideration will be given to the security and safety of all partiesconcerned.

b. A list ofContractor personnel and vehicles, to include types of vehicles, color, andlicense plate numbers, must be submitted to the Directorate of Public Works.Special equipment, i.e., cranes, welding machines, trailers, and jackhammerswill also be included. The access roster will be submitted to the Directorateof Public Works at least ten

(10) days before commencing work, who will thenforward it to the appropriate facility Directorate of Operations (DOPS) for thepurpose of security investigation for personnel permitted on MCC properties. Aminimum of often (10) working days' notice is also required to add personnel orequipment to the workforce. Likewise, notification of personnel removed from thework force is required upon initiation of that action. It should be noted thatthe security investigation may result in the denial of access to MCC propertiesfor those personnel considered a security risk. (Reference ACA 4- 4061).Additionally, special handling or parking may be required for equipment whichcould be used to breach security when idle.

c. All Contractorpersonnel, vehicles, and materials will be subject to inspection and searchupon entry to and exit from MCC properties. Except for emergency vehicles (firetrucks and ambulances), contractor personnel and vehicles will be givenpriority in entering and departing MCC properties.

d. All Contractorsand Contractor personnel will be required to read and comply with the 15thMilitary Police (MP) Brigade (BOE) Regulation 190-3, Rules of Conduct, Army CorrectionsCommand (ACC) Policy Letter 17, Standards of Conduct and sign and date MCCForm190-3-1, Request for Identification Badge/Statement indicating that theyhave read, understand and will comply with provisions stated therein ... Thesigned MCC Form(s) 190-3-1 must be attached to the access roster upon submittalto the Directorate of Public Works to process Contractor personnel forclearance.

e. The USDB/JRCFMain Entrance or West Gate will be utilized by Contractor personnel dependenton the work to be performed for entering or exiting the USDB/JRCF. Personnel willsign for USDB/JRCF badges on a register after identification and clearance hasbeen made by the staff. The badge will be always worn on the outer garment.

Personnel losing a badge are required to report the loss to the USDB/JRCFInvestigations and USDB/JRCF Physical Security Office immediately. Contractorswill be required to provide a properly cleared escort(s) for vendor deliveriesto the worksite. The escort will be required to accompany the vendor from theWest Gate to the worksite and return. At no time will vendor personnel be leftunescorted within the secured area of the USDB/JRCF.

f. Contractorpersonnel may enter/JRCF properties at 7:30am. Working hours will be 7:30am to4:00pm within the USDB /JRCF, and 7:30am to 4:30pmat external USDB/JRCF properties.Contractor personnel and vehicles, have30 minutes to clear the USDB/JRCF by4:30pm. Work will not be allowed on weekends and holidays, including Federal Holidays.In unusual circumstances, such as when utility turn-off is required for anextended period, weekend or holiday work may be coordinated between the MCC Directorateof Institutional Support (DIS) the USDB/JRCF OOPS, facility engineers, and theContractor. These instances must be coordinated well in advance, in writing.Likewise, utility tum-on of short duration or work which will disruptinstitution routines and/or traffic flow must be scheduled at least threeworking days in advance and may require schedule changes to ensure security ismaintained.

g. Contractorvehicles entering or leaving USDB/JRCF properties are searched, all personnelwill be required to dismount, shut the engine off, and open all doors andcompartments.

h. Contractorvehicles will not be permitted to enter or depart USDB/JRCF West Gate between11 :00 am and 12:30 pm except those deemed necessary to complete on-going work,such as concrete trucks. Clearance must be obtained and coordinated with theUSDB/JRCF OOPS.

i. Privately ownedvehicles will not be allowed inside the secure area of the USDB/JRCF.

j. No vehicle willhave keys left in the ignition switch at any time the vehicle is unoccupied.All vehicles will be locked when unattended. Open trucks containing tools ofany kind in the truck bed will not be left unattended. Vehicles /equipmentwithout key ignitions will be rendered inoperable when unattended or idle.

k. Contractorvehicles may be parked overnight outside the perimeter in an area designated bythe facility OOPS, if the vehicles are secured or rendered inoperable.

l. When enteringMCC properties, Contractor personnel shall travel only from the West Gate tothe worksite. They will remain at the work site, and if required, will beescorted to other areas.

m. Contractorpersonnel are not permitted to talk with prisoners, except as actual work mayrequire. Contractor personnel shall not give or accept any items from prisonersat any time. If there are problems with prisoners, the Contractor personnelwill notify the Construction Inspector.

n. Former inmatesof MCC facilities will not be allowed to work at any MCC property.

o. The projectsite shall be kept clean and in a good state of repair. All tools will besecured under lock and key unless in use.

p. The followingitems are contraband and will not be brought onto MCC property:

(1) Guns and firearms of any type, andtheir component parts, including, but not limited to ammunition clips ormagazines. Gun type rivet or nail tools will not be allowed at the job sitewithout prior clearance in writing and will not be left unattended nor remainwithin MCC properties overnight or on weekends.

(2) Ammunition, explosives.

(3) Mechanical or chemical components ofor complete incendiary devices.

(4) Knives (including pocket knives).

(5) Narcotics and nonprescription drugs,this does not include a limited supply of over-the-counter medications such asaspirin, Tylenol, Advil, cold medicines, etc., stored in their originalcontainers. (Reference ACA 4-4063)

(6) Intoxicants or alcoholic beverages.(Reference ACA 4-4063).

(7) Currency (not carried on the person oraccompanying the person and contained in a purse or handbag.).

(8) Razor blades or blades of any type,not specifically required for performance within the scope of work.

(9) Cellular phones and radiotransmitters.

(10) Photographic equipment.

(11) Printed material/video tapes that donot comply with MCC Regulation 28-1, Mail Screening Policy and Procedures

(12) Recording devices (e.g. MP3 players,iPods, portable hard drives, thumb drives).

(13) Extra clothing not worn at the jobsite

(14) Glass containers.

(15) Metal fingernail files.

(16) Metal eating utensils (e.g. forks,spoons, knives).

(17) Weight-lifting dietary supplements(Creatinine, etc.). This does not include a limited supply of diet or fooditems such as Slim Fast.

(18) Personally owned/retained handcuffkeys or picklocks.

(19) Smoking and smoking related products,including but not limited to pipes, lighters, matches, etc.

(20) Smokeless tobacco, including but notlimited to chewing tobacco, snuff, pouches, etc. (even if contained in themouth).

q. All ladders andscaffolding, when not in actual use, will be secure for immovable objects withlocks and chains. No ladders or scaffolding will be left unattended next to theouter fence of the USDB/JRCF.

r. The USDBCommandant or JRCF Commander (as applicable), may remove and permanently barcontractor personnel from the USDB or JRCF (as applicable) for actions which theUSDB Commandant or JRCF Commander deems may threaten or compromise the securityof the USDB or JRCF (e.g. leaving tools and/or equipment unsecured on thejobsite). Notwithstanding the removal and/or bar of such personnel, thecontractor will still be expected to fully perform all aspects of the job inaccordance with the provisions of the contract.

s. Exceptions tothese instructions may be granted by the USDB Commandant or the JRCF Commander(as applicable) on a case-by-case basis. Request for exceptions to specific itemsabove must be submitted in writing to the Contracting Officer, FortLeavenworth, and three (3) weeks prior to the bid opening date. If theexception(s) receives approval from the USDB Commandant or JRCF Commander, allbidders in receipt of the Invitation to Bid will be notified before the bidopening date. Exceptions to this instruction safter work commences willgenerally not be granted.

However, should unanticipated circumstances require arequest for exception, that request must be submitted in writing as soon as thecircumstances become known and in no case less than three working days prior tothe desired effective date of exception.

(END OF LOCAL INSTRUCTIONS)

SALIENT CHARACTERISTICS - PRODUCT DESCRIPTION

Artificial Intelligence Platform Based Inmate Call Monitoring System Software for the

Military Correctional Complex (MCC), United States Disciplinary Barracks (USDB)

Military Police Investigations (MPI), Midwest Joint Regional Correctional Facility (MWJRCF) MPI, and the Northwest Joint Regional Correctional Facility (NWJRCF) MPI.

22 April 2026

General:

Description of Requirement: This is a non-personal services contract to provide Artificial Intelligence Platform Based Inmate Call Monitoring System Software and technical support.

Background: The Military Correctional Complex (MCC), encompassing the USDB, MWJRCF, and the NWJRCF, consists of both military and civilian staff members and more than 650 inmates. The USDB is the only maximum-security facility within the Department of Defense. All non-privileged inmate communications are monitored to prevent criminal and unauthorized activity. Having the ability to utilize A.I. software and systems to assist in monitoring communications will increase staff and inmate safety as well as provide the ability to detect, deter, and investigate criminal and unauthorized activities.

Objectives: The purpose of the contract is to receive A.I. software and systems to assist in monitoring communications thereby increasing staff and inmate safety as well as providing the ability to detect, deter, and investigate criminal and unauthorized activities.

Scope: The product shall provide an A.I. software that is AWS Cloud GOV certified and interfaces with the Military Corrections Command existing ViaPath Phone system that provides real time security monitoring of inmate communications to identify suspicious language and disrupt illegal activity. Multi-language translation available that must include Spanish to English instant translation. Keyword searches through call transcripts to identify security risks through the product and manual searches as needed.

Salient Characteristics:

Item 1: The product shall provide Artificial Intelligence Platform Based Inmate Call Monitoring System Software to the USDB, MWJRCF, and NWJRCF in accordance with the salient characteristics listed below. The contractor shall provide applicable training to staff by way of Microsoft Teams.

Salient Characteristics:

Website accessible A.I., both semantic and agentic A.I., platform-based inmate call and messaging monitoring system software.

The software tool creates digital transcripts of all non-privileged inmate phone calls in near real time that scans the transcripts for searchable keywords.

Continuous inmate call monitoring feature that sends alerts to correctional facility staff when a keyword is found in a transcript.

The A.I. platform-based inmate call monitoring system software tool uses the transcripts to determine when new words are being used to replace old words for criminal activities, I.E.

"murder" and drug names.

Web-based user-friendly dashboard.

Ability to search words in multiple combinations.

24/7 continuous monitoring.

Extensive audit functions and link analysis availability.

Analysis of 100% of the volume in near real-time, high-accuracy rate of transcription, immediate translation from Spanish to English.

Product provides actionable intelligence to enhance staff and inmate safety and facility security.

The product shall be capable of providing daily law enforcement assistance (LEA) reports on incidents, issues, and criminal trends, train new and existing users on features, enhancements, and best practices, serve as the primary liaison with the Military Corrections Command and provide a user level outlet to identify technical issues to be addressed.

The product will monitor inmate communications in alignment with MCC defined priorities, generate LEA reports with evidentiary or operational value, provide targeted monitoring during emergency situations, collaborate with MCC investigators, and be available during the standard work week to provide investigative support.

Item 2 - The contractor shall provide deployment of a cloud-native platform integrated with existing communication systems. Ongoing support services, including monitoring assistance, daily/weekly reporting, and 24/7 escalation availability. Continuous platform improvements delivered as part of the subscription without additional licensing fees. Personnel (Account Manager and System Specialist) to support Agency priorities.

*** END OF NARRATIVE ***

Continuation of Supplies or Services and Prices/Costs

Additional Information/Notes

Item Supplies/Service Quanti ty

Unit Unit Price Amount

0001 A.I. Inmate Cloud-Based Communications Monitoring.

Catalog Number: AI Software

Product Service Code: 7B21

North American Industry Classification System (NAICS):

513210

Claimant Program Code: C9E

Pricing Arrangement: Firm Fixed Price

1 Each

Continuation of Description

Requirements A.I. Inmate Cloud-Based Communications Monitoring

Continuation of Inspection and Acceptance

Overall Contract Inspection/Acceptance Locations

0001 Inspection and Acceptance Location

Both Destination Instructions: "In accordance with the Salient Characteristics that follow at the end of the Local Instructions.

DoDAAC: W90LV6 CountryCode: USA

W6L2 US ARMY CORRECTIONS CMD

834 SABALU RD, BLDG 1154

FORT LEAVENWORTH, KS 66027-0000

UNITED STATES

William Lacuniak

Continuation of Deliveries or Performance

0001 Delivery Schedule Delivery On Or Before Delivery Date 17 Sep 2026

1 EachQuantity

Address and POC Ship To DoDAAC: W90LV6 CountryCode: USA

W6L2 US ARMY CORRECTIONS CMD

834 SABALU RD, BLDG 1154 FORT LEAVENWORTH, KS 66027-0000 UNITED

STATES

William Lacuniak

Special Handling/Notes FoB Details

Party to Pay Transportation Cost: Contractor

Point Type: Destination

Contract Clauses

FAR Clauses Incorporated by Reference

Number Title Effective Date

Alternate Deviation

Variation Effective Date

52.222-90 Addressing DEI Discrimination by Federal Contractors.

(Deviation 2026-O0040, Revision 1)

2026-04

DFARS Clauses Incorporated by Reference

Number Title Effective Date

Alternate Deviation

Variation Effective Date

252.203-7000 Requirements Relating to Compensation of Former DoD Officials.

2011-09

252.203-7002 Requirement to Inform Employees of Whistleblower Rights.

2022-12

252.204-7004 Antiterrorism Awareness Training for Contractors.

2023-01

252.204-7012 Safeguarding Covered Defense Information and Cyber Incident Reporting.

2024-05

252.204-7015 Notice of Authorized Disclosure of Information for Litigation Support.

2023-01

252.204-7018 Prohibition on the Acquisition of Covered Defense Telecommunications Equipment or Services.

2023-01

252.204-7020 NIST SP 800-171 DoD Assessment Requirements.

2023-11

252.204-7022 Expediting Contract Closeout. 2021-05

252.205-7000 Provision of Information to Cooperative Agreement Holders.

2024-10

252.216-7010 Postaward Debriefings for Task Orders and Delivery Orders.

2025-10

DFARS Clauses Incorporated by Full Text

Date

Alternate Deviation

Variation Effective Date

252.204-7021 Contractor Compliance with the Cybersecurity Maturity Model Certification Level Requirements.

2025-11

CONTRACTOR COMPLIANCE WITH THE CYBERSECURITY MATURITY MODEL

CERTIFICATION LEVEL REQUIREMENTS (NOV 2025)

(a) Definitions. As used in this clause-

"Controlled unclassified information" means information the Government creates or possesses, or information an entity creates or possesses for or on behalf of the Government, that a law, regulation, or Governmentwide policy requires or permits an agency to handle using safeguarding or dissemination controls (32 CFR 2002.4(h)).

"Current" means-

(1) With regard to Conditional Cybersecurity Maturity Model Certification (CMMC) Status-

(i) Not older than 180 days for Conditional Level 2 (Self) assessments and Conditional Level 2 (certified third-party assessment organization (C3PAO)) assessments, with-

(A) No changes in compliance with the requirements at 32 CFR part 170 since the Conditional CMMC Status date (see 32 CFR 170.16 and 170.17); and

(B) A corresponding affirmation of continuous compliance by an affirming official (see 32 CFR 170.4); and

(ii) Not older than 180 days for Conditional Level 3 (Defense Industrial Base Cybersecurity Assessment Center (DIBCAC)) assessments, with-

(A) No changes in compliance with the requirements at 32 CFR part 170 since the Conditional CMMC Status date (see 32 CFR 170.18); and

(B) A corresponding affirmation of continuous compliance by an affirming official;

(2) With regard to Final CMMC Status-

(i) Not older than 1 year for Final Level 1 (Self), with-

(A) No changes in compliance with the requirements at 32 CFR part 170 since the Final CMMC Status date (see 32 CFR 170.15); and

(B) A corresponding affirmation of continuous compliance, not older than 1 year, by an affirming official;

(ii) Not older than 3 years for Final Level 2 (Self) assessments and Final Level 2 (C3PAO) assessments, with-

(A) No changes in compliance with the requirements at 32 CFR part 170 since the Final CMMC Status date (see 32 CFR 170.16 and 170.17); and

(B) A corresponding affirmation of continuous compliance, not older than 1 year, by an affirming official; and

(iii) Not older than 3 years for Final Level 3 (DIBCAC) assessments, with-

(A) No changes in compliance with the requirements at 32 CFR part 170 since the Final CMMC Status date (see 32 CFR 170.18); and

(B) A corresponding affirmation of continuous compliance, not older than 1 year, by an affirming official; and

(3) With regard to affirmation of continuous compliance (32 CFR 170.22), not older than 1 year with no changes in compliance with the requirements at 32 CFR part 170.

"Cybersecurity Maturity Model Certification (CMMC) status" means the result of meeting or exceeding the minimum required score for the corresponding assessment. The potential statuses are as follows:

(1) Final Level 1 (Self).

(2) Conditional Level 2 (Self).

(3) Final Level 2 (Self).

(4) Conditional Level 2 (C3PAO).

(5) Final Level 2 (C3PAO).

(6) Conditional Level 3 (DIBCAC).

(7) Final Level 3 (DIBCAC).

"Cybersecurity Maturity Model Certification unique identifier (CMMC UID)" means 10 alpha-numeric characters assigned to each CMMC assessment and reflected in the Supplier Performance Risk System (SPRS) for each contractor information system.

"Federal contract information (FCI)" means information, not intended for public release, that is provided by or generated for the Government under a contract to develop or deliver a product or service to the Government. It does not include information provided by the Government to the public, such as on public websites, or simple transactional information, such as information necessary to process payments.

"Plan of action and milestones" means a document that identifies tasks to be accomplished. It details resources required to accomplish the elements of the plan, any milestones in meeting the tasks, and scheduled completion dates for the milestones, as defined in National Institute of Standards and Technology Special Publication 800-115 (32 CFR 170.21).

(b) Framework. The Cybersecurity Maturity Model Certification (CMMC) is a framework for assessing a contractor's compliance with applicable information security protections (see 32 CFR part 170).

(c) Duplication. The CMMC assessments will not duplicate efforts from any other comparable DoD assessment, except for rare circumstances when a reassessment may be necessary, for example, when there are indications of issues with cybersecurity and/or compliance with CMMC requirements.

(d) Requirements. The Contractor shall-

(1)(i) Have and maintain for the duration of the contract a current CMMC status at the following CMMC level, or higher: ____ Contracting Officer insert: CMMC Level 1 (Self); CMMC Level 2 (Self); CMMC Level 2 (C3PAO); or CMMC Level 3 (DIBCAC) for all information systems used in performance of the contract, task order, or delivery order that process, store, or transmit FCI or CUI; and

(ii) Consult 32 CFR 170.23 related to the flowdown of the CMMC requirements, and flow down the correct CMMC level to subcontracts and other contractual instruments;

(2) Only process, store, or transmit FCI or CUI on contractor information systems that have a CMMC status at the CMMC level required in paragraph (d)(1) of this clause, or higher;

(3) Complete on an annual basis, and maintain as current, an affirmation, by the affirming official (see 32 CFR 170.4), of continuous compliance with the requirements associated with the CMMC level required in paragraph (d)(1) of this clause in the Supplier Performance Risk System (SPRS) (https://piee.eb.mil) for each CMMC UID applicable to each of the contractor information systems that process, store, or transmit FCI or CUI and that are used in performance of the contract;

(4) Ensure all subcontractors and suppliers complete prior to subcontract award, and maintain on an annual basis, an affirmation, by the affirming official (see 32 CFR 170.4), of continuous compliance with the requirements associated with the CMMC level required for the subcontract or other contractual instrument for each of the subcontractor information systems that process, store, or transmit FCI or CUI and that are used in performance of the subcontract; and

(5) If the Contractor has a CMMC Status of Conditional, successfully close out a valid plan of action and milestones (32 CFR 170.21) to achieve a CMMC Status of Final.

(e) Reporting. The Contractor shall-

(1) Submit to the Contracting Officer-

(i) The CMMC UID(s) issued by SPRS for contractor information systems that will process, store, or transmit FCI or CUI during performance of the contract; and

(ii) Any changes in the CMMC UIDs generated in SPRS throughout the life of the contract, task order, or delivery order, if applicable;

(2) Enter into SPRS the results of a current self-assessment for each CMMC UID, not covered by a C3PAO assessment or DIBCAC assessment, applicable to each of the contractor information systems that process, store, or transmit FCI or CUI and that are used in performance of the contract; and

(3) Complete in SPRS on an annual basis and maintain as current an affirmation of continuous compliance by the affirming official (see 32 CFR 170.4) for each self-assessment, C3PAO assessment, or DIBCAC assessment required under the contract in SPRS.

(f) Subcontracts. The Contractor shall-

(1) Insert the substance of this clause, including this paragraph (f) and excluding paragraph (e) (1), in subcontracts and other contractual instruments, including those for the acquisition of commercial products or commercial services, excluding commercially available off-the-shelf items, if the subcontract or other contractual instrument will contain a requirement to process, store, or transmit FCI or CUI; and

(2) Prior to awarding a subcontract or other contractual instrument, ensure that the subcontractor has a current CMMC certificate or current CMMC status at the CMMC level that is appropriate for the information that is being flowed down to the subcontractor based on the requirements at 32 CFR 170.23.

(End of clause)

252.211-7003 Item Unique Identification and Valuation.

2023-01

ITEM UNIQUE IDENTIFICATION AND VALUATION (JAN 2023)

(a) Definitions. As used in this clause-

"Automatic identification device" means a device, such as a reader or interrogator, used to retrieve data encoded on machine-readable media.

"Concatenated unique item identifier" means-

(1) For items that are serialized within the enterprise identifier, the linking together of the unique identifier data elements in order of the issuing agency code, enterprise identifier, and unique serial number within the enterprise identifier; or

(2) For items that are serialized within the original part, lot, or batch number, the linking together of the unique identifier data elements in order of the issuing agency code; enterprise identifier; original part, lot, or batch number; and serial number within the original part, lot, or batch number.

"Data matrix" means a two-dimensional matrix symbology, which is made up of square or, in some cases, round modules arranged within a perimeter finder pattern and uses the Error Checking and Correction 200 (ECC200) specification found within International Standards Organization (ISO)/International Electrotechnical Commission (IEC) 16022.

"Data qualifier" means a specified character (or string of characters) that immediately precedes a data field that defines the general category or intended use of the data that follows.

"DoD recognized unique identification equivalent" means a unique identification method that is in commercial use and has been recognized by DoD. All DoD recognized unique identification equivalents are listed at https://www.acq.osd.mil/asda/dpc/ce/ds/unique-id.html.

"DoD item unique identification" means a system of marking items delivered to DoD with unique item identifiers that have machine-readable data elements to distinguish an item from all other like and unlike items. For items that are serialized within the enterprise identifier, the unique item identifier shall include the data elements of the enterprise identifier and a unique serial number. For items that are serialized within the part, lot, or batch number within the enterprise identifier, the unique item identifier shall include the data elements of the enterprise identifier; the original part, lot, or batch number; and the serial number.

" Enterprise " means the entity (e.g., a manufacturer or vendor) responsible for assigning unique item identifiers to items.

" Enterprise identifier" means a code that is uniquely assigned to an enterprise by an issuing agency.

"Government's unit acquisition cost" means-

(1) For fixed-price type line, subline, or exhibit line items, the unit price identified in the contract at the time of delivery;

(2) For cost-type or undefinitized line, subline, or exhibit line items, the Contractor's estimated fully burdened unit cost to the Government at the time of delivery; and

(3) For items produced under a time-and-materials contract, the Contractor's estimated fully burdened unit cost to the Government at the time of delivery.

"Issuing agency" means an organization responsible for assigning a globally unique identifier to an enterprise, as indicated in the Register of Issuing Agency Codes for ISO/IEC 15459, located at http://www.aimglobal.org/?Reg_Authority15459.

"Issuing agency code" means a code that designates the registration (or controlling) authority for the enterprise identifier.

"Item" means a single hardware article or a single unit formed by a grouping of subassemblies, components, or constituent parts.

" Lot or batch number" means an identifying number assigned by the enterprise to a designated group of items, usually referred to as either a lot or a batch, all of which were manufactured under identical conditions.

"Machine-readable" means an automatic identification technology media, such as bar codes, contact memory buttons, radio frequency identification, or optical memory cards.

"Original part number" means a combination of numbers or letters assigned by the enterprise at item creation to a class of items with the same form, fit, function, and interface.

"Parent item" means the item assembly, intermediate component, or subassembly that has an embedded item with a unique item identifier or DoD recognized unique identification equivalent.

"Serial number within the enterprise identifier" means a combination of numbers, letters, or symbols assigned by the enterprise to an item that provides for the differentiation of that item from any other like and unlike item and is never used again within the enterprise.

"Serial number within the part, lot, or batch number" means a combination of numbers or letters assigned by the enterprise to an item that provides for the differentiation of that item from any other like item within a part, lot, or batch number assignment.

"Serialization within the enterprise identifier" means each item produced is assigned a serial number that is unique among all the tangible items produced by the enterprise and is never used again. The enterprise is responsible for ensuring unique serialization within the enterprise identifier.

"Serialization within the part, lot, or batch number" means each item of a particular part, lot, or batch number is assigned a unique serial number within that part, lot, or batch number assignment. The enterprise is responsible for ensuring unique serialization within the part, lot, or batch number within the enterprise identifier.

"Type designation" means a combination of letters and numerals assigned by the Government to a major end item, assembly or subassembly, as appropriate, to provide a convenient means of differentiating between items having the same basic name and to indicate modifications and changes thereto.

"Unique item identifier" means a set of data elements marked on items that is globally unique and unambiguous. The term includes a concatenated unique item identifier or a DoD recognized unique identification equivalent.

"Unique item identifier type" means a designator to indicate which method of uniquely identifying a part has been used. The current list of accepted unique item identifier types is maintained at https://www.acq.osd.mil/asda/dpc/ce/ds/unique-id.html.

(b) The Contractor shall deliver all items under a contract line, subline, or exhibit line item.

(c) Unique item identifier.

(1) The Contractor shall provide a unique item identifier for the following:

(i) Delivered items for which the Government's unit acquisition cost is $5,000 or more, except for the following line items:

Contract Line, Subline, or

Exhibit Line Item Number Item Description

(ii) Items for which the Government's unit acquisition cost is less than $5,000 that are identified in the Schedule or the following table:

Contract Line, Subline, or

Exhibit Line Item Number Item Description

(If items are identified in the Schedule, insert "See Schedule in this table.)

(iii) Subassemblies, components, and parts embedded within delivered items, items with warranty requirements, DoD serially managed reparables and DoD serially managed nonreparables as specified in Attachment Number ____.

(iv) Any item of special tooling or special test equipment as defined in FAR 2.101 that have been designated for preservation and storage for a Major Defense Acquisition Program as specified in Attachment Number ____.

(v) Any item not included in (i), (ii), (iii), or (iv) for which the contractor creates and marks a unique item identifier for traceability.

(2) The unique item identifier assignment and its component data element combination shall not be duplicated on any other item marked or registered in the DoD Item Unique Identification Registry by the contractor.

(3) The unique item identifier component data elements shall be marked on an item using two dimensional data matrix symbology that complies with ISO/IEC International Standard 16022, Information technology - International symbology specification - Data matrix; ECC200 data matrix specification.

(4) Data syntax and semantics of unique item identifiers. The Contractor shall ensure that-

(i) The data elements (except issuing agency code) of the unique item identifier are encoded within the data matrix symbol that is marked on the item using one of the following three types of data qualifiers, as determined by the Contractor:

(A) Application Identifiers (AIs) (Format Indicator 05 of ISO/IEC International Standard 15434), in accordance with ISO/IEC International Standard 15418, Information Technology - EAN/UCC Application Identifiers and Fact Data Identifiers and Maintenance and ANSI MH 10.8.2 Data Identifier and Application Identifier Standard.

(B) Data Identifiers (DIs) (Format Indicator 06 of ISO/IEC International Standard 15434), in accordance with ISO/IEC International Standard 15418, Information Technology - EAN/UCC Application Identifiers and Fact Data Identifiers and Maintenance and ANSI MH 10.8.2 Data Identifier and Application Identifier Standard.

(C) Text Element Identifiers (TEIs) (Format Indicator 12 of ISO/IEC International Standard 15434), in accordance with the Air Transport Association Common Support Data Dictionary;

and

(ii) The encoded data elements of the unique item identifier conform to the transfer structure, syntax, and coding of messages and data formats specified for Format Indicators 05, 06, and 12 in ISO/IEC International Standard 15434, Information Technology - Transfer Syntax for High Capacity Automatic Data Capture Media.

(5) Unique item identifier.

(i) The Contractor shall-

(A) Determine whether to-

(1) Serialize within the enterprise identifier;

(2) Serialize within the part, lot, or batch number; or

(3) Use a DoD recognized unique identification equivalent (e.g. Vehicle Identification Number);

and

(B) Place the data elements of the unique item identifier (enterprise identifier; serial number;

DoD recognized unique identification equivalent; and for serialization within the part, lot, or batch number only: original part, lot, or batch number) on items requiring marking by paragraph (c)(1) of this clause, based on the criteria provided in MIL-STD-130, Identification Marking of U.

S. Military Property, latest version;

(C) Label shipments, storage containers and packages that contain uniquely identified items in accordance with the requirements of MIL-STD-129, Military Marking for Shipment and Storage, latest version; and

(D) Verify that the marks on items and labels on shipments, storage containers, and packages are machine readable and conform to the applicable standards. The contractor shall use an automatic identification technology device for this verification that has been programmed to the requirements of Appendix A, MIL-STD-130, latest version.

(ii) The issuing agency code-

(A) Shall not be placed on the item; and

(B) Shall be derived from the data qualifier for the enterprise identifier.

(d) For each item that requires item unique identification under paragraph (c)(1)(i), (ii), or (iv) of this clause or when item unique identification is provided under paragraph (c)(1)(v), in addition to the information provided as part of the Material Inspection and Receiving Report specified elsewhere in this contract, the Contractor shall report at the time of delivery, as part of the

Material Inspection and Receiving Report, the following information:

(1) Unique item identifier.

(2) Unique item identifier type.

(3) Issuing agency code (if concatenated unique item identifier is used).

(4) Enterprise identifier (if concatenated unique item identifier is used).

(5) Original part number (if there is serialization within the original part number).

(6) Lot or batch number (if there is serialization within the lot or batch number).

(7) Current part number (optional and only if not the same as the original part number).

(8) Current part number effective date (optional and only if current part number is used).

(9) Serial number (if concatenated unique item identifier is used).

(10) Government's unit acquisition cost.

(11) Unit of measure.

(12) Type designation of the item as specified in the contract schedule, if any.

(13) Whether the item is an item of Special Tooling or Special Test Equipment.

(14) Whether the item is covered by a warranty.

(e) For embedded subassemblies, components, and parts that require DoD item unique identification under paragraph (c)(1)(iii) of this clause or when item unique identification is provided under paragraph (c)(1)(v), the Contractor shall report as part of the Material Inspection and Receiving Report specified elsewhere in this contract, the following information:

(1) Unique item identifier of the parent item under paragraph (c)(1) of this clause that contains the embedded subassembly, component, or part.

(2) Unique item identifier of the embedded subassembly, component, or part.

(3) Unique item identifier type.**

(4) Issuing agency code (if concatenated unique item identifier is used).**

(5) Enterprise identifier (if concatenated unique item identifier is used).**

(6) Original part number (if there is serialization within the original part number).**

(7) Lot or batch number (if there is serialization within the lot or batch number).**

(8) Current part number (optional and only if not the same as the original part number).**

(9) Current part number effective date (optional and only if current part number is used).**

(10) Serial number (if concatenated unique item identifier is used).**

(11) Description.

** Once per item.

(f) The Contractor shall submit the information required by paragraphs (d) and (e) of this clause as follows:

(1) End items shall be reported using the receiving report capability in Wide Area WorkFlow (WAWF) in accordance with the clause at 252.232-7003. If WAWF is not required by this contract, and the contractor is not using WAWF, follow the procedures at http://dodprocurementtoolbox.com/site/uidregistry/.

(2) Embedded items shall be reported by one of the following methods-

(i) Use of the embedded items capability in WAWF;

(ii) Direct data submission to the IUID Registry following the procedures and formats at http://dodprocurementtoolbox.com/site/uidregistry/; or

(iii) Via WAWF as a deliverable attachment for exhibit line item number (fill in) ____, Unique

Item Identifier Report for Embedded Items, Contract Data Requirements List, DD Form 1423.

(g) Subcontracts. If the Contractor acquires by subcontract, any item(s) for which item unique identification is required in accordance with paragraph (c)(1) of this clause, the Contractor shall include this clause, including this paragraph (g), in the applicable subcontract(s), including subcontracts for commercial products or commercial services.

(End of clause)

252.232-7006 Wide Area WorkFlow Payment Instructions.

WIDE AREA WORKFLOW PAYMENT INSTRUCTIONS (JAN 2023)

"Department of Defense Activity Address Code (DoDAAC)" is a six position code that uniquely identifies a unit, activity, or organization.

"Document type" means the type of payment request or receiving report available for creation in Wide Area WorkFlow (WAWF).

"Local processing office (LPO)" is the office responsible for payment certification when payment certification is done external to the entitlement system.

"Payment request" and "receiving report" are defined in the clause at 252.232-7003, Electronic Submission of Payment…