WOMEN-OWNED SMALL

BUSINESS (WOSB)

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL PRODUCTS AND COMMERCIAL SERVICES

1. REQUISITION NUMBER PAGE 1 OF

2. CONTRACT NUMBER 3. AWARD/EFFECTIVE

DATE

4. ORDER NUMBER 5. SOLICITATION NUMBER 6. SOLICITATION ISSUE

DATE

7. FOR SOLICITATION

INFORMATION CALL:

a. NAME b. TELEPHONE NUMBER (No collect calls)

8. OFFER DUE DATE/

LOCAL TIME

9. ISSUED BY

13b. RATING

14. METHOD OF SOLICITATION

CODE

15. DELIVER TO 16. ADMINISTERED BY CODE

18a. PAYMENT WILL BE MADE BY CODE17a. CONTRACTOR/

OFFEROR

CODE

FACILITY

CODE

CODE

TELEPHONE NUMBER

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT SUCH ADDRESS IN

OFFER

18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a UNLESS BLOCK

BELOW IS CHECKED

REQUEST

FOR QUOTE

(RFQ)

INVITATION

FOR BID

(IFB)

REQUEST

FOR

PROPOSAL

(RFP)

SEE ADDENDUM

19.

ITEM NUMBER

20.

SCHEDULE OF SUPPLIES/SERVICES

21.

QUANTITY

22.

UNIT

23.

UNIT PRICE

24.

AMOUNT

(Use Reverse and/or Attach Additional Sheets as Necessary)

25. ACCOUNTING AND APPROPRIATION DATA 26. TOTAL AWARD AMOUNT (For Government Use Only)

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN

COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH

AND DELIVER ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND

ON ANY ADDITIONAL SHEETS SUBJECT TO THE TERMS AND CONDITIONS

SPECIFIED

29. AWARD OF CONTRACT: REFERENCE OFFER

DATED . . YOUR OFFER ON SOLICITATION

(BLOCK 5), INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE

SET FORTH HEREIN, IS ACCEPTED AS TO ITEMS:

30a. SIGNATURE OF OFFEROR/CONTRACTOR

30b. NAME AND TITLE OF SIGNER (Type or print) 30c. DATE SIGNED

31a. UNITED STATES OF AMERICA (SIGNATURE OF CONTRACTING OFFICER)

31b. NAME OF CONTRACTING OFFICER (Type or print) 31c. DATE SIGNED

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

STANDARD FORM 1449 (REV. 11/2021)

Prescribed by GSA - FAR (48 CFR) 53.212

10. THIS ACQUISITION IS UNRESTRICTED OR

NORTH AMERICAN

INDUSTRY CLASSIFICATION

STANDARD (NAICS):

SIZE STANDARD:

13a. THIS CONTRACT IS A

RATED ORDER UNDER

THE DEFENSE PRIORITIES

AND ALLOCATIONS

SYSTEM - DPAS (15 CFR 700)

SET ASIDE: % FOR:

11. DELIVERY FOR FREE ON

BOARD (FOB) DESTINATION

UNLESS BLOCK IS MARKED

SEE SCHEDULE

12. DISCOUNT TERMS

ARE ARE NOT ATTACHED

ARE ARE NOT ATTACHED

27a. SOLICITATION INCORPORATES BY REFERENCE (FEDERAL ACQUISITION REGULATION) FAR 52.212-1, 52.212-4. FAR 52.212-3

AND 52.212-5 ARE ATTACHED. ADDENDA

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA

8(A)

ECONOMICALLY

DISADVANTAGED

WOMEN-OWNED SMALL

BUSINESS (EDWOSB)

SERVICE-DISABLED

VETERAN-OWNED

SMALL BUSINESS

(SDVOSB)

HUBZONE SMALL

BUSINESS

SMALL BUSINESS

NOTE: OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, AND 30.

Solicitation/Contract Form Bridge Contract Hematology System

Product Service Code: 6632

HT940626QE074

Supplies or Services & Prices or Costs Additional Information/Notes

*** NOTE: PROPOSALS ARE NOT BEING REQUESTED AS A RESULT OF THIS SOLICITATION ***

Item Supplies / Services Quantity Unit Unit Price Amount

CBC Blood Count Analyzers and Reagents-Instruments, Service and training. 1XN 2000(Winn ACH). 1 XN 550 (Hawks TMC), 1XN 550(RH Clinic) Test Volume 26,000. Department of Pathology, Winn Army Community Hospital, Hawks Medical Clinic and Richmond Hill Medical Home, Fort Stewart, Georgia. Period Performance: 1 October 2026-30 September 2027. This is Cost PerReportable.

Pricing Arrangement: Firm Fixed Price

12 Months

Additional Descriptive Data:

Additional Information: Item text: Hematology Analyzers: XN3100-201 with Wagon, CellaVision DI-60 with One (1) Remote Review License, and Service with On-Site Calibration. Includes XN Reagents, Controls, and Calibration Materials. POP 1 OCT 2026 - 30 SEPT 2027 BASE YEAR

Description/Specifications/Statement of Work

PERFORMANCE WORK STATEMENT (PWS)

1. GENERAL.

1.1. The contractor shall provide USA MEDDAC Ft. Stewart, GA Department of Pathology with4 fully automated FDA approved Complete Blood Counter (CBC) analyzer systems(inclusive of instruments, ancillary equipment, maintenance, services, repairs, support, parts and training as required to maintain the systems in optimal operating condition and any installation and removal, at no extra cost to the Government). A primary and backup analyzer system will be located at Winn Army Community Hospital with the remaining two systems at Hawks Troop Medical Clinic and Richmond Hill Medical Home under the management of the Department of Pathology. Service shall include installation, correlation/method comparison, preventive maintenance, and all troubleshooting. Funding will be allocated annually subject to the availability of funds.

1.2. PERSONNEL. N/A

1.3. PHYSICAL SECURITY.

1.3.1. Contractor personnel or any representative of the contractor entering Fort Stewart shall abide by all security regulations and shall be subject to security checks.

1.3.2. Contractor personnel shall report to Hospital Medical Maintenance, Building 302, to obtain a temporary vendor security badge PRIOR to commencing all on- site visits, service or repairs.

1.4. QUALITY CONTROL.

1.4.1. The contractor shall be responsible to ensure that the quality of service and materials provided under this contract meet or exceed the performance work statement and Quality Assurance Surveillance Plan (QASP).

1.5. PERFORMANCEASSESSMENT.

1.5.1. The government will evaluate the contractor's performance under this contract using the method of surveillance specified in Technical Exhibit 1, Quality Assurance Surveillance Plan (QASP), for acceptable quality levels (AQL). When an observation indicates defective performance, the Contracting Officer's Representative (COR) will notify the Contracting Officer (KO) immediately so that appropriate actions may betaken to correct the deficiency.

1.6. HOURSOF OPERATION.

1.6.1. Normal Hours. Normal hours of operation are 7:30am to 4:30pm EST, Monday through Friday.

1.6.2. The Contractor shall provide equipment maintenance service/direct customer service and support, 24 hours/7 days a week, to include hotline telephone service, and direct connect remote instrument diagnostic capability to assist operators in correcting equipment operation problems.

1.6.3. Recognized Holidays. Facility observes all federal holidays. Federal Holidays are as follows:

1 Jan New Year's Day

3rdMonday in Jan Martin Luther King Jr. Birthday

3rd Monday in February President's Day

Last Monday in May Memorial Day

4th July Independence Day

1st Monday in Sep Labor Day

2nd Monday in Oct Columbus Day

11 Nov Veteran's Day

4thThursday in Nov Thanksgiving Day

25 Dec Christmas Day

2. DEFINITIONS.

2.1. STANDARD DEFINITIONS.

2.1.1. Acceptable Quality Level (AQL). The AQL is the maximum percent defective that, for the purposes of sampling inspections, can be considered satisfactory or the acceptable level of performance before the Government will reject a service.

2.1.2. Contracting Officer (KO). A person duly appointed with the authority to enter into and administer contracts on behalf of the U.S. Government.

2.1.3. Contracting Officer Representative (COR). An individual designated by the contracting officer to act as his representative to assist in administering a contract. The source and authority for a COR are contained in the written letter of designation.

2.1.4. Customer Complaint. A means of documenting certain kinds of contract service problems. A government program that is explained to every organization that receives service under this contract which is used to evaluate contractor's performance.

2.1.5. Defective Service. A service output that does not meet the standard of performance associated with

2.1.6. Performance Assessment (PA). These actions taken by the government to assure services meet the requirements of the Performance Work Statement (PWS) and all other service outputs.

2.1.7. Quality Assurance Surveillance Plan (QASP). An organized written document used for the quality assurance surveillance. The document contains specific methods to perform surveillance of the contractor.

2.1.8. Quality Control. Those actions taken by a contractor to control the performance of services so that they meet the requirements of the PWS.

2.2. TECHNICAL DEFINITIONS.

2.2.1. Material Safety Data Sheets (MSDS). A document that contains information on the potential health effects of exposure to chemicals, other potentially dangerous substances, and on safe working measures when handling chemical or hazardous substances.

2.2.2. Preventive Maintenance Checks and Services(PMCS). Those actions taken by the contractor in order to maintain equipment in this contract in a "like new" operational condition in accordance with the manufacturer's specifications. Accomplished by providing systematic inspections, Calibration Verification Certification (CVC), detection and correction of incipient failures before they occur or before they develop into a major defect, replacement of cracked or worn buttons, covers, etc. Cleaning and lubrication will be included as needed on all internal parts as well as external cleaning after services are performed.

2.2.3. Service Call. Those actions taken by the government to initiate services for repairs that require a representative of the contractor to visit the laboratory to perform service, repairs, or maintenanceby the contractor in order to restore the equipment under contract to operational.

2.2.4. Troubleshooting. These actions taken by the contractor to assist the government equipment operator in resolving anytechnical deficiencies with the equipment under the contract to maintain or restore the equipment to operational.

3. GOVERNMENTFURNISHED PROPERTY AND SERVICES.

3.1. FACILITIES. The Government will furnish the facilities for set-up and operation of the Contractor equipment analyzers required in support the SOW. The Contractors hall not alter the facilities without written approval of the Contracting Officer. The Contractor shall return the facilities to the Government in the same condition as received, fair wear and tear and approved modifications excepted. These facilities shall be used for performance of this contract only.

3.2. EQUIPMENT. No equipment will be provided.

3.3. MATERIALS. No materials will be provided.

3.4. SERVICES. The Government will provide the following services at no cost to the Contractor:

3.4.1. The Government will provide the normal range of facility utilities (e.g. electricity, water, heating, refuse collection, etc.) and other utilities necessary for the full functionality of the equipment/instrumentation.

3.4.2. Security: Police and Fire Protection, as is provided other personnel.

3.4.3. Emergency Healthcare for Contractor employees. The MTF will provide emergency health care for injuries or life threatening medical emergencies occurring while on duty. The Contractor shall reimburse the Government for such services as billed bythe MTF, unless the Contractor employee is otherwise authorized to receive such services at no cost (e.g., is retired military or is a military dependent).

4. CONTRACTORFURNISHED ITEMS AND SERVICES.

4.1. The contractor shall furnish all materials required to perform maintenance, repairs, or service. Any costs associated with travel, lodging or meals to conduct services or preventive maintenance will be at the cost of the contractor.

4.2. Completion of Service. Upon completion of services, a written service report will be provided to the Biomedical Maintenance / Clinical Engineering Manager and lab supervisor. The service report shall be completely filled out, provide detailed information regarding the cause of equipment malfunction and corrective action taken, to include the time required to complete the work, price of labor (hourly rate), and a list of parts replaced with a price for each part. In the event that all information is not available to contractor's representative when services are performed, the initial service report shall include all information stated above except for price. Contractor shall provide the balance of the required information in writing to the Department of Pathology as soon as possible.

4.3. Contractor shall provide new and/or refurbished parts that are certified and documented to meet Original Equipment Manufacturers (OEM) specifications on all manufacturers' mandatory modifications and apply recalls by FDA.

4.4. Contractor shall provide new or updated user manuals when changes are made at no additional cost.

4.5. Contractor shall furnish all applicable MSDS for reagents, equipment and supplies utilized under this contract at no additional cost.

4.6. Contractor shall deliver 4 Automated Complete Blood Count System and Components with the following test capabilities:

Required Tests (CBC) U nit s

Other Required Tests U nit s

White Blood Cells (WBC) #/L Reticulocytes #/L

Red Blood Cells (RBC) #/L Reticulocyte % %

Platelets (PLT) #/ L

Nucleated Red Blood Cells (NRBC) #/ L

Hemoglobin (HGB) g/ dL

Body Fluid Count and 2-part Differential for Mononuclear and Polynuclear cell lines.

IG (immature granulocyte)

IG (immature granulocyte) uL uL

Hematocrit (HCT) %

Mean Corpuscular Hemoglobin pg

(MCH)

Mean Corpuscular Volume (MCV) fL

Mean Corpuscular Hemoglobin g/ dL

Concentration (MCHC)

Mean Platelet Volume

(MPV)

fL

Red Cell Distribution Width (RDW)

Lymphocytes Number

(LYMPH #)

Lymphocyte Percentage

(LYMPH %)

Monocytes Number

(MONO #)

Monocytes Percentage

(MONO %)

Neutrophils Number

(NEUT #)

Neutrophils Percentage

(NEUT %)

Eosinophils Number (EOS #) #

Eosinophils Percentage (EOS %) %

Basophil Number (BASO #) #

Basophil Percentage (BASO %) %

5. SPECIFIC TASKS.

5.1. Contractor shall provide on-site technical support for installation of analyzers to bring the system to a fully operational status at the hospital and outlying clinics

5.2. Contractor shall ensure Method Validation will be conducted in accordance with method validation protocols established by the Department of Pathology's Quality Management Program (these protocols are in concordance with applicable standards as described by the Clinical Laboratory Standards Institute (CLSI) and/ or required by the College of American Pathologists (CAP)).

5.3. The contractor shall ensure proper packaging of reagents, supplies, and equipment and that they are shipped at proper refrigerated or frozen temperatures according to manufacturer specifications.

5.4. Contractor shall ensure all shipments arrive Monday through Friday between the hours of7:30am and 4:00pm EST; excluding holidays and weekends according to paragraph1.6.2 above.

5.5. The contractor shall respond to phone calls regarding shipment discrepancies the same day of notification and discrepancy will be corrected within 24 hours.

5.6. Contractor shall provide customer notification of updates on any reagents in writing within 5 business days and ensure continuity of services and availability of reagents during reagent revision when required.

5.7. Reagents must meet quality control guidelines set forth by manufacturer.

5.8. The contractor shall provide all software upgrades at no additional cost.

5.9. The contractor shall notify the laboratory if there is a recall on any reagents or equipment within 24 hours.

5.10. Contractor shall respond to service calls within two hours when an analyzer is not working or the morning of the next duty day if after 5:00pm Monday through Friday

5.11 Contractor shall arrive onsite within 24 hours of service call being placed or the morning of the next duty day if after 5:00pm Monday through Friday if telephonic troubleshooting is unsuccessful and correct deficiencies within 24 hours after arrival on-site.

5.12. Contractor shall perform all on-site scheduled service as specified by the manufacturers published maintenance manuals necessary to keep system in good condition including lubrications, cleaning(other than those performed at the operator's level), calibrations, and diagnostics, during the lease period at no additional cost.

5.13. The contractor shall provide 24 hour telephonic troubleshooting.

5.14. The system will come equipped to perform continuous, random and statistic analysis; capable of real time or (on-line) Quality Control. Provide QC assessment with comparison to a peer group on a daily, weekly, and monthly basis, to include QC Lot#, means, ranges, SD, and CVs%. Changing or modifying existing QC parameters can be performed during instrument operation (e.g. "on-the-fly").

5.15. The system must have positive patient identification via on-board barcode scanner.

5.16. The system must have a Five Part Differential that includes neutrophils, lymphocytes, monocytes, eosinophils and basophils, cell-by-cell analyses; reportable range from 0 to 300 Thousand cells/uL and indicators of white cell viability; in absolute and percentage numbers. The accuracy of the automated differential as compared to manual differentials will be no less than the accuracy of the current system.

5.17. The system must be able to determine hemolysis, icterus, and turbidity levels without additional patient sample, reagents, consumables, and no affect on throughput. It must flag only assays affected by the interferent. It must send flags and level to the LIS or data management system.

5.18. The system will have an interface that is compatible to the government system (CHCS)and will be able to Recognize CHCS generated bar-code labels (code 128)on primary sample tubes.

5.19. The system will provide surface plots to review WBC differential populations, NRBC and Retic populations.

5.20. The system must be capable of performing automatic NRBC differential and automatic correction of the white blood cell count, and capable of enumerating Nucleated Red Blood Cells (NRBCs) accurately without the need for additional on board Reagents

5.21. The system initial startup from the shutdown shall not exceed 20 minutes.

6. INFORMATIONTECHNOLOGY (IT) CONNECTIVITY.

6.1. TELECOMMUNICATION.

6.1.1. All contractor systems that will communicate with DoD systems will interconnect through the established MHS B2B gateway. For all Web applications, contractors will connect to a DISA-established Web DMZ.

6.1.2. In accordance with contract requirements, MCS contractors will connect to the B2Bgateway via a contractor procured Internet Service Provider (ISP) connection. Contractors will assume all responsibility for establishing and maintainingtheir connectivity to the B2B gateway. This will include acquiring and maintaining the circuit to the B2B gateway and acquiring a Virtual Private Network (VPN) device compatible with the MHS VPN device.

6.1.3. Contractors shall comply with DoD guidance regarding allowable ports, protocols and risk mitigation strategies.

6.1.4. All costs for VPN hardware and software will be incurred by the contractor.

6.2. DEFENSEINFORMATION ASSURANCE CERTIFICATIONS and ACCREDITATIONPROCESS (DIACAP) IMPLEMENTATION PLAN.

6.2.1. The contractor shall provide all required information to support and initiate the Risk Management Framework Implementation Plan. This will also include the required information for the System Identification profile.

6.2.2. The contractor shall provide information for the Risk Assessment Analysis to the government for all networking IT applicability.

6.3. SECURITY CLEARANCES.

6.3.1. Personnel to be assigned to an ADP/IT position must undergo a successful security screening before being provided access to DoD information technology resources. Prior to an employee being granted interim access to DoD sensitive information, USA MEDDAC Ft. Stewart must receive notification that the Office of Personnel Management (OPM) has scheduled the employees' investigation. This requirement must be met by contractors, subcontractors and other who have access to information systems containing information protected by the Privacy Act of 1974 and protected health information under HIPAA. Background checks are required for all ADP/IT personnel who receive, store, display, or transit sensitive information. Employees must have at a minimum an ADP Sensitivity Designation of Level II to access the DoD Network.

6.3.2. Allcontractors that use the DoD gateways to access government systems must submita DISA Form 41 or equivalent in accordance with Contracting Officer guidance.In addition, Form 41s are required for each system administrator responsiblefor each host-to-host interface. Contractors shall complete and submit to TMAone Form 41 for their organization, attached to which shall be a listing ofthose individuals for whom background checks have been completed, submitted tothe Office of Personnel Management (OPM), and acknowledgements have beenreceived from OPM that the applications are complete and are pending action byOPM.

The request must clearly delineate the ports and protocols used for eachIP address. The contractor shall complete the form and submit to the governmentfor final processing.

6.3.3. All costs for the background investigations arethe responsibility of the contractor.

6.4. BUSINESSto BUSINESS (B2B) REQUIREMENTS for CONTRACTOR.

6.4.1. General Security Requirements.

6.4.1.1. The Contractor shall establish appropriate administrative, technical, and physical safeguards to protect any and all Government data, to ensure the confidentiality, integrity, and availability of government data. As a minimum, this shall include provisions for personnel security, electronic security and physical security as listed in the sections that follow.

6.4.2. Personnel Security.

6.4.2.1. The contractor shall comply with DoD Directive 8500.1, "Information Assurance(IA)," DoD Instruction 8500.2, "Information Assurance (IA) Implementation," DoD Directive 5400.11, "DoD Privacy Program," DoD 6025.18-R, "DoD Health Information Privacy Regulation," DoD5200.2-R, "Personnel Security Program Requirements." AR25-1, "Army Knowledge Management and Information Technology", AR 25-2 "Information Assurance." And local regulations as deemed appropriate by the activity Information Assurance personnel.

6.4.2.2. Contractor'sresponsibilities for ensuring personnel security include, but are not limitedto, meeting the following requirements:

a. Followthe Army guidelines for submittal of Automated Data Processor/InformationTechnology (ADP/IT) background investigations and ensure all contractorpersonnel are designated as ADP/IT-I, ADP/IT-II, or ADP/IT-III where theirduties meet the criteria of the position sensitivity designations outlined in

AR25-2.

b. Initiate, maintain, and document personnel security investigations appropriate to the individual's responsibilities and required access to Information Systems within the logical boundaries of the facility LAN.

c. Immediatelyreport to the USA MEDDAC Ft. Stewart Personnel Security Officer, Mr. EmeryVickers, 912-435-6540 and deny access to any automated information system(AIS), network, or information if a contractor employee filling a sensitiveposition receives an unfavorable adjudication, if information that would resultin an unfavorable adjudication becomes available, or if directed to do so bythe appropriate government representative for any reason.

d. Ensurethat all contractor personnel receive information assurance (IA) trainingbefore being granted access to DoD AISs/networks and information.

6.4.3. Electronic Security.

6.4.3.1. ContractorInformation Systems (IS)/networks that are involved in the operation of systemsin support of USA MEDDAC Ft. Stewart shall operate in accordance withcontrolling laws, regulations, DoD, Army, and local policy.

6.4.3.2. Certification& Accreditation (C&A) requirements apply to all DoD and contractor'sIS/networks that receive process, display, and store or transmit DoDinformation. The contractor shallcomply with the C&A process for safeguarding IS. Certification is thedetermination of the appropriate level of protection required for IS/networks.Certification also includes a comprehensive evaluation of the technical andnon-technical security features and countermeasures required for each system/network.

6.4.3.3. Accreditation is the formal approval by the government to operate the contractor's IS/networks in a particular security mode using a prescribed set of safeguards at an acceptable level of risk. In addition, accreditation allows IS/networks to operate within the given operational environment with stated interconnections; and with appropriate level of protection for the specified period.

6.4.3.4. The contractor shall comply with C&A requirements, as specified by the government that meet appropriate DoD Information Assurance requirements. The C&A requirements shall be met before the contractor's system is authorized to access DoD data or interconnect with any DoD IS/network that receives, processes, stores, displays or transmits DoD data. The contractor shall ensure the proper contractor support staff is available to participate in all phases of the C&A process.

They include, but are not limited to:

a. Attending and supporting C&A meetings withthe government.

b. Supporting/conducting the vulnerability mitigation process.

c. Supporting the C&A Team during system security testing.

6.4.3.5. Contractors must confirm that there is/networks are locked down prior to initiating testing.

a. Conformation of system lock down shall be agreed upon during the definition of the C&A boundary and be signed and documented as part of the System Security Authorization Agreement (SSAA).

b. Lockingdown the system means that there shall be no changes made to the configurationof the system (within the C&A boundary) during the C&A process.

6.4.3.6. Anyre-configuration or change in the system during the C&A testing process will require a re-baselining of the systemand documentation of system changes.

6.4.3.7. Amitigation strategies include security updates, service packs, and changes tooperating procedures as physical and cyber vulnerabilities are detected.Operating system, routers, servers, development platforms and the applicationbeing delivered to the government shall be in compliance with all knownapplicable Department of Defense Computer Emergency Response Team (DoD-CERT)Alert, Bulletin, and Technical Advisory Notices published during the past 36months.

6.4.3.8. Disposingof Electronic Media. Vendors shall follow the DoD standards, procedures, anduse approved products to dispose of unclassified hard drives and otherelectronic media, as appropriate, in accordance with DoD Memorandum"Disposition of Unclassified Computer Hard Drives," June 4, 2001.Vendors are required to also follow DoD guidance on sanitization of otherinternal and external media components in DODI 8500.2 "InformationAssurance (IA) Implementation," 6 Feb 2003 (see PECS-1 in enclosure 4Attachment 5) and DoD 5220.22-M "Industrial Security Program OperatingManual (NISPOM)," (Chapter 8).

6.4.3.9. Information Assurance Vulnerability Management (IAVM) The contractor shall implement an information assurance vulnerability management program for all AIS and corresponding subnets that are connected to or intermittently connect to Army networks. The program shall meet the scope and intent of AR25-2 and USA MEDDAC Ft. Stewart IA policies to provide protection against known threats and vulnerabilities. Compliance with Army IAVMalerts and bulleting is required for these systems and shall be completed within the specified timeframe.

6.4.4. Information Systems (IS)/Networks Physical Security.

6.4.4.1. The contractor shall employ physical security safeguards for IS/Networks involved in processing or storage of Government Data to prevent the unauthorized access, disclosure, modification, destruction, use, etc., and to otherwise protect the confidentiality and ensure use conforms with DoD regulations.

In addition, the contractor will support a Physical Security Audit performed by the Government of the contractor's internal information management infrastructure.

The MHS Physical Security AuditMatrix is available at: http://www.tricare.osd.mil/tmis_new/Policy/PSA_Matrix_%20012304%200930%20clean%20ver . sion.xls The contractor shall correct anydeficiencies identified by the Government of the contractor's physical securityposture.

6.4.5. SpecialRequirements for Protected Health Information. Whenever a contract is awardedthat requires the vendor to collect, use, copy, access or store ProtectedHealth Information (PHI) incommercial office space, the contractors must:

6.4.5.1. Notifythe USA MEDDAC Ft Stewart HIPAA Security Manager, Mr. Ricky Cross, at912-435-6507.

6.4.5.2. Followall DUA and DoD requirements for secure disposal, destruction, and/orsanitization of all equipment that containedPHI.

7. PRIVACY AND SECURITY OF PROTECTED HEALTH INFORMATION.

7.1. INTRODUCTION.

IAW DOD 6025.18R "Department ofDefense Health Information Privacy Regulation" the Contractor meets thedefinition of Business Associate. Therefore, a Business Associate Agreement isrequired to comply with both the Health Insurance Portability and AccountabilityAct (HIPAA) Privacy and Security regulations.

This clause serves as thatagreement whereby the Contractor agrees to abide by all applicable HIPAAPrivacy and Security requirements regarding health information as defined inthis clause, and DOD 6025.18R, as amended. Additional requirements will beaddressed when implemented.

7.1.1. Definitions. As used in this clausegenerally refer to the Code of Federal Regulations (CFR) definition unless amore specific provision exists in DOD 6025.18R.

7.1.1.1. Individual has the same meaning as the term ``individual'' in 45 CFR 164.501 and 164.103 and shall include a person who qualifies as a personal representative in accordance with 45 CFR164.502(g).

7.1.1.2. Privacy Rule means the Standards forPrivacy of Individually Identifiable HealthInformation at 45 CFR part 160 and part 164, subparts A and E.

7.1.1.3. Protected Health Information has thesame meaning as the term "protected health information'' in 45 CFR 164.501,limited to the information created or received by The Contractor from or onbehalf of The Government.

7.1.1.4. Electronic Protected Health Information hasthe same meaning as the term "electronicprotected health information" in 45 CFR 160.103.

7.1.1.5. Required by Law has the same meaning as the term ``required by law'' in 45 CFR 164.501 and 164.103.

7.1.1.6. Secretary means the Secretary of theDepartment of Health and Human Services or his/her designee.

7.1.1.7. Security Rule means the Health InsuranceReform: Security Standards at 45 CFR part 160, 162 and part 164, subpart C.

7.1.1.8. Termsused, but not otherwise defined, in this Agreement shall have the same meaningas those terms in 45 CFR 160.103, 164.501 and164.304.

7.1.2. TheContractor agrees to not use or further disclose Protected Health Information other than as permitted or required by theContract or as Required by Law.

7.1.2.1. TheContractor agrees to use appropriate safeguards to prevent use or disclosure ofthe Protected Health Information other than as provided for by this Contract.

7.1.2.2. TheContractor agrees to use administrative, physical, and technical safeguardsthat reasonably and appropriately protect the confidentiality, integrity, andavailability of the electronic protected health information that it creates,receives, maintains, or transmits in the execution of this Contract.

7.1.2.3. TheContractor agrees to mitigate, to the extent practicable, any harmful effectthat is known to the Contractor of a use or disclosure of Protected HealthInformation by the Contractor in violation of the requirements of this contract.

7.1.2.4. TheContractor agrees to report to the Government any security incident involvingprotected health information of which it becomes aware.

7.1.2.5. TheContractor agrees to report to the Government any use or disclosure of theProtected Health Information not provided for by this Contract of which theContractor becomes aware of.

7.1.2.6. The Contractor agrees to ensure that any agent,including a subcontractor, to whom it provides Protected Health Informationreceived from, or created or received by the Contractor on behalf of theGovernment, agrees to the same restrictions and conditions that apply throughthis Contract to the Contractor with respect to such information.

7.1.2.7. The Contractor agrees to ensure that any agent,including a subcontractor, to whom it provides electronic Protected HealthInformation, agrees to implement reasonable and appropriate safeguards to protect it

7.1.2.8. TheContractor agrees to provide access, at the request of the Government, and inthe time and manner designated by the Government to Protected HealthInformation in a Designated RecordSet, to the Government or, as directed by the Government, to an Individual inorder to meet the requirements under 45

CFR164.524.

7.1.2.9. TheContractor agrees to make any amendment(s) to Protected Health Information in aDesignated Record Set that the Government directs or agrees to pursuant to 45CFR 164.526 at the request of the Government or an Individual, and in the timeand manner designated by the Government.

7.1.2.10. TheContractor agrees to make internal practices, books, and records relating tothe use and disclosure of Protected Health Information received from, orcreated or received by the Contractor on behalf of, the Government, availableto the Government, or at the request of the Government to the Secretary, in atime and manner designated by the Government or the

Secretary, for purposes of theSecretary determining the Government's compliance with the Privacy Rule.

7.1.2.11. TheContractor agrees to document such disclosures of Protected Health Informationand information related to such disclosures as would be required for theGovernment to respond to a request by an Individual for an accounting ofdisclosures of Protected Health Information in accordance with 45 CFR 164.528.

7.1.2.12. TheContractor agrees to provide to the Government or an Individual, in time andmanner designated by the Government, information collected in accordance withthis Clause of the Contract, to permit the Government to respond to a requestby an Individual for an accounting of disclosures of Protected HealthInformation in accordance with 45 CFR 164.528.

7.2. GENERALUSE and DISCLOSURE PROVISIONS.

7.2.1. Exceptas otherwise limited in this Agreement, the Contractor may use or discloseProtected Health Information on behalf of, or to provide services to, theGovernment for treatment, payment, or healthcare operations purposes, inaccordance with the specific use and disclosure provisions below, if such useor disclosure of Protected Health Information would not violate the PrivacyRule, the Security Rule or DOD 6025.18R if done by the Government.

7.3. SPECIFIC USE and DISCLOSURE PROVISIONS.

7.3.1. Except as otherwise limited in this Agreement, the Contractor may use Protected Health Information for the proper management and administration of the Contractor or to carry out the legal responsibilities of the Contractor.

7.3.2. Exceptas otherwise limited in this Agreement, the Contractor may disclose ProtectedHealth Information for the proper management and administration of theContractor, provided that disclosures are required by law, or the Contractorobtains reasonable assurances from the person to whom the information isdisclosed that it will remain confidential and used or further disclosed onlyas required by law or for the purpose for which it was disclosed to the person,and the person notifies the Contractor of any instances of which it is aware inwhich the confidentiality of the information has been breached.

7.3.3. Except as otherwise limited in this Agreement, the Contractor may use Protected Health Information to provide Data Aggregation services to the Government as permitted by 45 CFR164.504(e)(2)(i)(B).

7.3.4. Contractor may use Protected Health Information to report violations of law to appropriate Federal and State authorities, consistent with 45 CFR 164.502(j) (1).

7.4. OBLIGATION of the GOVERNEMENT. Provisions for the Government to Inform the Contractor of Privacy Practices and Restrictions

7.4.1. Upon request the Government shall provide the Contractor with the notice of privacy practices that the Government produces in accordance with 45 CFR 164.520, as well as any changes to such notice.

7.4.2. The Government shall provide the Contractor with any changes in, or revocation of permission by Individual to use or disclose Protected Health Information, if such changes affect the Contractor's permitted or required uses and disclosures.

7.4.3. The Government shall notify the Contractor of any restriction to the use or disclosure of Protected Health Information that the Government has agreed to in accordance with 45 CFR164.522.

7.5. PERMISSIBLEREQUESTS by the GOVERNMENT.

7.5.1. The Government shall not request the Contractor to use or disclose Protected Health Information in any manner that would not be permissible under the Privacy Rule if done by the Government, except for providing Data Aggregation services to the Government and for management and administrative activities of the Contractor as otherwise permitted by this clause.

7.5.2. Termination.

7.5.2.1. Termination. A breach by the Contractor of this clause, may subject the Contractor to termination under any applicable default or termination provision of this Contract.

7.5.3. Effect of Termination.

7.5.3.1. If this contract has records management requirements, the records subject to the Clause should be handled in accordance with the records management requirements. If this contract does not have records management requirements, the records should be handled in accordance with paragraphs 7.5.3.2. and7.5.3.3.

below:

7.5.3.2. If this contract does not have records management requirements, except as provided in paragraph 7.5.3. of this section, upon termination of this Contract, for any reason, the Contractor shall return or destroy all Protected Health Information received from the Government, or created or received by the Contractor on behalf of the Government. This provision shall apply to Protected Health Information that is in the possession of subcontractors or agents of the Contractor. The Contractor shall retain no copies of the Protected Health Information.

7.5.3.3. If this contract does not have records management provisions and the Contractor determines that returning or destroying the Protected Health Information is infeasible, the Contractor shall provide to the Government notification of the conditions that make return or destruction infeasible. Upon mutual agreement of the Government and the Contractor that return or destruction of Protected Health Information is infeasible, the Contractor shall extend the protections of this Contract to such Protected Health Information and limit further uses and disclosures of such Protected Health Information to those purposes that make the return or destruction infeasible, for so long as the Contractor maintains such Protected Health Information.

7.6. MISCELLANEOUS.

7.6.1. Regulatory References. A reference in this Clause to a section in DOD 6025.18R, Privacy Rule or Security Rule means the section as in effect or as amended, and for which compliance is required.

7.6.2. Survival. The respective rights and obligations of Business Associate under the ``Effect of Termination'' provision of this Clause shall survive the termination of this Contract.

7.6.3. Interpretation. Any ambiguity in this Clause shall be resolved in favor of a meaning that permits the Government to comply with DOD 6025.18R, Privacy Rule or Security Rule.

8. PAYMENTS.

8.1. Contractor will create a combo invoice document using the government's Wide Area Workflow(WAWF) electronic internet based System. WAWF is required.

The website ishttps:// wawf.eb.mil. Contractor shall invoice in accordance with DFARS 252.232-7003.

8.2. Contractor will re-use the same invoice number listed on the original invoice with a letter behind the original invoice number when resubmitting an invoice. A new invoice number will not be generated for a previous shipment.

8.3. Contractor will submit invoices in WAWF within 7-10 days of shipping date but no later than 30 days of shipping date.

9. APPLICABLE PUBLICATIONS AND FORMS.

9.1. Quality Assurance Surveillance Plan in Technical Exhibit 1.

Requirements Bridge Contract for Contract W91YTZ-21-F-0228

Product Service Code: 6632

Packaging and Marking

Inspection and Acceptance Overall Contract Inspection/Acceptance Locations

Inspection and Acceptance Location

Both Destination Instructions: See Contract Terms and Conditions for Inspection and Acceptance criteria.

DoDAAC: HT0816 CountryCode: USA

ACH WINN STEWART - PA

1061 HARMON AVENUE, BLDG P 302

FORT STEWART, GA 31314-5674

UNITED STATES

Regina Florence Email: regina.florence.civ@health.mil

Deliveries or Performance

Line Item Delivery Schedule Quantity Address and POC Special Handling/Notes

Delivery Period From 01 Oct 2026 to 30 Sep 2027

12 Months Place of Performance DoDAAC: HT0816 CountryCode: USA

ACH WINN STEWART - PA

1061 HARMON AVENUE, BLDG P 302

FORT STEWART, GA 31314-5674

UNITED STATES

FoB Details Contractor Destination

Contract Administration Data

DFARS Clauses Incorporated by Reference

Number Title Effective Date

Alternate/ Deviation

Variation Effective Date

252.232-7003 Electronic Submission of Payment Requests and Receiving Reports. Dec 2018

DFARS Clauses Incorporated by Full Text

252.232-7006 Wide Area WorkFlow Payment Instructions. (Jan 2023)

WIDE AREA WORKFLOW PAYMENT INSTRUCTIONS (JAN 2023)

(a) As used in this clause- Definitions.

"Department of Defense Activity Address Code (DoDAAC)" is a six position code that uniquely identifies a unit, activity, or organization.

"Document type" means the type of payment request or receiving report available for creation in Wide Area WorkFlow (WAWF).

"Local processing office (LPO)" is the office responsible for payment certification when payment certification is done external to the entitlement system.

"Payment request" and "receiving report" are defined in the clause at 252.232-7003, Electronic Submission of Payment Requests and Receiving Reports.

(b) The WAWF system provides the method to electronically process vendor payment requests and receiving reports, as authorized by Electronic invoicing.

Defense Federal Acquisition Regulation Supplement (DFARS) 252.232-7003, Electronic Submission of Payment Requests and Receiving Reports.

(c) To access WAWF, the Contractor shall- WAWF access.

(1) Have a designated electronic business point of contact in the System for Award Management at https://www.sam.gov; and

(2) Be registered to use WAWF at https://wawf.eb.mil/ following the step-by-step procedures for self-registration available at this web site.

(d) The Contractor should follow the training instructions of the WAWF Web-Based Training Course and use the Practice Training Site WAWF training.

before submitting payment requests through WAWF. Both can be accessed by selecting the "Web Based Training" link on the WAWF home page at https:// wawf.eb.mil/

(e) Document submissions may be via web entry, Electronic Data Interchange, or File Transfer Protocol. WAWF methods of document submission.

(f) The Contractor shall use the following information when submitting payment requests and receiving reports in WAWF for WAWF payment instructions.

this contract or task or delivery order:

(1) The Contractor shall submit payment requests using the following document type(s): Document type.

(i) For cost-type line items, including labor-hour or time-and-materials, submit a cost voucher.

(ii) For fixed price line items-

(A) That require shipment of a deliverable, submit the invoice and receiving report specified by the Contracting Officer.

2 IN 1

(Contracting Officer: Insert applicable invoice and receiving report document type(s) for fixed price line items that require shipment of a deliverable.)

(B) For services that do not require shipment of a deliverable, submit either the Invoice 2in1, which meets the requirements for the invoice and receiving report, or the applicable invoice and receiving report, as specified by the Contracting Officer.

(Contracting Officer: Insert either "Invoice 2in1" or the applicable invoice and receiving report document type(s) for fixed price line items for services.)

(iii) For customary progress payments based on costs incurred, submit a progress payment request.

(iv) For performance based payments, submit a performance based payment request.

(v) For commercial financing, submit a commercial financing request.

(2) ) Fast Pay requests are only permitted when Federal Acquisition Regulation (FAR) 52.213-1 is included in the contract.

[Note: The Contractor may use a WAWF "combo" document type to create some combinations of invoice and receiving report in one step.]

(3) The Contractor shall use the information in the Routing Data Table below only to fill in applicable fields in WAWF when creating Document routing.

payment requests and receiving reports in the system.

Routing Data Table*

Field Name in WAWF Data to be entered in WAWF

Pay Official DoDAAC HQ0490

Issue By DoDAAC HT9406

Admin DoDAAC HT9406

Inspect By DoDAAC HT0816

Ship To Code ____

Ship From Code ____

Mark For Code ____

Service Approver (DoDAAC) ____

Service Acceptor (DoDAAC) ____

Accept at Other DoDAAC ____

LPO DoDAAC ____

DCAA Auditor DoDAAC ____

Other DoDAAC(s) ____

(*Contracting Officer: Insert applicable DoDAAC information. If multiple ship to/acceptance locations apply, insert "See Schedule" or "Not applicable.")

(**Contracting Officer: If the contract provides for progress payments or performance-based payments, insert the DoDAAC for the contract administration office assigned the functions under FAR 42.302(a)(13).)

(4) The Contractor shall ensure a payment request includes documentation appropriate to the type of payment request in Payment request.

accordance with the payment clause, contract financing clause, or Federal Acquisition Regulation 52.216-7, Allowable Cost and Payment, as applicable.

(5) The Contractor shall ensure a receiving report meets the requirements of DFARS Appendix F. Receiving report.

(g) WAWF point of contact.

(1) The Contractor may obtain clarification regarding invoicing in WAWF from the following contracting activity's WAWF point of contact.

Regina Florence

(Contracting Officer: Insert applicable information or "Not applicable.")

(2) Contact the WAWF helpdesk at 866-618-5988, if assistance is needed.

(End of clause)

Special Contract Requirements

Contract Clauses

ADDENDUM TO FAR 52.212-4, CONTRACT TERMS AND CONDITIONS - COMMERCIAL PRODUCTS AND COMMERCIAL SERVICES

(w) The non-FAR Part 12 discretionary FAR and DFARS clauses included herein are incorporated into this contract either by reference or in full text. If incorporated by reference, see clause 52.252-2 herein for locations where full text can be found.

(End of Addendum)

FAR Clauses Incorporated by Reference

Number Title Effective Date

Alternate/ Deviation

Variation Effective Date

52.203-19 Prohibition on Requiring Certain Internal Confidentiality Agreements or Statements. Jan 2017 52.204-9 Personal Identity Verification of Contractor Personnel. Jan 2011

52.209-6 Protecting the Government's Interest When Subcontracting With Contractors Debarred, Suspended, Proposed for Debarment, or Voluntarily Excluded. (Deviation 2026-O0038)

Feb 2026

52.209-10 Prohibition on Contracting With Inverted Domestic Corporations. (Deviation 2026-O0038) Feb 2026 52.212-4 Terms and Conditions-Commercial Products and Commercial Services. (Deviation 2026-O0038) Feb 2026 52.222-19 Child Labor-Cooperation with Authorities and Remedies. (Deviation 2026-O0038) Mar 2026 52.222-50 Combating Trafficking in Persons. (Deviation 2026-O0038) Feb 2026 52.222-90 Addressing DEI Discrimination by Federal Contractors. (Deviation 2026-O0040, Revision 1) Apr 2026 52.226-8 Encouraging Contractor Policies to Ban Text Messaging While Driving. May 2024 52.229-12 Tax on Certain Foreign Procurements. (Deviation 2026-O0038) Feb 2026 52.232-18 Availability of Funds. Apr 1984 52.232-33 Payment by Electronic Funds Transfer-System for Award Management. Oct 2018 52.232-40 Providing Accelerated Payments to Small Business Subcontractors. Mar 2023 52.233-3 Protest after Award. (Deviation 2026-O0038) Feb 2026 52.233-4 Applicable Law for Breach of Contract Claim. (Deviation 2026-O0038) Feb 2026 52.240-91 Security Prohibitions and Exclusions. (Deviation 2026-O0038) Feb 2026 52.244-6 Subcontracts for Commercial Products and Commercial Services. (Deviation 2026-O0038) Apr 2026

DFARS Clauses Incorporated by Reference

Number Title Effective Date

Alternate/ Deviation

Variation Effective Date

252.203-7000 Requirements Relating to Compensation of Former DoD Officials. Sep 2011 252.203-7002 Requirement to Inform Employees of Whistleblower Rights. Dec 2022 252.204-7004 Antiterrorism Awareness Training for Contractors. Jan 2023 252.204-7012 Safeguarding Covered Defense Information and Cyber Incident Reporting. May 2024 252.204-7015 Notice of Authorized Disclosure of Information for Litigation Support. Jan 2023 252.204-7018 Prohibition on the Acquisition of Covered Defense Telecommunications Equipment or Services. Jan 2023 252.223-7008 Prohibition of Hexavalent Chromium. Jan 2023 252.225-7001 Buy American and Balance of Payments Program. Feb 2024 252.225-7002 Qualifying Country Sources as Subcontractors. Mar 2022 252.225-7056 Prohibition Regarding Business Operations with the Maduro Regime. Jan 2023 252.225-7060 Prohibition on Certain Procurements from the Xinjiang Uyghur Autonomous Region. Jun 2023 252.232-7010 Levies on Contract Payments. Dec 2006 252.244-7000 Subcontracts for Commercial Products or Commercial Services. Nov 2023 252.247-7023 Transportation of Supplies by Sea. Oct 2024

FAR Clauses Incorporated by Full Text

52.252-2 Clauses Incorporated by Reference. (Feb 1998)

CLAUSES INCORPORATED BY REFERENCE (FEB 1998)

This contract incorporates one or more clauses by reference, with the same force and effect as if they were given in full text. Upon request, the Contracting Officer will make their full text available. Also, the full text of a clause may be accessed electronically at this/these address(es):

www.acqusition.gov [Insert one or more Internet addresses]____ ____

(End of clause)

52.252-6 Authorized Deviations in Clauses. (Nov 2020)

AUTHORIZED DEVIATIONS IN CLAUSES (NOV 2020)

The use in this solicitation or contract of any Federal Acquisition Regulation (48…