Solicitation HT9425-25-R-0072.pdf

SEE ADDENDUM

(No Collect Calls)

HT942525R0072 02-Jul-2025

b. TELEPHONE NUMBER

301-619-7148

8. OFFER DUE DATE/LOCAL TIME

12:00 PM 04 Aug 2025

5. SOLICITATION NUMBER 6. SOLICITATION ISSUE DATE

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

STANDARD FORM 1449 (REV. 2/2012)

Prescribed by GSA – FAR (48 CFR) 53.212

(TYPE OR PRINT)

(SIGNATURE OF CONTRACTING OFFICER)

ADDENDA ARE

26. TOTAL AWARD AMOUNT (For Gov t. Use Only )

23.

CODE 10. THIS ACQUISITION IS

SUCH ADDRESS IN OFFER

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT

BELOW IS CHECKED

TELEPHONE NO.

HT94259. ISSUED BY

18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a. UNLESS BLOCK

7. FOR SOLICITATION

INFORMATION CALL:

a. NAME

JESSEE T. CHEGE

2. CONTRACT NO. 3. AWARD/EFFECTIVE DATE 4. ORDER NUMBER

(TYPE OR PRINT)

30b. NAME AND TITLE OF SIGNER 30c. DATE SIGNED 31b. NAME OF CONTRACTING OFFICER

30a. SIGNATURE OF OFFEROR/CONTRACTOR 31a.UNITED STATES OF AMERICA

0 27a. SOLICITATION INCORPORATES BY REFERENCE FAR 52.212-1. 52.212-4. FAR 52.212-3. 52.212-5 ARE ATTACHED.

25. ACCOUNTING AND APPROPRIATION DATA

1. REQUISITION NUMBER

20.

ADDITIONAL SHEETS SUBJECT TO THE TERMS AND CONDITIONS SPECIFIED.

OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, AND 30

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS

ARE NOT ATTACHED

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA ARE ARE NOT ATTACHED

(BLOCK 5), INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE

SET FORTH HEREIN, IS ACCEPTED AS TO ITEMS:

. YOUR OFFER ON SOLICITATION

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN

% FOR:SET ASIDE:UNRESTRICTED ORX

SMALL BUSINESS

17a.CONTRACTOR/ CODE FACILITY

OFFEROR CODE

ARMY MED RES ACQ ACTIVITY

808 SCHREIDER ST

FORT DETRICK MD 21702

18a. PAYMENT WILL BE MADE BY CODE

RATED ORDER UNDER

DPAS (15 CFR 700)

13a. THIS CONTRACT IS A

13b. RATING

CODE15. DELIVER TO CODE HT0070 16. ADMINISTERED BY

12. DISCOUNT TERMS11. DELIVERY FOR FOB DESTINA-

TION UNLESS BLOCK IS

MARKED

SEE SCHEDULE

14. METHOD OF SOLICITATION

RFQ IFB RFPX

DEFENSE HEALTH AGENCY - CA

DEFENSE HEALTH AGENCY - CA

7700 ARLINGTON BLVD

FALLS CHURCH VA 22042

FALLS CHURCH VA 22042

TEL: FAX:

FAX:

TEL: SERVICE-DISABLED

VETERAN-OWNED

SMALL BUSINESS

8(A)

HUBZONE SMALL

BUSINESS

SIZE STANDARD:

$47,000,000

NAICS:

513210

X

OFFER DATED

29. AWARD OF CONTRACT: REF.

DELIVER ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND ON ANY

COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND

EMAIL:

TEL:

31c. DATE SIGNED

SEE SCHEDULE

SCHEDULE OF SUPPLIES/ SERVICESITEM NO. QUANTITY UNIT UNIT PRICE AMOUNT

24.22.21.19.

WOMEN-OWNED SMALL BUSINESS (WOSB)

ELIGIBLE UNDER THE WOMEN-OWNED

SMALL BUSINESS PROGRAM

EDWOSB

32g. E-MAIL OF AUTHORIZED GOVERNMENT REPRESENTATIVE

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS

(CONTINUED)

ACCEPTED, AND CONFORMS TO THE CONTRACT, EXCEPT AS NOTED: ______________________________________________________

32a. QUANTITY IN COLUMN 21 HAS BEEN

RECEIVED INSPECTED

32b. SIGNATURE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32c. DATE 32d. PRINTED NAME AND TITLE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32e. MAILING ADDRESS OF AUTHORIZED GOVERNMENT REPRESENTATIVE 32f . TELEPHONE NUMBER OF AUTHORIZED GOVERNMENT REPRESENTATIVE

37. CHECK NUMBER

FINALPARTIALCOMPLETE

36. PAYMENT35. AMOUNT VERIFIED

CORRECT FOR

34. VOUCHER NUMBER

FINAL

33. SHIP NUMBER

PARTIAL

38. S/R ACCOUNT NUMBER 39. S/R VOUCHER NUMBER 40. PAID BY

41a. I CERTIFY THIS ACCOUNT IS CORRECT AND PROPER FOR PAYMENT 41b. SIGNATURE AND TITLE OF CERTIFYING OFFICER 41c. DATE

42a. RECEIVED BY (Print)

42b. RECEIVED AT (Location)

42c. DATE REC'D (YY/MM/DD) 42d. TOTAL CONTAINERS

STANDARD FORM 1449 (REV. 2/2012) BACK

Prescribed by GSA – FAR (48 CFR) 53.212

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

SEE SCHEDULE

20.

SCHEDULE OF SUPPLIES/ SERVICES

21.

QUANTITY UNIT

22. 23.

UNIT PRICE

24.

AMOUNT

19.

ITEM NO.

HT942525R0072

Section SF 1449 - CONTINUATION SHEET

ITEM NO SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

0001 65 Each Advanced 3D Imaging System

FFP

Advanced 3D Imaging System consistent with Minimum Essential Characteristics with 65 concurrent users. Multiple invoices are authorized for this CLIN FOB: Destination

PSC CD: 7B20

NET AMT

0002 12 Job Installation and Training

FFP

Installation and Training. Multiple invoices are authorized.

450 individuals at 12 Sites, in-person and virtual:

i. Tripler Army Medical Center, HI;

ii. Brian D. Allgood, Korea;

iii. Evans Army Community Hospital, CO;

iv. Madigan Army Community Hospital, WA;

v. Brooke Army Medical Center, TX;

vi. Walter Reed National Military Medical Center, MD;

vii. Womack Army Medical Center, NC;

viii. Landstuhl Regional Medical Center, Germany: 30;

ix. Blanchfield Army Community Hospital, KY;

x. Eisenhower Arch Community Medical Center, GA;

xi. Portsmouth Naval Medical Center, VA;

xii. Naval Medical Center San Deigo, CA:

0003 1 Each License

FFP

5-year license and uninterrupted ability to operate. Delivery date is the Final deliverable date for the license.

INSPECTION AND ACCEPTANCE TERMS

Supplies/services will be inspected/accepted at:

CLIN INSPECT AT INSPECT BY ACCEPT AT ACCEPT BY

0001 Destination Government Destination Government 0002 Destination Government Destination Government 0003 Destination Government Destination Government

DELIVERY INFORMATION

CLIN DELIVERY DATE QUANTITY SHIP TO ADDRESS DODAAC /

CAGE

0001 15-SEP-2025 65 DEFENSE HEALTH AGENCY - CA

DEFENSE HEALTH AGENCY - CA

7700 ARLINGTON BLVD

FALLS CHURCH VA 22042

FALLS CHURCH VA 22042

HT0070

0002 15-SEP-2026 12 (SAME AS PREVIOUS LOCATION)

0003 15-SEP-2030 1 (SAME AS PREVIOUS LOCATION)

CLAUSES INCORPORATED BY REFERENCE

52.212-4 Contract Terms and Conditions--Commercial Products and

Commercial Services

NOV 2023

52.202-1 Definitions JUN 2020 52.203-3 Gratuities APR 1984 52.203-7 Anti-Kickback Procedures JUN 2020 52.204-7 System for Award Management NOV 2024 52.204-13 System for Award Management Maintenance OCT 2018 52.204-16 Commercial and Government Entity Code Reporting AUG 2020 52.204-18 Commercial and Government Entity Code Maintenance AUG 2020 52.204-23 Prohibition on Contracting for Hardware, Software, and

Services Developed or Provided by Kaspersky Lab Covered Entities

DEC 2023

52.209-10 Prohibition on Contracting With Inverted Domestic Corporations

NOV 2015

52.217-2 Cancellation Under Multiyear Contracts OCT 1997 252.203-7000 Requirements Relating to Compensation of Former DoD

Officials

SEP 2011

252.203-7002 Requirement to Inform Employees of Whistleblower Rights DEC 2022 252.204-7012 Safeguarding Covered Defense Information and Cyber

Incident Reporting

MAY 2024

252.204-7020 NIST SP 800-171 DoD Assessment Requirements NOV 2023 252.225-7056 Prohibition Regarding Business Operations with the Maduro

Regime

JAN 2023

252.225-7060 Prohibition on Certain Procurements from the Xinjiang Uyghur Autonomous Region

JUN 2023

252.232-7003 Electronic Submission of Payment Requests and Receiving Reports

DEC 2018

252.232-7010 Levies on Contract Payments DEC 2006 252.237-7010 Prohibition on Interrogation of Detainees by Contractor

Personnel

JAN 2023

252.242-7005 Contractor Business Systems JAN 2025 252.244-7000 Subcontracts for Commercial Products or Commercial

Services

NOV 2023

252.247-7023 Transportation of Supplies by Sea OCT 2024

CLAUSES INCORPORATED BY FULL TEXT

52.204-25 PROHIBITION ON CONTRACTING FOR CERTAIN TELECOMMUNICATIONS AND VIDEO

SURVEILLANCE SERVICES OR EQUIPMENT (NOV 2021)

(a) Definitions. As used in this clause--

Backhaul means intermediate links between the core network, or backbone network, and the small subnetworks at the edge of the network (e.g., connecting cell phones/towers to the core telephone network). Backhaul can be wireless (e.g., microwave) or wired (e.g., fiber optic, coaxial cable, Ethernet).

Covered foreign country means The People's Republic of China.

Covered telecommunications equipment or services means--

(1) Telecommunications equipment produced by Huawei Technologies Company or ZTE Corporation (or any subsidiary or affiliate of such entities);

(2) For the purpose of public safety, security of Government facilities, physical security surveillance of critical infrastructure, and other national security purposes, video surveillance and telecommunications equipment produced by Hytera Communications Corporation, Hangzhou Hikvision Digital Technology Company, or Dahua Technology Company (or any subsidiary or affiliate of such entities);

(3) Telecommunications or video surveillance services provided by such entities or using such equipment; or

(4) Telecommunications or video surveillance equipment or services produced or provided by an entity that the Secretary of Defense, in consultation with the Director of National Intelligence or the Director of the Federal Bureau of Investigation, reasonably believes to be an entity owned or controlled by, or otherwise connected to, the government of a covered foreign country.

Critical technology means--

(1) Defense articles or defense services included on the United States Munitions List set forth in the International Traffic in Arms Regulations under subchapter M of chapter I of title 22, Code of Federal Regulations;

(2) Items included on the Commerce Control List set forth in Supplement No. 1 to part 774 of the Export Administration Regulations under subchapter C of chapter VII of title 15, Code of Federal Regulations, and controlled--

(i) Pursuant to multilateral regimes, including for reasons relating to national security, chemical and biological weapons proliferation, nuclear nonproliferation, or missile technology; or

(ii) For reasons relating to regional stability or surreptitious listening;

(3) Specially designed and prepared nuclear equipment, parts and components, materials, software, and technology covered by part 810 of title 10, Code of Federal Regulations (relating to assistance to foreign atomic energy activities);

(4) Nuclear facilities, equipment, and material covered by part 110 of title 10, Code of Federal Regulations (relating to export and import of nuclear equipment and material);

(5) Select agents and toxins covered by part 331 of title 7, Code of Federal Regulations, part 121 of title 9 of such Code, or part 73 of title 42 of such Code; or

(6) Emerging and foundational technologies controlled pursuant to section 1758 of the Export Control Reform Act of 2018 (50 U.S.C. 4817).

Interconnection arrangements means arrangements governing the physical connection of two or more networks to allow the use of another's network to hand off traffic where it is ultimately delivered (e.g., connection of a customer of telephone provider A to a customer of telephone company B) or sharing data and other information resources.

Reasonable inquiry means an inquiry designed to uncover any information in the entity's possession about the identity of the producer or provider of covered telecommunications equipment or services used by the entity that excludes the need to include an internal or third-party audit.

Roaming means cellular communications services (e.g., voice, video, data) received from a visited network when unable to connect to the facilities of the home network either because signal coverage is too weak or because traffic is too high.

Substantial or essential component means any component necessary for the proper function or performance of a piece of equipment, system, or service.

(b) Prohibition.

(1) Section 889(a)(1)(A) of the John S. McCain National Defense Authorization Act for Fiscal Year 2019 (Pub. L.

115-232) prohibits the head of an executive agency on or after August 13, 2019, from procuring or obtaining, or extending or renewing a contract to procure or obtain, any equipment, system, or service that uses covered telecommunications equipment or services as a substantial or essential component of any system, or as critical technology as part of any system. The Contractor is prohibited from providing to the Government any equipment, system, or service that uses covered telecommunications equipment or services as a substantial or essential component of any system, or as critical technology as part of any system, unless an exception at paragraph (c) of this clause applies or the covered telecommunication equipment or services are covered by a waiver described in FAR 4.2104.

(2) Section 889(a)(1)(B) of the John S. McCain National Defense Authorization Act for Fiscal Year 2019 (Pub. L.

115-232) prohibits the head of an executive agency on or after August 13, 2020, from entering into a contract, or extending or renewing a contract, with an entity that uses any equipment, system, or service that uses covered telecommunications equipment or services as a substantial or essential component of any system, or as critical technology as part of any system, unless an exception at paragraph (c) of this clause applies or the covered telecommunication equipment or services are covered by a waiver described in FAR 4.2104. This prohibition applies to the use of covered telecommunications equipment or services, regardless of whether that use is in performance of work under a Federal contract.

(c) Exceptions. This clause does not prohibit contractors from providing--

(1) A service that connects to the facilities of a third-party, such as backhaul, roaming, or interconnection arrangements; or

(2) Telecommunications equipment that cannot route or redirect user data traffic or permit visibility into any user data or packets that such equipment transmits or otherwise handles.

(d) Reporting requirement.

(1) In the event the Contractor identifies covered telecommunications equipment or services used as a substantial or essential component of any system, or as critical technology as part of any system, during contract performance, or the Contractor is notified of such by a subcontractor at any tier or by any other source, the Contractor shall report the information in paragraph (d)(2) of this clause to the Contracting Officer, unless elsewhere in this contract are established procedures for reporting the information; in the case of the Department of Defense, the Contractor shall report to the website at https://dibnet.dod.mil. For indefinite delivery contracts, the Contractor shall report to the Contracting Officer for the indefinite delivery contract and the Contracting Officer(s) for any affected order or, in the case of the Department of Defense, identify both the indefinite delivery contract and any affected orders in the report provided at https://dibnet.dod.mil.

(2) The Contractor shall report the following information pursuant to paragraph (d)(1) of this clause:

(i) Within one business day from the date of such identification or notification: The contract number; the order number(s), if applicable; supplier name; supplier unique entity identifier (if known); supplier Commercial and Government Entity (CAGE) code (if known); brand; model number (original equipment manufacturer number, manufacturer part number, or wholesaler number); item description; and any readily available information about mitigation actions undertaken or recommended.

(ii) Within 10 business days of submitting the information in paragraph (d)(2)(i) of this clause: Any further available https://dibnet.dod.mil/ https://dibnet.dod.mil/ information about mitigation actions undertaken or recommended. In addition, the Contractor shall describe the efforts it undertook to prevent use or submission of covered telecommunications equipment or services, and any additional efforts that will be incorporated to prevent future use or submission of covered telecommunications equipment or services.

(e) Subcontracts. The Contractor shall insert the substance of this clause, including this paragraph (e) and excluding paragraph (b)(2), in all subcontracts and other contractual instruments, including subcontracts for the acquisition of commercial products or commercial services.

(End of clause)

52.212-5 CONTRACT TERMS AND CONDITIONS REQUIRED TO IMPLEMENT STATUTES OR

EXECUTIVE ORDERS--COMMERCIAL PRODUCTS AND COMMERCIAL SERVICES (JAN 2025)

(a) The Contractor shall comply with the following Federal Acquisition Regulation (FAR) clauses, which are incorporated in this contract by reference, to implement provisions of law or Executive orders applicable to acquisitions of commercial products and commercial services:

(1) 52.203-19, Prohibition on Requiring Certain Internal Confidentiality Agreements or Statements (JAN 2017) (section 743 of Division E, Title VII, of the Consolidated and Further Continuing Appropriations Act, 2015 (Pub. L.

113-235) and its successor provisions in subsequent appropriations acts (and as extended in continuing resolutions)).

(2) 52.204-23, Prohibition on Contracting for Hardware, Software, and Services Developed or Provided by Kaspersky Lab Covered Entities (DEC 2023) (Section 1634 of Pub. L. 115-91).

(3) 52.204-25, Prohibition on Contracting for Certain Telecommunications and Video Surveillance Services or Equipment. (NOV 2021) (Section 889(a)(1)(A) of Pub. L. 115-232).

(4) 52.209-10, Prohibition on Contracting with Inverted Domestic Corporations (NOV 2015).

(5) 52.232-40, Providing Accelerated Payments to Small Business Subcontractors (MAR 2023) (31 U.S.C. 3903 and 10 U.S.C. 3801).

(6) 52.233-3, Protest After Award (AUG 1996) (31 U.S.C. 3553).

(7) 52.233-4, Applicable Law for Breach of Contract Claim (OCT 2004) (Public Laws 108-77 and 108-78 (19 U.S.C. 3805 note)).

(b) The Contractor shall comply with the FAR clauses in this paragraph (b) that the Contracting Officer has indicated as being incorporated in this contract by reference to implement provisions of law or Executive orders applicable to acquisitions of commercial products and commercial services: [Contracting Officer check as appropriate.]

X (1) 52.203-6, Restrictions on Subcontractor Sales to the Government (JUN 2020), with Alternate I (NOV 2021) (41 U.S.C. 4704 and 10 U.S.C. 4655).

X (2) 52.203-13, Contractor Code of Business Ethics and Conduct (NOV 2021) (41 U.S.C. 3509).

___ (3) 52.203-15, Whistleblower Protections under the American Recovery and Reinvestment Act of 2009 (JUN 2010) (Section 1553 of Pub. L. 111-5). (Applies to contracts funded by the American Recovery and Reinvestment Act of 2009.)

___ (4) 52.203-17, Contractor Employee Whistleblower Rights (NOV 2023) (41 U.S.C. 4712); this clause does not apply to contracts of DoD, NASA, the Coast Guard, or applicable elements of the intelligence community--see FAR 3.900(a).

X (5) 52.204-10, Reporting Executive Compensation and First-Tier Subcontract Awards (JUN 2020) (Pub. L. 109-

282) (31 U.S.C. 6101 note).

___ (6) [Reserved]

___ (7) 52.204-14, Service Contract Reporting Requirements (OCT 2016) (Pub. L. 111-117, section 743 of Div.

C).

___ (8) 52.204-15, Service Contract Reporting Requirements for Indefinite-Delivery Contracts (OCT 2016) (Pub.

L. 111-117, section 743 of Div. C).

X (9) 52.204-27, Prohibition on a ByteDance Covered Application (JUN 2023) (Section 102 of Division R of Pub.

L. 117-328).

___ (10) 52.204-28, Federal Acquisition Supply Chain Security Act Orders--Federal Supply Schedules, Governmentwide Acquisition Contracts, and Multi-Agency Contracts. (DEC 2023) (Pub. L. 115-390, title II).

___ (11)(i) 52.204-30, Federal Acquisition Supply Chain Security Act Orders--Prohibition. (DEC 2023) (Pub. L.

115-390, title II).

___ (ii) Alternate I (DEC 2023) of 52.204-30.

X (12) 52.209-6, Protecting the Government's Interest When Subcontracting With Contractors Debarred, Suspended, Proposed for Debarment, or Voluntarily Excluded. (JAN 2025) (31 U.S.C. 6101 note).

___ (13) 52.209-9, Updates of Publicly Available Information Regarding Responsibility Matters (OCT 2018) (41 U.S.C. 2313).

____ (14) [Reserved]

____ (15) 52.219-3, Notice of HUBZone Set-Aside or Sole-Source Award (OCT 2022) (15 U.S.C. 657a).

____ (16) 52.219-4, Notice of Price Evaluation Preference for HUBZone Small Business Concerns (OCT 2022) (if the offeror elects to waive the preference, it shall so indicate in its offer) (15 U.S.C. 657a).

____ (17) [Reserved]

____ (18)(i) 52.219-6, Notice of Total Small Business Set-Aside (NOV 2020) (15 U.S.C. 644).

____ (ii) Alternate I (MAR 2020) of 52.219-6.

____ (19)(i) 52.219-7, Notice of Partial Small Business Set-Aside (NOV 2020) (15 U.S.C. 644).

____ (ii) Alternate I (MAR 2020) of 52.219-7.

X (20) 52.219-8, Utilization of Small Business Concerns (JAN 2025) (15 U.S.C. 637(d)(2) and (3)).

X (21)(i) 52.219-9, Small Business Subcontracting Plan (JAN 2025) (15 U.S.C. 637(d)(4)).

____ (ii) Alternate I (NOV 2016) of 52.219-9.

____ (iii) Alternate II (NOV 2016) of 52.219-9.

____ (iv) Alternate III (JUN 2020) of 52.219-9.

____ (v) Alternate IV (JAN 2025) of 52.219-9.

____ (22) (i) 52.219-13, Notice of Set-Aside of Orders (MAR 2020) (15 U.S.C. 644(r)).

____ (ii) Alternate I (MAR 2020) of 52.219-13.

____ (23) 52.219-14, Limitations on Subcontracting (OCT 2022) (15 U.S.C. 657s).

____ (24) 52.219-16, Liquidated Damages—Subcontracting Plan (SEP 2021) (15 U.S.C. 637(d)(4)(F)(i)).

____ (25) 52.219-27, Notice of Set-Aside for, or Sole-Source Award to, Service-Disabled Veteran-Owned Small Business (SDVOSB) Concerns Eligible Under the SDVOSB Program (FEB 2024) (15 U.S.C. 657f).

____ (26) (i) 52.219-28, Postaward Small Business Program Rerepresentation (JAN 2025) (15 U.S.C. 632(a)(2)).

____ (ii) Alternate I (MAR 2020) of 52.219-28.

____ (27) 52.219-29, Notice of Set-Aside for, or Sole-Source Award to, Economically Disadvantaged Women- Owned Small Business Concerns (OCT 2022) (15 U.S.C. 637(m)).

____ (28) 52.219-30, Notice of Set-Aside for, or Sole-Source Award to, Women-Owned Small Business Concerns Eligible Under the Women-Owned Small Business Program (OCT 2022) (15 U.S.C. 637(m)).

____ (29) 52.219-32, Orders Issued Directly Under Small Business Reserves (MAR 2020) (15 U.S.C. 644(r)).

____ (30) 52.219-33, Nonmanufacturer Rule (SEP 2021) (15 U.S.C. 637(a)(17)).

X (31) 52.222-3, Convict Labor (JUN 2003) (E.O. 11755).

____ (32) 52.222-19, Child Labor--Cooperation with Authorities and Remedies (JAN 2025) (E.O. 13126).

____ (33) 52.222-21, Prohibition of Segregated Facilities (APR 2015).

____ (34)(i) 52.222-26, Equal Opportunity (SEP 2016) (E.O. 11246).

____ (ii) Alternate I (FEB 1999) of 52.222-26.

____ (35)(i) 52.222-35, Equal Opportunity for Veterans (JUN 2020) (38 U.S.C. 4212).

____ (ii) Alternate I (JUL 2014) of 52.222-35.

____ (36)(i) 52.222-36, Equal Opportunity for Workers with Disabilities (JUN 2020) (29 U.S.C. 793).

____ (ii) Alternate I (JUL 2014) of 52.222-36.

____ (37) 52.222-37, Employment Reports on Veterans (JUN 2020) (38 U.S.C. 4212).

____ (38) 52.222-40, Notification of Employee Rights Under the National Labor Relations Act (DEC 2010) (E.O.

13496).

____ (39)(i) 52.222-50, Combating Trafficking in Persons (NOV 2021) (22 U.S.C. chapter 78 and E.O. 13627).

____ (ii) Alternate I (MAR 2015) of 52.222-50 (22 U.S.C. chapter 78 and E.O. 13627).

____ (40) 52.222-54, Employment Eligibility Verification (JAN 2025) (Executive Order 12989). (Not applicable to the acquisition of commercially available off-the-shelf items or certain other types of commercial products or commercial services as prescribed in FAR 22.1803.)

____ (41)(i) 52.223-9, Estimate of Percentage of Recovered Material Content for EPA–Designated Items (MAY 2008) (42 U.S.C. 6962(c)(3)(A)(ii)). (Not applicable to the acquisition of commercially available off-the-shelf items.)

____ (ii) Alternate I (MAY 2008) of 52.223-9 (42 U.S.C. 6962(i)(2)(C)). (Not applicable to the acquisition of commercially available off-the-shelf items.)

____ (42) 52.223-11, Ozone-Depleting Substances and High Global Warming Potential Hydrofluorocarbons (MAY 2024) (42 U.S.C. 7671, et seq.).

____ (43) 52.223-12, Maintenance, Service, Repair, or Disposal of Refrigeration Equipment and Air Conditioners (MAY 2024) (42 U.S.C. 7671, et seq.).

____ (44) 52.223-20, Aerosols (MAY 2024) (42 U.S.C. 7671, et seq.).

____ (45) 52.223-21, Foams (MAY 2024) (42 U.S.C. 7671, et seq.).

____ (46) 52.223-23, Sustainable Products and Services (MAY 2024) (E.O. 14057, 7 U.S.C. 8102, 42 U.S.C. 6962, 42 U.S.C. 8259b, and 42 U.S.C. 7671l).

____ (47) (i) 52.224-3, Privacy Training (JAN 2017) (5 U.S.C. 552a).

____ (ii) Alternate I (JAN 2017) of 52.224-3.

____ (48) (i) 52.225-1, Buy American--Supplies (OCT 2022)) (41 U.S.C. chapter 83).

____ (ii) Alternate I (OCT 2022) of 52.225-1.

____ (49) (i) 52.225-3, Buy American--Free Trade Agreements--Israeli Trade Act (NOV 2023) (19 U.S.C. 3301 note, 19 U.S.C. 2112 note, 19 U.S.C. 3805 note, 19 U.S.C. 4001 note, 19 U.S.C. chapter 29 (sections 4501-4732), Public Law 103-182, 108-77, 108-78, 108-286, 108-302, 109-53, 109-169, 109-283, 110-138, 112-41, 112-42, and 112-43.

____ (ii) Alternate I [Reserved].

____ (iii) Alternate II (JAN 2025) of 52.225-3.

____ (iv) Alternate III (FEB 2024) of 52.225-3.

____ (v) Alternate IV (OCT 2022) of 52.225-3.

____ (50) 52.225-5, Trade Agreements (NOV 2023) (19 U.S.C. 2501, et seq., 19 U.S.C. 3301 note).

____ (51) 52.225-13, Restrictions on Certain Foreign Purchases (FEB 2021) (E.O.'s, proclamations, and statutes administered by the Office of Foreign Assets Control of the Department of the Treasury).

____ (52) 52.225-26, Contractors Performing Private Security Functions Outside the United States (OCT 2016) (Section 862, as amended, of the National Defense Authorization Act for Fiscal Year 2008; 10 U.S.C. Subtitle A, Part V, Subpart G Note).

____ (53) 52.226-4, Notice of Disaster or Emergency Area Set-Aside (NOV 2007) (42 U.S.C. 5150).

____ (54) 52.226-5, Restrictions on Subcontracting Outside Disaster or Emergency Area (NOV 2007) (42 U.S.C.

5150).

X (55) 52.226-8, Encouraging Contractor Policies to Ban Text Messaging While Driving (MAY 2024) (E.O. 13513).

____ (56) 52.229-12, Tax on Certain Foreign Procurements (FEB 2021).

____ (57) 52.232-29, Terms for Financing of Purchases of Commercial Products and Commercial Services (NOV 2021) (41 U.S.C.4505, 10 U.S.C. 3805).

____ (58) 52.232-30, Installment Payments for Commercial Products and Commercial Services (NOV 2021) (41 U.S.C. 4505, 10 U.S.C. 3805).

X (59) 52.232-33, Payment by Electronic Funds Transfer--System for Award Management (OCT 2018) (31 U.S.C.

3332).

____ (60) 52.232-34, Payment by Electronic Funds Transfer--Other than System for Award Management (JUL 2013) (31 U.S.C. 3332).

____ (61) 52.232-36, Payment by Third Party (MAY 2014) (31 U.S.C. 3332).

____ (62) 52.239-1, Privacy or Security Safeguards (AUG 1996) (5 U.S.C. 552a).

____ (63) 52.240-1, Prohibition on Unmanned Aircraft Systems Manufactured or Assembled by American Security Drone Act--Covered Foreign Entities (Nov 2024) (Sections 1821-1826, Pub. L. 118-31, 41 U.S.C. 3901 note prec.).

____ (64) 52.242-5, Payments to Small Business Subcontractors (JAN 2017)(15 U.S.C. 637(d)(13)).

____ (65) (i) 52.247-64, Preference for Privately Owned U.S.-Flag Commercial Vessels (NOV 2021) (46 U.S.C.

55305 and 10 U.S.C. 2631).

____ (ii) Alternate I (APR 2003) of 52.247-64.

____ (iii) Alternate II (NOV 2021) of 52.247-64.

(c) The Contractor shall comply with the FAR clauses in this paragraph (c), applicable to commercial services, that the Contracting Officer has indicated as being incorporated in this contract by reference to implement provisions of law or Executive orders applicable to acquisitions of commercial products and commercial services: [Contracting Officer check as appropriate.]

_____ (1) 52.222-41, Service Contract Labor Standards (AUG 2018) (41 U.S.C. chapter 67).

_____ (2) 52.222-42, Statement of Equivalent Rates for Federal Hires (MAY 2014) (29 U.S.C. 206 and 41 U.S.C.

chapter 67).

_____ (3) 52.222-43, Fair Labor Standards Act and Service Contract Labor Standards--Price Adjustment (Multiple Year and Option Contracts) (AUG 2018) (29 U.S.C. 206 and 41 U.S.C. chapter 67).

_____ (4) 52.222-44, Fair Labor Standards Act and Service Contract Labor Standards--Price Adjustment (MAY 2014) (29 U.S.C 206 and 41 U.S.C. chapter 67).

_____ (5) 52.222-51, Exemption from Application of the Service Contract Labor Standards to Contracts for Maintenance, Calibration, or Repair of Certain Equipment--Requirements (MAY 2014) (41 U.S.C. chapter 67).

_____ (6) 52.222-53, Exemption from Application of the Service Contract Labor Standards to Contracts for Certain Services--Requirements (MAY 2014) (41 U.S.C. chapter 67).

_____ (7) 52.222-55, Minimum Wages for Contractor Workers Under Executive Order 14026 (JAN 2022) (E.O.

13658).

_____ (8) 52.222-62, Paid Sick Leave Under Executive Order 13706 (JAN 2022) (E.O. 13706).

_____ (9) 52.226-6, Promoting Excess Food Donation to Nonprofit Organizations (JUN 2020) (42 U.S.C. 1792).

_____ (10) 52.247-69, Reporting Requirement for U.S.-Flag Air Carriers Regarding Training to Prevent Human Trafficking (JAN 2025) (49 U.S.C. 40118(g)).

(d) Comptroller General Examination of Record. The Contractor shall comply with the provisions of this paragraph

(d) if this contract was awarded using other than sealed bid, is in excess of the simplified acquisition threshold, as defined in FAR 2.101, on the date of award of this contract, and does not contain the clause at 52.215-2, Audit and Records--Negotiation.

(1) The Comptroller General of the United States, or an authorized representative of the Comptroller General, shall have access to and right to examine any of the Contractor's directly pertinent records involving transactions related to this contract.

(2) The Contractor shall make available at its offices at all reasonable times the records, materials, and other evidence for examination, audit, or reproduction, until 3 years after final payment under this contract or for any shorter period specified in FAR Subpart 4.7, Contractor Records Retention, of the other clauses of this contract. If this contract is completely or partially terminated, the records relating to the work terminated shall be made available for 3 years after any resulting final termination settlement. Records relating to appeals under the disputes clause or to litigation or the settlement of claims arising under or relating to this contract shall be made available until such appeals, litigation, or claims are finally resolved.

(3) As used in this clause, records include books, documents, accounting procedures and practices, and other data, regardless of type and regardless of form. This does not require the Contractor to create or maintain any record that the Contractor does not maintain in the ordinary course of business or pursuant to a provision of law.

(e) (1) Notwithstanding the requirements of the clauses in paragraphs (a), (b), (c), and (d) of this clause, the Contractor is not required to flow down any FAR clause, other than those in this paragraph (e)(1) in a subcontract for commercial products or commercial services. Unless otherwise indicated below, the extent of the flow down shall be as required by the clause—

(i) 52.203-13, Contractor Code of Business Ethics and Conduct (NOV 2021) (41 U.S.C. 3509).

(ii) 52.203-17, Contractor Employee Whistleblower Rights (NOV 2023) (41 U.S.C. 4712).

(iii) 52.203-19, Prohibition on Requiring Certain Internal Confidentiality Agreements or Statements (JAN 2017) (section 743 of Division E, Title VII, of the Consolidated and Further Continuing Appropriations Act, 2015 (Pub. L.

113-235) and its successor provisions in subsequent appropriations acts (and as extended in continuing resolutions)).

(iv) 52.204-23, Prohibition on Contracting for Hardware, Software, and Services Developed or Provided by Kaspersky Lab Covered Entities (DEC 2023) (Section 1634 of Pub. L. 115-91).

(v) 52.204-25, Prohibition on Contracting for Certain Telecommunications and Video Surveillance Services or Equipment. (NOV 2021) (Section 889(a)(1)(A) of Pub. L. 115-232).

(vi) 52.204-27, Prohibition on a ByteDance Covered Application (JUN 2023) (Section 102 of Division R of Pub. L.

117-328).

(vii)(A) 52.204-30, Federal Acquisition Supply Chain Security Act Orders--Prohibition. (DEC 2023) (Pub. L. 115- 390, title II).

(B) Alternate I (DEC 2023) of 52.204-30.

(viii) 52.219-8, Utilization of Small Business Concerns (JAN 2025) (15 U.S.C. 637(d)(2) and (3)), in all subcontracts that offer further subcontracting opportunities. If the subcontract (except subcontracts to small business concerns) exceeds the applicable threshold specified in FAR 19.702(a) on the date of subcontract award, the subcontractor must include 52.219-8 in lower tier subcontracts that offer subcontracting opportunities.

(ix) 52.222-21, Prohibition of Segregated Facilities (APR 2015).

(x) 52.222-26, Equal Opportunity (SEP 2016) (E.O. 11246).

(xi) 52.222-35, Equal Opportunity for Veterans (JUN 2020) (38 U.S.C. 4212).

(xii) 52.222-36, Equal Opportunity for Workers with Disabilities (JUN 2020) (29 U.S.C. 793).

(xiii) 52.222-37, Employment Reports on Veterans (JUN 2020) (38 U.S.C. 4212).

(xiv) 52.222-40, Notification of Employee Rights Under the National Labor Relations Act (DEC 2010) (E.O.

13496). Flow down required in accordance with paragraph (f) of FAR clause 52.222-40.

(xv) 52.222-41, Service Contract Labor Standards (AUG 2018), (41 U.S.C. chapter 67).

(xvi) X (A) 52.222-50, Combating Trafficking in Persons (NOV 2021) (22 U.S.C. chapter 78 and E.O. 13627).

_____ (B) Alternate I (MAR 2015) of 52.222-50 (22 U.S.C. chapter 78 and E.O. 13627).

(xvii) 52.222-51, Exemption from Application of the Service Contract Labor Standards to Contracts for Maintenance, Calibration, or Repair of Certain Equipment--Requirements (MAY 2014) (41 U.S.C. chapter 67.)

(xviii) 52.222-53, Exemption from Application of the Service Contract Labor Standards to Contracts for Certain Services--Requirements (MAY 2014) (41 U.S.C. chapter 67)

(xix) 52.222-54, Employment Eligibility Verification (JAN 2025) (E. O. 12989).

(xx) 52.222-55, Minimum Wages for Contractor Workers Under Executive Order 14026 (JAN 2022) (E.O. 13658).

(xxi) 52.222-62, Paid Sick Leave Under Executive Order 13706 (JAN 2022) (E.O. 13706).

(xxii) (A) 52.224-3, Privacy Training (JAN 2017) (5 U.S.C. 552a).

(B) Alternate I (JAN 2017) of 52.224-3.

https://www.acquisition.gov/content/part-52-solicitation-provisions-and-contract-clauses#i52_222_62 https://www.acquisition.gov/content/part-52-solicitation-provisions-and-contract-clauses#i52_224_3 http://uscode.house.gov/browse.xhtml;jsessionid=114A3287C7B3359E597506A31FC855B3 https://www.acquisition.gov/content/part-52-solicitation-provisions-and-contract-clauses#i52_224_3

(xxiii) 52.225-26, Contractors Performing Private Security Functions Outside the United States (OCT 2016) (Section 862, as amended, of the National Defense Authorization Act for Fiscal Year 2008; 10 U.S.C. Subtitle A, Part V, Subpart G Note).

(xxiv) 52.226-6, Promoting Excess Food Donation to Nonprofit Organizations. (JUN 2020) (42 U.S.C. 1792). Flow down required in accordance with paragraph (e) of FAR clause 52.226-6.

(xxv) 52.232-40, Providing Accelerated Payments to Small Business Subcontractors (MAR 2023) (31 U.S.C. 3903 and 10 U.S.C. 3801). Flow down required in accordance with paragraph (c) of 52.232-40.

(xxvi) 52.240-1, Prohibition on Unmanned Aircraft Systems Manufactured or Assembled by American Security Drone Act--Covered Foreign Entities (NOV 2024) (Sections 1821-1826, Pub. L. 118-31, 41 U.S.C. 3901 note prec.).

(xxvii) 52.247-64, Preference for Privately-Owned U.S. Flag Commercial Vessels (NOV 2021) (46 U.S.C. 55305 and 10 U.S.C. 2631). Flow down required in accordance with paragraph (d) of FAR clause 52.247-64.

(2) While not required, the Contractor may include in its subcontracts for commercial products and commercial services a minimal number of additional clauses necessary to satisfy its contractual obligations.

MECS

Minimum Essential Characteristics (MECS) Advance 3D Imaging Software System

The contractor shall deliver software and configure it as necessary to establish connectivity throughout the infrastructure. The ultimate service goal is to consolidate site local Picture and Archiving System (PACS) to a Hub and Spoke model throughout the enterprise to provide standardization across the Department of Health Agency (DHA). This task includes but is not limited to:

i. Implementation at government hosted virtual environment not directly associated with any currently deployed PACS

ii. Standardize system configurations throughout the DHA Enterprise

iii. Fully capable to integrate with the PACS desktop

iv. Utilize a Web version of the client to allow reconstructions without limitation of location with thick client.

v. System shall be able to perform reconstructions of Computed Tomography (CT) and Magnetic Resonance

Imaging (MRI) exams with a volume of 450K exam yearly.

Delivery and configuration of software

1. System must have the capability to display at least two different series of images that has the ability to be locked and correlated for side-by-side comparison and scrolling with appropriate scaling.

2. System must have the ability to calculate and display Standard Uptake Value (SUV) measurements, to include SUV max and SUV lean, converted from recorded counts per voxel / Volume of Interest (VOI) to activity per unit volume with SUV calculations. System must include support to the following- but not limited to PET tracers (F18;

Ga68; Rb82; Cu64; 90Y; 89Zr) and non-PET radionuclides (67Ga, 166Ho, 123I, 131I, 111In, 81mKr, 177Lu, 99mTc, 201Tl, and the dual isotopes).

3. System must have the capability to adjust the lookup table / window settings, with the capability to manually adjust upper and lower thresholds (window) limits.

4. System must be capable of processing Myocardial Perfusion Imaging (MPI), perform quantitative cardiac segment to score myocardial perfusion in measurements of Summed Stress Score (SSS), Summed Rest Score (SRS), and Summed Difference Score (SDS), process and calculate Coronary Flow Reserve (CFR) and Coronary Artery Calcium (CAC) for each coronary artery, and process gated imaging to evaluate wall motion and ejection fraction.

Capability should include support to the following radionuclides- but not limited to: F18; Tc99m; Rb82; and N13.

5. System must have the capability to detect and process images with dedicated algorithms in relation to anatomy and type of study; to include the abilities to overlay several modalities, automatic co-registration of different modalities, local co-registration between different modalities, one-click lesion segmentation, simple semi-automatic organ segmentation, automatic volumetric measurements on Positron Emission Tomography (PET) and Single- Photon Emission Computerized Tomography (SPECT) and other modalities, volumetric lesion measurements, automatic transfer (copy/paste) of 3D regions between modalities. System must have the capability to identify and track lesions to allow for comparison and evolution of lesions over time.

6. System must have the capability to identify lesion segmentation and volumetric lesion measurements.

7. System must have the capability to redraw any regions of interest or adjust any calculations or measurements performed during the initial image post-processing if the initial regions of interest or calculations are determined to be inaccurate or misleading.

8. System must be capable of supporting advanced data analytics (machine learning / artificial intelligence) of stored data to assist in clinical decision support for patient care and population health.

9. System must have the ability to Auto-tracking of main and branch vessel coronary arteries throughout the cardiac phases to allow for production of curved MPR images.

10. System must have the ability to auto-trace vessels for diameter/stenosis assessment, aorta to peripheral vessels.

11. System must have the ability to perform Volumetric assessment of Left ventricular (LV) and Right ventricular (RV), on CT using auto-tracking.

12. System must have the ability to perform Vessel stenosis analysis.

13. System must have the ability to perform Ability to construct cardiac structure in 3D environment.

14. System must have the ability to perform remove blood pool digitally.

15. System must have the ability to perform alter coloration of chambers, vessels, walls.

16. System must have the ability to perform alter transparency of chamber, vessels walls.

17. System must have the ability to perform alter lighting angle to provide best 3D rendering.

18. System must have the ability to One click reset to standard axial sagittal and coronal views.

19. System must have the ability to perform One click standard cardiac orientation to short axis, two chamber and four chamber configurations.

20. System must have the ability to perform Preset window level tool for myocardial perfusion analysis.

21. System must have the ability to perform accurate assessment of coronary artery calcium score (It should always be a whole number).

22. System must have the ability to perform 3-point delineation of the aortic valve annulus with ability to lock those points after screen manipulation.

23. System must have the ability to perform auto contouring tools.

24. System must have the ability to perform 3D left atrial appendage rendering w/ ability to measure and demonstrate projections.

25. System must have the ability to perform Ability to create bookmarks that can be accessed by all users to reproduce images.

26. System must have the ability to perform Ability to record moving renderings and transfer them into PACS.

27. System must have the ability to Reduce motion artifact.

28. System must have the ability to perform Auto detection of Left ventricular (LV) and Right ventricular (RV)blood tissue boarders that require minimal user correction.

29. System must have the ability to perform T1, T2, T2* analysis tools with auto propagation of contours.

30. System must have the ability to perform Later Gadolinium Enhancement (LGE)mass analysis package allowing standard deviation, manual and full width half mass detection of LGE along with in image contouring for determination of left ventricular mass.

31. System must have the ability to perform MRI LV, and RV strain to include longitudinal, radial and circumferential strain, auto calculate average strain and display in bullseye format.

32. System must have the ability to create bookmarks that can be accessed by all users to reproduce images.

33. System must have the ability to record moving renderings and transfer them into PACS.

34. System must have the ability to perform Large Vessel Occlusion (LVO) Detection automatically detects and triages suspected large vessel occlusions.

35. System must have a minimum 2-dimentional radiographic templating software compatibility within the PACS

Additional required Information

36. The contractor shall provide a detailed topography document to include how the enterprise system will be configured and deployed with submission. The document will be updated to reflect any changes during implementation within 7-days after to Go-Live (Deliverable #1).

37. Must offer/implement the most commercially available software version which has a DHA Enterprise level Authority to Operate (ATO). The entire solution must commercially available solution at time of submission that meets or exceeds the standards in this MECS, no future features and functionality of the solution will be considered.

38.The contractor shall include maintenance support for the enterprise software solution over the contract period of 5 years.

39. The contractor must include software updates/upgrades, to include any professional services required. The application version deployed is the current commercially available software version.

40. Software updates and upgrades will not be made without the written approval from the designated Government’s official.

41. The contractor shall provide applications training for 450 individuals at the 12 PACS Hubs across the enterprise.

Training shall be conducted one time in person on site (travel cost paid by contractor) and one time virtually per PACS Hub (12 in person trainings/12 virtual trainings). One virtual session shall be recorded and saved for future training purposes.

Number of concurrent users per Hub are as follows:

i. Tripler Army Medical Center, HI: 20

ii. Brian D. Allgood, Korea: 16

iii. Evans Army Community Hospital, CO: 23

iv. Madigan Army Community Hospital, WA: 31

v. Brooke Army Medical Center, TX: 70

vi. Walter Reed National Military Medical Center, MD: 64

vii. Womack Army Medical Center, NC: 14

viii. Landstuhl Regional Medical Center, Germany: 30

ix. Blanchfield Army Community Hospital, KY: 20

x. Eisenhower Arch Community Medical Center, GA: 28

xi. Portsmouth Naval Medical Center, VA: 63

xii. Naval Medical Center San Deigo, CA: 55

42. The contractor shall provide virtual trainings at each PACS Hub when an upgrade to the software application is applied.

43. The contractor shall assign a Project Manager (PM) within 30 calendar days after award.

44. Vendor shall conduct meetings weekly with project updates until project completion. and provide weekly reporting regarding the status of each site’s progress.

45. The contractor shall deliver a draft project plan at proposal submission and final project plan within 30 days after award of the contract The contractor shall provide a detailed implementation plan and timeline for all sites at time of submission. (Deliverable #2).

Implementation plan shall include the following:

i. The project plan shall include the start of delivery of software within 60 calendar days of award of the contract and installation shall begin within 90 calendar days of award. All sites must Go-live (clinically in use) within 12-months of contract award.

ii. The detailed project plan shall highlight the key deliverables, timelines, and expectations of each party responsible for delivery, configuration, and final acceptance of the systems Comprehensive implementation plan to install all systems, including total number of project managers and implementation team(s) involved.

iii. Detailed steps and task owners for implementation as well as expected completion time for each task.

iv. Proposed timeline for production Go-live for all implementations. “Go-live” date is met by full clinical usage of the system with fulfillment of migration requirements related to Go-live with no reliance on the legacy system.

46. The contractor shall host weekly status meetings with the Government representatives; contractor shall provide meeting agenda 24 hours prior to meeting and provide meeting minutes within 48 hours of the meeting conclusion.

Meeting minutes will be provided in PDF format.

47. The contractor shall provide all the following, included in the setup/configuration of the system to ensure proper installation.

48. The contractor shall validate functionality of software in accordance with Risk Management Framework (RMF) accreditation documentation. RMF/ATO must continually be updated to meet the requirement of item number 4.

49. The contractor shall validate RMF STIG requirements and scan for vulnerabilities with DoD provided Nessus vulnerability scan software.

50. The contractor shall resolve or mitigate any Category 1 or High Category 2 vulnerabilities.

51. The contractor shall upon site installation validate configuration is correct and working.

52. The contractor shall agree to the DHA Cybersecurity/RMF requirements, receive an ATO and maintain the ATO for 5-years in accordance with the contractual period of performance or as long as mutually agreed to by both parties. (Deliverable #3).

53. The contractor shall maintain an ATO on all product versions owned by the DHA and originally purchased through the awarded contract. If a contractor cannot support the ATO for all DHA owned versions of the product, the contractor can meet this requirement by offering to provide all upgrades to the product that are required to maintain the ATO for 5-years in accordance with the contractual period of performance or as long as mutually agreed to by both parties. (Deliverable #4).

54. The contractor shall provide all costs/prices needed to meet the requirements in this document as part of their offer/quote and any items not included in the contractors offer/quote shall be offered at no cost for 5-years in accordance with the contractual period of performance or as long as mutually agreed to by both parties. Contractors who cannot support all versions of the product and cannot offer upgrades required to maintain the ATO for 5-years shall not be considered. Maintaining the RMF ATO shall be included as part of the contractor’s warranty period.

55. The awarded contractor shall maintain the ATO; for 5-years in accordance with the contractual period of performance or as long as mutually agreed to by both parties. If the patches are separate from updates as required by the contractor’s contract, the contractor shall offer the cybersecurity patches under a maintenance offering on their contract that provides for all required cybersecurity patches/updates needed to maintain the ATO.

56. The contractor shall agree to the DHA Cybersecurity requirements for all software purchased as part of this contract. Contractors may otherwise request an exception to cybersecurity policy. Exceptions to cybersecurity policy are contingent on approval by local and DHA CIO and Approving Official (AO).

57. The contractor shall agree to the DHA Cybersecurity requirements for all upgrades. Although there is an exception to cybersecurity policy process for upgrades similar to maintenance, the DHA does not envision granting exceptions to cybersecurity policy and would instead replace the software in lieu of approving upgrades that do not comply with cybersecurity policy.

58. The contractor shall ensure that personnel accessing information systems have the proper and current IA certification to perform IA functions at contract award in accordance with DoD 8140.03–M, IA Workforce Improvement Program. The contractor shall meet the applicable IA certification requirements as outlined in DFARS 252.239-7001, including.

59. The contractor shall have DoD-approved IA workforce certifications appropriate for each category and level as listed in the current version of DoD 8140.03–M.

60. The contractor shall have appropriate operating system certification for IA technical positions as required by DoD 8140.03–M.

61. Upon request by the Government, the contractor shall provide documentation supporting the IA…