Solicitation - N0017426Q1086.pdf

WOMEN-OWNED SMALL

BUSINESS (WOSB)

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL PRODUCTS AND COMMERCIAL SERVICES

1. REQUISITION NUMBER PAGE 1 OF

2. CONTRACT NUMBER 3. AWARD/EFFECTIVE

DATE

4. ORDER NUMBER 5. SOLICITATION NUMBER 6. SOLICITATION ISSUE

DATE

7. FOR SOLICITATION

INFORMATION CALL:

a. NAME b. TELEPHONE NUMBER (No collect calls)

8. OFFER DUE DATE/

LOCAL TIME

9. ISSUED BY

13b. RATING

14. METHOD OF SOLICITATION

CODE

15. DELIVER TO 16. ADMINISTERED BY CODE

18a. PAYMENT WILL BE MADE BY CODE17a. CONTRACTOR/

OFFEROR

CODE

FACILITY

CODE

CODE

TELEPHONE NUMBER

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT SUCH ADDRESS IN

OFFER

18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a UNLESS BLOCK

BELOW IS CHECKED

REQUEST

FOR QUOTE

(RFQ)

INVITATION

FOR BID

(IFB)

REQUEST

FOR

PROPOSAL

(RFP)

SEE ADDENDUM

19.

ITEM NUMBER

20.

SCHEDULE OF SUPPLIES/SERVICES

21.

QUANTITY

22.

UNIT

23.

UNIT PRICE

24.

AMOUNT

(Use Reverse and/or Attach Additional Sheets as Necessary)

25. ACCOUNTING AND APPROPRIATION DATA 26. TOTAL AWARD AMOUNT (For Government Use Only)

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN

COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH

AND DELIVER ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND

ON ANY ADDITIONAL SHEETS SUBJECT TO THE TERMS AND CONDITIONS

SPECIFIED

29. AWARD OF CONTRACT: REFERENCE OFFER

DATED . . YOUR OFFER ON SOLICITATION

(BLOCK 5), INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE

SET FORTH HEREIN, IS ACCEPTED AS TO ITEMS:

30a. SIGNATURE OF OFFEROR/CONTRACTOR

30b. NAME AND TITLE OF SIGNER (Type or print) 30c. DATE SIGNED

31a. UNITED STATES OF AMERICA (SIGNATURE OF CONTRACTING OFFICER)

31b. NAME OF CONTRACTING OFFICER (Type or print) 31c. DATE SIGNED

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

STANDARD FORM 1449 (REV. 11/2021)

Prescribed by GSA - FAR (48 CFR) 53.212

10. THIS ACQUISITION IS UNRESTRICTED OR

NORTH AMERICAN

INDUSTRY CLASSIFICATION

STANDARD (NAICS):

SIZE STANDARD:

13a. THIS CONTRACT IS A

RATED ORDER UNDER

THE DEFENSE PRIORITIES

AND ALLOCATIONS

SYSTEM - DPAS (15 CFR 700)

SET ASIDE: % FOR:

11. DELIVERY FOR FREE ON

BOARD (FOB) DESTINATION

UNLESS BLOCK IS MARKED

SEE SCHEDULE

12. DISCOUNT TERMS

ARE ARE NOT ATTACHED

ARE ARE NOT ATTACHED

27a. SOLICITATION INCORPORATES BY REFERENCE (FEDERAL ACQUISITION REGULATION) FAR 52.212-1, 52.212-4. FAR 52.212-3

AND 52.212-5 ARE ATTACHED. ADDENDA

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA

8(A)

ECONOMICALLY

DISADVANTAGED

WOMEN-OWNED SMALL

BUSINESS (EDWOSB)

SERVICE-DISABLED

VETERAN-OWNED

SMALL BUSINESS

(SDVOSB)

HUBZONE SMALL

BUSINESS

SMALL BUSINESS

NOTE: OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, AND 30.

Created On:

30 Jun 2026, 14:18 PM Greenwich Mean Time

Solicitation/Contract Form Continuation

NDT (Non-Destructive Testing) Interpretation Software Brand Name Mandatory

Product Service Code: 7D20

N0017426Q1086

Continuation of Supplies or Services and Prices/Costs

Additional Information/Notes

Item Supplies/Service Quantity Unit Unit Price Amount

Rhythm Software with Flash (Brand Name Mandatory)

NOTE: The requirements in DFARS 252.211-7003, Item Identification and Valuation, are applicable for this line item. The contractor shall provide DoD unique identification or a DoD recognized unique identification equivalent.

Manufacturer's Part Number: TBD Pricing Arrangement: Firm Fixed Price

3 Each

0002 Phone Support/Installation

Pricing Arrangement: Firm Fixed Price

1 Each

Continuation of Description

STATEMENT OF WORK

for

Rhythm Review X-ray Interpretation Software

SCOPE:

The Naval Surface Warfare Center, Indian Head Division (NSWC IHD) Non-Destructive Evaluation Branch (M62) has a requirement for three (3) software seats of Waygate Rhythm Review Interpretation Software.

1.0 DEFINITIONS:

1.1 Rhythm Review Software: Brand Name Mandatory digital x-ray image interpretation software. Software was developed by General Electric Inspection Technologies and is now Waygate Technologies.

2.0 REQUIREMENTS:

2.1 Three stand-alone seats of GE (Waygate) Rhythm Review Software 7.X (64 Bit) with Flash!. Computers are not connected to the internet.

2.2 Remote phone support for installation, all three systems will be setup simultaneously.

3.0 DELIVERY AND INSTALLATION

3.1 Physical copies of the software (if required) and any dongles shall be shipped to NSWC IHD Receiving NSWCIHD - Nick Scalfaro

3.2 IHD personnel will conduct the installation and utilize phone support to setup all three seats at the same time.

4.0 DELIVERABLES

4.1 Three seats of standalone software. Any physical components required to support a standalone seat.

5.0 PERIOD OF PERFORMANCE

5.1 Software delivery and any physical required components shall be delivered within 30 days of award.

6.0 TECHNICAL POINT OF CONTACT

NSWC Indian Head Division

Nick Scalfaro

Phone: (301) 744-2414

Operations Security (OPSEC) Requirements

Contractor personnel are subject to applicable provisions of Department of Defense Manual 5205.02-M, Enclosure 6 and NSWC IHD 3070.3D OPSEC Program. Contractor personnel supporting this contract/task order must complete government approved or provided OPSEC awareness training and be prepared to provide completion certificates as requested by the Government. OPSEC education and training may be accomplished through established programs within the DoD Component, using external resources such as the Director of National Intelligence (DNI) and the Defense Security Service Academy, or a combination (i.e. https://securityawareness.dcsa.mil/opsec/index.htm). Contractor personnel may have access to government Critical Information (CI), Indicators and Observables that may indirectly disclose CI. CI includes but is not limited to ship movements and schedules, weapons and sensor system installations, capabilities, and configurations, specific platform installations and characteristics, test schedules, deficiencies, and vulnerabilities. Indicators and Observables may include but are not limited to: outdoors system testing; ship's external hull or superstructure modifications; shipboard equipment, ordnance, weapons, fuels, and/or stores loading/unloading operations, and/or personnel or aircraft embarkation. No CI, Indicators, or Observables may be divulged to third parties (including other company employees who are not subject to this contract/task order) without approval of the local command Security Officer, OPSEC Officer, or the NSWC IHD OPSEC Program Manager.

Requirements Procure Brand Name Mandatory NDT (Non-Destructive Testing) Interpretation Software

Continuation of Packaging and Marking

Continuation of Inspection and Acceptance

Overall Contract Inspection/Acceptance Locations

Inspection and Acceptance Location

Both Destination Instructions: Inspect/Accept at Both

DoDAAC: N00174 CountryCode: USA

NSWC INDIAN HEAD DIVISION

4219 SOUTH PATTERSON ROAD, INDIAN HEAD MD 20640-1533

INDIAN HEAD, MD 20640-1533

UNITED STATES

Nick Scalfaro, TPOC Email: nicholas.w.scalfaro.civ@us.navy.mil

Inspection and Acceptance Location

Both Destination Instructions: Inspect/Accept at Both

DoDAAC: N00174 CountryCode: USA

NSWC INDIAN HEAD DIVISION

4219 SOUTH PATTERSON ROAD, INDIAN HEAD MD 20640-1533

INDIAN HEAD, MD 20640-1533

UNITED STATES

Nick Scalfaro, TPOC Email: nicholas.w.scalfaro.civ@us.navy.mil

Continuation of Deliveries or Performance

Overall Contract Delivery Period

Contractor Destination

Line Item Delivery Schedule Quantity Address and POC

Delivery Schedule From date of lead time event to delivery 30 Calendar Days Date of Award

3 Each Ship To DoDAAC: N00174 CountryCode: USA

NSWC INDIAN HEAD DIVISION

4219 SOUTH PATTERSON ROAD, INDIAN HEAD MD 20640-

INDIAN HEAD, MD 20640-1533

UNITED STATES

Nick Scalfaro, TPOC Email: nicholas.w.scalfaro.civ@us.navy.mil

Period of Performance From 30 Sep 2026 To 16 Nov 2026

1 Each

Continuation of Accounting and Appropriation Data

Contract Clauses

FAR Clauses Incorporated by Reference

Number Title Effective Date

Alternate/ Deviation

Variation Effective Date

52.203-19 Prohibition on Requiring Certain Internal Confidentiality Agreements or Statements. Jan 2017 52.204-13 System for Award Management-Maintenance. (Deviation 2026-O0038) Feb 2026 52.219-6 Notice of Total Small Business Set-Aside. (Deviation 2026-O0038) Feb 2026 52.226-8 Encouraging Contractor Policies to Ban Text Messaging While Driving. May 2024 52.232-33 Payment by Electronic Funds Transfer-System for Award Management. Oct 2018 52.232-40 Providing Accelerated Payments to Small Business Subcontractors. Mar 2023 52.233-3 Protest after Award. (Deviation 2026-O0038) Feb 2026 52.233-4 Applicable Law for Breach of Contract Claim. (Deviation 2026-O0038) Feb 2026

DFARS Clauses Incorporated by Reference

Number Title Effective Date

Alternate/ Deviation

Variation Effective Date

252.203-7000 Requirements Relating to Compensation of Former DoD Officials. Sep 2011 252.203-7002 Requirement to Inform Employees of Whistleblower Rights. Dec 2022 252.204-7012 Safeguarding Covered Defense Information and Cyber Incident Reporting. May 2024

252.204-7018 Prohibition on the Acquisition of Covered Defense Telecommunications Equipment or Services.

Jan 2023

252.223-7008 Prohibition of Hexavalent Chromium. Jan 2023 252.225-7056 Prohibition Regarding Business Operations with the Maduro Regime. Jan 2023 252.232-7003 Electronic Submission of Payment Requests and Receiving Reports. Dec 2018 252.232-7010 Levies on Contract Payments. Dec 2006 252.247-7023 Transportation of Supplies by Sea. Oct 2024

DFARS Clauses Incorporated by Full Text

252.232-7006 Wide Area WorkFlow Payment Instructions. (Jan 2023)

WIDE AREA WORKFLOW PAYMENT INSTRUCTIONS (JAN 2023)

(a) As used in this clause- Definitions.

"Department of Defense Activity Address Code (DoDAAC)" is a six position code that uniquely identifies a unit, activity, or organization.

"Document type" means the type of payment request or receiving report available for creation in Wide Area WorkFlow (WAWF).

"Local processing office (LPO)" is the office responsible for payment certification when payment certification is done external to the entitlement system.

"Payment request" and "receiving report" are defined in the clause at 252.232-7003, Electronic Submission of Payment Requests and Receiving Reports.

(b) The WAWF system provides the method to electronically process vendor payment requests and receiving reports, as Electronic invoicing.

authorized by Defense Federal Acquisition Regulation Supplement (DFARS) 252.232-7003, Electronic Submission of Payment Requests and Receiving Reports.

(c) To access WAWF, the Contractor shall- WAWF access.

(1) Have a designated electronic business point of contact in the System for Award Management at https://www.sam.gov; and

(2) Be registered to use WAWF at https://wawf.eb.mil/ following the step-by-step procedures for self-registration available at this web site.

(d) The Contractor should follow the training instructions of the WAWF Web-Based Training Course and use the Practice WAWF training.

Training Site before submitting payment requests through WAWF. Both can be accessed by selecting the "Web Based Training" link on the WAWF home page at https://wawf.eb.mil/

(e) Document submissions may be via web entry, Electronic Data Interchange, or File Transfer WAWF methods of document submission.

Protocol.

(f) The Contractor shall use the following information when submitting payment requests and receiving reports in WAWF payment instructions.

WAWF for this contract or task or delivery order:

(1) The Contractor shall submit payment requests using the following document type(s): Document type.

(i) For cost-type line items, including labor-hour or time-and-materials, submit a cost voucher.

(ii) For fixed price line items-

(A) That require shipment of a deliverable, submit the invoice and receiving report specified by the Contracting Officer.

Invoice & Receiving Reports (Combo) Destination/Destination

(Contracting Officer: Insert applicable invoice and receiving report document type(s) for fixed price line items that require shipment of a deliverable.)

(B) For services that do not require shipment of a deliverable, submit either the Invoice 2in1, which meets the requirements for the invoice and receiving report, or the applicable invoice and receiving report, as specified by the Contracting Officer.

Invoice & Receiving Reports (Combo) Destination/Destination

(Contracting Officer: Insert either "Invoice 2in1" or the applicable invoice and receiving report document type(s) for fixed price line items for services.)

(iii) For customary progress payments based on costs incurred, submit a progress payment request.

(iv) For performance based payments, submit a performance based payment request.

(v) For commercial financing, submit a commercial financing request.

(2) ) Fast Pay requests are only permitted when Federal Acquisition Regulation (FAR) 52.213-1 is included in the contract.

[Note: The Contractor may use a WAWF "combo" document type to create some combinations of invoice and receiving report in one step.]

(3) The Contractor shall use the information in the Routing Data Table below only to fill in applicable fields in WAWF Document routing.

when creating payment requests and receiving reports in the system.

Routing Data Table*

Field Name in WAWF Data to be entered in WAWF

Pay Official DoDAAC N62838

Issue By DoDAAC N00174

Admin DoDAAC N00174

Inspect By DoDAAC N00174

Ship To Code ____

Ship From Code ____

Mark For Code ____

Service Approver (DoDAAC) ____

Service Acceptor (DoDAAC) ____

Accept at Other DoDAAC ____

LPO DoDAAC ____

DCAA Auditor DoDAAC ____

Other DoDAAC(s) ____

(*Contracting Officer: Insert applicable DoDAAC information. If multiple ship to/acceptance locations apply, insert "See Schedule" or "Not applicable.")

(**Contracting Officer: If the contract provides for progress payments or performance-based payments, insert the DoDAAC for the contract administration office assigned the functions under FAR 42.302(a)(13).)

(4) The Contractor shall ensure a payment request includes documentation appropriate to the type of payment request in Payment request.

accordance with the payment clause, contract financing clause, or Federal Acquisition Regulation 52.216-7, Allowable Cost and Payment, as applicable.

(5) The Contractor shall ensure a receiving report meets the requirements of DFARS Appendix F. Receiving report.

(g) WAWF point of contact.

(1) The Contractor may obtain clarification regarding invoicing in WAWF from the following contracting activity's WAWF point of contact.

Send additional notifications to: cynthia.l.inscoe.civ@us.navy.mil

For invoicing questions: usn.ncr.sea-01.mbx.wawf-hq-functional-mail-box@us.navy.mil

(2) Contact the WAWF helpdesk at 866-618-5988, if assistance is needed.

(End of clause)

N0017426Q1086 mailto:usn.ncr.sea-01.mbx.wawf-hq-functional-mail-box@us.navy.mil

Addendum to 52.212-4, Contract Terms and Conditions - Commercial Products and Commercial Services

1. Voluntary Protection Program:

1.1. In August 2006, Indian Head Division (IHD) Naval Surface Warfare Center (NSWC) was nominated to participate in the DoD Voluntary Protection Program Center of Excellence Implementation Initiative of the Defense Safety Oversight Council (DSOC). The Voluntary Protection Program (VPP) was established by the Occupational Safety and Health Administration (OSHA) in 1982 to recognize and promote effective worksite-based safety and health management systems. IHD NSWC, through the utilization of VPP, desires to be a model of safety and health excellence. VPP's emphasis on trust and cooperation between OSHA, the employer, employees, employees representatives, and contractors complements the Agency's enforcement activity but does not take its place. All parties, including Contractors, are to work together to identify and resolve any safety and health problems that may arise, yet obtain Contracting Officer approval of any changes that would impact the terms of the contract. IHD NSWC as the VPP participant develops and implements systems to effectively identify, evaluate, prevent, and control occupational hazards so that injuries and illnesses to employees and contractors are prevented. Contractor and sub-contractor personnel are subject to occupational safety and health oversight. This oversight will be accomplished by IHD NSWC personnel and Contracting Officers. Contractors, sub-contractors, and their employees, while in performance of a contractual action on-site within the geographical boundaries of Naval Support Facility (NSF) Indian Head, shall be subject to the requirements of the IHDIVNAVSURFWARCENINST 5100.22, "Safety Manual" regardless of the type or duration of the contract.

Appendix 13-A, of the chapter 13 entitled "Contractor Safety Requirements When Performing Work at the Naval Support Facility (NSF) Indian Head, MD" shall be signed by the Contractor prior to commencement of services on-site at NSF Indian Head. The Contractor shall maintain one signed copy for future reference in educating its personnel and sub-contractors. A second signed copy shall be provided to the Contracting Officer to be maintained in the contract file. If an occupational safety or health related injury or illness occurs during the performance or as a result of this contractual action, the Contractor shall notify the Contracting Officer Representative (COR) as soon as practicable, who will notify the Safety Office and the Contracting Officer. 1.2 In support of VPP and in compliance with Chapter 13 of the Safety Manual, entitled "Contractor Safety," all Contractors performing on-site at NSF Indian Head shall comply with the following:

1.2.1 Public Law 91-596 (and Amendments), also known as the Occupational Safety and Health

Act of 1970, establishes that all employers, including Contractors, are responsible, as far as possible, for providing every employee a safe and healthful working environment. All employers, including Contractors, shall conform to the standards as issued by OSHA. Contractors are responsible for complying with safety requirements specified in the contract as well as all

Federal, State, and local safety and security regulations. Non-compliance may be cause for the removal of a Contractor or any Contractor employee from the activity and such non-compliance may form the basis for contractual action, up to and including termination for default.

1.2.2 Contractor personnel shall participate in basic safety awareness and hazard identification training offered by the Government activity at the work area they are supporting. Contractors performing on-site shall attend area weekly safety meetings and annual safety stand-downs, as determined by the COR.

1.3 The best Safety and Health Programs involve every level of the organization, instilling a safety culture that reduces accidents for workers and improves the bottom line for managers. When Safety and Health are part of the organization and a way of life, everyone wins. IHD NSWC is committed to safety excellence. The Contractor shall familiarize itself with the IHDIVNAVSURFWARCENINST 5100.22, "Safety Manual," Appendix 13-C entitled

"OSHA Voluntary Protection program (VPP) Fundamentals Training for Contractors".

2. Contractor On Site Training:

2.1 A Contractor providing support on-site at any IHD NSWC site may be required to have its on-site Contractor personnel participate in training covering rules, practices, procedures, equipment and systems, as needed, based on the type of support being provided. This training may include, but is not limited to: Operation Security training (OPSEC); Personally Identifiable Information training; DoD Information Assurance Awareness training; Information Technology Security; Voluntary Protection Program (VPP) training; and Personnel Security training.

2.1.2 This training will be provided at no cost by the IHD NSWC site and will take place on-site during normal contract working hours without any additional compensation for the Contractor. This training does not relieve the Contractor of its responsibility to train its employees in such areas as environment, health, safety, security, sexual harassment, ethics, etc. to ensure compliance with all federal, state, and local laws and DoD regulations.

Contract Terms and Conditions Required To Implement Statutes or Executive Orders — Commercial Products and Commercial Services

Addendum to Contract Clauses

Contract Clauses

FAR Clauses Incorporated by Reference

Number Title Effective Date

Alternate/ Deviation

Variation Effective Date

52.209-10 Prohibition on Contracting With Inverted Domestic Corporations. (Deviation 2026- O0038)

Feb 2026

52.211-15 Defense Priority and Allocation Requirements. Apr 2008 52.240-91 Security Prohibitions and Exclusions. (Deviation 2026-O0038) Feb 2026 52.240-93 Basic Safeguarding of Covered Contractor Information Systems. (Deviation 2026-O0038) Feb 2026

52.244-6 Subcontracts for Commercial Products and Commercial Services. (Deviation 2026- O0038)

Apr 2026

DFARS Clauses Incorporated by Reference

Number Title Effective Date

Alternate/ Deviation

Variation Effective Date

252.225-7001 Buy American and Balance of Payments Program. Feb 2024 252.225-7002 Qualifying Country Sources as Subcontractors. Mar 2022

Additional Regulation or Supplemental Clauses Incorporated by Full Text

C-204-H002 IMPLEMENTATION OF ENHANCED SECURITY CONTROLS ON SELECT

DEFENSE INDUSTRIAL BASE PARTNER NETWORKS

(Sep 2024)

1. System Security Plan and Plans of Action and Milestones (SSP/POAM) Reviews

a) Within thirty (30) days of contract award, the Contractor shall make its System Security Plan(s) (SSP(s)) for its covered contractor information system(s) available for review by the Government at the contractor's facility.

The SSP(s) shall implement the security requirements in Defense Federal Acquisition Regulation Supplement (DFARS) clause 252.204-7012, which is included in this contract. The Contractor shall fully cooperate in the Government's review of the SSPs at the Contractor's facility.

b) If the Government determines that the SSP(s) does not adequately implement the requirements of DFARS clause 252.204-7012 then the Government shall notify the Contractor of each identified deficiency. The Contractor shall correct any identified deficiencies within thirty (30) days of notification by the Government.

The contracting officer may provide for a correction period longer than thirty (30) days and, in such a case, may require the Contractor to submit a plan of action and milestones (POAM) for the correction of the identified deficiencies. The Contractor shall immediately notify the contracting officer of any failure or anticipated failure to meet a milestone in such a POAM.

c) Upon the conclusion of the correction period, the Government may conduct a follow-on review of the SSP(s) at the Contractor's facilities. The Government may continue to conduct follow-on reviews until the Government determines that the Contractor has corrected all identified deficiencies in the SSP(s).

d) The Government may, in its sole discretion, conduct subsequent reviews at the Contractor's site to verify the information in the SSP(s). The Government will conduct such reviews at least every three (3) years (measured from the date of contract award) and may conduct such reviews at any time upon thirty (30) days' notice to the Contractor.

2. Compliance to NIST 800-171

a) The Contractor shall fully implement the CUI Security Requirements (Requirements) and associated Relevant Security Controls (Controls) in NIST Special Publication 800-171 (Rev. 2) (NIST SP 800-171), or establish a SSP(s) and POA&Ms that varies from NIST 800-171 only in accordance with DFARS clause 252.204-7012(b) (2), for all covered contractor information systems affecting this contract.

b) Notwithstanding the allowance for such variation, the contractor shall identify in any SSP and POA&M their plans to implement the following, at a minimum:

(1) Implement Control 3.5.3 (Multi-factor authentication). This means that multi-factor authentication is required for all users, privileged and unprivileged accounts that log into a network. In other words, any system that is not standalone should be required to utilize acceptable multi-factor authentication. For legacy systems and systems that cannot support this requirement, such as CNC equipment, etc., a combination of physical and logical protections acceptable to the Government may be substituted;

(2) Implement Control 3.1.5 (least privilege) and associated Controls, and identify practices that the contractor implements to restrict the unnecessary sharing with, or flow of, covered defense information to its subcontractors, suppliers, or vendors based on need-to-know principles;

(3) Implement Control 3.1.12 (monitoring and control remote access sessions) - Require monitoring and controlling of remote access sessions and include mechanisms to audit the sessions and methods.

(4) Audit user privileges on at least an annual basis;

(5) Implement:

i. Control 3.13.11 (FIPS 140-2 validated cryptology or implementation of NSA or NIST approved algorithms (i.

e. FIPS 140-2 Annex A: AES or Triple DES) or compensating controls as documented in a SSP and POAM);

and,

ii. NIST Cryptographic Algorithm Validation Program (CAVP) (see https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program);

(6) Implement Control 3.13.16 (Protect the confidentiality of CUI at rest) or provide a POAM for implementation which shall be evaluated by the Navy for risk acceptance.

(7) Implement Control 3.1.19 (encrypt CUI on mobile devices) or provide a plan of action for implementation which can be evaluated by the Government Program Manager for risk to the program.

3. Cyber Incident Response

a) The Contractor shall, within fifteen (15) days of discovering the cyber incident (inclusive of the 72-hour reporting period), deliver all data used in performance of the contract that the Contractor determines is impacted by the incident and begin assessment of potential warfighter/program impact.

b) Incident data shall be delivered in accordance with the Department of Defense Cyber Crimes Center (DC3) Instructions for Submitting Media available at http://www.acq.osd.mil/dpap/dars/pgi/docs /Instructions_for_Submitting_Media.docx. In delivery of the incident data, the Contractor shall, to the extent practical, remove contractor-owned information from Government covered defense information.

c) If the Contractor subsequently identifies any such data not previously delivered to DC3, then the Contractor shall immediately notify the contracting officer in writing and shall deliver the incident data within ten (10) days of identification. In such a case, the Contractor may request a delivery date later than ten (10) days after identification. The contracting officer will approve or disapprove the request after coordination with DC3.

4. Naval Criminal Investigative Service (NCIS) Outreach

The Contractor shall engage with NCIS industry outreach efforts and consider recommendations for hardening of covered contractor information systems affecting DON programs and technologies.

5. NCIS/Industry Monitoring

a) In the event of a cyber incident or at any time the Government has indication of a vulnerability or potential vulnerability, the Contractor shall cooperate with the Naval Criminal Investigative Service (NCIS), which may include cooperation related to: threat indicators; pre-determined incident information derived from the Contractor's infrastructure systems; and the continuous provision of all Contractor, subcontractor or vendor logs that show network activity, including any additional logs the contractor, subcontractor or vendor agrees to initiate as a result of the cyber incident or notice of actual or potential vulnerability.

b) If the Government determines that the collection of all logs does not adequately protect its interests, the Contractor and NCIS will work together to implement additional measures, which may include allowing the installation of an appropriate network device that is owned and maintained by NCIS, on the Contractor's information systems or information technology assets. The specific details (e.g., type of device, type of data gathered, monitoring period) regarding the installation of an NCIS network device shall be the subject of a separate agreement negotiated between NCIS and the Contractor. In the alternative, the Contractor may install network sensor capabilities or a network monitoring service, either of which must be reviewed for acceptability by NCIS. Use of this alternative approach shall also be the subject of a separate agreement negotiated between NCIS and the Contractor.

c) In all cases, the collection or provision of data and any activities associated with this statement of work shall be in accordance with federal, state, and non-US law.

(End of Text)

G-232-H005 SUPPLEMENTAL INSTRUCTIONS REGARDING INVOICING (NAVSEA) (JAN

2019)

(Jan 2019)

(a) For other than firm fixed priced contract line item numbers (CLINs), the Contractor agrees to segregate costs incurred under this contract/task order (TO), as applicable, at the lowest level of performance, either at the sub line item number (SLIN) or CLIN level, rather than at the total contract/TO level, and to submit invoices reflecting costs incurred at that level. Supporting documentation in Wide Area Workflow (WAWF) for invoices shall include summaries of work charged during the period covered as well as overall cumulative summaries by individual labor categories, rates, and hours (both straight time and overtime) invoiced; as well as, a cost break down of other direct costs (ODCs), materials, and travel, by technical instruction (TI), SLIN, or CLIN level. For other than firm fixed price subcontracts, subcontractors are also required to provide labor categories, rates, and hours (both straight time and overtime) invoiced; as well as, a cost breakdown of ODCs, materials, and travel invoiced. Supporting documentation may be encrypted before submission to the prime contractor for WAWF invoice submittal. Subcontractors may email encryption code information directly to the Contracting Officer and Contracting Officer Representative (COR). Shouldthe subcontractor lack encryption capability, the subcontractor may also email detailed supporting cost information directly to the Contracting Officer and COR; or other method as agreed to by the Contracting Officer.

(b) Contractors submitting payment requests and receiving reports to WAWF using either Electronic Data Interchange (EDI) or Secure File Transfer Protocol (SFTP) shall separately send an email notification to the COR and Contracting Officer on the same date they submit the invoice in WAWF. No payments shall be due if the contractor does not provide the COR and Contracting Officer email notification as required herein.

(End of Text)

G-242-H001 GOVERNMENT CONTRACTADMINISTRATION POINTS-OF-CONTACT AND

RESPONSIBILITIES (NAVSEA) (OCT 2023)

(Oct 2023)

(a) The Government reserves the right to administratively substitute any of the points of contact listed below at any time.

(b) The contracting officer is the only person authorized to change this contract or orders issued thereunder. The Contractor shall not comply with any order, direction or request of Government personnel - that would constitute a change - unless it is issued in writing and signed by the Contracting Officer or is pursuant to specific authority otherwise included as part of this contract. If, in the opinion of the contractor, an effort outside the existing scope of this contract is requested, the contractor shall promptly comply with the Notification of Changes clause of this contract.

(c) The points of contact are as follows:

(i) The Procuring Contracting Officer (PCO) is:

Name: [ * ] Address:

[ *Street ] [ *City, State, Zip ] Phone: (Area Code) xxx- [xxxx] E-mail: [ * ]

(ii) The Contract Specialist is:

Name: Latrice Whitfield Address:

4081 N. Jackson Rd, Bldg 841 Indian Head, MD 20640 E-mail: latrice.t.whitfield.civ@us.navy.mil

(iii) The Administrative Contracting Officer (ACO)is:

Name: [ * ] Address:

[ *Street ] [ *City, State, Zip ] Phone: (Area Code) xxx- [xxxx] E-mail: [ * ]

(d) The Contracting Officer's Representative (COR) is the contracting officer's appointed representative for technical matters. The COR is not a contracting officer and does not have the authority to direct the accomplishment of effort which is beyond the scope of the contract or to otherwise change any contract requirements. An informational copy of the COR appointment letter, which provides a delineation of COR authority and responsibilities, will be provided upon award of this contract.

The Contracting Officer's Representative (COR) is:

Name: [ * ] Address:

[ *Street ] [ *City, State, Zip ] Phone: (Area Code) xxx- [xxxx] E-mail: [ * ]

(e) The Alternate Contracting Officer's Representative (ACOR) is responsible for COR responsibilities and functions in the event that the COR is unavailable due to leave, illness, or other official business. The ACOR is appointed by the contracting officer; a copy of the ACOR appointment will be provided upon award of this contract.

The Alternate Contracting Officer's Representative (ACOR) is:

Name: [ * ] Address:

[ *City, State, Zip ] Phone: (Area Code) xxx- [xxxx] E-mail: [ * ]

(f) The Technical Point of Contact (TPOC) is the contracting officer's representative for technical matters when a COR is not appointed. The TPOC is responsible for technical issues of contract administration, such as providing all items of Government Furnished Information (GFI), Government Furnished Material (GFM) and Government Furnished Equipment (GFE) if specified in the contract as well as the inspection and acceptance of all contract deliverables.

The Technical Point of Contact (TPOC) is:

Name: [ * ] Address: [ *Street ]

[ *City, State, Zip ] Phone: (Area Code) xxx- [xxxx] E-mail: [ * ]

(g) The Alternate Technical Point of Contact (ATPOC) is responsible for TPOC responsibilities and functions in the event that the TPOC is unavailable due to leave, illness, or other official business.

The Alternate Technical Point of Contact (ATPOC) is:

Name: [ * ] Address:

[ *City, State, Zip ] Phone: (Area Code) xxx- [xxxx] E-mail: [ * ]

(h) The Authorized Ordering Person(s) for Per-Call Maintenance is responsible for issuing and maintaining records for any per-call orders for remedial maintenance placed under this contract. No per-call order shall be placed outside the scope of this contract and the cumulative total of all orders shall not be in excess of any not-to-exceed amount specified in the contract. Per-call orders shall not, in any way, modify any terms and conditions of the contract.

(i) The Authorized Ordering Person(s) for Per-Call Maintenance is:

Name: [ * ] Address:

[ *Street ] [ *City, State, Zip ] Phone: (Area Code) xxx- [xxxx];

E-mail: [ * ]

(j) The Contractor's point of contact for performance under this contract is:

Name: [ * ] Address:

[ *Street ] [ *City, State, Zip ] Phone: (Area Code) xxx- [xxxx] E-mail: [ * ]

[ * ] To be completed at contract award

(End of Text)

G-242-H002 HOURS OF OPERATION AND HOLIDAY SCHEDULE (NAVSEA) (JUL 2021) (Jul 2021)

(a) The policy of this activity is to schedule periods of reduced operations or shutdown during holiday periods. Deliveries will not be accepted on Saturdays, Sundays or Holidays except as specifically requested by the NSWC IHD. All goods or services attempted to be delivered on a Saturday, Sunday or Holiday without specific instructions from the Contracting Officer or his duly appointed representative will be returned to the contractor at the contractor's expense with no cost or liability to the U.S.

Government.

(b) The federal Government observes public Holidays that have been established under 5 U.S.C. 6103. The actual date of observance for each of the holidays, for a specific calendar year, may be obtained from the OPM website at OPM.GOV or by using the following direct link: https://www.opm.gov/policy-data-oversight/pay-leave/federal-holidays/.

(c) Delayed Opening, Early Dismissal and Closure of Government Facilities. When a Government facility has a delayed opening, is closed or Federal employees are dismissed early (due to severe weather, security threat, security exercise, or a facility related problem) that prevents personnel from working, onsite contractor personnel regularly assigned to work at that facility shall follow the same reporting and/or departure directions given to Government personnel. The contractor shall not direct charge to the contract for such time off, but shall follow parent company policies regarding taking leave (administrative or other). Non-essential contractor personnel, who are not required to remain at or report to the facility, shall follow their parent company policy regarding whether they should go/stay home or report to another company facility. Subsequent to an early dismissal, delayed opening, or during periods of inclement weather, onsite contractors should monitor the OPM website as well

N0017426Q1086 https://www.opm.gov/policy-data-oversight/pay-leave/federal-holidays/ https://www.opm.gov/policy-data-oversight/pay-leave/federal-holidays as radio and television announcements before departing for work to determine if the facility is closed or operating on a delayed arrival basis.

(d) When Federal employees are excused from work due to a holiday or a special event (that is unrelated to severe weather, a security threat, or a facility related problem), on site contractors shall continue working established work hours or take leave in accordance with parent company policy. Those contractor employees who take leave shall not direct charge the non-working hours to the contract. Contractors are responsible for predetermining and disclosing their charging practices for early dismissal, delayed openings, or closings in accordance with the FAR, applicable cost accounting standards, and the company's established policy and procedures. Contractors shall follow their disclosed charging practices during the contract period of performance, and shall not follow any verbal directions to the contrary. The Contracting Officer will make the determination of cost allowability for time lost due to facility closure in accordance with FAR, applicable Cost Accounting Standards, and the Contractor's established accounting policy and procedures.

(e) If you intend to visit the Contracts Office, it is advised that you call for an appointment at least 24 hours in advance.

(f) The hours of operation are as follows:

Building 116 0730 - 1130, 1230 - 1530

(g) All deliveries to the Receiving Officer, Building 116, shall be made Monday through Friday from to , local 0730 - 1130 1230 - 1530 time. Deliveries will not be accepted after . No deliveries will be accepted on federal government holidays.1530

(End of Text)

L-209-H009 NOTIFICATION OF POTENTIAL ORGANIZATIONAL OR PERSONAL CONFLICT

(S) OF INTEREST (NAVSEA) (APR 2022)

(Apr 2022)

(a) Offerors are reminded that certain existing contractual arrangements may preclude, restrict or limit participation, in whole or in part, either as a subcontractor or as a prime contractor under this competitive procurement. Of primary concern are those contractual arrangements in which the Offeror provides support to , or related laboratories (if applicable), in NSWC IHD M62 support of operation of the office or any of its programs. General guidance may be found in FAR 9.505; however, this guidance is not all-inclusive. The Offeror's attention is directed to the "Organizational Conflict of Interest" (OCI) or similar requirement which may be contained in current or completed contract(s) which prohibits the prime or subcontractor from providing certain supplies or services to the Government as described above during the period of the current "support" contract(s) or for a period after completion of the "support" contract(s). Notwithstanding the existence or non-existence of an OCI or similar requirement in current or completed contract(s), the Offeror shall comply with FAR subpart 9.5 and identify whether an OCI exists and not rely solely on the presence of an OCI or similar requirement.

(b) Offerors also are reminded that certain potential conflicts of interest may arise where an Offeror has unequal access to nonpublic information about a competitor that may provide the Offeror with an unfair competitive advantage and preclude, restrict or limit participation, in whole or in part, either of the individual, subcontractor or prime contractor under this competitive procurement. For example, a potential conflict may arise if former Department of Navy employee(s), subcontractors, or teaming partners of the Offeror may have gained access to nonpublic information about a competitor through participation in previous or ongoing performance or during the solicitation development/source selection process associated with this competitive procurement, and then participates in the formation of the Offeror's proposal. Other potential conflicts of interest may arise where either the former Department of Navy employee(s), subcontractors, or teaming partners of the Offeror under this competitive procurement set the ground rules for competition; for example, by drafting specifications or assisting in the drafting of the statement of work. General guidance may be found in FAR 3.101 and 9.505; however, this guidance is not all-inclusive.

(c) If an Offeror identifies a potential conflict of interest that exists at any tier, that Offeror is requested to notify the Contracting Officer within 14 days of the date of this solicitation. The Offeror shall provide: (1) the contract or previous source selection's solicitation number and name and phone number of the Contracting Officer for the contract which gives rise to a potential conflict of interest; (2) a copy of the requirement; (3) the statement of work and technical instruction from the existing contract, as applicable; (4) a brief description of the type of work to be performed by each subcontractor under the competitive procurement; (5) a brief description of the individual's, subcontractor's, or teaming partner's unequal access to nonpublic information about a competitor, which may lead to a conflict of interest in the formation of the Offeror's proposal, or establishment of ground rules for this competitive procurement, as applicable; (6) an OCI mitigation plan, as applicable; and (7) any additional information the Contracting Officer should consider in making a determination of whether a conflict of interest exists. The Government may independently verify the information received from the Offeror. The requirement to identify potential conflicts of interest as outlined herein continues until contract award. Notwithstanding the above, the Government reserves the right to determine whether a conflict of interest exists based on any information received from any source.

(d) The Government will notify an Offeror of any conflict of interest within 14 days of receipt of all required information. Those Offerors deemed to have a conflict of interest may be ineligible for award. Failure to provide the information in a timely manner does not waive the Government's rights to make a conflict of interest determination. The Offeror is notified that if it expends time and money on proposal preparation, such expenditure is at its own risk regardless of whether the Government determines a personal or organizational conflict of interest does or does not exist.

(e) Any potential prime contractor which proposes an individual, subcontractor, or teaming partner later determined to have a conflict of interest and deemed ineligible to participate in the current competition, may not be granted the opportunity to revise its proposal to remove the ineligible individual, subcontractor or teaming partner. The Government reserves the right to determine which Offerors remain in the competitive range through the normal source selection process.

(f) If the Offeror determines that a potential organizational and/or personal conflict of interest does not exist at any tier, the Offeror shall include a statement to that effect in its response to this solicitation.

(End of Provision)

List of Contract Documents, Exhibits, or Attachments

Solicitation Provisions

DFARS Clauses Incorporated by Reference

Number Title Effective Date

Alternate/ Deviation

Variation Effective Date

252.203-7005 Representation Relating to Compensation of Former DoD Officials. Sep 2022 252.204-7008 Compliance with Safeguarding Covered Defense Information Controls. Oct 2016 252.204-7024 Notice on the Use of the Supplier Performance Risk System. Mar 2023 252.225-7055 Representation Regarding Business Operations with the Maduro Regime. May 2022

DFARS Clauses Incorporated by Full Text

252.204-7017 Prohibition on the Acquisition of Covered Defense Telecommunications Equipment or Services-Representation.

(May 2021)

PROHIBITION ON THE ACQUISITION OF COVERED DEFENSE TELECOMMUNICATIONS EQUIPMENT OR SERVICES-

REPRESENTATION (MAY 2021)

The Offeror is not required to complete the representation in this provision if the Offeror has represented in the provision at 252.204-7016, Covered Defense Telecommunications Equipment or Services-Representation, that it "does not provide covered defense telecommunications equipment or services as a part of its offered products or services to the Government in the performance of any contract, subcontract, or other contractual instrument."

(a) . "Covered defense telecommunications equipment or services," "covered mission," "critical technology," and "substantial or Definitions essential component," as used in this provision, have the meanings given in the 252.204-7018 clause, Prohibition on the Acquisition of Covered Defense Telecommunications Equipment or Services, of this solicitation.

(b) . Section 1656 of the National Defense Authorization Act for Fiscal Year 2018 (Pub. L. 115-91) prohibits agencies from Prohibition procuring or obtaining, or extending or renewing a contract to procure or obtain, any equipment, system, or service to carry out covered missions that uses covered defense telecommunications equipment or services as a substantial or essential component of any system, or as critical technology as part of any system.

(c) . The Offeror shall review the list of excluded parties in the System for Award Management (SAM) at for Procedures https://www.sam.gov entities that are excluded when providing any equipment, system, or service to carry out covered missions that uses covered defense telecommunications equipment or services as a substantial or essential component of any system, or as critical technology as part of any system, unless a waiver is granted.

(d) . If in its annual representations and certifications in SAM the Offeror has represented in paragraph (c) of the provision at Representation 252.204-7016, Covered Defense Telecommunications Equipment or Services-Representation, that it "does" provide covered defense telecommunications equipment or services as a part of its offered products or services to the Government in the performance of any contract, subcontract, or other contractual instrument, then the Offeror shall complete the following additional representation:

The Offeror represents that it will will not provide covered defense telecommunications equipment or services as a part of its offered products or services to DoD in the performance of any award resulting from this solicitation.

(e) . If the Offeror has represented in paragraph (d) of this provision that it "will provide covered defense telecommunications Disclosures equipment or services," the Offeror shall provide the following information as part of the offer:

(1) A description of all covered defense telecommunications equipment and services offered (include brand or manufacturer; product, such as model number, original equipment manufacturer (OEM) number, manufacturer part number, or wholesaler number; and item description, as applicable).

(2) An explanation of the proposed use of covered defense telecommunications equipment and services and any factors relevant to determining if such use would be permissible under the prohibition referenced in paragraph (b) of this provision.

(3) For services, the entity providing the covered defense telecommunications services (include entity name, unique entity identifier, and Commercial and Government Entity (CAGE) code, if known).

(4) For equipment, the entity that produced or provided the covered defense telecommunications equipment (include entity name, unique entity identifier, CAGE code, and whether the entity was the OEM or a distributor, if known).

(End of provision)

Addendum to 52.212-1, Instructions to Offerors - Commercial Products and Commercial Services

Evaluation - Commercial Products and Commercial Services

Addendum to Evaluation - Commercial Product and Commercial Services

Offeror Representations and Certifications - Commercial Products and Commercial Services

Addendum to Solicitation Provisions

FAR Clauses Incorporated by Reference

Number Title Effective Date

Alternate/ Deviation

Variation Effective Date

52.203-18 Prohibition on Contracting with Entities that Require Certain Internal Confidentiality Agreements or Statements-Representation.

Jan 2017

52.204-7 System for Award Management-Registration. (Deviation 2026-O0038) Feb 2026 52.222-50 Combating Trafficking in Persons. (Deviation 2026-O0038) Feb 2026 52.223-23 Sustainable Products. (Deviation 2026-O0038) Feb 2026

52.240-90 Security Prohibitions and Exclusions Representations and Certifications. (Deviation 2026- O0038)

Feb 2026

FAR Clauses Incorporated by Full Text

52.211-14 Notice of Priority Rating for National Defense, Emergency Preparedness, and Energy Program Use.

(Apr 2008)

NOTICE OF PRIORITY RATING FOR NATIONAL DEFENSE, EMERGENCY PREPAREDNESS, AND ENERGY PROGRAM USE (APR 2008)

Any contract awarded as a result of this solicitation will be DX rated order; DO rated order certified for national defense, emergency preparedness, and energy program use under the Defense Priorities and Allocations System (DPAS) (15 CFR700), and the Contractor will be required to follow all of the requirements of this regulation.