Solicitation - N0017426Q1088.pdf

PDF 2 MB Posted

Attached to
Tent, Chairs, and Restroom Rentals
Solicitation number
N0017426Q1088
Issued by

About this file

This is a Request for Quote (RFQ) issued by the Naval Surface Warfare Center Indian Head Division (NSWC IHD) for rental equipment to support a VIP Change of Command Ceremony on September 3, 2026.

The solicitation (N0017426Q1088) requires three line items: 150 white garden resin folding chairs free of stains, dirt, or damage; one tent large enough to cover a 50 x 50-foot space with rain sides and weighted tie downs in pristine condition; and one 12-foot, 3-stall ADA-compliant restroom trailer with sink, water, and power source. All pricing is on a firm fixed-price basis per lot. The contractor is responsible for delivery, setup, and installation on Wednesday, September 2, 2026, between 9:00 AM and 3:00 PM, and for breakdown and pickup on Friday, September 4, 2026, between 9:00 AM and 3:00 PM. Delivery location is the NSWC IHD Amphitheater at 1771 N. Dashiell Road, Indian Head, Maryland 20640. The solicitation is designated for Women-Owned Small Business (WOSB) with a 100% set-aside. The North American Industry Classification System (NAICS) code is 532289 with a size standard of USD 12,500,000. Proposals are due five calendar days after the site visit, with the site visit scheduled ten calendar days from the solicitation date of July 23, 2026. Interested contractors must provide notice of interest and completed visitor request forms within five calendar days of the solicitation date. The contract incorporates numerous FAR and DFARS clauses including cybersecurity requirements (CMMC Level 1), safety provisions, and payment through the Wide Area Workflow system.

View the file

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

WOMEN-OWNED SMALL

BUSINESS (WOSB)

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL PRODUCTS AND COMMERCIAL SERVICES

1. REQUISITION NUMBER PAGE 1 OF

2. CONTRACT NUMBER 3. AWARD/EFFECTIVE

DATE

4. ORDER NUMBER 5. SOLICITATION NUMBER 6. SOLICITATION ISSUE

DATE

7. FOR SOLICITATION

INFORMATION CALL:

a. NAME b. TELEPHONE NUMBER (No collect calls)

8. OFFER DUE DATE/

LOCAL TIME

9. ISSUED BY

13b. RATING

14. METHOD OF SOLICITATION

CODE

15. DELIVER TO 16. ADMINISTERED BY CODE

18a. PAYMENT WILL BE MADE BY CODE17a. CONTRACTOR/

OFFEROR

CODE

FACILITY

CODE

CODE

TELEPHONE NUMBER

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT SUCH ADDRESS IN

OFFER

18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a UNLESS BLOCK

BELOW IS CHECKED

REQUEST

FOR QUOTE

(RFQ)

INVITATION

FOR BID

(IFB)

REQUEST

FOR

PROPOSAL

(RFP)

SEE ADDENDUM

19.

ITEM NUMBER

20.

SCHEDULE OF SUPPLIES/SERVICES

21.

QUANTITY

22.

UNIT

23.

UNIT PRICE

24.

AMOUNT

(Use Reverse and/or Attach Additional Sheets as Necessary)

25. ACCOUNTING AND APPROPRIATION DATA 26. TOTAL AWARD AMOUNT (For Government Use Only)

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN

COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH

AND DELIVER ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND

ON ANY ADDITIONAL SHEETS SUBJECT TO THE TERMS AND CONDITIONS

SPECIFIED

29. AWARD OF CONTRACT: REFERENCE OFFER

DATED . . YOUR OFFER ON SOLICITATION

(BLOCK 5), INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE

SET FORTH HEREIN, IS ACCEPTED AS TO ITEMS:

30a. SIGNATURE OF OFFEROR/CONTRACTOR

30b. NAME AND TITLE OF SIGNER (Type or print) 30c. DATE SIGNED

31a. UNITED STATES OF AMERICA (SIGNATURE OF CONTRACTING OFFICER)

31b. NAME OF CONTRACTING OFFICER (Type or print) 31c. DATE SIGNED

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

STANDARD FORM 1449 (REV. 11/2021)

Prescribed by GSA - FAR (48 CFR) 53.212

10. THIS ACQUISITION IS UNRESTRICTED OR

NORTH AMERICAN

INDUSTRY CLASSIFICATION

STANDARD (NAICS):

SIZE STANDARD:

13a. THIS CONTRACT IS A

RATED ORDER UNDER

THE DEFENSE PRIORITIES

AND ALLOCATIONS

SYSTEM - DPAS (15 CFR 700)

SET ASIDE: % FOR:

11. DELIVERY FOR FREE ON

BOARD (FOB) DESTINATION

UNLESS BLOCK IS MARKED

SEE SCHEDULE

12. DISCOUNT TERMS

ARE ARE NOT ATTACHED

ARE ARE NOT ATTACHED

27a. SOLICITATION INCORPORATES BY REFERENCE (FEDERAL ACQUISITION REGULATION) FAR 52.212-1, 52.212-4. FAR 52.212-3

AND 52.212-5 ARE ATTACHED. ADDENDA

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA

8(A)

ECONOMICALLY

DISADVANTAGED

WOMEN-OWNED SMALL

BUSINESS (EDWOSB)

SERVICE-DISABLED

VETERAN-OWNED

SMALL BUSINESS

(SDVOSB)

HUBZONE SMALL

BUSINESS

SMALL BUSINESS

NOTE: OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, AND 30.

Created On:

23 Jul 2026, 20:15 PM Greenwich Mean Time

Solicitation/Contract Form Continuation

Tent, Chairs, and Restroom Rental

STATEMENT OF WORK

for

VIP Change of Command Rental Equipment

1.0 GENERAL

The Naval Surface Warfare Center Indian Head Division Expeditionary Exploitation UNIT ONE (NSWC IHEODTD, EXU-1) at Indian Head, MD has a requirement to rent equipment to support the VIP Change of Command Ceremony on September 03,2026.

2.0 SCOPE

NSWC IHEODTD, EXU-1 will need to rent the following items for a VIP Change of Command Ceremony that will take place on September 03, 2026.

Qty - 150 - White Garden Resin Folding Chairs - Free of any stains, dirt, damage.

Qty- 1 - Tent large enough to cover a 50 x 50-foot space with Rain Side and weighted tie downs - Free of any stains, dirt, damage.

Qty - 1 - 12ft - 3 Stall Restroom trailers with sink and water & Power source - Restroom must be ADA Compliant

Contractor will be responsible for the delivery, set up/ install, breakdown and pick up of equipment. Delivery, set up/install will need to take place on Wednesday, September 02, 2026, from the hours of 9am - 3pm.

Contractor will be responsible for the breakdown and pick up of all items on Friday, September 04, 2026, from 9am-3pm.

3.0 REQUIREMENT

The Contractor shall provide pricing for all items in the category shown below.

ITEM # DESCRIPTION PART# QTY

1. White Garden Resin Folding Chairs Defined during Site Visit / QTY: 150

2. Large enough to cover 50 x 50 space White Tent with Rain Sides Defined during Site Visit / QTY: 1

3. 12ft - ADA Compliant 3 Stall Restroom trailers with sink and water & Power source Defined during Site Visit / QTY: 1

4.0 IMPORTANT DATES

From solicitation date:

5 calendar days: provide notice of interest and completed visitor request forms to Navy Contract Specialist (CS) and Technical Point of Contact

(TPOC)

10 calendar days: Government schedules site visit with all interested parties

From site visit date:

All questions are due at the time of site visit

5 calendar days: proposals due to Navy CS and TPOC

Period of Performance: The period of performance shall be September 02, 2026-September 04, 2026. Contractor shall coordinate all arrangements with the Government no later than 10 days prior to start date.

5.0 DELIVERY LOCATION / TECHNICAL POINT OF CONTACT (TPOC)

Naval Surface Warfare Center Indian Head Division (NSWC IHD)

N0017426Q1088

Amphitheater

1771 N. Dashiell Road

Indian Head, MD 20640

TPOC: Donna Murphy - donna.m.murphy49.civ@us.navy.mil; Office: 301 743-4144 (cell) 301 653-5698

Continuation of Supplies or Services and Prices/Costs

Additional Information/Notes

Item Supplies/Service Quantity Unit Unit Price Amount

White Garden Resin Folding Chairs

QTY: 150

**Must be free of any stains, dirt, damage

**SEE CLAUSE G-242-H002 FOR DELIVERY LOCATION**

Pricing Arrangement: Firm Fixed Price

1 Lot

One tent large enough to cover 50 x 50 space

**White Tent with Rain Sides **Must be free of any stains, dirt, damage

**SEE CLAUSE G-242-H002 FOR DELIVERY LOCATION**

Pricing Arrangement: Firm Fixed Price

1 Lot

12ft - 3 Stall Restroom trailers with sink and water & Power source - Restroom must be ADA Compliant

**SEE CLAUSE G-242-H002 FOR DELIVERY LOCATION**

Pricing Arrangement: Firm Fixed Price

1 Lot

Continuation of Description

Requirements Tent, Chairs, and Restroom Rental

Continuation of Packaging and Marking

Continuation of Inspection and Acceptance

Overall Contract Inspection/Acceptance Locations

Inspection and Acceptance Location

Both Destination Instructions: Inspect/Accept at Destination

Instructions: Delivery Address:

Naval Surface Warfare Center Indian Head Division (NSWC IHD) Amphitheater 1771 N. Dashiell Road Indian Head, MD 20640

From solicitation date:

5 calendar days: provide notice of interest and completed visitor request forms to Navy Contract Specialist (CS) and Technical Point of Contact (TPOC) 10 calendar days: Government schedules site visit with all interested parties

From site visit date:

All questions are due at the time of the site visit.

5 calendar days: proposals due to Navy CS and TPOC

Period of Performance The period of performance shall be September 02, 2026-September 04, 2026. Contractor shall coordinate all arrangements with the Government no later than 10 days prior to start date.

**Contractor will be responsible for the delivery, set up/ install, breakdown and pick up of equipment. Delivery, set up/install will need to take place on Wednesday, September 02, 2026, from the hours of 9am - 3pm.

**Contractor will be responsible for the breakdown and pick up of all items on Friday, September 04, 2026, from 9am-3pm.

Donna Murphy, POC Email: donna.m.murphy49.civ@us.navy.mil

DoDAAC: N00174 CountryCode: USA

NSWC INDIAN HEAD DIVISION

4219 SOUTH PATTERSON ROAD, INDIAN HEAD MD 20640-1533

INDIAN HEAD, MD 20640-1533

UNITED STATES

Donna Murphy, Technical POC Email: donna.m.murphy49.civ@us.navy.mil Telephone: 301-653-5698

Inspection and Acceptance Location

Both Destination Instructions: Inspect/Accept at Destination

Instructions: Delivery Address:

Naval Surface Warfare Center Indian Head Division (NSWC IHD) Amphitheater 1771 N. Dashiell Road Indian Head, MD 20640

From solicitation date:

5 calendar days: provide notice of interest and completed visitor request forms to Navy Contract Specialist (CS) and Technical Point of Contact (TPOC) 10 calendar days: Government schedules site visit with all interested parties

From site visit date:

All questions are due at the time of the site visit.

5 calendar days: proposals due to Navy CS and TPOC

Period of Performance The period of performance shall be September 02, 2026-September 04, 2026. Contractor shall coordinate all arrangements with the Government no later than 10 days prior to start date.

**Contractor will be responsible for the delivery, set up/ install, breakdown and pick up of equipment. Delivery, set up/install will need to take place on Wednesday, September 02, 2026, from the hours of 9am - 3pm.

**Contractor will be responsible for the breakdown and pick up of all items on Friday, September 04, 2026, from 9am-3pm.

Donna Murphy, POC Email: donna.m.murphy49.civ@us.navy.mil

DoDAAC: N00174 CountryCode: USA

NSWC INDIAN HEAD DIVISION

4219 SOUTH PATTERSON ROAD, INDIAN HEAD MD 20640-1533

INDIAN HEAD, MD 20640-1533

UNITED STATES

Donna Murphy, Technical POC Email: donna.m.murphy49.civ@us.navy.mil Telephone: 301-653-5698

Inspection and Acceptance Location

Both Destination Instructions: Inspect/Accept at Destination

Instructions: Delivery Address:

Naval Surface Warfare Center Indian Head Division (NSWC IHD) Amphitheater 1771 N. Dashiell Road Indian Head, MD 20640

From solicitation date:

5 calendar days: provide notice of interest and completed visitor request forms to Navy Contract Specialist (CS) and Technical Point of Contact (TPOC) 10 calendar days: Government schedules site visit with all interested parties

From site visit date:

All questions are due at the time of the site visit.

5 calendar days: proposals due to Navy CS and TPOC

Period of Performance The period of performance shall be September 02, 2026-September 04, 2026. Contractor shall coordinate all arrangements with the Government no later than 10 days prior to start date.

**Contractor will be responsible for the delivery, set up/ install, breakdown and pick up of equipment. Delivery, set up/install will need to take place on Wednesday, September 02, 2026, from the hours of 9am - 3pm.

**Contractor will be responsible for the breakdown and pick up of all items on Friday, September 04, 2026, from 9am-3pm.

Donna Murphy, POC Email: donna.m.murphy49.civ@us.navy.mil

DoDAAC: N00174 CountryCode: USA

NSWC INDIAN HEAD DIVISION

4219 SOUTH PATTERSON ROAD, INDIAN HEAD MD 20640-1533

INDIAN HEAD, MD 20640-1533

UNITED STATES

Donna Murphy, Technical POC Email: donna.m.murphy49.civ@us.navy.mil Telephone: 301-653-5698

Continuation of Deliveries or Performance

Overall Contract Delivery Period

Contractor Destination

Line Item Delivery Schedule Quantity Address and POC

Delivery Schedule From date of lead time event to completion of performance 3 Calendar Days Dates of Planned Event

Period of Performance From 02 Sep 2026 To 04 Sep 2026

1 Lot Place of Performance DoDAAC: N00174 CountryCode: USA

NSWC INDIAN HEAD DIVISION

NAVAL SURFACE WARFARE CENTER, 4522 MCMAHON

ROAD

INDIAN HEAD, MD 20640-1525

UNITED STATES

Donna Murphy - **SEE CLAUSE G-242-H002 FOR DELIVERY LOCATION**, Technical POC Email: donna.m.murphy49.civ@us.navy.mil

Delivery Schedule From date of lead time event to completion of performance 3 Calendar Days Dates of Planned Event

Period of Performance From 02 Sep 2026 To 04 Sep 2026

1 Lot Place of Performance DoDAAC: N00174 CountryCode: USA

NSWC INDIAN HEAD DIVISION

NAVAL SURFACE WARFARE CENTER, 4522 MCMAHON

ROAD

INDIAN HEAD, MD 20640-1525

UNITED STATES

Donna Murphy - **SEE CLAUSE G-242-H002 FOR DELIVERY LOCATION**, Technical POC Email: donna.m.murphy49.civ@us.navy.mil

Delivery Schedule From date of lead time event to completion of performance 3 Calendar Days Dates of Planned Event

Period of Performance From 02 Sep 2026 To 04 Sep 2026

1 Lot Place of Performance DoDAAC: N00174 CountryCode: USA

NSWC INDIAN HEAD DIVISION

NAVAL SURFACE WARFARE CENTER, 4522 MCMAHON

ROAD

INDIAN HEAD, MD 20640-1525

UNITED STATES

Donna Murphy - **SEE CLAUSE G-242-H002 FOR DELIVERY LOCATION**, Technical POC Email: donna.m.murphy49.civ@us.navy.mil

Continuation of Accounting and Appropriation Data

Contract Clauses

FAR Clauses Incorporated by Reference

Number Title Effective Date

Alternate/ Deviation

Variation Effective Date

52.203-19 Prohibition on Requiring Certain Internal Confidentiality Agreements or Statements. Jan 2017

52.204-10 Reporting Executive Compensation and First-Tier Subcontract Awards. (Deviation 2026- O0038)

Feb 2026

52.222-19 Child Labor-Cooperation with Authorities and Remedies. (Deviation 2026-O0038) Mar 2026 52.222-36 Equal Opportunity for Workers with Disabilities. (Deviation 2026-O0038) Feb 2026 52.225-3 Buy American-Free Trade Agreements-Israeli Trade Act. (Deviation 2026-O0038) Feb 2026 52.226-8 Encouraging Contractor Policies to Ban Text Messaging While Driving. May 2024 52.232-33 Payment by Electronic Funds Transfer-System for Award Management. Oct 2018 52.232-40 Providing Accelerated Payments to Small Business Subcontractors. Mar 2023 52.233-3 Protest after Award. (Deviation 2026-O0038) Feb 2026 52.233-4 Applicable Law for Breach of Contract Claim. (Deviation 2026-O0038) Feb 2026

52.212-4 Terms and Conditions-Commercial Products and Commercial Services. (Deviation 2026- O0038)

Feb 2026

52.219-6 Notice of Total Small Business Set-Aside. (Deviation 2026-O0038) Feb 2026 52.219-13 Notice of Set-Aside of Orders. Mar 2020 52.204-13 System for Award Management-Maintenance. (Deviation 2026-O0038) Feb 2026

DFARS Clauses Incorporated by Reference

Number Title Effective Date

Alternate/ Deviation

Variation Effective Date

252.232-7003 Electronic Submission of Payment Requests and Receiving Reports. Dec 2018 252.203-7000 Requirements Relating to Compensation of Former DoD Officials. Sep 2011 252.203-7002 Requirement to Inform Employees of Whistleblower Rights. Dec 2022

252.204-7018 Prohibition on the Acquisition of Covered Defense Telecommunications Equipment or Services.

Jan 2023

252.223-7008 Prohibition of Hexavalent Chromium. Jan 2023 252.225-7056 Prohibition Regarding Business Operations with the Maduro Regime. Jan 2023 252.225-7060 Prohibition on Certain Procurements from the Xinjiang Uyghur Autonomous Region. Jun 2023 252.232-7010 Levies on Contract Payments. Dec 2006 252.247-7023 Transportation of Supplies by Sea. Oct 2024 252.204-7020 NIST SP 800-171 DoD Assessment Requirements. Nov 2023 252.244-7000 Subcontracts for Commercial Products or Commercial Services. Nov 2023 252.204-7012 Safeguarding Covered Defense Information and Cyber Incident Reporting. May 2024

FAR Clauses Incorporated by Full Text

52.219-28 Postaward Small Business Program Rerepresentation. (Deviation 2026-O0038) (Feb 2026)

POSTAWARD SMALL BUSINESS PROGRAM REREPRESENTATION (FEB 2026) (DEVIATION 2026-O0038)

(a) . As used in this clause-Definitions

Long-term contract means a contract of more than five years in duration, including options. However, the term does not include contracts that exceed five years in duration because the period of performance has been extended for a cumulative period not to exceed six months under the clause at 52.217-8, Option to Extend Services, or other appropriate authority.

Small business concern-

(1) Means a concern, including its affiliates, that is independently owned and operated, not dominant in its field of operation, and qualified as a small business under the criteria in 13 CFR part 121 and the size standard in paragraph (c) of this clause.

(2) , as used in this definition, means business concerns, one of whom directly or indirectly controls or has the power to control the others, Affiliates or a third party or parties control or have the power to control the others. In determining whether affiliation exists, consideration is given to all appropriate factors including common ownership, common management, and contractual relationships. SBA determines affiliation based on the factors set forth at 13 CFR 121.103.

(b) If the Contractor represented that it was a small business concern, a small disadvantaged business concern, or a joint venture that was any of the small business concerns identified in 19.000(a)(3) prior to award of this contract, the Contractor shall rerepresent its size and socioeconomic status according to paragraph (e) of this clause or, if applicable, paragraph (g) of this clause, upon occurrence of any of the following:

(1) Within 30 days after execution of a novation agreement or within 30 days after modification of the contract to include this clause, if the novation agreement was executed prior to inclusion of this clause in the contract.

(2) Within 30 days after a merger or acquisition that does not require a novation or within 30 days after modification of the contract to include this clause, if the merger or acquisition occurred prior to inclusion of this clause in the contract.

(3) For long-term contracts-

(i) Within 60 to 120 days prior to the end of the fifth year of the contract; and

(ii) Within 60 to 120 days prior to the date specified in the contract for exercising any option thereafter.

(c) The Contractor shall rerepresent its size status in accordance with the size standard in effect at the time of this rerepresentation that corresponds to the North American Industry Classification System (NAICS) code(s) assigned to this contract. The small business size standard corresponding to this NAICS code(s) can be found at https://www.sba.gov/document/support--table-size-standards.

(d) The small business size standard for a Contractor providing an end item that it does not manufacture, process, or produce itself, for a contract other than a construction or service contract, is 500 employees, or 150 employees for information technology value-added resellers under NAICS code 541519, if the acquisition-

(1) Was set aside for small business and has a value above the simplified acquisition threshold;

(2) Used the HUBZone price evaluation preference regardless of dollar value, unless the Contractor waived the price evaluation preference; or

(3) Was an 8(a), HUBZone, service-disabled veteran-owned, economically disadvantaged women-owned, or women-owned small business set-aside or sole-source award regardless of dollar value.

(e) Except as provided in paragraph (g) of this clause, the Contractor shall make the representation(s) required by paragraph (b) of this clause by validating or updating all its representations in the Representations and Certifications section of the System for Award Management (SAM) and its other data in SAM, as necessary, to ensure that they reflect the Contractor's current status. The Contractor shall notify the contracting officer in writing within the timeframes specified in paragraph (b) of this clause, that the data have been validated or updated, and provide the date of the validation or update.

(f) If the Contractor represented that it was other than a small business concern prior to award of this contract, the Contractor may, but is not required to, take the actions required by paragraphs (e) or (g) of this clause.

(g) If the Contractor does not have representations and certifications in SAM, or does not have a representation in SAM for the NAICS code applicable to this contract, the Contractor is required to complete the following rerepresentation and submit it to the contracting office, along with the contract number and the date on which the rerepresentation was completed:

(1) The Contractor represents that it is, is not a small business concern under NAICS Code assigned to contract number.____ ____

(2) [ .] The Contractor represents Complete only if the Contractor represented itself as a small business concern in paragraph (g)(1) of this clause that it is, is not, a small disadvantaged business concern as defined in .13 CFR 124.1001

(3) . The Contractor represents that it is, is not a Women-owned small business (WOSB) joint venture eligible under the WOSB Program joint venture that complies with the requirements of 13 CFR 127.506(a) through (c). [ The Contractor shall enter the name and unique entity ____ identifier of each party to the joint venture: __.]

(4) . The Contractor represents that it is, is not a joint Economically disadvantaged women-owned small business (EDWOSB) joint venture venture that complies with the requirements of 13 CFR 127.506(a) through (c). [ The Contractor shall enter the name and unique entity identifier ____ of each party to the joint venture: __ .]

(5) . The Contractor represents that it Service-disabled veteran-owned small business (SDVOSB) joint venture eligible under the SDVOSB Program is, is not an SDVOSB joint venture eligible under the SDVOSB Program that complies with the requirements of 13 CFR 128.402. [ The ____ Contractor shall enter the name and unique entity identifier of each party to the joint venture: __.]

(6) [ ] The HUBZone joint venture eligible under the HUBZone Program. Complete only if the offeror is a HUBZone small business concern.

offeror represents, as part of its offer, that It is, is not a HUBZone joint venture that complies with the requirements of 13 CFR 126.616(a) through (c). [ The Contractor shall enter the name and unique entity identifier of each party to the joint venture: .] Each HUBZone small business ____ concern participating in the HUBZone joint venture must be certified as a HUBZone concern. [ Contractor to sign and date and insert authorized ____ signer's name and title.]

(End of clause)

DFARS Clauses Incorporated by Full Text

252.232-7006 Wide Area WorkFlow Payment Instructions. (Jan 2023)

WIDE AREA WORKFLOW PAYMENT INSTRUCTIONS (JAN 2023)

(a) As used in this clause- Definitions.

"Department of Defense Activity Address Code (DoDAAC)" is a six position code that uniquely identifies a unit, activity, or organization.

"Document type" means the type of payment request or receiving report available for creation in Wide Area WorkFlow (WAWF).

"Local processing office (LPO)" is the office responsible for payment certification when payment certification is done external to the entitlement system.

"Payment request" and "receiving report" are defined in the clause at 252.232-7003, Electronic Submission of Payment Requests and Receiving Reports.

(b) The WAWF system provides the method to electronically process vendor payment requests and receiving reports, as Electronic invoicing.

authorized by Defense Federal Acquisition Regulation Supplement (DFARS) 252.232-7003, Electronic Submission of Payment Requests and Receiving Reports.

(c) To access WAWF, the Contractor shall- WAWF access.

(1) Have a designated electronic business point of contact in the System for Award Management at https://www.sam.gov; and

(2) Be registered to use WAWF at https://wawf.eb.mil/ following the step-by-step procedures for self-registration available at this web site.

(d) The Contractor should follow the training instructions of the WAWF Web-Based Training Course and use the Practice WAWF training.

Training Site before submitting payment requests through WAWF. Both can be accessed by selecting the "Web Based Training" link on the WAWF home page at https://wawf.eb.mil/

(e) Document submissions may be via web entry, Electronic Data Interchange, or File Transfer WAWF methods of document submission.

Protocol.

(f) The Contractor shall use the following information when submitting payment requests and receiving reports in WAWF payment instructions.

WAWF for this contract or task or delivery order:

(1) The Contractor shall submit payment requests using the following document type(s): Document type.

(i) For cost-type line items, including labor-hour or time-and-materials, submit a cost voucher.

(ii) For fixed price line items-

(A) That require shipment of a deliverable, submit the invoice and receiving report specified by the Contracting Officer.

Invoice and Receiving Report (COMBO) Destination / Destination

(Contracting Officer: Insert applicable invoice and receiving report document type(s) for fixed price line items that require shipment of a deliverable.)

(B) For services that do not require shipment of a deliverable, submit either the Invoice 2in1, which meets the requirements for the invoice and receiving report, or the applicable invoice and receiving report, as specified by the Contracting Officer.

Invoice and Receiving Report (COMBO) Destination / Destination

(Contracting Officer: Insert either "Invoice 2in1" or the applicable invoice and receiving report document type(s) for fixed price line items for services.)

(iii) For customary progress payments based on costs incurred, submit a progress payment request.

(iv) For performance based payments, submit a performance based payment request.

(v) For commercial financing, submit a commercial financing request.

(2) ) Fast Pay requests are only permitted when Federal Acquisition Regulation (FAR) 52.213-1 is included in the contract.

[Note: The Contractor may use a WAWF "combo" document type to create some combinations of invoice and receiving report in one step.]

(3) The Contractor shall use the information in the Routing Data Table below only to fill in applicable fields in WAWF Document routing.

when creating payment requests and receiving reports in the system.

Routing Data Table*

Field Name in WAWF Data to be entered in WAWF

Pay Official DoDAAC N62838

Issue By DoDAAC N00174

Admin DoDAAC N00174

Inspect By DoDAAC N00174

Ship To Code N00174

Ship From Code ____

Mark For Code ____

Service Approver (DoDAAC) ____

Service Acceptor (DoDAAC) ____

Accept at Other DoDAAC ____

LPO DoDAAC ____

DCAA Auditor DoDAAC ____

Other DoDAAC(s) ____

(*Contracting Officer: Insert applicable DoDAAC information. If multiple ship to/acceptance locations apply, insert "See Schedule" or "Not applicable.")

(**Contracting Officer: If the contract provides for progress payments or performance-based payments, insert the DoDAAC for the contract administration office assigned the functions under FAR 42.302(a)(13).)

(4) The Contractor shall ensure a payment request includes documentation appropriate to the type of payment request in Payment request.

accordance with the payment clause, contract financing clause, or Federal Acquisition Regulation 52.216-7, Allowable Cost and Payment, as applicable.

(5) The Contractor shall ensure a receiving report meets the requirements of DFARS Appendix F. Receiving report.

(g) WAWF point of contact.

(1) The Contractor may obtain clarification regarding invoicing in WAWF from the following contracting activity's WAWF point of contact.

usn.ncr.sea-01.mbx.wawf-hq-functional-mail-box@us.navy.mil OR donna.m.murphy49.civ@us.navy.mil

(Contracting Officer: Insert applicable information or "Not applicable.")

(2) Contact the WAWF helpdesk at 866-618-5988, if assistance is needed.

(End of clause)

252.204-7021 Contractor Compliance with the Cybersecurity Maturity Model Certification Level Requirements.

(Nov 2025)

CONTRACTOR COMPLIANCE WITH THE CYBERSECURITY MATURITY MODEL CERTIFICATION LEVEL REQUIREMENTS (NOV 2025)

(a) . As used in this clause- Definitions

"Controlled unclassified information" means information the Government creates or possesses, or information an entity creates or possesses for or on behalf of the Government, that a law, regulation, or Governmentwide policy requires or permits an agency to handle using safeguarding or dissemination controls (32 CFR 2002.4(h)).

"Current" means-

(1) With regard to Conditional Cybersecurity Maturity Model Certification (CMMC) Status-

(i) Not older than 180 days for Conditional Level 2 (Self) assessments and Conditional Level 2 (certified third-party assessment organization (C3PAO)) assessments, with-

(A) No changes in compliance with the requirements at 32 CFR part 170 since the Conditional CMMC Status date (see 32 CFR

170.16 and 170.17); and

(B) A corresponding affirmation of continuous compliance by an affirming official (see 32 CFR 170.4); and

(ii) Not older than 180 days for Conditional Level 3 (Defense Industrial Base Cybersecurity Assessment Center (DIBCAC)) assessments, with-

(A) No changes in compliance with the requirements at 32 CFR part 170 since the Conditional CMMC Status date (see 32 CFR 170.18); and

(B) A corresponding affirmation of continuous compliance by an affirming official;

(2) With regard to Final CMMC Status-

(i) Not older than 1 year for Final Level 1 (Self), with-

(A) No changes in compliance with the requirements at 32 CFR part 170 since the Final CMMC Status date (see 32 CFR 170.15); and

(B) A corresponding affirmation of continuous compliance, not older than 1 year, by an affirming official;

(ii) Not older than 3 years for Final Level 2 (Self) assessments and Final Level 2 (C3PAO) assessments, with-

(A) No changes in compliance with the requirements at 32 CFR part 170 since the Final CMMC Status date (see 32 CFR 170.16 and 170.17); and

(B) A corresponding affirmation of continuous compliance, not older than 1 year, by an affirming official; and

(iii) Not older than 3 years for Final Level 3 (DIBCAC) assessments, with-

(A) No changes in compliance with the requirements at 32 CFR part 170 since the Final CMMC Status date (see 32 CFR 170.18); and

(B) A corresponding affirmation of continuous compliance, not older than 1 year, by an affirming official; and

(3) With regard to affirmation of continuous compliance (32 CFR 170.22), not older than 1 year with no changes in compliance with the requirements at 32 CFR part 170.

"Cybersecurity Maturity Model Certification (CMMC) status" means the result of meeting or exceeding the minimum required score for the corresponding assessment. The potential statuses are as follows:

(1) Final Level 1 (Self).

(2) Conditional Level 2 (Self).

(3) Final Level 2 (Self).

(4) Conditional Level 2 (C3PAO).

(5) Final Level 2 (C3PAO).

(6) Conditional Level 3 (DIBCAC).

(7) Final Level 3 (DIBCAC).

"Cybersecurity Maturity Model Certification unique identifier (CMMC UID)" means 10 alpha-numeric characters assigned to each CMMC assessment and reflected in the Supplier Performance Risk System (SPRS) for each contractor information system.

"Federal contract information (FCI)" means information, not intended for public release, that is provided by or generated for the Government under a contract to develop or deliver a product or service to the Government. It does not include information provided by the Government to the public, such as on public websites, or simple transactional information, such as information necessary to process payments.

"Plan of action and milestones" means a document that identifies tasks to be accomplished. It details resources required to accomplish the elements of the plan, any milestones in meeting the tasks, and scheduled completion dates for the milestones, as defined in National Institute of Standards and Technology Special Publication 800-115 (32 CFR 170.21).

(b) . The Cybersecurity Maturity Model Certification (CMMC) is a framework for assessing a contractor's compliance with Framework applicable information security protections (see 32 CFR part 170).

(c) . The CMMC assessments will not duplicate efforts from any other comparable DoD assessment, except for rare circumstances Duplication when a reassessment may be necessary, for example, when there are indications of issues with cybersecurity and/or compliance with CMMC requirements.

(d) . The Contractor shall- Requirements

(1)(i) Have and maintain for the duration of the contract a current CMMC status at the following CMMC level, or higher: Level 1 for all information Contracting Officer insert: CMMC Level 1 (Self); CMMC Level 2 (Self); CMMC Level 2 (C3PAO); or CMMC Level 3 (DIBCAC) systems used in performance of the contract, task order, or delivery order that process, store, or transmit FCI or CUI; and

(ii) Consult 32 CFR 170.23 related to the flowdown of the CMMC requirements, and flow down the correct CMMC level to subcontracts and other contractual instruments;

(2) Only process, store, or transmit FCI or CUI on contractor information systems that have a CMMC status at the CMMC level required in paragraph (d)(1) of this clause, or higher;

(3) Complete on an annual basis, and maintain as current, an affirmation, by the affirming official (see 32 CFR 170.4), of continuous compliance with the requirements associated with the CMMC level required in paragraph (d)(1) of this clause in the Supplier Performance Risk System (SPRS) ( ) for each CMMC UID applicable to each of the contractor information systems that process, store, or transmit FCI https://piee.eb.mil or CUI and that are used in performance of the contract;

(4) Ensure all subcontractors and suppliers complete prior to subcontract award, and maintain on an annual basis, an affirmation, by the affirming official (see 32 CFR 170.4), of continuous compliance with the requirements associated with the CMMC level required for the subcontract or other contractual instrument for each of the subcontractor information systems that process, store, or transmit FCI or CUI and that are used in performance of the subcontract; and

(5) If the Contractor has a CMMC Status of Conditional, successfully close out a valid plan of action and milestones (32 CFR 170.21) to achieve a CMMC Status of Final.

(e) . The Contractor shall- Reporting

(1) Submit to the Contracting Officer-

(i) The CMMC UID(s) issued by SPRS for contractor information systems that will process, store, or transmit FCI or CUI during performance of the contract; and

(ii) Any changes in the CMMC UIDs generated in SPRS throughout the life of the contract, task order, or delivery order, if applicable;

(2) Enter into SPRS the results of a current self-assessment for each CMMC UID, not covered by a C3PAO assessment or DIBCAC assessment, applicable to each of the contractor information systems that process, store, or transmit FCI or CUI and that are used in performance of the contract; and

(3) Complete in SPRS on an annual basis and maintain as current an affirmation of continuous compliance by the affirming official (see 32 CFR 170.4) for each self-assessment, C3PAO assessment, or DIBCAC assessment required under the contract in SPRS.

(f) . The Contractor shall- Subcontracts

(1) Insert the substance of this clause, including this paragraph (f) and excluding paragraph (e)(1), in subcontracts and other contractual instruments, including those for the acquisition of commercial products or commercial services, excluding commercially available off-the-shelf items, if the subcontract or other contractual instrument will contain a requirement to process, store, or transmit FCI or CUI; and

(2) Prior to awarding a subcontract or other contractual instrument, ensure that the subcontractor has a current CMMC certificate or current CMMC status at the CMMC level that is appropriate for the information that is being flowed down to the subcontractor based on the requirements at 32 CFR 170.23.

(End of clause)

Addendum to 52.212-4, Contract Terms and Conditions - Commercial Products and Commercial Services

Voluntary Protection Program Clause

1.1. In August 2006, Indian Head Division (IHD) Naval Surface Warfare Center (NSWC) was nominated to participate in the DoD Voluntary Protection Program Center of Excellence Implementation Initiative of the Defense Safety Oversight Council (DSOC). The Voluntary Protection Program (VPP) was established by the Occupational Safety and Health Administration (OSHA) in 1982 to recognize and promote effective worksite-based safety and health management systems. IHD NSWC, through the utilization of VPP, desires to be a model of safety and health excellence. VPP's emphasis on trust and cooperation between OSHA, the employer, employees, employees representatives, and contractors complements the Agency's enforcement activity but does not take its place. All parties, including Contractors, are to work together to identify and resolve any safety and health problems that may arise, yet obtain Contracting Officer approval of any changes that would impact the terms of the contract. IHD NSWC as the VPP participant develops and implements systems to effectively identify, evaluate, prevent, and control occupational hazards so that injuries and illnesses to employees and contractors are prevented. Contractor and sub-contractor personnel are subject to occupational safety and health oversight. This oversight will be accomplished by IHD NSWC personnel and Contracting Officers. Contractors, sub-contractors, and their employees, while in performance of a contractual action on-site within the geographical boundaries of Naval Support Facility (NSF) Indian Head, shall be subject to the requirements of the IHDIVNAVSURFWARCENINST 5100.22, "Safety Manual" regardless of the type or duration of the contract.

Appendix 13-A, of the chapter 13 entitled "Contractor Safety Requirements When Performing Work at the Naval Support Facility (NSF) Indian Head, MD" shall be signed by the Contractor prior to commencement of services on-site at NSF Indian Head. The Contractor shall maintain one signed copy for future reference in educating its personnel and sub-contractors. A second signed copy shall be provided to the Contracting Officer to be maintained in the contract file. If an occupational safety or health related injury or illness occurs during the performance or as a result of this contractual action, the Contractor shall notify the Contracting Officer Representative (COR) as soon as practicable, who will notify the Safety Office and the Contracting Officer. 1.2 In support of VPP and in compliance with Chapter 13 of the Safety Manual, entitled "Contractor Safety," all Contractors performing on-site at NSF Indian Head shall comply with the following:

1.2.1 Public Law 91-596 (and Amendments), also known as the Occupational Safety and Health

Act of 1970, establishes that all employers, including Contractors, are responsible, as far as possible, for providing every employee a safe and healthful working environment. All employers, including Contractors, shall conform to the standards as issued by OSHA. Contractors are responsible for complying with safety requirements specified in the contract as well as all

Federal, State, and local safety and security regulations. Non-compliance may be cause for the removal of a Contractor or any Contractor employee from the activity and such non-compliance may form the basis for contractual action, up to and including termination for default.

1.2.2 Contractor personnel shall participate in basic safety awareness and hazard identification training offered by the Government activity at the work area they are supporting. Contractors performing on-site shall attend area weekly safety meetings and annual safety stand-downs, as determined by the COR.

1.3 The best Safety and Health Programs involve every level of the organization, instilling a safety culture that reduces accidents for workers and improves the bottom line for managers. When Safety and Health are part of the organization and a way of life, everyone wins. IHD NSWC is committed to safety excellence. The Contractor shall familiarize itself with the IHDIVNAVSURFWARCENINST 5100.22, "Safety Manual," Appendix 13-C entitled

"OSHA Voluntary Protection program (VPP) Fundamentals Training for Contractors".

2. Contractor On Site Training:

2.1 A Contractor providing support on-site at any IHD NSWC site may be required to have its on-site Contractor personnel participate in training covering rules, practices, procedures, equipment and systems, as needed, based on the type of support being provided. This training may include, but is not limited to: Operation Security training (OPSEC); Personally Identifiable Information training; DoD Information Assurance Awareness training; Information Technology Security; Voluntary Protection Program (VPP) training; and Personnel Security training.

2.1.2 This training will be provided at no cost by the IHD NSWC site and will take place on-site during normal contract working hours without any additional compensation for the Contractor. This training does not relieve the Contractor of its responsibility to train its employees in such areas as environment, health, safety, security, sexual harassment, ethics, etc. to ensure compliance with all federal, state, and local laws and DoD regulations.

Contract Terms and Conditions Required To Implement Statutes or Executive Orders — Commercial Products and Commercial Services

Addendum to Contract Clauses

Contract Clauses

FAR Clauses Incorporated by Reference

Number Title Effective Date

Alternate/ Deviation

Variation Effective Date

52.209-10 Prohibition on Contracting With Inverted Domestic Corporations. (Deviation 2026- O0038)

Feb 2026

52.204-19 Incorporation by Reference of Representations and Certifications. Dec 2014

52.209-6 Protecting the Government's Interest When Subcontracting With Contractors Debarred, Suspended, Proposed for Debarment, or Voluntarily Excluded. (Deviation 2026-O0038)

Feb 2026

52.222-3 Convict Labor. (Deviation 2026-O0038) Feb 2026

52.222-90 Addressing DEI Discrimination by Federal Contractors. (Deviation 2026-O0040, Revision 1)

Apr 2026

52.232-1 Payments. Apr 1984 52.232-39 Unenforceability of Unauthorized Obligations. Jun 2013 52.233-1 Disputes. (Deviation 2026-O0038) Feb 2026 52.240-91 Security Prohibitions and Exclusions. (Deviation 2026-O0038) Feb 2026 52.242-17 Government Delay of Work. Apr 1984 52.243-1 Changes-Fixed-Price. (Deviation 2026-O0038) Feb 2026

52.244-6 Subcontracts for Commercial Products and Commercial Services. (Deviation 2026- O0038)

Apr 2026

52.247-34 F.o.b. Destination. Jan 1991 52.225-1 Buy American-Supplies (Deviation 2026-O0038) Feb 2026 52.249-1 Termination for Convenience of the Government (Fixed-Price) (Short Form). Apr 1984 52.240-93 Basic Safeguarding of Covered Contractor Information Systems. (Deviation 2026-O0038) Feb 2026 52.240-92 Security Requirements. (Deviation 2026-O0038) Feb 2026 52.246-4 Inspection of Services-Fixed-Price. Aug 1996

DFARS Clauses Incorporated by Reference

Number Title Effective Date

Alternate/ Deviation

Variation Effective Date

252.204-7003 Control of Government Personnel Work Product. Apr 1992 252.225-7001 Buy American and Balance of Payments Program. Feb 2024 252.225-7002 Qualifying Country Sources as Subcontractors. Mar 2022 252.225-7048 Export-Controlled Items. Jun 2013 252.237-7010 Prohibition on Interrogation of Detainees by Contractor Personnel. Jan 2023 252.243-7001 Pricing of Contract Modifications. Dec 1991

252.204-7009 Limitations on the Use or Disclosure of Third-Party Contractor Reported Cyber Incident Information.

Jan 2023

FAR Clauses Incorporated by Full Text

52.232-35 Designation of Office for Government Receipt of Electronic Funds Transfer Information. (Jul 2013)

DESIGNATION OF OFFICE FOR GOVERNMENT RECEIPT OF ELECTRONIC FUNDS TRANSFER INFORMATION (JUL 2013)

(a) As provided in paragraph (b) of the clause at 52.232-34, Payment by Electronic Funds Transfer-Other than System for Award Management, the Government has designated the office cited in paragraph (c) of this clause as the office to receive the Contractor's electronic funds transfer (EFT) information, in lieu of the payment office of this contract.

(b) The Contractor shall send all EFT information, and any changes to EFT information to the office designated in paragraph (c) of this clause. The Contractor shall not send EFT information to the payment office, or any other office than that designated in paragraph (c). The Government need not use any EFT information sent to any office other than that designated in paragraph (c).

(c) Designated Office:

Name:

Mailing Address:

Telephone Number:

Person to Contact:

Electronic Address:

usn.ncr.sea-01.mbx.wawf-hq-functional-mail-box@us.navy.mil

(End of clause)

52.252-2 Clauses Incorporated by Reference. (Feb 1998)

CLAUSES INCORPORATED BY REFERENCE (FEB 1998)

This contract incorporates one or more clauses by reference, with the same force and effect as if they were given in full text. Upon request, the Contracting Officer will make their full text available. Also, the full text of a clause may be accessed electronically at this/these address(es):

FAR: https://www.acquisition.gov/browsefar DFARS: https://www.acq.osd.mil/dpap/dars/dfarspgi/current/ NMCARS: http://www.secnav.navy.mil [Insert one or more Internet addresses]/rda/Pages/NMCARS.aspx

(End of clause)

Additional Regulation or Supplemental Clauses Incorporated by Full Text

G-232-H005 SUPPLEMENTAL INSTRUCTIONS REGARDING INVOICING (NAVSEA) (JAN

2019)

(Jan 2019)

(a) For other than firm fixed priced contract line item numbers (CLINs), the Contractor agrees to segregate costs incurred under this contract/task order (TO), as applicable, at the lowest level of performance, either at the sub line item number (SLIN) or CLIN level, rather than at the total contract/TO level, and to submit invoices reflecting costs incurred at that level. Supporting documentation in Wide Area Workflow (WAWF) for invoices shall include summaries of work charged during the period covered as well as overall cumulative summaries by individual labor categories, rates, and hours (both straight time and overtime) invoiced; as well as, a cost break down of other direct costs (ODCs), materials, and travel, by technical instruction (TI), SLIN, or CLIN level. For other than firm fixed price subcontracts, subcontractors are also required to provide labor categories, rates, and hours (both straight time and overtime) invoiced; as well as, a cost breakdown of ODCs, materials, and travel invoiced. Supporting documentation may be encrypted before submission to the prime contractor for WAWF invoice submittal. Subcontractors may email encryption code information directly to the Contracting Officer and Contracting Officer Representative (COR). Shouldthe subcontractor lack encryption capability, the subcontractor may also email detailed supporting cost information directly to the Contracting Officer and COR; or other method as agreed to by the Contracting Officer.

(b) Contractors submitting payment requests and receiving reports to WAWF using either Electronic Data Interchange (EDI) or Secure File Transfer Protocol (SFTP) shall separately send an email notification to the COR and Contracting Officer on the same date they submit the invoice in WAWF. No payments shall be due if the contractor does not provide the COR and Contracting Officer email notification as required herein.

(End of Text)

C-204-H002 IMPLEMENTATION OF ENHANCED SECURITY CONTROLS ON SELECT

DEFENSE INDUSTRIAL BASE PARTNER NETWORKS

(Sep 2024)

1. System Security Plan and Plans of Action and Milestones (SSP/POAM) Reviews

a) Within thirty (30) days of contract award, the Contractor shall make its System Security Plan(s) (SSP(s)) for its covered contractor information system(s) available for review by the Government at the contractor's facility.

The SSP(s) shall implement the security requirements in Defense Federal Acquisition Regulation Supplement (DFARS) clause 252.204-7012, which is included in this contract. The Contractor shall fully cooperate in the Government's review of the SSPs at the Contractor's facility.

b) If the Government determines that the SSP(s) does not adequately implement the requirements of DFARS clause 252.204-7012 then the Government shall notify the Contractor of each identified deficiency. The Contractor shall correct any identified deficiencies within thirty (30) days of notification by the Government.

The contracting officer may provide for a correction period longer than thirty (30) days and, in such a case, may require the Contractor to submit a plan of action and milestones (POAM) for the correction of the identified deficiencies. The Contractor shall immediately notify the contracting officer of any failure or anticipated failure to meet a milestone in such a POAM.

c) Upon the conclusion of the correction period, the Government may conduct a follow-on review of the SSP(s) at the Contractor's facilities. The Government may continue to conduct follow-on reviews until the Government determines that the Contractor has corrected all identified deficiencies in the SSP(s).

d) The Government may, in its sole discretion, conduct subsequent reviews at the Contractor's site to verify the information in the SSP(s). The Government will conduct such reviews at least every three (3) years (measured from the date of contract award) and may conduct such reviews at any time upon thirty (30) days' notice to the Contractor.

2. Compliance to NIST 800-171

a) The Contractor shall fully implement the CUI Security Requirements (Requirements) and associated Relevant Security Controls (Controls) in NIST Special Publication 800-171 (Rev. 2) (NIST SP 800-171), or establish a SSP(s) and POA&Ms that varies from NIST 800-171 only in accordance with DFARS clause 252.204-7012(b) (2), for all covered contractor information systems affecting this contract.

b) Notwithstanding the allowance for such variation, the contractor shall identify in any SSP and POA&M their plans to implement the following, at a minimum:

(1) Implement Control 3.5.3 (Multi-factor authentication). This means that multi-factor authentication is required for all users, privileged and unprivileged accounts that log into a network. In other words, any system that is not standalone should be required to utilize acceptable multi-factor authentication. For legacy systems and systems that cannot support this requirement, such as CNC equipment, etc., a combination of physical and logical protections acceptable to the Government may be substituted;

(2) Implement Control 3.1.5 (least privilege) and associated Controls, and identify practices that the contractor implements to restrict the unnecessary sharing with, or flow of, covered defense information to its subcontractors, suppliers, or vendors based on need-to-know principles;

(3) Implement Control 3.1.12 (monitoring and control remote access sessions) - Require monitoring and controlling of remote access sessions and include mechanisms to audit the sessions and methods.

(4) Audit user privileges on at least an annual basis;

(5) Implement:

i. Control 3.13.11 (FIPS 140-2 validated cryptology or implementation of NSA or NIST approved algorithms (i.

e. FIPS 140-2 Annex A: AES or Triple DES) or compensating controls as documented in a SSP and POAM);

and,

ii. NIST Cryptographic Algorithm Validation Program (CAVP) (see https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program);

(6)…

This is the start of the file's text. The full file is on GovTribe.

File details come from the government source that posted it. Updated .