SOW_1305M224Q0286.pdf

STATEMENT OF WORK

Full Service Maintenance Agreement for

AB Sciex API 4000 QQQ and 5500+ QQQ

Including software

1. Scope of Work

The Contractor shall furnish all materials, travel expenses, labor, tools, and equipment necessary to provide full maintenance (including two preventative maintenance visits over a 12-month period) and emergency services on the AB Sciex API4000 (serial number S0660208) and 5500+ (serial number EX236262211) and controlling software (hereafter called the Instruments). The Instruments are located at the NOAA, National Ocean Service, National Centers for Coastal Ocean Sciences, Hollings Marine Laboratory, 331 Fort Johnson Road, Charleston, SC. Period of performance is 9/15/2024 - 9/14/2025 + 2 option years.

2. Availability for Servicing

The Government agrees to make the Instruments covered by this contract available for servicing at the time of each scheduled preventative maintenance or emergency service call. The Contractor’s representative shall contact in advance the Government’s technical representative (Ed Wirth) for a mutually agreeable date and time during the 6th and 12th month of the annual agreement for each preventative maintenance call.

3. Technical Point of Contact(s)

• Ed Wirth- ed.wirth@noaa.gov, 843-481-0542

• Marie DeLorenzo- marie.delorenzo@noaa.gov, 843 212-6643

4. Excluded Services

Contractor shall not be obligated to provide services under this contract for:

a) damaged or destroyed Instrument where such damage is:

1) the result of or caused by fire or explosion of any origin, riot, civil commotion, flood, earthquake, or

2) caused by the Government’s misuse or abuse of such Instruments.

b) interpretation of data.

mailto:ed.wirth@noaa.gov mailto:marie.delorenzo@noaa.gov

c) installation of any field modification of the Instrument not authorized by the manufacturer.

4. Service Area

The Instruments are located at: NOAA, National Ocean Service, Hollings Marine Laboratory, 331 Fort Johnson Road, Charleston, SC 29412. Access is limited to normal Government business hours, except by special arrangement with the contracting officer.

5. Preventative Maintenance

The Contractor shall be currently certified to perform work on Sciex instrumentation. Contractor shall provide, at no additional charge, a minimum of two preventative maintenance visits per year devoted to routine system maintenance to assure long-term performance and reliability of the instrument including system maintenance including checking for contamination, cleaning of the instrument (including all quadrupoles), replacing roughing pump oil, replacing filters, maintenance and backup of Instrument computer and software, checking system status and calibrations and other routine maintenance tasks not specifically described but as outlined in the manufacturer’s service and test manuals. The Contractor shall provide a PPGs Chemical Standards Kit (Low-High Concentration (part number 44061274) annually at the first PM. This visit is to be coordinated with the Government’s technical representative at least two weeks in advance.

6. Telephone or E-mail Support

Contractor shall supply telephone or e-mail support for resolving hardware, software, application and other system problems. Qualified engineers shall be available between 9:00 a.m. and 6:00 p.m. Eastern Standard Time, and a suitable call answering service must be available for all other hours.

7. On-Call Service

Contractor shall provide unlimited service visits for remedial repairs. The Contractor shall initiate repairs within a reasonable response time (less than four (4) workdays).

8. Repair Parts

The Contractor shall supply all parts as needed for remedial repair of the Instruments excluding consumables described below. Repair parts must be functionally identical to the original parts and meet or exceed all technical specifications and requirements of the original parts as determined by the manufacturer. Shipment of repair parts must be within two (2) workdays.

Contractor must have and present a written agreement to obtain all manufacturers’ repair parts for the duration of this contract and any/all option periods. This agreement must include routine parts as well as proprietary items.

Consumable items are considered those items, which would normally be supplied by the Government in the routine operation of the instrument such as solvents and high purity gases.

9. Automatic Software Updates

The Contractor shall automatically provide, upon release from the factory, and without additional cost to the Government, all licensed software and firmware upgrades for the Instrument computer and all software licensed under the original purchase agreement. Contractor must have and present a written agreement with the manufacturer for obtaining updates for the duration of this contract and all option periods.

10. Guarantee of Work

Contractor shall guarantee all work and agree to remedy, at its own expense, any defects caused by poor workmanship or materials. It is anticipated that the deliverables outlined above will: 1) allow the equipment to be fully functional and operational for sample analysis concordant with the work-flow of the laboratory, 2) provide suitable replacement parts for the Instrument as needed in a timely manner, 3) include any necessary software upgrades necessary for Instrument operation, 4) provide end user guidance for resolving hardware, software, application and other system problems.

11. Assignment of Personnel

All work performed under this contract shall be performed by current Sciex certified engineers with manufacturer’s factory training on the specific model of the Instrument. Sufficient personnel must be assigned to the region to ensure rapid response and personnel backup at all times.

12. IT Security Requirements (Scientific Equipment)

The Assessment and Authorization (A&A) requirements of Clause 48 CFR 1352.239-72 do not apply, and a Security Accreditation Package is not required.

Because this is a scientific instrument not all of the following may apply. However, whenever possible, the following should be followed by the vendor.

The contractor will only supply hardware and/or software and/or product license and will not require the use of any contractor owned equipment. The contractor will not have remote access to any government owned equipment.

The contractor includes the necessary product support and supporting documentation for the hardware and/or software that allows the sanitization (following NIST Special Publications 800- 88 Guidelines for Media Sanitization, http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-88r1.pdf) of the hardware and/or software upon the disposal of the product.

The contractor must provide sufficient document demonstrating the software being provided complies with Office of Management and Budget Memorandum M-07-18 entitled Ensuring New Acquisitions Include Common Security Configurations and the FAR 39.101(d) regulations involving NIST common security configuration checklists including United States Government Configuration Baseline (USGCB) initiative. More information is available at National Checklist Program (NCP), (http://checklists.nist.gov), is the U.S. government repository of publicly available security checklists (or benchmarks) that provide detailed low level guidance on setting the security configuration of operating systems and applications. The contractor must provide sufficient documentation which demonstrates the acquiring information technology has implemented common security configurations. Common security configurations are available from the National Institute of Standards and Technology’s website at http://checklists.nist.gov.

The contractor must ensure that the product being purchased complies with the Homeland Security Presidential Directive 12 (HSPD-12) requirements from FAR 4.1302 stating: (a) In order to comply with FIPS PUB 201, agencies must purchase only approved personal identity verification products and services. (b) Agencies may acquire the approved products and services from the GSA, Federal Supply Schedule 70, Special Item Number (SIN) 132-62, HSPD-12 Product and Service Components, in accordance with ordering procedures outlined in FAR Subpart 8.4.

The contractor must ensure that the product being purchased complies with Internet Protocol Version 6 (IPv6) requirements from FAR part 11.002 requirements which state that unless the agency Chief Information Officer waives the requirement, when acquiring information technology using Internet Protocol, the requirements documents must include reference to the appropriate technical capabilities defined in the USGv6 Profile (NIST Special Publication (SP) 500-267- http://www.nist.gov/itl/antd/usgv6.cfm) and the corresponding declarations of conformance defined in the USGv6 Test Program (http://www-x.antd.nist.gov/usgv6/index.html). To meet this requirement each DOC acquisition of IP protocol technology must express requirements for IPv6 capabilities in terms of the USGv6 Profile (i.e., using the USGV6 Capabilities Check List) and vendors must be required to document their product’s support of the requested capabilities through the USGv6 test program (reference http://www.antd.nist.gov/usgv6/) using the USGv6 Suppliers Declaration of Conformity.

http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-88r1.pdf http://checklists.nist.gov/ http://checklists.nist.gov/ http://www.antd.nist.gov/usgv6/

The contractor must provide sufficient document demonstrating the software being provided meets the following:

The standard installation, operation, maintenance, updates and/or patching of software shall not alter the configuration settings from the approved USGCB/other secure configuration.

Applications designed for normal end users shall run in the standard user context without elevated system administration privileges.

The contractor must provide all supporting documentation or a reference to obtain the necessary material which describes the security capabilities, the design and development processes and the testing and evaluation procedures used by the product or services being provided for this acquisition. The contractor must provide all supporting documentation or a reference to obtain the necessary material which describes all product or service updates and enhancements as they are implemented. The product or service supporting documentation could be the user and system administrator guides, which documents the functional properties of the security controls employed to permit the analysis and testing of the security controls.