SPE1C118Q0049.PDF

REQUEST FOR QUOTATIONS THIS RFQ IS IS NOT A SMALL BUSINESS SET-ASIDE

4. CERT.FOR NAT. DEF.

UNDER BDSA REG. 2

AND/OR DMS REG. 1

5. ISSUED BY

7. DELIVERY

9. DESTINATION

10. PLEASE FURNISH QUOTATIONS TO THE

ISSUING OFFICE IN BLOCK 5 ON OR

BEFORE CLOSE OF BUSINESS (Date)

IMPORTANT: This is a request for information, and quotations furnished are not offers. If you are unable to quote, please so indicate on this form and return it to the address in Block 5. This request does not commit the Government to pay any costs incurred in the preparation of the submission of this quotation or to contract for supplies or services. Supplies are of domestic origin unless otherwise indicated by quoter. Any representations and/or certifications attached to this Request for Quotations must be completed by the quoter.

11. SCHEDULE (See Continuation Sheets)

12. DISCOUNT FOR PROMPT PAYMENT

d. CALENDAR DAYS

NUMBER PERCENTAGE

NOTE: Additional provisions and representations are are not attached.

13. NAME AND ADDRESS OF QUOTER

a. NAME OF QUOTER

14. SIGNATURE OF PERSON AUTHORIZED TO SIGN

QUOTATION

16. SIGNER

AUTHORIZED FOR LOCAL REPRODUCTION

Previous edition not useable

STANDARD FORM 18 (REV. 6-95)

Prescribed by GSA-FAR (48 CFR) 53.215-1(a)

1. REQUEST NO.

SPE1C1-18-Q-0049

2. DATE ISSUED

2017 NOV 20

3. REQUISITION/PURCHASE REQUEST NO.

0071784952

RATING

DO-C9

DLA TROOP SUPPORT

C AND T SUPPLY CHAIN

700 ROBBINS AVENUE

PHILADELPHIA PA 19111-5096

USA

Buyer: KATHLEEN LOGAN PCPQDB4 Tel: 215-737-2436 Fax: 215-737-2136 Email: KATHLEEN.LOGAN@DLA.MIL

6. DELIVER BY (Date)

90 DAYS ADO

8. TO:

c. CITY

d. STATE

b. STREET ADDRESS

a. NAME OF CONSIGNEE

e. ZIP CODE

a. 10 CALENDAR DAYS

b. 20 CALENDAR DAYS (%) c. 30 CALENDAR DAYS

15. DATE OF QUOTATION

a. NAME (Type or Print)

AREA CODE

c. TITLE (Type or Print)d. CITY

c. COUNTY

b. STREET ADDRESS

e. STATE f. ZIP CODE

See Schedule

2017 DEC 20

NUMBER

FOB DESTINATION

OTHER

(See Schedule)

CAGE

b. TELEPHONE

See attached schedule to complete quote information.

Quoter must also complete the following:

a. Quotation is valid for 90 days from date specified in Block 10 above unless otherwise indicated: _____________ .

b. Prices quoted are:

___ Contained in Commercial Catalog or Published Price List No. ___________________ dated _______________ page __________ .

___ Contained in Internal Price List No. _______________dated ____________________, which may be examined at our facility.

___ Commercial sales of comparable quantities: Quantity ____________ ; Price _____________;

___ Customer ________________________.

___ Other (provide basis) ______________________________________ _______________________________________ .

c. FOB Point: ____ Destination ____ Origin Shipping Point (City, State) _________________________________________ .

d. If delivery period shown in Block 6 is unacceptable, provide best possible delivery: _________________________________.

e. Remittance Address (Name, Street, City, State, ZIP): Same as Block 13 unless otherwise indicated below:

f. Vendor FAX Number: ____________________ Vendor Toll-Free Number: ____________________ Vendor E-mail: ______________________________

CONTINUATION SHEET REFERENCE NO. OF DOCUMENT BEING CONTINUED: PAGE 2 OF 25 PAGES

SPE1C1-18-Q-0049

CONTINUED ON NEXT PAGE

CAUTION NOTICES

1. ELECTRONIC INVOICING AND ADVANCED SHIPMENT NOTIFICATIONS (ASN)

The Directorate of Clothing and Textiles (C&T) requires electronic invoicing on all contracts unless another method is mutually agreed to by the Contractor, the Contracting Officer, the contract administration office, and the payment office.

Utilization of Wide Area Workflow – Receipts and Acceptance (WAWF-RA) in conjunction with DFARS 252.232-7003, ELECTRONIC SUBMISSION OF PAYMENT REQUESTS AND RECEIVING REPORTS (JUN 2012).

The Directorate of Clothing and Textiles utilizes VIM-ASAP, which is short for DLA Virtual Item Manager ARN Supply-Chain Automated Processing, to transmit data to WAWF-RA. VIM-ASAP is the only authorized method to electronically process requests for payment to WAWF-RA for the Directorate of Clothing and Textiles. VIM-ASAP will give you visibility of contract information, track production status and print labels. VIM-ASAP pre-populates contract data on your invoices, such as unit price, contract numbers, item numbers, addresses, and many other fields that will save you labor and time.

Advanced Shipment Notifications (ASNs) associated with DFARS clause 252.211-7006, PASSIVE RADIO FREQUENCY IDENTIFICATION (SEP 2011) are sent via VIM-ASAP to WAWF-RA processes.

Please contact the VIM-ASAP help desk at 888-940-7348 to get started today!

For questions about sending Electronic Data Interchange invoices (810-invoice transactions), contact Mr. Bud Wellens at 1-215-737-2778

For questions about invoice preparation, just call the DFAS Customer Service Resource Center at 1-800-756-4571, or Call DSCP DFAS liaisons listed below for assistance: Camille Conaway 1-215-737-4406

Check out these resources:

http://www.dfas.mil/money/vendor/ …. the DFAS Contract Payment Booklet… an excellent desk reference for contractor Accounts Receivable personnel, as well as the status of outstanding invoices.

http://www.dfas.mil/ …. information regarding bill paying process and additional points of contact

2. CHANGED REQUIREMENTS FOR ACCESS TO VIM

Please note: Vendors under contract with DLA Troop Support Clothing & Textiles are able to use a web-based application called VIM, or Virtual Item Manager (https://vim.dla.mil). VIM allows manufacturers to generate and transmit contract documents such as Delivery Orders (DD1155s) and Material Inspection and Receiving Reports (DD250s). Previously, vendors registered using a user ID and password; however, soon all vendors must use an ECA certificate to access VIM. Please see below for more information.

Why is VIM requiring access via ECA certificate?

DoDI 8520.2 Mandates the use of DoD PKI identity certificates when accessing DoD information systems. The DoD established the External Certification Authority (ECA) program to support the issuance of DoD- approved certificates to industry partners and other external entities and organizations. ECA certificates enable contractors to securely communicate with the DoD and authenticate themselves to DoD Information Systems.

What are ECA Certificates?

ECA Certificates are individually issued digital identity credentials. The DoD relies upon these credentials to ensure the identity of the user in online environments or when a certificate holder tries accessing DoD Information Systems. ECA Certificates are stored either on hardware devices (smart cards or USB devices) or software versions (stored on your computer’s hard drive).

You will use your certificate to:

1) Establish your identity when trying to access a protected site

2) Legally "sign" a document, form or application

3) Encrypt messages (email) or documents to ensure confidentiality

Much like a driver’s license or a passport, they are unique to each individual, and cannot be shared. It is against DoD Regulations to share a username and password or allow someone to access another's ECA certificate for any reason. Violation of this policy will result in the immediate revocation of the original owner’s certificate.

How can I obtain an ECA Certificate?

The following are the three entities authorized by the DoD to issue ECA Certificates. Review

CONTINUATION SHEET REFERENCE NO. OF DOCUMENT BEING CONTINUED: PAGE 3 OF 25 PAGES

and apply for an ECA Certificate from one of the below organizations to access your VIM account:

1) IdenTrust: http://www.identrust.com/certificates/eca/index.html

2) ORC (Operational Research Consultants): http://eca.orc.com/

3) VeriSign: https://eca.verisign.com/

I have an ECA Certificate, how do I access VIM now?

Simply log into VIM with your existing User ID and Password as usual and then follow the steps:

1) Under Menu, click the “Certificate Registration” option

2) Read the brief instruction and then click “Continue”

3) Your certificate will display in a pop-up. Select the certificate and click “Continue”

4) You will be prompted to enter your current password for confirmation and click “OK”

5) The message displays “Your Certificate has been successfully registered…” Click “OK” to complete the process. You will be logged out of VIM and prompted to login with your certificate.

6) Click “Accept” to the Terms and then select “Certificate Login”.

7) Your certificate will display in a pop-up. Select the certificate and click “OK” and you will be logged into your VIM account.

Remember, your old login credentials will no longer be valid and you will use your certificate to login into VIM.

3. Offerors are cautioned that facsimile proposals, modifications to proposals, acknowledgement of amendments, withdrawal of proposal, responses to negotiations, and/or final proposal revisions will only be considered when facsimile proposals are authorized.

Telegraphic offers will not be considered unless authorized by the solicitation; however, offers may be modified by written or telegraphic notice.

4. STOP SHIPMENT DELAYS AND REJECTIONS!

For deliveries to New Cumberland depot, ensure your Government or Commercial Bills of Lading are correctly annotated with the following information in the description of articles:

Weight Pieces National Stock Number(s) (NSNs) Contract Number Shipment Number Door #s 113-134 – Mission Delivery (storage)

-- or --

Door #s 135-168 – Container Consolidation Point (CCP) Delivery (OCONUS)

(whichever applies to your freight)

Your truckers/dispatchers/ brokers/etc. should have this information readily available when they phone 717.770.6969 for a delivery appointment to Pre-Lodge.

Don’t let the following common invoicing errors delay your payments any longer:

Missing or Erroneous Contract Number Missing Call/Delivery Order Number Missing or Erroneous Shipment Number Failure to Mark DD250 as an Original Invoice Failure to Distribute a Copy of the DD250 to the Contract Administration Office Terminal Contract Line Item Number (CLIN) is Omitted, Incorrect or Does Not Match that Appearing in the Contract Missing or Erroneous Unit of Issue Quantity and Price are Incorrect Wrong Pay Office on Invoice

Here are three things you can do to speed your invoice payments:

Be sure your original invoice is properly completed and legible.

Submit your invoices electronically using the Web Invoicing System (WInS). It's fast, accurate, and costs you nothing! Learn more at the WInS Home Page, at:

https://www.ecweb.dfas.mil/notes/,and start using WInS with your next invoice! Or

If you currently receive delivery orders electronically, you could benefit by using an 810- invoice transaction.

CONTINUATION SHEET REFERENCE NO. OF DOCUMENT BEING CONTINUED: PAGE 4 OF 25 PAGES

Web Invoicing eliminates postage, snail mail, and much paperwork, and gets the invoice/voucher into the DFAS system usually within 24 hours. Web Invoicing is free to vendors doing business with the Government. You just enter the appropriate information and send your invoice to DFAS electronically. It provides help text and pull-down menus in many fields.

For more specific questions, contact Janice Hockman (703) 607-5111, Kirsten Larco (703) 607-4920 or Debra Jones (703) 607-2082.

For questions about sending Electronic Data Interchange invoices (810-invoice transactions), contact Mr. Bud Wellens at (215) 737-2778

For questions about paper invoice preparation, just call the DFAS Customer Service Resource Center at 1-800 756-4571, or

Call DLA Troop Support DFAS liaisons listed below for assistance:

Camille Conaway (215) 737-4406

Check out these resources:

http://www.dfas.mil/money/vendor the DFAS Contract Payment Booklet… an excellent desk reference for contractor Accounts Receivable personnel, as well as the status of outstanding invoices.

http://www.dfas.mil/ information regarding bill paying process and additional points of contact.

CONTINUATION SHEET REFERENCE NO. OF DOCUMENT BEING CONTINUED: PAGE 5 OF 25 PAGES

CONTINUED ON NEXT PAGE

SECTION B

SUPPLIES/SERVICES: PGC: 10560

ITEM DESCRIPTION:

RP001: DLA PACKAGING REQUIREMENTS FOR PROCUREMENT

RA001: THIS DOCUMENT INCORPORATES TECHNICAL AND/OR QUALITY REQUIREMENTS

(IDENTIFIED BY AN 'R' OR AN 'I' NUMBER) SET FORTH IN FULL TEXT IN THE

DLA MASTER LIST OF TECHNICAL AND QUALITY REQUIREMENTS FOUND ON THE WEB

AT: http://www.dla.mil/HQ/Acquisition/Offers/eProcurement.aspx. FOR

SIMPLIFIED ACQUISITIONS, THE REVISION OF THE MASTER IN EFFECT ON THE

SOLICITATION ISSUE DATE OR THE AWARD DATE CONTROLS. FOR LARGE

ACQUISITIONS, THE REVISION OF THE MASTER IN EFFECT ON THE RFP ISSUE DATE

APPLIES UNLESS A SOLICITATION AMENDMENT INCORPORATES A FOLLOW-ON

REVISION, IN WHICH CASE THE AMENDMENT DATE CONTROLS.

DELETE CURRENT "BARCODE LABEL/TAG" REQUIREMENTS AND SUBSTITUTE THE

FOLLOWING:

LABEL TAG: EACH ITEM SHALL BE INDIVIDUALLY BAR-CODED WITH A PAPER TAG

FOR PERSONAL CLOTHING ITEMS. THE PAPER USED FOR THE TAGS SHALL BE

STANDARD BLEACHED SULFATE HAVING A BASIS WEIGHT OF 100 POUNDS WITH A

SMOOTH FINISH TO ACCEPT THERMAL TRANSFER AND DIRECT PRINTING. THE TAGS

SHALL HAVE A HOLE AND SHALL BE ATTACHED TO EACH ITEM BY A FASTENER,

CLEARLY LEGIBLE AND READABLE BY SCANNER. THE BAR CODING ELEMENT SHALL

BE A 13 DIGIT

NATIONAL STOCK NUMBER (NSN). THERE SHALL BE A 12 DIGIT UNIVERSAL PRODUCT

CODE (UPC) ASSIGNED FOR ALL NSNS BY THE GOVERNMENT. THE INITIAL "UPC"

MUST APPEAR BENEATH THE CODE. THE BAR CODES FOR NSN AND UPC SHALL BE A

MEDIUM TO HIGH DENSITY AND SHALL BE LOCATED SO THAT THEY ARE COMPLETELY

VISIBLE ON THE ITEM WHEN IT IS FOLDED AND PACKAGED AS SPECIFIED. THE

LABEL'S LOCATION SHALL CAUSE NO DAMAGE TO THE ITEM.

NOTE: UNIVERSAL PRODUCT CODE INFORMATION THE GOVERMENT ASSIGNED

UNIVERSAL PRODUCT CODE (UPC) MUST BE PLACED ON ALL SHIPPING CARTONS ON

WHICH THE NSN APPEARS.

THE FOLLOWING DEFECTS APPLY FOR BARCODE LABELS/TAGS:

BAR CODE OMITTED OR NOT READABLE BY SCANNER

HUMAN-READABLE INTERPRETATION (HRI) OMITTED OR ILLEGIBLE

NOT VISIBLE ON FOLDED, PACKAGED ITEM CAUSES DAMAGE TO THE ITEM

NOTE: IF THE END ITEM IS PLACED IN A PLASTIC BAG - USE TYPE VII

(PRESSURE SENSTIVE LABEL) OF MIL-DTL-32075.

IF THE END ITEM IS TIED IN A BUNDLE OR LEFT AS AN INDIVIDUAL ITEM, USE

TYPE VIII (TAG, PAPER) OF MIL-DTL-32075.

LONDON BRIDGE TRADING COMPANY, LTD 0EYB3 P/N LBT-6060A-BK

ITEM NO. SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT .

0001 8465-01-621-7861 1,500.000 EA $. ________________ $. ________________

CASE,SHOTGUN

AMMUNI

PRICING TERMS: Firm Fixed Price

QTY VARIANCE: PLUS 0% MINUS 0%

INSPECTION POINT: ORIGIN

CONTINUATION SHEET REFERENCE NO. OF DOCUMENT BEING CONTINUED: PAGE 6 OF 25 PAGES

SUPPLY/SERVICE: PGC: 10560 CONT'D

ACCEPTANCE POINT: ORIGIN

FOB: DESTINATION DELIVERY DATE: 90 DAYS ADO

PREP FOR DELIVERY:

PKGING DATA - MIL-STD-2073-1D, 15 DEC 1999

PRES MTHD:10 CLNG/DRY: PRESV MAT:XX

WRAP MAT: CUSH/DUNN MAT: CUSH/DUNN THKNESS:

UNIT CONT:

PACK CODE:U

MARKING SHALL BE IN ACCORDANCE WITH MIL-STD-129.

SPECIAL MARKING CODE: -

PALLETIZATION SHALL BE IN ACCORDANCE WITH MD00100452 REV B DATED JULY 01, 2008

ADDITIONAL INFORMATION FOR ASTM-D-3951-90:

PACKAGING AND PACKING: SHALL BE IN ACCORDANCE

WITH ASTM-D-3951-90 (STANDARD PRACTICE FOR

COMMERCIAL PACKAGING). SHIPPING CARTONS SHALL BE

MARKED IN ACCORDANCE WITH MIL-STD-129.

IN ADDITION TO THE BAR CODING REQUIRED BY

MIL-STD-129, THE FOLLOWING ADDITIONAL BAR

CODES SHALL BE APPLIED TO THE UNIT PACKS

AND SHIPPING CONTAINERS: CALL (DELIVERY

ORDER) NUMBER SHALL FOLLOW THE CONTRACT

NUMBER, SURVEILLANCE NUMBER AND MANUFACTURED

DATE. A REPLICA OF THE BAR CODED ELEMENTS

SHALL PERMANENTLY BE PLACED ON THE UNIT-

PACKS (PLASTIC BAGS) AND SHIPPING CONTAINERS.

THE SEQUENCE OF ORDER SHALL BE AS FOLLOWS:

(NSN) NATIONAL STOCK NUMBER, CONTRACT/CALL

(DELIVERY ORDER) NUMBERS, SURVEILLANCE NUMBER

AND MANUFACTURING DATE. THE BAR CODES SHALL

BE (3) THREE OF (9) NINE AND READABLE BY A

SCANNER IN ACCORDANCE WITH ANSI/AIM-BCI.

THE REQUIRED BAR CODED LABEL(S) MAY COMPROMISE

OF AN INDIVIDUAL ELEMENT OR A LARGE

LABEL CONTAINING ALL OF THE INDIVIDUAL

ELEMENTS. THE BAR CODED LABELS SHALL

ALSO BE PLACED ON A FRONT SIDE AND LEFT

END OF EACH BOX. ALL OTHER REQUIREMENTS

REMAIN THE SAME AS APPLICABLE.

THE DD250 SHALL CONTAIN ON THE LAST

PAGE, BAR CODES IN THE FOLLOWING ORDER:

CONTRACT AND CONTRACT/CALL (DELIVERY ORDER)

NUMBERS, SURVEILLANCE NUMBER AND MANU ACTED

DATE. IN THE EVENT THAT A SHIPMENT CONTAINS

MULTIPLE SURVEILLANCE NUMBERS AND MANUFACTURED

DATES, AN INDIVIDUAL DD250 FORM IS REQUIRED

FOR EACH SURVEILLANCE NUMBER AND MANUFACTURED

DATE COMBINATION.

MIL-STD-129R - DEPARTMENT OF DEFENSE STANDARD PRACTICE

,,,,,, - MILITARY MARKING FOR SHIPMENT AND STORAGE

,,,,,, DATED 18 FEBRUARY 2014

INTERIM CHANGES:

OMISSION OF MARKINGS ON EXTERIOR SHIPPING CONTAINERS OF ITEMS

IN THE DLA TROOP SUPPORT CLOTHING AND TEXTILE (C<(>&<)>T) DIRECTORATE:

THE NOMENCLATURE AND MANUFACTURER'S NAME (WHEN THE NAME IDENTIFIES THE

MATERIAL) SHALL BE OMITTED FROM ALL EXTERIOR SHIPPING CONTAINERS OF DLA

TROOP SUPPORT C<(>&<)>T ITEMS, REGARDLESS OF MODE OF SHIPMENT.

CONTINUATION SHEET REFERENCE NO. OF DOCUMENT BEING CONTINUED: PAGE 7 OF 25 PAGES

IF THE MANUFACTURER'S NAME DOES NOT IDENTIFY THE MATERIAL AS BEING

CLOTHING, IT MAY REMAIN. NSNS SHALL BE SHOWN ON ALL SHIPPING CONTAINERS

OF C<(>&<)>T ITEMS, THE PACKING LIST SHALL BE PLACED INSIDE THE LAST

CONTAINER TO BE LOADED FOR EACH SHIPMENT. THE WORDS "PACKING LIST HERE"

SHALL BE STENCILED, NOT HAND LETTERED, ON THE CONTAINER.

PARCEL POST ADDRESS:

UY0159

LVI - OCIE SE

PENDERGRASS DISTRIBUTION CENTER

596 BONNIE VALENTINE WAY DOOR 28

PENDERGRASS GA 30567

US

FOR TRANSPORTATION ASSISTANCE SEE DLAD 52.247-9034. FOR FIRST DESTINATION TRANSPORTATION (FDT)

AWARDS SEE DLAD 52.247-9059 AND

CONTRACT INSTRUCTIONS INSTEAD.

FREIGHT SHIPPING ADDRESS:

UY0159

LVI - OCIE SE

PENDERGRASS DISTRIBUTION CENTER

596 BONNIE VALENTINE WAY DOOR 28

PENDERGRASS GA 30567

US

ITEM NO. SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT .

0002 8465-01-621-7861 1,500.000 EA $. ________________ $. ________________

CASE,SHOTGUN

AMMUNI

PRICING TERMS: Firm Fixed Price

QTY VARIANCE: PLUS 0% MINUS 0%

INSPECTION POINT: ORIGIN

ACCEPTANCE POINT: ORIGIN

FOB: DESTINATION DELIVERY DATE: 90 DAYS ADO

PREP FOR DELIVERY:

PKGING DATA - MIL-STD-2073-1D, 15 DEC 1999

PRES MTHD:10 CLNG/DRY: PRESV MAT:XX

WRAP MAT: CUSH/DUNN MAT: CUSH/DUNN THKNESS:

UNIT CONT:

PACK CODE:U

MARKING SHALL BE IN ACCORDANCE WITH MIL-STD-129.

SPECIAL MARKING CODE: -

PALLETIZATION SHALL BE IN ACCORDANCE WITH MD00100452 REV B DATED JULY 01, 2008

ADDITIONAL INFORMATION FOR ASTM-D-3951-90:

PACKAGING AND PACKING: SHALL BE IN ACCORDANCE

WITH ASTM-D-3951-90 (STANDARD PRACTICE FOR

COMMERCIAL PACKAGING). SHIPPING CARTONS SHALL BE

MARKED IN ACCORDANCE WITH MIL-STD-129.

CONTINUATION SHEET REFERENCE NO. OF DOCUMENT BEING CONTINUED: PAGE 8 OF 25 PAGES

IN ADDITION TO THE BAR CODING REQUIRED BY

MIL-STD-129, THE FOLLOWING ADDITIONAL BAR

CODES SHALL BE APPLIED TO THE UNIT PACKS

AND SHIPPING CONTAINERS: CALL (DELIVERY

ORDER) NUMBER SHALL FOLLOW THE CONTRACT

NUMBER, SURVEILLANCE NUMBER AND MANUFACTURED

DATE. A REPLICA OF THE BAR CODED ELEMENTS

SHALL PERMANENTLY BE PLACED ON THE UNIT-

PACKS (PLASTIC BAGS) AND SHIPPING CONTAINERS.

THE SEQUENCE OF ORDER SHALL BE AS FOLLOWS:

(NSN) NATIONAL STOCK NUMBER, CONTRACT/CALL

(DELIVERY ORDER) NUMBERS, SURVEILLANCE NUMBER

AND MANUFACTURING DATE. THE BAR CODES SHALL

BE (3) THREE OF (9) NINE AND READABLE BY A

SCANNER IN ACCORDANCE WITH ANSI/AIM-BCI.

THE REQUIRED BAR CODED LABEL(S) MAY COMPROMISE

OF AN INDIVIDUAL ELEMENT OR A LARGE

LABEL CONTAINING ALL OF THE INDIVIDUAL

ELEMENTS. THE BAR CODED LABELS SHALL

ALSO BE PLACED ON A FRONT SIDE AND LEFT

END OF EACH BOX. ALL OTHER REQUIREMENTS

REMAIN THE SAME AS APPLICABLE.

THE DD250 SHALL CONTAIN ON THE LAST

PAGE, BAR CODES IN THE FOLLOWING ORDER:

CONTRACT AND CONTRACT/CALL (DELIVERY ORDER)

NUMBERS, SURVEILLANCE NUMBER AND MANU ACTED

DATE. IN THE EVENT THAT A SHIPMENT CONTAINS

MULTIPLE SURVEILLANCE NUMBERS AND MANUFACTURED

DATES, AN INDIVIDUAL DD250 FORM IS REQUIRED

FOR EACH SURVEILLANCE NUMBER AND MANUFACTURED

DATE COMBINATION.

MIL-STD-129R - DEPARTMENT OF DEFENSE STANDARD PRACTICE

,,,,,, - MILITARY MARKING FOR SHIPMENT AND STORAGE

,,,,,, DATED 18 FEBRUARY 2014

INTERIM CHANGES:

OMISSION OF MARKINGS ON EXTERIOR SHIPPING CONTAINERS OF ITEMS

IN THE DLA TROOP SUPPORT CLOTHING AND TEXTILE (C<(>&<)>T) DIRECTORATE:

THE NOMENCLATURE AND MANUFACTURER'S NAME (WHEN THE NAME IDENTIFIES THE

MATERIAL) SHALL BE OMITTED FROM ALL EXTERIOR SHIPPING CONTAINERS OF DLA

TROOP SUPPORT C<(>&<)>T ITEMS, REGARDLESS OF MODE OF SHIPMENT.

IF THE MANUFACTURER'S NAME DOES NOT IDENTIFY THE MATERIAL AS BEING

CLOTHING, IT MAY REMAIN. NSNS SHALL BE SHOWN ON ALL SHIPPING CONTAINERS

OF C<(>&<)>T ITEMS, THE PACKING LIST SHALL BE PLACED INSIDE THE LAST

CONTAINER TO BE LOADED FOR EACH SHIPMENT. THE WORDS "PACKING LIST HERE"

SHALL BE STENCILED, NOT HAND LETTERED, ON THE CONTAINER.

PARCEL POST ADDRESS:

SD0131

TRAVIS ASSOCIATION FOR THE BLIND

4509 FREIDRICH LN BLDG 4 SUITE 402

AUSTIN TX 78744-1812

US

FOR TRANSPORTATION ASSISTANCE SEE DLAD 52.247-9034. FOR FIRST DESTINATION TRANSPORTATION (FDT)

AWARDS SEE DLAD 52.247-9059 AND

CONTRACT INSTRUCTIONS INSTEAD.

FREIGHT SHIPPING ADDRESS:

SD0131

TRAVIS ASSOCIATION FOR THE BLIND

CONTINUATION SHEET REFERENCE NO. OF DOCUMENT BEING CONTINUED: PAGE 9 OF 25 PAGES

2301 E ST ELMO RD BLDG 2 SUITE 220

AUSTIN TX 78744

US

GOVT USE

External External External Customer RDD/ ITEM PR PRLI PR PRLI Material Need Ship Date .

0001 0071784952 0001 N/A N/A N/A 02/17/2018 0002 0071784952 0002 N/A N/A N/A 02/20/2018

CONTINUATION SHEET REFERENCE NO. OF DOCUMENT BEING CONTINUED: PAGE 10 OF 25 PAGES

CONTINUED ON NEXT PAGE

SECTION A - SOLICITATION/CONTRACT FORM

TECHNICAL REQUIREMENTS

THIS DOCUMENT INCORPORATES TECHNICAL AND/OR QUALITY REQUIREMENTS (IDENTIFIED BY AN `R' OR AN `I' NUMBER IN SECTION B) SET FORTH IN FULL TEXT IN THE DLA MASTER LIST OF TECHNICAL AND QUALITY REQUIREMENTS FOUND ON THE

WEB AT:

http://www.dla.mil/HQ/Acquisition/Offers/eProcurement.aspx. FOR SIMPLIFIED ACQUISITIONS, THE REVISION OF THE MASTER IN EFFECT ON THE SOLICITATION ISSUE DATE OR THE AWARD DATE CONTROLS. FOR LARGE ACQUISITIONS, THE REVISION OF THE MASTER IN EFFECT ON THE RFP ISSUE DATE APPLIES UNLESS A SOLICITATION AMENDMENT INCORPORATES A FOLLOW-

ON REVISION, IN WHICH CASE THE AMENDMENT DATE CONTROLS.

SECTION C - SPECIFICATIONS/SOW/SOO/ORD

C03 CONTRACTOR RETENTION OF SUPPLY CHAIN TRACEABILITY DOCUMENTATION (SEP 2016)

C01 SUPERSEDED PART NUMBERED ITEMS (SEP 2016)

SECTION D - PACKAGING AND MARKING

252.211-7006 RADIO FREQUENCY IDENTIFICATION (SEP 2011) DFARS

(b)(1) Except as provided in paragraph (b)(2) of this clause, the Contractor shall affix passive RFID tags, at the case- and palletized-unit-load packaging levels, for shipments of items that-

(i) Are in any of the following classes of supply, as defined in DoD 4140.1-R, DoD Supply Chain Materiel Management Regulation, AP1.1.11:

(A) Subclass of Class I - Packaged operational rations.

(B) Class II - Clothing, individual equipment, tentage, organizational tool kits, hand tools, and administrative and housekeeping supplies and equipment.

(C) Class IIIP - Packaged petroleum, lubricants, oils, preservatives, chemicals, and additives.

(D) Class IV - Construction and barrier materials.

(E) Class VI - Personal demand items (non-military sales items).

(F) Subclass of Class VIII - Medical materials (excluding pharmaceuticals, biologicals, and reagents - suppliers should limit the mixing of excluded and non-excluded materials).

(G) Class IX - Repair parts and components including kits, assemblies and subassemblies, reparable and consumable items required for maintenance support of all equipment, excluding medical-peculiar repair parts; and

(ii) Are being shipped to one of the locations listed at http://www.acq.osd.mil/log/rfid/ or to-

(A) A location outside the contiguous United States when the shipment has been assigned Transportation Priority 1, or to-

(B) The following location(s) deemed necessary by the requiring activity:

Contract Line, Subline, or Exhibit Line Item Number

Location Name City State DoDAAC

(2) The following are excluded from the requirements of paragraph (b)(1) of this clause:

(i) Shipments of bulk commodities.

(ii) Shipments to locations other than Defense Distribution Depots when the contract includes the clause at FAR 52.213-1, Fast Payment http://www.acq.osd.mil/log/rfid/

CONTINUATION SHEET REFERENCE NO. OF DOCUMENT BEING CONTINUED: PAGE 11 OF 25 PAGES

CONTINUED ON NEXT PAGE

Procedures.

(c) The Contractor shall-

(1) Ensure that the data encoded on each passive RFID tag are globally unique (i.e., the tag ID is never repeated across two or more RFID tags and conforms to the requirements in paragraph (d) of this clause;

(2) Use passive tags that are readable; and

(3) Ensure that the passive tag is affixed at the appropriate location on the specific level of packaging, in accordance with MIL-STD-129

(Section 4.9.2) tag placement specifications.

(d) Data syntax and standards. The Contractor shall encode an approved RFID tag using the instructions provided in the EPC™ Tag Data

Standards in effect at the time of contract award. The EPC™ Tag Data Standards are available at http://www.epcglobalinc.org/standards/.

(1) If the Contractor is an EPCglobal™ subscriber and possesses a unique EPC™ company prefix, the Contractor may use any of the identifiers and encoding instructions described in the most recent EPC™ Tag Data Standards document to encode tags.

(2) If the Contractor chooses to employ the DoD identifier, the Contractor shall use its previously assigned Commercial and Government Entity

(CAGE) code and shall encode the tags in accordance with the tag identifier details located at http://www.acq.osd.mil/log/rfid/tag_data.htm. If the Contractor uses a third-party packaging house to encode its tags, the CAGE code of the third-party packaging house is acceptable.

(3) Regardless of the selected encoding scheme, the Contractor with which the Department holds the contract is responsible for ensuring that the tag ID encoded on each passive RFID tag is globally unique, per the requirements in paragraph (c)(1).

(e) Advance shipment notice. The Contractor shall use Wide Area WorkFlow (WAWF), as required by DFARS 252.232-7003, Electronic

Submission of Payment Requests, to electronically submit advance shipment notice(s) with the RFID tag ID(s) (specified in paragraph (d) of this clause) in advance of the shipment in accordance with the procedures at https://wawf.eb.mil/.

(End of clause)

SECTION E - INSPECTION AND ACCEPTANCE

52.246-2 INSPECTION OF SUPPLIES FIXED PRICE (AUG 1996) FAR

E06 INSPECTION AND ACCEPTANCE AT ORIGIN (SEP 2016)

The contractor shall indicate the location where supplies will be inspected:

Commercial and Government Entity (CAGE) code:

Address:

Applicable to contract line-item numbers(s) (CLIN(s)):

The contractor shall indicate the location where packaging will be inspected:

( ) Same as for supplies OR CAGE code:

Address:

Applicable to CLIN(s):

SECTION F - DELIVERIES OR PERFORMANCE

52.211-17 DELIVERY OF EXCESS QUANTITIES (SEP 1989) FAR

52.242-17 GOVERNMENT DELAY OF WORK (APR 1984) FAR

52.247-34 F.O.B. DESTINATION (NOV 1991) FAR

http://www.epcglobalinc.org/standards/ http://www.acq.osd.mil/log/rfid/tag_data.htm http://www.acq.osd.mil/dpap/dars/dfars/html/current/252232.htm http://farsite.hill.af.mil/reghtml/regs/far2afmcfars/fardfars/dfars/%20https:/wawf.eb.mil/

CONTINUATION SHEET REFERENCE NO. OF DOCUMENT BEING CONTINUED: PAGE 12 OF 25 PAGES

CONTINUED ON NEXT PAGE

SECTION I - CONTRACT CLAUSES

52.203-18 PROHIBITION ON CONTRACTING WITH ENTITIES THAT REQUIRE CERTAIN INTERNAL CONFIDENTIALITY

AGREEMENTS OR STATEMENTS-REPRESENTATION (JAN 2017) FAR

52.203-19 PROHIBITION ON REQUIRING CERTAIN INTERNAL CONFIDENTIALITY AGREEMENTS OR STATEMENTS (JAN 2017)

FAR

252.203-7000 REQUIREMENTS RELATING TO COMPENSATION OF FORMER DOD OFFICIALS (OCT 2016) DFARS

252.203-7002 REQUIREMENT TO INFORM EMPLOYEES OF WHISTLEBLOWER RIGHTS (SEP 2013) DFARS

252.203-7995 PROHIBITION ON CONTRACTING WITH ENTITIES THAT REQUIRE CERTAIN INTERNAL CONFIDENTIALITY

AGREEMENTS (NOV 2016) DFARS

52.204-13 SYSTEM FOR AWARD MANAGEMENT MAINTENANCE (OCT 2016) FAR

52.204-16 COMMERCIAL AND GOVERNMENT ENTITY CODE REPORTING (JUL 2016) FAR

52.204-18 COMMERCIAL AND GOVERNMENT ENTITY CODE MAINTENANCE (JUL 2016) FAR

52.204-19 INCORPORATION BY REFERENCE OF REPRESENTATIONS AND CERTIFICATIONS (DEC 2014) FAR

52.204-20 PREDECESSOR OF OFFEROR (JUL 2016) FAR

As prescribed in 4.1804(d), insert the following provision:

(a) Definitions. As used in this provision - “Commercial and Government Entity (CAGE) code” means -

(1) An identifier assigned to entities located in the United States or its outlying areas by the Defense Logistics Agency (DLA) Commercial and Government Entity (CAGE) Branch to identify a commercial or government entity; or

(2) An identifier assigned by a member of the North Atlantic Treaty Organization (NATO) or by the NATO Support and Procurement Agency (NSPA) to entities located outside the United States and its outlying areas that the DLA Commercial and Government Entity (CAGE) Branch records and maintains in the CAGE master file. This type of code is known as a NATO CAGE (NCAGE) code.

“Predecessor” means an entity that is replaced by a successor and includes any predecessors of the predecessor.

“Successor” means an entity that has replaced a predecessor by acquiring the assets and carrying out the affairs of the predecessor under a new name (often through acquisition or merger). The term “successor” does not include new offices/divisions of the same company or a company that only changes its name. The extent of the responsibility of the successor for the liabilities of the predecessor may vary, depending on State law and specific circumstances.

(b) The Offeror represents that it [ ] is or [ ] is not a successor to a predecessor that held a Federal contract or grant within the last three years.

(c) If the Offeror has indicated “is” in paragraph (b) of this provision, enter the following information for all predecessors that held a Federal contract or grant within the last three years (if more than one predecessor, list in reverse chronological order):

Predecessor CAGE code: (or mark “Unknown”) Predecessor legal name:

(Do not use a “doing business as” name)

(End of provision)

252.204-7003 CONTROL OF GOVERNMENT PERSONNEL WORK PRODUCT (APR 1992) DFARS

252.204-7004 ALTERNATE A, SYSTEM FOR AWRD MANAGEMENT (FEB 2014) DFARS

https://www.acquisition.gov/sites/default/files/current/far/html/Subpart%204_18.html

CONTINUATION SHEET REFERENCE NO. OF DOCUMENT BEING CONTINUED: PAGE 13 OF 25 PAGES

252.204-7009 LIMITATIONS ON THE USE OR DISCLOSURE OF THIRD-PARTY CONTRACTOR REPORTED CYBER INCIDENT

INFORMATION (OCT 2016) DFARS

(a) Definitions. As used in this clause -

“Compromise” means disclosure of information to unauthorized persons, or a violation of the security policy of a system, in which unauthorized intentional or unintentional disclosure, modification, destruction, or loss of an object, or the copying of information to unauthorized media may have occurred.

“Controlled technical information” means technical information with military or space application that is subject to controls on the access, use, reproduction, modification, performance, display, release, disclosure, or dissemination. Controlled technical information would meet the criteria, if disseminated, for distribution statements B through F using the criteria set forth in DoD Instruction 5230.24, Distribution Statements on Technical Documents. The term does not include information that is lawfully publicly available without restrictions.

“Covered defense information” means unclassified information that -

(1) Is -

(i) Provided to the contractor by or on behalf of DoD in connection with the performance of the contract; or

(ii) Collected, developed, received, transmitted, used, or stored by or on behalf of the contractor in support of the performance of the contract; and

(2) Falls in any of the following categories:

(i) Controlled technical information.

(ii) Critical information (operations security). Specific facts identified through the Operations Security process about friendly intentions, capabilities, and activities vitally needed by adversaries for them to plan and act effectively so as to guarantee failure or unacceptable consequences for friendly mission accomplishment (part of Operations

Security process).

(iii) Export control. Unclassified information concerning certain items, commodities, technology, software, or other information whose export could reasonably be expected to adversely affect the United States national security and nonproliferation objectives. To include dual use items; items identified in export administration regulations, international traffic in arms regulations and munitions list; license applications; and sensitive nuclear technology information.

(iv) Any other information, marked or otherwise identified in the contract, that requires safeguarding or dissemination controls pursuant to and consistent with law, regulations, and Governmentwide policies (e.g., privacy, proprietary business information).

“Cyber incident” means actions taken through the use of computer networks that result in a compromise or an actual or potentially adverse effect on an information system and/or the information residing therein.

(b) Restrictions. The Contractor agrees that the following conditions apply to any information it receives or creates in the performance of this contract that is information obtained from a third-party's reporting of a cyber incident pursuant to DFARS

CONTINUATION SHEET REFERENCE NO. OF DOCUMENT BEING CONTINUED: PAGE 14 OF 25 PAGES

CONTINUED ON NEXT PAGE

clause 252.204-7012, Safeguarding Covered Defense Information and Cyber Incident Reporting (or derived from such information obtained under that clause):

(1) The Contractor shall access and use the information only for the purpose of furnishing advice or technical assistance directly to the Government in support of the Government's activities related to clause 252.204-7012, and shall not be used for any other purpose.

(2) The Contractor shall protect the information against unauthorized release or disclosure.

(3) The Contractor shall ensure that its employees are subject to use and non-disclosure obligations consistent with this clause prior to the employees being provided access to or use of the information.

(4) The third-party contractor that reported the cyber incident is a third-party beneficiary of the non-disclosure agreement between the Government and Contractor, as required by paragraph (b)(3) of this clause.

(5) A breach of these obligations or restrictions may subject the Contractor to -

(i) Criminal, civil, administrative, and contractual actions in law and equity for penalties, damages, and other appropriate remedies by the United States; and

(ii) Civil actions for damages and other appropriate remedies by the third party that reported the cyber incident, as a third party beneficiary of this clause.

(c) Subcontracts. The Contractor shall include this clause, including this paragraph (c), in subcontracts, or similar contractual instruments, for services that include support for the Government's activities related to safeguarding covered defense information and cyber incident reporting, including subcontracts for commercial items, without alteration, except to identify the parties.

252.204-7012 SAFEGUARDING COVERED DEFENSE INFORMATION AND CYBER INCIDENT REPORTING (OCT 2016) DFARS

(a) Definitions. As used in this clause-

“Adequate security” means protective measures that are commensurate with the consequences and probability of loss, misuse, or unauthorized access to, or modification of information.

“Compromise” means disclosure of information to unauthorized persons, or a violation of the security policy of a system, in which unauthorized intentional or unintentional disclosure, modification, destruction, or loss of an object, or the copying of information to unauthorized media may have occurred.

“Contractor attributional/proprietary information” means information that identifies the contractor(s), whether directly or indirectly, by the grouping of information that can be traced back to the contractor(s) (e.g., program description, facility locations), personally identifiable information, as well as trade secrets, commercial or financial information, or other commercially sensitive information that is not customarily shared outside of the company.

“Contractor information system” means an information system belonging to, or operated by or for, the Contractor.

“Controlled technical information” means technical information with military or space application that is subject to controls on the http://www.acq.osd.mil/dpap/dars/dfars/html/current/252204.htm

CONTINUATION SHEET REFERENCE NO. OF DOCUMENT BEING CONTINUED: PAGE 15 OF 25 PAGES

CONTINUED ON NEXT PAGE

access, use, reproduction, modification, performance, display, release, disclosure, or dissemination. Controlled technical information would meet the criteria, if disseminated, for distribution statements B through F using the criteria set forth in DoD Instruction 5230.24, Distribution Statements on Technical Documents. The term does not include information that is lawfully publicly available without restrictions.

“Covered contractor information system” means an information system that is owned, or operated by or for, a contractor and that processes, stores, or transmits covered defense information.

“Covered defense information” means unclassified information that -

(i) Is --

(A) Provided to the contractor by or on behalf of DoD in connection with the performance of the contract; or

(B) Collected, developed, received, transmitted, used, or stored by or on behalf of the contractor in support of the performance of the contract; and

(ii) Falls in any of the following categories:

(A) Controlled technical information.

(B) Critical information (operations security). Specific facts identified through the Operations Security process about friendly intentions, capabilities, and activities vitally needed by adversaries for them to plan and act effectively so as to guarantee failure or unacceptable consequences for friendly mission accomplishment (part of Operations

Security process).

(C) Export control. Unclassified information concerning certain items, commodities, technology, software, or other information whose export could reasonably be expected to adversely affect the United States national security and nonproliferation objectives. To include dual use items; items identified in export administration regulations, international traffic in arms regulations and munitions list; license applications; and sensitive nuclear technology information.

(D) Any other information, marked or otherwise identified in the contract, that requires safeguarding or dissemination controls pursuant to and consistent with law, regulations, and Governmentwide policies (e.g., privacy, proprietary business information).

“Cyber incident” means actions taken through the use of computer networks that result in a compromise or an actual or potentially adverse effect on an information system and/or the information residing therein.

“Forensic analysis” means the practice of gathering, retaining, and analyzing computer-related data for investigative purposes in a manner that maintains the integrity of the data.

“Malicious software” means computer software or firmware intended to perform an unauthorized process that will have adverse impact on the confidentiality, integrity, or availability of an information system. This definition includes a virus, worm, Trojan horse, or other code-based entity that infects a host, as well as spyware and some forms of adware.

“Media” means physical devices or writing surfaces including, but is not limited to, magnetic tapes, optical disks, magnetic disks, large-scale integration memory chips, and printouts onto which information is recorded, stored, or printed within an information system.

"Operationally critical support'' means supplies or services designated by the Government as critical for airlift, sealift, intermodal

CONTINUATION SHEET REFERENCE NO. OF DOCUMENT BEING CONTINUED: PAGE 16 OF 25 PAGES

CONTINUED ON NEXT PAGE

transportation services, or logistical support that is essential to the mobilization, deployment, or sustainment of the Armed Forces in a contingency operation.

“Rapid(ly) report(ing)” means within 72 hours of discovery of any cyber incident.

“Technical information” means technical data or computer software, as those terms are defined in the clause at DFARS

252.227-7013, Rights in Technical Data-Non Commercial Items, regardless of whether or not the clause is incorporated in this solicitation or contract. Examples of technical information include research and engineering data, engineering drawings, and associated lists, specifications, standards, process sheets, manuals, technical reports, technical orders, catalog-item identifications, data sets, studies and analyses and related information, and computer software executable code and source code.

(b) Adequate security. The Contractor shall provide adequate security for all covered defense information on all covered contractor information systems that support the performance of work under this contract. To provide adequate security, the

Contractor shall -

(1) Implement information systems security protections on all covered contractor information systems including, at a minimum -

(i) For covered contractor information systems that are part of an Information Technology (IT) service or system operated on behalf of the Government -

(A) Cloud computing services shall be subject to the security requirements specified in the clause 252.239-7010, Cloud Computing Services, of this contract; and

(B) Any other such IT service or system (i.e., other than cloud computing) shall be subject to the security requirements specified elsewhere in this contract; or

(ii) For covered contractor information systems that are not part of an IT service or system operated on behalf of the Government and therefore are not subject to the security requirement specified at paragraph (b)(1)(i) of this clause -

(A) The security requirements in National Institute of Standards and Technology (NIST)

Special Publication (SP) 800-171, “Protecting Controlled Unclassified Information in

Nonfederal Information Systems and Organizations,” http://dx.doi.org/10.6028/NIST.

SP.800-171 that is in effect at the time the solicitation is issued or as authorized by the

Contracting Officer, as soon as practical, but not later than December 31, 2017. The

Contractor shall notify the DoD CIO, via email at osd.dibcsia@mail.mil, within 30 days of contract award, of any security requirements specified by NIST SP 800-171 not implemented at the time of contract award; or

(B) Alternative but equally effective security measures used to compensate for the inability to satisfy a particular requirement and achieve equivalent protection accepted in writing by an authorized representative of the DoD CIO; and

(2) Apply other information systems security measures when the Contractor easonably determines that information systems security measures, in addition to those identified in paragraph (b)(1) of this clause, may be required to provide adequate security in a dynamic environment based on an assessed risk or vulnerability.

(c) Cyber incident reporting requirement.

http://www.acq.osd.mil/dpap/dars/dfars/html/current/252227.htm http://www.acq.osd.mil/dpap/dars/dfars/html/current/252239.htm http://dx.doi.org/10.6028/NIST.SP.800-171 http://dx.doi.org/10.6028/NIST.SP.800-171 mailto:osd.dibcsia@mail.mil

CONTINUATION SHEET REFERENCE NO. OF DOCUMENT BEING CONTINUED: PAGE 17 OF 25 PAGES

CONTINUED ON NEXT PAGE

(1) When the Contractor discovers a cyber incident that affects a covered contractor information system or the covered defense information residing therein, or that affects the contractor's ability to perform the requirements of the contract that are designated as operationally critical support, the Contractor shall --

(i) Conduct a review for evidence of compromise of covered defense information, including, but not limited to, identifying compromised computers, servers, specific data, and user accounts. This review shall also include analyzing covered contractor information system(s) that were part of the cyber incident, as well as other information systems on the Contractor's network(s), that may have been accessed as a result of the incident in order to identify compromised covered defense information, or that affect the Contractor's ability to provide operationally critical support; and

(ii) Rapidly report cyber incidents to DoD at http://dibnet.dod.mil.

(2) Cyber incident report. The cyber incident report shall be treated as information created by or for DoD and shall include, at a minimum, the required elements at http://dibnet.dod.mil.

(3) Medium assurance certificate requirement. In order to report cyber incidents in accordance with this clause, the Contractor or subcontractor shall have or acquire a DoD-approved medium assurance certificate to report cyber incidents. For information on obtaining a DoD-approved medium assurance certificate, see http://iase.disa.mil/pki/eca/Pages/index.aspx.

(d) Malicious software. The Contractor or subcontractors that discover and isolate malicious software in connection with a reported cyber incident shall submit the malicious software in accordance with instructions provided by the Contracting

Officer.

(e) Media preservation and protection. When a Contractor discovers a cyber incident has occurred, the Contractor shall preserve and protect images of all known affected information systems identified in paragraph (c)(1)(i) of this clause and all relevant monitoring/packet capture data for at least 90 days from the submission of the cyber incident report to allow DoD to request the media or decline interest.

(f) Access to additional information or equipment necessary for forensic analysis. Upon request by DoD, the Contractor shall provide DoD with access to additional information or equipment that is necessary to conduct a forensic analysis.

(g) Cyber incident damage assessment activities. If DoD elects to conduct a damage assessment, the Contracting Officer will request that the Contractor provide all of the damage assessment information gathered in accordance with paragraph (e) of this clause.

(h) DoD safeguarding and use of contractor attributional/proprietary information. The Government shall protect against the unauthorized use or release of information obtained from the contractor (or derived from information obtained from the contractor) under this clause that includes contractor attributional/proprietary information, including such information submitted in accordance with paragraph (c). To the maximum extent practicable, the Contractor shall identify and mark attributional/proprietary information. In making an authorized release of such information, the Government will implement appropriate procedures to minimize the contractor attributional/proprietary information that is included in such authorized release, seeking to include only that information that is necessary for the authorized purpose(s) for which the information is being released.

(i) Use and release of contractor attributional/proprietary information not created by or for DoD. Information that is obtained from the contractor (or derived from information obtained from the contractor) under this clause that is not created by or for

DoD is authorized to be released outside of DoD -http://dibnet.dod.mil/ http://dibnet.dod.mil/ http://iase.disa.mil/pki/eca/Pages/index.aspx

CONTINUATION SHEET REFERENCE NO. OF DOCUMENT BEING CONTINUED: PAGE 18 OF 25 PAGES

CONTINUED ON NEXT PAGE

(1) To entities with missions that may be affected by such information;

(2) To entities that may be called upon to assist in the diagnosis, detection, or mitigation of cyber incidents;

(3) To Government entities that conduct counterintelligence or law enforcement investigations;

(4) For national security purposes, including cyber situational awareness and defense purposes (including with

Defense Industrial Base (DIB) participants in the program at 32 CFR part 236); or

(5) To a support services contractor (“recipient”) that is directly supporting Government activities under a contract that includes the clause at 252.204-7009, Limitations on the Use or Disclosure of Third-Party Contractor Reported

Cyber Incident Information.

(j) Use and release of contractor attributional/proprietary information created by or for DoD. Information that is obtained from the contractor (or derived from information obtained from the contractor) under this clause that is created by or for DoD

(including the information submitted pursuant to paragraph (c) of this clause) is authorized to be used and released outside of DoD for purposes and activities authorized by paragraph (i) of this clause, and for any other lawful Government purpose or activity, subject to all applicable statutory, regulatory, and policy based restrictions on the Government's use and release of such information.

(k) The Contractor shall conduct activities under this clause in accordance with applicable laws and regulations on the interception, monitoring, access, use, and disclosure of electronic communications and data.

(l) Other safeguarding or reporting requirements. The safeguarding and cyber incident reporting required by this clause in no way abrogates the Contractor's responsibility for other safeguarding or cyber incident reporting pertaining to its unclassified information systems as required by other applicable clauses of this contract, or as a result of other applicable U.S.

Government statutory or regulatory requirements.

(m) Subcontracts. The Contractor shall -

(1) Include this clause, including this paragraph (m), in subcontracts, or similar contractual instruments, for operationally critical support, or for which subcontract performance will involve a covered contractor information system, including subcontracts for commercial items, without alteration, except to identify the parties; and

(2) When this clause is included in a subcontract, require subcontractors to rapidly report cyber incidents directly to

DoD at http://dibnet.dod.mil and the…