SPE60015R05190001.pdf

AMENDMENT OF SOLICITATION/MODIFICATION OF CONTRACT

1. CONTRACT ID CODE

2. AMENDMENT/MODIFICATION NO.

See Block 14

4. REQUISITION/PURCHASE REQ. NO.

Port of Fujairah, UAE

5. PROJECT NO. (If applicable)

6. ISSUED BY CODE SPE600 7. ADMINISTERED BY (If other than Item 6) CODE

8. NAME AND ADDRESS OF CONTRACTOR (No., street, county, State and ZIP Code)

CODE FACILITY CODE

SPE60015R0519

X

2015 SEP 25

10A. MODIFICATION OF CONTRACT/ORDER NO.

10B. DATED (SEE ITEM 13)

11. THIS ITEM ONLY APPLIES TO AMENDMENTS OF SOLICITATIONS

The above numbered solicitation is amended as set forth in Item 14. The hour and date specified for receipt of OffersX is extended, X is not extended.

or (c) By separate letter or telegram which includes a reference to the solicitation and amendment numbers. FAILURE OF YOUR ACKNOWLEDGMENT TO BE RECEIVED AT THE PLACE DESIGNATED FOR THE RECEIPT OF OFFERS PRIOR TO THE HOUR AND DATE SPECIFIED MAY RESULT IN REJECTION OF YOUR OFFER. If by virtue of this amendment you desire to change an offer already submitted, such change may be made by telegram or letter, provided each telegram or letter makes reference to the solicitation and this amendment, and is received prior to the opening hour and date specified.

1 copies of the amendment; (b) By acknowledging receipt of this amendment on each copy of the offer submitted;

Offers must acknowledge receipt of this amendment prior to the hour and date specified in the solicitation or as amended, by one of the following methods:

12. ACCOUNTING AND APPROPRIATION DATA (If required)

A. THIS CHANGE ORDER IS ISSUED PURSUANT TO: (Specify authority) THE CHANGES SET FORTH IN ITEM 14 ARE MADE IN THE CONTRACT ORDER NO.

IN ITEM 10A.

B. THE ABOVE NUMBERED CONTRACT/ORDER IS MODIFIED TO REFLECT THE ADMINISTRATIVE CHANGES (such as changes in paying office, appropriation date, etc. ) SET FORTH IN ITEM 14, PURSUANT TO THE AUTHORITY OF FAR 43.103(b).

C. THIS SUPPLEMENTAL AGREEMENT IS ENTERED INTO PURSUANT TO AUTHORITY OF:

E. IMPORTANT: Contractor is not, X is required to sign this document and return 1 copies to issuing office.

14. DESCRIPTION OF AMENDMENT/MODIFICATION (Organized by UCF section headings, including solicitation/contract subject matter where feasible.)

Except as provided herein, all terms and conditions of the document referenced in Item 9A or 10A, as heretofore changed, remains unchanged and in full force and effect.

15A NAME AND TITLE OF SIGNER (Type or print)

NSN 7540-01-152-8070

Previous edition unusable

STANDARD FORM 30 (REV. 10-83)

Prescribed by GSA FAR (48 CFR) 53.243

16B. UNITED STATES OF AMERICA15B. CONTRACTOR/OFFEROR

(Signature of Contracting Officer)(Signature of person authorized to sign)

16A. NAME AND TITLE OF CONTRACTING OFFICER (Type or print)

(a) By completing Items 8 and 15, and returning

DLA ENERGY

8725 JOHN J KINGMAN RD STE 4950

FT BELVOIR VA 22060-6222

USA

15C. DATE SIGNED 16C. DATE SIGNED

D. OTHER (Specify type of modification and authority)

10/20/2015

3. EFFECTIVE DATE

See Attached Continuation Sheet(s).

(X)

CHECK ONE

PAGE OF PAGES

9A. AMENDMENT OF SOLICITATION NO.

9B. DATED (SEE ITEM 11)

13. THIS APPLIES ONLY TO MODIFICATIONS OF CONTRACTS/ORDERS.

IT MODIFIES THE CONTRACT/ORDER NO. AS DESCRIBED IN ITEM 14.

CONTINUED ON NEXT PAGE

Please see attachment A to this amendment (SPE60015R05190001).

PAGE 2 OF 3 PAGESCONTINUATION SHEET REFERENCE NO. OF DOCUMENT BEING CONTINUED:

SPE60015R0519-0001

Attachments

List of Attachments

Description File Name ATTACH.Attachment A to SPE60015R05010001

Attachment A to Amd SPE60015R0519.pdf

PAGE 3 OF 3 PAGESCONTINUATION SHEET REFERENCE NO. OF DOCUMENT BEING CONTINUED:

SPE60015R0519-0001

SPE60015R0519

Port of Fujairah, UAE

Amendment 0001

A. This amendment is hereby issued under the above mentioned solicitation to provide the following responses to questions received in response to SPE60015R0519:

1. Clause 1.3: “All storage must be available upon award at a single facility”

Total capacity of the terminal tanks suitable for Grade JP5 / Grade F76 is 547,858 US bbls, in 5 tanks.

The above mentioned capacity is meeting the requirements for either Grade JP5 or Grade F76 - not both.

Will this disqualify us or will DLA Energy consider multiple awards?

Answer: The above information should be contained in the offerors proposal with any exceptions/deviations to the requirement (PWS attachment 1 to the solicitation) listed in accordance with M-0002-M72 EVALUATION OF OFFERS (EXCEPTIONS/DEVIATIONS) (DLA ENERGY

APR 1997) and submitted for evaluation. DLA Energy shall award one contract and will not consider multiple awards.

2. Clause 1.5: “A dedicated system is required”.

Pipelines from our tanks are connected to Port of Fujairah’s Common Matrix Manifold.

Tanks and pipelines in the Terminal shall be dedicated, however Common Matrix Manifold is a shared system, which is utilized by all terminals in Fujairah.

with M-0002-M72 EVALUATION OF OFFERS (EXCEPTIONS/DEVIATIONS) (DLA ENERGY

APR 1997) and submitted for evaluation.

3. Clause 2.2: Tank Truck

The facility for loading tank trucks is not available.

4. Clause 2.5.3: Laboratory testing requirement.

Terminal does not have any laboratory within its’ premises.

with M-0002-M72 EVALUATION OF OFFERS (EXCEPTIONS/DEVIATIONS) (DLA ENERGY

APR 1997) and submitted for evaluation. Please also reference C-0003-C19.07 SAMPLING AND

TESTING OF PETROLEUM PRODUCTS (STORAGE) (DLA ENERGY JAN 2012).

5. Clause 2.6.1: “The tanks shall be interconnected so as to provide the capability of re-circulating/filtering of products between tanks.”

Re-circulation facility is available only for 3 of the 5 tanks.

6. We do not have any facility for filtering of products (Clause 2.6.2). However we shall check on installing the same.

7. It appears that the infrastructure requirements in the solicitation are based on the existing leased capacity in another terminal in Fujairah. We have better pumping and receiving rates, we can receive bigger vessels and we have access to more number of berths. However the other terminal has the benefit of dedicated lines to one of the berths (Container vessel berth) in Port of Fujairah and of other requirements already in place.

Answer: This is a competitive procurement and all offerors shall be evaluated in accordance with the evaluation criteria as listed in FAR 52.212-02 EVALUATION – COMMERCIAL ITEMS (OCT 2014) and the Addendum to FAR 52.212-02 EVALUATION – COMMERCIAL ITEMS (AUG 2015).

Additionally, any exceptions/deviations to the requirement (PWS attachment 1 to the solicitation) listed in accordance with M-0002-M72 EVALUATION OF OFFERS (EXCEPTIONS/DEVIATIONS) (DLA

ENERGY APR 1997) and submitted for evaluation.

8. If a company is a joint venture and the ownership is 60/40, can we submit the majority shareholder’s information only in addition to its higher level owner OR do we need to list both the 60% shareholder and 40% shareholder plus both their higher level owners?

Answer: Please see FAR 52.212-03 (p)

9. Can you elaborate further on what “simplified acquisition threshold limit” means? It’s not clear in the documents.

Answer: The Simplified Acquisition Threshold is $150,000 in accordance with FAR 2.101

10. Please clarify what MUCC stands for under the services and prices section B-001-B34.01?

Answer: Monthly Use Charge COCO. The Government requests that offerors indicate their proposed monthly price for services in B34.01.

Amendment 0001

11. Typically on the 1449 form, the box #12, Discount Terms, states Net 30, Net 10, etc. What are the terms of this contract or does the vendor fill in their payment terms?

Answer: Payments shall be made in accordance with the Prompt Payment Act.

12. Does the Past Performance Questionnaire need to be submitted at the same time as the OSP on

November 9th?

Answer: Past performance Questionnaire’s should be submitted by the reference no later than the closing date of the solicitation.

B. Additionally, this amendment incorporates DFARS 252.225-7994 ADDITIONAL ACCESS

TO CONTRACTOR AND SUBCONTRACTOR RECORDS IN THE UNITED STATES

CENTRAL COMMAND THEATER OF OPERATIONS (DEVIATION [2015-O0013]) as follows:

252.225-7994 – ADDITIONAL ACCESS TO CONTRACTOR AND SUBCONTRACTOR

RECORDS IN THE UNITED STATES CENTRAL COMMAND THEATER OF OPERATIONS

(DEVIATION [2015-O0013])

(a) In addition to any other existing examination-of-records authority, the Department of Defense is authorized to examine any records of the Contractor to the extent necessary to ensure that funds available under this contract are not—

(1) Subject to extortion or corruption; or

(2) Provided, directly or indirectly, to persons or entities that are actively supporting an insurgency or otherwise actively opposing United States or coalition forces in a contingency operation.

(b) The substance of this clause, including this paragraph (b), is required to be included in subcontracts under this contract that have an estimated value over $100,000. (End of clause)

C. This amendment provides for the deletion of all occurrences of DFARS 252.225-7993

PROHIBITION ON CONTRACTING WITH THE ENEMY (DEVIATION 2014-O0020) (SEP

2014) replacing it with DFARS 252.225-7993 PROHIBITION ON PROVIDING FUNDS TO

THE ENEMY (DEVIATION 2015 O0016) (SEP 2015) as follows:

252.225-7993 – PROHIBITION ON PROVIDING FUNDS TO THE ENEMY

(DEVIATION 2015-O0016) (SEP 2015)

(a) The Contractor shall—

(1) Exercise due diligence to ensure that none of the funds, including supplies and services, received under this contract are provided directly or indirectly (including through subcontracts) to a person or entity

Amendment 0001 who is actively opposing United States or Coalition forces involved in a contingency operation in which members of the Armed Forces are actively engaged in hostilities;

(2) Check the list of prohibited/restricted sources in the System for Award Management at www.sam.gov

(i) Prior to subcontract award; and

(ii) At least on a monthly basis; and

(3) Terminate or void in whole or in part any subcontract with a person or entity listed in SAM as a prohibited or restricted source pursuant to subtitle E of Title VIII of the NDAA for FY 2015, unless the

Contracting Officer provides to the Contractor written approval of the Head of the Contracting Activity to continue the subcontract.

(b) The Head of the Contracting Activity has the authority to—

(1) Terminate this contract for default, in whole or in part, if the Head of the Contracting Activity determines in writing that the contractor failed to exercise due diligence as required by paragraph (a) of this clause; or

(2)(i) Void this contract, in whole or in part, if the Head of the Contracting Activity determines in writing that any funds received under this contract have been provided directly or indirectly to a person or entity who is actively opposing United States or Coalition forces involved in a contingency operation in which members of the Armed Forces are actively engaged in hostilities.

(ii) When voided in whole or in part, a contract is unenforceable as contrary to public policy, either in its entirety or with regard to a segregable task or effort under the contract, respectively.

(c) The Contractor shall include the substance of this clause, including this paragraph (c), in subcontracts, including subcontracts for commercial items, under this contract that have an estimated value over $50,000 and will be performed outside the United States and its outlying areas. (End of clause)

D. This amendment provides for the deletion of all occurrences of DFARS 252.204-7012

SAFEGUARDING OF UNCLASSIFIED CONTROLLED TECHNICAL INFORMATION

(NOV 2013 replacing it with DFARS 252.204-7012 SAFEGUARDING COVERED DEFENSE

INFORMATION AND CYBER INCIDENT REPORTING (DEVIATION 2016-O0001)(OCT

2015) as follows:

252.204-7012 – SAFEGUARDING COVERED DEFENSE INFORMATION AND CYBER

INCIDENT REPORTING (DEVIATION 2016-O0001)(OCT 2015)

(a) Definitions. As used in this clause—

“Adequate security” means protective measures that are commensurate with the consequences and probability of loss, misuse, or unauthorized access to, or modification of information.

http://www.sam.gov/

Amendment 0001

“Compromise” means disclosure of information to unauthorized persons, or a violation of the security policy of a system, in which unauthorized intentional or unintentional disclosure, modification, destruction, or loss of an object, or the copying of information to unauthorized media may have occurred.

“Contractor attributional/proprietary information” means information that identifies the contractor(s), whether directly or indirectly, by the grouping of information that can be traced back to the contractor(s) (e.g., program description, facility locations), personally identifiable information, as well as trade secrets, commercial or financial information, or other commercially sensitive information that is not customarily shared outside of the company.

“Contractor information system” means an information system belonging to, or operated by or for, the

Contractor.

“Controlled technical information” means technical information with military or space application that is subject to controls on the access, use, reproduction, modification, performance, display, release, disclosure, or dissemination. Controlled technical information would meet the criteria, if disseminated, for distribution statements B through F using the criteria set forth in DoD Instruction 5230.24, Distribution

Statements on Technical Documents. The term does not include information that is lawfully publicly available without restrictions.

“Covered contractor information system” means an information system that is owned, or operated by or for, a contractor and that processes, stores, or transmits covered defense information.

“Covered defense information” means unclassified information that—

(i) Is—

(A) Provided to the contractor by or on behalf of DoD in connection with the performance of the contract; or

(B) Collected, developed, received, transmitted, used, or stored by or on behalf of the contractor in support of the performance of the contract; and

(ii) Falls in any of the following categories:

(A) Controlled technical information.

(B) Critical information (operations security). Specific facts identified through the Operations

Security process about friendly intentions, capabilities, and activities vitally needed by adversaries for them to plan and act effectively so as to guarantee failure or unacceptable consequences for friendly mission accomplishment (part of Operations Security process).

(C) Export control. Unclassified information concerning certain items, commodities, technology, software, or other information whose export could reasonably be expected to adversely affect the United

States national security and nonproliferation objectives. To include dual use items; items identified in export administration regulations, international traffic in arms regulations and munitions list; license applications; and sensitive nuclear technology information.

(D) Any other information, marked or otherwise identified in the contract, that requires safeguarding or dissemination controls pursuant to and consistent with law, regulations, and

Governmentwide policies (e.g., privacy, proprietary business information).

“Cyber incident” means actions taken through the use of computer networks that result in an actual or potentially adverse effect on an information system and/or the information residing therein.

“Forensic analysis” means the practice of gathering, retaining, and analyzing computer-related data for investigative purposes in a manner that maintains the integrity of the data.

“Malicious software” means computer software or firmware intended to perform an unauthorized process that will have adverse impact on the confidentiality, integrity, or availability of an information system. This definition includes a virus, worm, Trojan horse, or other code-based entity that infects a host, as well as spyware and some forms of adware.

“Media” means physical devices or writing surfaces including, but is not limited to, magnetic tapes, optical disks, magnetic disks, large-scale integration memory chips, and printouts onto which information is recorded, stored, or printed within an information system.

‘‘Operationally critical support’’ means supplies or services designated by the Government as critical for airlift, sealift, intermodal transportation services, or logistical support that is essential to the mobilization, deployment, or sustainment of the Armed Forces in a contingency operation.

“Rapid(ly) report(ing)” means within 72 hours of discovery of any cyber incident.

“Technical information” means technical data or computer software, as those terms are defined in the clause at

DFARS 252.227-7013, Rights in Technical Data-Non Commercial Items, regardless of whether or not the clause is incorporated in this solicitation or contract. Examples of technical information include research and engineering data, engineering drawings, and associated lists, specifications, standards, process sheets, manuals, technical reports, technical orders, catalog-item identifications, data sets, studies and analyses and related information, and computer software executable code and source code.

(b) Adequate security. The Contractor shall provide adequate security for all covered defense information on all covered contractor information systems that support the performance of work under this contract. To provide adequate security, the Contractor shall—

(1) Implement information systems security protections on all covered contractor information systems including, at a minimum—

(i) For covered contractor information systems that are part of an Information Technology (IT) service or system operated on behalf of the Government—

(A) Cloud computing services shall be subject to the security requirements specified in the clause 252.239-7010, Cloud Computing Services, of this contract; and

(B) Any other such IT service or system (i.e., other than cloud computing) shall be subject to the security requirements specified elsewhere in this contract; or http://www.acq.osd.mil/dpap/dars/dfars/html/current/252227.htm#252.227-7013 http://www.acq.osd.mil/dpap/dars/dfars/html/current/252239.htm#252.239-7010

(ii) For covered contractor information systems that are not part of an IT service or system operated on behalf of the Government and therefore are not subject to the security requirement specified at paragraph (b)(1)(i) of this clause—

(A) The security requirements in National Institute of Standards and Technology (NIST)

Special Publication (SP) 800-171, “Protecting Controlled

Unclassified Information in Nonfederal Information Systems and Organizations,”

(see http://dx.doi.org/10.6028/NIST.SP.800-171) that is in effect at the time the solicitation is issued or as authorized by the Contracting Officer with the exception of the derived security requirement 3.5.3 “Use of multifactor authentication for local and network access to privileged accounts and for network access to non-privileged accounts”, which will be required not later than 9 months after award of the contract, if the

Contractor notified the contracting officer in accordance with paragraph (c) of the provision 252.204-7008, Compliance with Safeguarding Covered Defense Information Controls (DEVIATION 2016-O0001)(OCT

2015); or

(B) Alternative but equally effective security measures used to compensate for the inability to satisfy a particular requirement and achieve equivalent protection approved in writing by an authorized representative of the DoD Chief Information Officer (CIO) prior to contract award; and

(2) Apply other information systems security measures when the Contractor reasonably determines that information systems security measures, in addition to those identified in paragraph

(b)(1) of this clause, may be required to provide adequate security in a dynamic environment based on an assessed risk or vulnerability.

(c) Cyber incident reporting requirement.

(1) When the Contractor discovers a cyber incident that affects a covered contractor information system or the covered defense information residing therein, or that affects the contractor’s ability to perform the requirements of the contract that are designated as operationally critical support, the Contractor shall—

(i) Conduct a review for evidence of compromise of covered defense information, including, but not limited to, identifying compromised computers, servers, specific data, and user accounts. This review shall also include analyzing covered contractor information system(s) that were part of the cyber incident, as well as other information systems on the Contractor’s network(s), that may have been accessed as a result of the incident in order to identify compromised covered defense information, or that affect the Contractor’s ability to provide operationally critical support; and

(ii) Rapidly report cyber incidents to DoD at http://dibnet.dod.mil.

(2) Cyber incident report. The cyber incident report shall be treated as information created by or for

DoD and shall include, at a minimum, the required elements at http://dibnet.dod.mil.

(3) Medium assurance certificate requirement. In order to report cyber incidents in accordance with this clause, the Contractor or subcontractor shall have or acquire a DoD-approved medium assurance certificate to report cyber incidents. For information on obtaining a DoD-approved medium assurance certificate, see http://iase.disa.mil/pki/eca/Pages/index.aspx.

http://dx.doi.org/10.6028/NIST.SP.800-171 http://dibnet.dod.mil/ http://dibnet.dod.mil/ http://iase.disa.mil/pki/eca/Pages/index.aspx

(d) Malicious software. The Contractor or subcontractors that discover and isolate malicious software in connection with a reported cyber incident shall submit the malicious software in accordance with instructions provided by the Contracting Officer.

(e) Media preservation and protection. When a Contractor discovers a cyber incident has occurred, the

Contractor shall preserve and protect images of all known affected information systems identified in paragraph (c)(1)(i) of this clause and all relevant monitoring/packet capture data for at least 90 days from the submission of the cyber incident report to allow DoD to request the media or decline interest.

(f) Access to additional information or equipment necessary for forensic analysis. Upon request by DoD, the Contractor shall provide DoD with access to additional information or equipment that is necessary to conduct a forensic analysis.

(g) Cyber incident damage assessment activities. If DoD elects to conduct a damage assessment, the

Contracting Officer will request that the Contractor provide all of the damage assessment information gathered in accordance with paragraph (e) of this clause.

(h) DoD safeguarding and use of contractor attributional/proprietary information. The Government shall protect against the unauthorized use or release of information obtained from the contractor (or derived from information obtained from the contractor) under this clause that includes contractor attributional/proprietary information, including such information submitted in accordance with paragraph (c).

To the maximum extent practicable, the Contractor shall identify and mark attributional/proprietary information. In making an authorized release of such information, the Government will implement appropriate procedures to minimize the contractor attributional/proprietary information that is included in such authorized release, seeking to include only that information that is necessary for the authorized purpose(s) for which the information is being released.

(i) Use and release of contractor attributional/proprietary information not created by or for DoD.

Information that is obtained from the contractor (or derived from information obtained from the contractor) under this clause that is not created by or for DoD is authorized to be released outside of DoD—

(1) To entities with missions that may be affected by such information;

(2) To entities that may be called upon to assist in the diagnosis, detection, or mitigation of cyber incidents;

(3) To Government entities that conduct counterintelligence or law enforcement investigations;

(4) For national security purposes, including cyber situational awareness and defense purposes

(including with Defense Industrial Base (DIB) participants in the program at 32 CFR part 236); or

(5) To a support services contractor (“recipient”) that is directly supporting Government activities under a contract that includes the clause at 252.204-7009, Limitations on the Use or Disclosure of Third-Party

Contractor Reported Cyber Incident Information.

http://www.acq.osd.mil/dpap/dars/dfars/html/current/252204.htm#252.204-7009

Amendment 0001

(j) Use and release of contractor attributional/proprietary information created by or for DoD.

Information that is obtained from the contractor (or derived from information obtained from the contractor) under this clause that is created by or for DoD (including the information submitted pursuant to paragraph (c) of this clause) is authorized to be used and released outside of DoD for purposes and activities authorized by paragraph (i) of this clause, and for any other lawful Government purpose or activity, subject to all applicable statutory, regulatory, and policy based restrictions on the Government’s use and release of such information.

(k) The Contractor shall conduct activities under this clause in accordance with applicable laws and regulations on the interception, monitoring, access, use, and disclosure of electronic communications and data.

(l) Other safeguarding or reporting requirements. The safeguarding and cyber incident reporting required by this clause in no way abrogates the Contractor’s responsibility for other safeguarding or cyber incident reporting pertaining to its unclassified information systems as required by other applicable clauses of this contract, or as a result of other applicable U.S. Government statutory or regulatory requirements.

(m) Subcontracts. The Contractor shall—

(1) Include the substance of this clause, including this paragraph (m), in all subcontracts, including subcontracts for commercial items; and

(2) Require subcontractors to rapidly report cyber incidents directly to DoD at http://dibnet.dod.mil and the prime Contractor. This includes providing the incident report number, automatically assigned by

DoD, to the prime Contractor (or next higher-tier subcontractor) as soon as practicable. (End of clause)

E. Additionally, this amendment incorporates DFARS 252.204-7008 COMPLIANCE WITH

SAFEGUARDING COVERED DEFENSE INFORMATION CONTROLS (DEVIATION

2016-O0001)(OCT 2015) as follows:

252.204-7008 – COMPLIANCE WITH SAFEGUARDING COVERED DEFENSE INFORMATION

CONTROLS (DEVIATION 2016-O0001) (OCT 2015)

(a) Definitions. As used in this provision—

“Controlled technical information,” “covered contractor information system,” and “covered defense information” are defined in clause 252.204-7012, Safeguarding Covered Defense Information and Cyber

Incident Reporting (DEVIATION 2016-O0001)(OCT 2015).

(b) The security requirements required by contract clause 252.204-7012, Safeguarding Covered Defense

Information and Cyber Incident Reporting (DEVIATION 2016-O0001)(OCT 2015) shall be implemented for all covered defense information on all covered contractor information systems that support the performance of this contract.

(c) If the Offeror anticipates that additional time will be necessary to implement derived security requirement 3.5.3 “Use of multifactor authentication for local and network access to privileged accounts and for network access to non-privileged accounts” within National Institute of Standards and Technology (NIST)

Special Publication (SP) 800-171, “Protecting Controlled Unclassified Information in Nonfederal Information http://dibnet.dod.mil/

Amendment 0001

Systems and Organizations (see http://dx.doi.org/10.6028/NIST.SP.800-171), the Offeror shall notify the

Contracting Officer that they will implement the requirement within 9 months of contract award.

(d) If the Offeror proposes to deviate from any of the security requirements in NIST SP 800-171that is in effect at the time the solicitation is issued or as authorized by the Contracting Officer, the Offeror shall submit to the Contracting Officer, for consideration by the DoD Chief Information Officer (CIO), a written explanation of—

(1) Why a particular security requirement is not applicable; or

(2) How an alternative, but equally effective, security measure is used to compensate for the inability to satisfy a particular requirement and achieve equivalent protection.

(e) An authorized representative of the DoD CIO will approve or disapprove offeror requests to deviate from NIST SP 800-171 requirements in writing prior to contract award. Any approved deviation from NIST

SP 800-171 shall be incorporated into the resulting contract. (End of provision)

F. Furthermore, item (F) from the instructions from page 3 of solicitation SPE60015R0519 and page 3 of the Offeror Submission Package (OSP), attachment 2 to this solicitation is hereby deleted. Deleted item (F) initially stated “F. JOINT CONTINGENCY

CONTRACTING SYSTEM (JCCS): All non-U.S. offerors and proposed non-U.S.

subcontractors must be registered online in the JCCS website (https://www.jccs.gov/).”

This instruction is not replaced at this time.

G. This amendment is issued to revise Attachment 1 to SPE60015R0519, the Performance

Work Statement (PWS). More specifically, Attachment 1 (PWS), page 2, subsection 1.1, the bullet that states “Joint Contingency Contracting System (JCCS): All non-U.S.

offerors and all proposed non-U.S. subcontractors must be registered online in the JCCS website (https://www.jccs.gov/)” is hereby deleted in its entirety from the PWS.

http://dx.doi.org/10.6028/NIST.SP.800-171 https://www.jccs.gov/) https://www.jccs.gov/