Statement of Work for solicitation.docx

STATEMENT OF WORK

For Calibration/ Certification Services September 19, 2020 -September 18, 2025

The contractor shall furnish all labor and materials to perform one calibration/certification per year on Mettler, Sartorius, Ohaus, Denver Instrument, and Dilumat balances located at USDA, PSIS, OPHS, Eastern Laboratory, 950 College Station Road, Athens, GA 30605. A complete listing of equipment is provided in the attached Excel document.

The Period of Performance for the base year, plus four option years, will be as follows:

In addition to the terms listed below, each Calibration/Certification shall include:

NOTE: Limited changes could be made each year to the listing of equipment that needs to be maintained. If changes need to occur, the Government will contact the contractor and discuss pricing for the new equipment. In addition, some pieces of equipment may be removed from the list each year depending on whether they are obsolete or not in use any longer.

1. Hours of Service. Maintenance/repair services shall be provided during normal working hours, 8:00am to 1:00pm EST, Monday through Friday, excluding Federal Holidays (see http://www.opm.gov/Fedhol/ for a listing of the Federal Holidays).

2. The COR, as described below, will act, on-site, as the technical point of contact for the Government, initiate service calls, and perform acceptance of equipment after maintenance and repairs. The COR's authority is limited to technical issues and he/she is not authorized to make contractual decisions. The authority to resolve monetary issues and contractual interpretation is the responsibility of the Contracting Officer.

3. The contractor shall provide on-site call calibrations to include all labor and travel.

Calibrations shall be made in accordance with manufacturer specifications. Calibrations test shall include shift test as found and as left results. Load test preliminary load test and Final load test. Expanded Uncertainty calculations must be reported.

4. The contractor shall be accredited and perform one ·calibration/certification once per contractual period. The contractor shall provide a tentative calibration/certification schedule to the COR within fifteen (15) days after contract award. Work performed shall include, but not to be limited to, both onsite and offsite consultation, cleaning, adjusting, aligning of each electronic and mechanical component needed to maintain the centrifuge in good operating condition. All preventive maintenance must be documented and the documentation must be provided to the COR within one week of the maintenance services.

5. The equipment shall be fully operational according to laboratory methodology and serviceable after completion of maintenance and repairs. Prior to leaving the area, the contractor shall demonstrate to the COR or designated representative that the equipment is operational. The COR or designated representative will certify the equipment is performing satisfactorily.

6. The contractor shall perform a performance verification/operational qualification (PV/OQ) once a year to ensure the equipment is performing at the level of performance set by the manufacturer. All PV/OQ activities must be documented and provided to the COR.

7. The contractor will support any equipment listed in the attached Excel sheet that becomes legacy equipment and out-of-support instruments on a best effort basis.

8. Invoices should be submitted upon completion of calibration and certification.

Security Requirements:

The contractor shall provide the COR with information on the names of all employees who will require access to the facility in order to perform work on equipment, including approximate date and time of arrival. This should be provided at least 24 hours in advance of work being performed. All employees provided by contractor must have valid picture identification before being allowed onto the premises.

ORGANIZATIONAL CONFLICT OF INTEREST AND LIMITATION ON FUTURE CONTRACTING (SEPT 2008) The following provisions are in accordance with FAR Part 9.5:

a. The U.S. Department of Agriculture (USDA), Food Safety and Inspection Service (FSIS), including any echelon or sub-echelon activity of the USDA, will not consider the Contractor, its successor-in-interest, assignee, or affiliates as a prime source of supply for, nor allow it to be a subcontractor or consultant to a supplier for, any follow-on procurement of a system, subsystem, or major component thereof, including training related thereto for which the Contractor provides technical support services, analyses, system design and evaluation or other types of assistance ordered under this contract action. For examples of a follow-on procurement, see FAR Part 9.508. These examples are not all-inclusive, but are intended to help the Contracting Officer (CO) apply the general rules in FAR Part 9.505 to individual situations.

b. The above restrictions shall be included in all subcontracts, teaming arrangements, and other agreements calling for performance of work related to this contract action, unless exempted in writing by the CO.

c. To prevent unfair competitive advantage in the procurement of any similar federal support services which are the subject of this contract action, the contractor agrees that, until award of a contract action for by FSIS for any of these services it: (1) shall not disclose any information concerning the work under this contract action, including technology developed or findings and conclusions rendered by the Contractor in performing this contract action, to any prospective Contractor; and (2) shall not render any services of any kind related to this procurement to any prospective Contractor.

d. If, under the scope of this contract action, the Contractor is required to prepare a SOW or to design or develop specifications/requirements which are to be incorporated or used in a solicitation for future acquisition of a system, subsystem, or major component thereof relating to the subject matter of this contract action, the USDA, including any echelon or sub-echelon activity, will not consider the Contractor, its successor-in-interest, assignee, or affiliates as a prime source of supply for, nor allow it to be a subcontractor or consultant to a supplier for the procurement of the system, subsystem, or major component thereof. The Contractor, subcontractors and consultants at any tier have an affirmative duty to disclose to the CO actual, potential or apparent conflicts whenever there is reason to believe such exist or will exist.

e. The restrictions and provisions of paragraph (d), above, shall be in effect for a period of two years from the performance completion date of this contract action. At any time subsequent to the effective date of this contract action, the Government may either modify the restrictions of paragraphs (c), and (d), or waive the restrictions entirely if it is determined to be in the best interests of the Government. The restrictions contained herein do not limit the restrictions delineated in FAR Part 9.5.

CONTRACTING OFFICER (JAN 2012)

The Contracting Officer (CO) has the overall responsibility for the administration of this contract. The CO alone, without delegation, is authorized to take actions on behalf of the Government to amend, modify or deviate from the contract terms, conditions, requirements, specifications, details and/or delivery schedules; issue task orders against the contract; make final decisions on disputed deductions from contract payments for nonperformance, or unsatisfactory performance; terminate the contract for convenience or default; and issue final decisions regarding contract questions or matters under dispute. However, the CO may delegate certain other responsibilities to the Contracting Officer’s Representative (COR). All delegated duties will be specified in writing by a COR Appointment and Delegation Notice.

DESIGNATION OF CONTRACTING OFFICER’S REPRESENTATIVE (JAN 2012)

The Contracting Officer hereby designates as the Contracting Officer’s Representative (COR):

[TO BE DESIGNATED UPON AWARD]

The COR shall be responsible for administering the performance of work under this contract. In no event, however, will any understanding, agreement, modification, change order, or other matter deviating from the terms of this contract be effective or binding upon the Government unless formalized by proper contractual documents executed by the Contracting Officer prior to completion of the contract.

The Contracting Officer shall be informed as soon as possible of any actions or inactions by the Contractor or the Government which will change the required delivery or completion times stated in the contract, and the contract shall be modified accordingly.

On all matters that pertain to the contract terms, the contractor shall communicate with the Contracting Officer. Whenever, in the opinion of the Contractor, the COR requests effort outside the scope of the contract, the contractor shall so advise the COR. If the COR persists and there still exists a disagreement as to proper contractual coverage, the Contracting Officer shall be notified immediately, preferably in writing if time permits. Proceeding with work without proper contractual coverage may result in nonpayment or necessitate submittal of a contract claim.

The COR shall be responsible for initiating the Contractor Performance Assessment Report (CPAR) for awards over the simplified acquisition threshold of $150K to document contractor’s performance during the period of performance 14 days after completion of services or delivery of goods.

UNAUTHORIZED PERFORMANCE OF SERVICES (MAY 2011)

(a) No personal services shall be performed under this contract. No Contractor employee will be directly supervised by the Government. All individual employee assignments, and daily work direction, shall be given by the applicable employee supervisor. If the Contractor believes any Government action or communication has been given that would create a personal services relationship between the Government and any Contractor employee, the Contractor shall promptly notify the Contracting Officer of this communication or action.

(b) The Contractor shall not perform any inherently Government actions under this contract. No Contractor employee shall hold him or herself out to be a Government employee, agent, or representative. No Contractor employee shall state orally or in writing at any time that he or she is acting on behalf of the Government. In all communications with third parties in connection with this contract, Contractor employees shall identify themselves as Contractor employees and specify the name of the company for which they work.

(c) The Contractor shall ensure that all of its employees working on this contract are informed of the substance of this clause. Nothing in this clause shall limit the Government's rights in any way under any other provision of the contract, including those related to the Government's right to inspect and accept the services to be performed under this contract. The substance of this clause shall be included in all subcontracts at any tier.

RELEASE OF SENSITIVE INFORMATION (JUNE 2013)

Mark the title page with the following legend:

This proposal or document includes sensitive information that FSIS shall not disclose outside the Agency and its service providers that support management activities and administrative functions. To gain access to this sensitive information, a service provider’s contract must contain the clause entitled "Access to Sensitive Information". Consistent with this clause, the service provider shall not duplicate, use, or disclose the information in whole or in part for any purpose other than to perform the services specified in its contract. This restriction does not limit the Government's right to use this information if it is obtained from another source without restriction. The information subject to this restriction is contained in pages [insert page numbers or other identification of pages].

Mark each page of sensitive information the Contractor wishes to restrict with the following legend:

Use or disclosure of sensitive information contained on this page is subject to the restriction on the title page of this proposal or document.

Organizational Conflicts of Interest Avoidance Plan, which the contract has incorporated as a compliance document.

REPRESENTATIONS, CERTIFICATIONS AND OTHER STATEMENTS OF OFFEROR (FEB 2007)

In accordance with FAR 15.204-1(b), the completed and submitted “Representations, Certifications, and Other Statements of Offeror”, are incorporated by reference in this resulting contract.

LEGAL HOLIDAYS (DEC 2008)

(a)The Federal Government observes the following days as holidays.

*If the date falls on a Saturday, the Government holiday is the preceding Friday. If the date falls on a Sunday, the Government holiday is the following Monday.

(b) In addition to the days designated above as holidays, the Government may observe additional days in accordance with 5 USC 6103.

*508 COMPLIANCE ACCESSIBILITY OF ELECTRONIC AND INFORMATION TECHNOLOGY

(a) This SOW is subject to Section 508 of the Rehabilitation Act of 1973 (29 U.S.C. 794d) as amended by the workforce Investment Act of 1998 (P.L. 105-220). Specifically, subsection 508(a)(1) requires that when the Federal Government procures Electronic and Information Technology (EIT), the EIT must allow Federal employees and individuals of the public with disabilities comparable access to and use of information and data that is provided to Federal employees and individuals of the public without disabilities.

(b) The EIT accessibility standards at 36 CFR Part 1194 were developed by the Architectural and Transportation Barriers Compliance Board ("Access Board") and apply to contracts and task/delivery orders, awarded under indefinite quantity contracts on or after June 25, 2001.

(c) Each Electronic and Information Technology (EIT) product or service furnished under this contract shall comply with the Electronic and Information Technology Accessibility Standards (36 CFR 1194), as specified in the contract, as a minimum. If the Contracting Officer determines any furnished product or service is not in compliance with the contract, the Contracting Officer will promptly inform the Contractor in writing. The Contractor shall, without charge to the Government, repair or replace the non-compliant products or services within the period of time to be specified by the Government in writing. If such repair or replacement is not completed within the time specified, the Government shall have the following recourses:

1. Cancellation of the contract, delivery or task order, purchase or line item without termination liabilities; or

2. In the case of custom Electronic and Information Technology (EIT) being developed by a contractor for the Government, the Government shall have the right to have any necessary changes made or repairs performed by itself or by another firm for the noncompliant EIT, with the contractor liable for reimbursement to the Government for any expenses incurred thereby.

(d) The contractor must ensure that all EIT products that are less than fully compliant with the accessibility standards are provided pursuant to extensive market research and are the most current compliant products or services available to satisfy the contract requirements.

(e) For every EIT product or service accepted under this contact by the Government that does not comply with 36 CFR 1194, the contractor shall, at the discretion of the Government, make every effort to replace or upgrade it with a compliant equivalent product or service, if commercially available and cost neutral, on either a contract specified refresh cycle for the product or service, or on a contract effective option/renewal date; whichever shall occur first.

Section 508 Compliance for Communications The vendor shall comply with the standards, policies, and procedures below. In the event of conflicts between the referenced documents and this SOW shall take precedence.

Rehabilitation Act, Section 508 Accessibility Standards

1. 29 U.S.C. 794d (Rehabilitation Act as amended)

2. 36 CFR 1194 (508 Standards)

3. www.access-board.gov/sec508/508standards.htm (508 standards)

4. FAR 39.2 (Section 508)

5. USDA Standards, policies and procedures (Section 508) In addition, all contract deliverables are subject to these 508 standards as applicable.

Regardless of format, all Web content or communications materials produced, including text, audio or video - must conform to applicable Section 508 standards to allow federal employees and members of the public with disabilities to access information that is comparable to information provided to persons without disabilities. All contractors (including subcontractors) or consultants responsible for preparing or posting content must comply with applicable Section 508 accessibility standards, and where applicable, those set forth in the referenced policy or standards documents above. Remediation of any materials that do not comply with the applicable provisions of 36 CFR Part 1194 as set forth in the SOW shall be the responsibility of the contractor or consultant.

The following Section 508 provisions apply to the content or communications material identified in this SOW:

36 CFR Part 1194.21 a - l 36 CFR Part 1194.22 a - p 36 CFR Part 1194.31 a - f 36 CFR Part 1194.41 a – c The contractor shall provide a completed Section 508 Product Assessment Template and the contractor shall state exactly how proposed EIT deliverable(s) meet or does not meet the applicable standards.

The following Section 508 provisions apply for software development material identified in this SOW, PWS, or TO:

For software development, software applications, and operating systems the Contractor/Developer/Vendor shall comply with the standards, policies, and procedures below:

Rehabilitation Act, Section 508, Accessibility Standards

(1) 29 U.S.C. 794d (Rehabilitation Act as amended)

(2) 36 CFR 1194 (508 Standards)

(3) www.access-board.gov/sec508/508standards.htm (508 Standards)

(4) FAR 39.2 (Section 508)

(5) USDA Standards, policies and procedures (Section 508)

For web-based applications (intranet, internet information and applications, 16 rules), the Contractor shall comply with the standards, policies, and procedures below:

Rehabilitation Act, Section 508, Accessibility Standards

(1) 29 U.S.C. 794d (Rehabilitation Act as amended)

(2) 36 CFR 1194 (508 Standards) 36 CFR Part 1194.22 (a – p) 36 CFR Part 1194.31 (a – f) 36 CFR Part 1194.41 (a – c)

(3) www.access-board.gov/sec508/508standards.htm (508 Standards)

(4) FAR 39.2 (Section 508)

(5) USDA Standards, policies and procedures (Section 508)

For Telecommunication products the Contractor shall comply with the standards, policies, and procedures below:

Rehabilitation Act, Section 508, Accessibility Standards

(1) 29 U.S.C. 794d (Rehabilitation Act as amended)

(2) 36 CFR 1194 (508 Standards) 36 CFR Part 1194.23 (a – k) 36 CFR Part 1194.31 (a – f) 36 CFR Part 1194.41 (a – c)

(3) www.access-board.gov/sec508/508standards.htm (508 Standards)

(4) FAR 39.2 (Section 508)

(5) USDA Standards, policies and procedures (Section 508)

For video and multimedia applications (including training), the Contractor shall comply with the standards, policies, and procedures below:

Rehabilitation Act, Section 508, Accessibility Standards

(1) 29 U.S.C. 794d (Rehabilitation Act as amended)

(2) 36 CFR 1194 (508 Standards) 36 CFR Part 1194.24 (a – e) 36 CFR Part 1194.31 (a – f) 36 CFR Part 1194.41 (a – c)

(3) www.access-board.gov/sec508/508standards.htm (508 Standards)

(4) FAR 39.2 (Section 508)

(5) USDA Standards, policies and procedures (Section 508)

For self-contained, closed products, the Contractor shall comply with the standards, policies, and procedures below:

Rehabilitation Act, Section 508, Accessibility Standards

(1) 29 U.S.C. 794d (Rehabilitation Act as amended)

(2) 36 CFR 1194 (508 Standards) 36 CFR Part 1194.25 (a – j) 36 CFR Part 1194.31 (a – f) 36 CFR Part 1194.41 (a – c)

(3) www.access-board.gov/sec508/508standards.htm (508 Standards)

(4) FAR 39.2 (Section 508)

(5) USDA Standards, policies and procedures (Section 508)

For Desktop and portable computers, the Contractor shall comply with the standards, policies, and procedures below:

Rehabilitation Act, Section 508, Accessibility Standards

(1) 29 U.S.C. 794d (Rehabilitation Act as amended)

(2) 36 CFR 1194 (508 Standards) 36 CFR Part 1194.26(a – d) 36 CFR Part 1194.31 (a – f) 36 CFR Part 1194.41 (a – c)

(3) www.access-board.gov/sec508/508standards.htm (508 Standards)

(4) FAR 39.2 (Section 508)

(5) USDA Standards, policies and procedures (Section 508)

All Electronic Information Technology that is subject to the 36 CFR 1194 standards will have a Section 508 acceptance test and Section 508 will be validated upon acceptance.

All maintenance for Electronic Information Technology that requires upgrades, modifications, installations and purchases will adhere to the Section 508 Standards and 36 CFR 1194.

ACCESS TO SENSITIVE INFORMATION (FEB 2007)

INFORMATION TECHNOLOGY SYSTEMS SECURITY (SEPT 2013)

The activities covered under by this contract shall require the Contractor’s access to Federal Automated Information System or systems, as well as the implementation of new systems. The Offeror’s proposal must include:

(1) A detailed outline (commensurate with the size and complexity of the Statement of Work) of its present and proposed information technology systems security program. The response must demonstrate that it complies with the security requirements of the SOW, the Federal Information Security Management Act of 2002 (FISMA, Public Law 107-347, 44 U.S.C. 3531-3536); Office of Management and Budget (OMB) Circular A-130, Appendix III “Security of Federal Automated Information Systems” (http://www.whitehouse.gov/omb/circulars_a130_a130appendix_iii) and an acknowledgement of its understanding of the security requirements of the SOW.

(2) A signed copy of the USDA FSIS IT Rules of Behavior shall be included with the Offeror’s proposal.

INFORMATION TECHNOLOGY SYSTEMS SECURITY CONTRACT REQUIREMENTS (JAN 2012)

The contractor shall establish and implement appropriate administrative, technical and physical safeguards to ensure the security and confidentiality of sensitive Government information, data, and/or equipment.

The contractor shall comply with IT systems security and/or privacy specifications set forth in FSIS and USDA directives, policy, and procedures; the Computer Security Act of 1987; Office of Management and Budget (OMB) Circular A-130; and the Federal Information Security Management Act of 2002 (FISMA).

Pursuant to FSIS policy, the contractor shall be responsible for assuring that each contractor employee who requires routine unaccompanied physical access to a Federally-controlled facility and/or unaccompanied access to a Federally-controlled information system, including an FSIS-issued computer, completes Computer Security Awareness training prior to performing any work under this contract.

The contractor is required to maintain a listing of all individuals who have completed Computer Security Awareness training and submit this listing to the COR with a copy to the Contracting Officer within ten (10) calendar days of an individual starting work on this contract.”

ADDITIONAL PRIVACY ACT REQUIREMENTS (JAN 2012)

For contracts that are awarded with Federal Acquisition Regulations (FAR) and Agriculture Acquisition Regulations (AGAR) concerning the Privacy Act, Food Safety and Inspection Service (FSIS) requests that contractor employees complete Privacy Act training. Contractor employees may take the course at any place of their choice. An acceptable course is one that covers the basics of the Privacy Act. A certificate that shows completion of training is to be provided to the Contracting Officer’s Representative (COR).

Contractor employees are to complete at least one Privacy Act training course within thirty days after contract award and at least once each year thereafter. USDA offers free Privacy Act training for contractor employees that have a current contract. Contractor employees must be assigned to a current contract that is subject to the Privacy Act to receive the free training. The Contracting Officer (CO) and/or COR can be contacted for further information on procedures for Privacy Act training.

COMPLIANCE WITH INTERNET PROTOCAL VERSION 6 (IPv6) IN ACQUIRING INFORMATION TECHNOLOGY (IPv6) (November 2016)

(a) Any system, hardware, software, firmware or networked component (voice, video or data) developed, procured or acquired in support or performance of this contract shall be capable of transmitting, receiving, processing, forwarding and storing digital information across system boundaries utilizing system packets that are formatted in accordance with commercial standards of Internet Protocol (IP) version 6 (IPv6) as set forth in the USGv6 Profile (NIST Special Publication 500-267) and corresponding declarations of conformance defined in the USGv6 Test Program. In addition, this system shall maintain interoperability with IPv4 systems and provide at least the same level of performance and reliability capabilities of IPv4 products:

(b)Specifically, any new IP product or system developed, acquired, or produced must:

(1) Interoperate with both IPv6 and IPv4 systems and products, and

(2) Have available contractor/vendor IPv6 technical support for development and implementation and fielded product management.

(c) As IPv6 evolves, the Contractor commits to upgrading or providing an appropriate migration path for each item developed, delivered or utilized at no additional cost to the Government.

(d) The Contractor shall provide technical support for both IPv4 and IPv6.

(e) Any system or software must be able to operate on networks supporting IPv4, IPv6 or one that supports both.

(f) Any product whose non-compliance is discovered and made known to the Contractor within one year after acceptance shall be upgraded, modified or replaced to bring it into compliance at no additional cost to the Government.

COMMONLY ACCEPTED SECURITY CONFIGURATIONS FOR WINDOWS OPERATING SYSTEMS (DECEMBER 2016)

By delivering applications under this contract/order, the Contractor certifies that such applications are fully functional and operate correctly as intended on systems using the United States Government Configuration Baseline (USGCB) and comply with E-authentication and other Federal mandates such as LincPass. This includes Microsoft Edge (IE 11), Mozilla FireFox 49.0.2 and higher configured to operate on Windows 7, Windows 10, Windows Server 2012, and higher, as well as latest versions of Android OS and iOS for mobile devices.

The standard installation, operation, maintenance, updates, and/or patching of software shall not alter the configuration settings from the approved USGCB configuration. If a configuration change is necessary, the contractor will supply the actual configuration change, and the business reason for that deviation; the complete list of USGCB configurations can be supplied by FSIS security. The information technology system should also utilize (where appropriate) the Windows Installer Service for installation of the default program files directory and should be able to silently install and uninstall.

Applications designed for normal end users shall run in the standard user context without elevated system administration privileges.

ELECTRONIC INVOICING AND PAYMENT REQUIREMENTS-INVOICE PROCESSING PLATFORM (IPP) (APR 2013)

Effective May 6, 2013, payment requests must be submitted electronically through the U.S. Department of the Treasury’s Invoice Processing Platform (IPP).

“Payment Request” means any request for contract financing payment or invoice payment by the Contractor. To constitute a proper invoice, the payment request must comply with the requirements identified in the applicable Prompt Payment clause included in the contract, or the clause 52.212-4 Contract Terms and Conditions—Commercial Items included in commercial item contracts. The IPP website address is: https://www.ipp.gov.

The Contractor must use the IPP website to register, access and use IPP for submitting requests for payment. Contractor assistance with enrollment, UserIDs and Passwords can be obtained by contacting the IPP Helpdesk via email at IPP Customer Support Desk at 1-866-973-3131 or IPPCustomerSupport@fms.treas.gov. For all other IPP issues, please contact: National Finance Center’s Controller Operations Division (COD) Helpdesk at 1-877-243-3072 or COD.HELP@usda.gov.

Food Safety and Inspection Service (FSIS) Information Technology (IT) Security Rules of Behavior for Privileged Users Version 1.0 February 10, 2006

Introduction Purpose The intent of the FSIS Rules of Behavior (ROB) for Privileged Users is to recognize the additional responsibilities associated with special access to, and/or privileges associated with, computer resources within the Department or its offices/bureaus/components. The ROB for Privileged Users are in addition to the Computer System User IT Security General ROB to which all DOJ users are subject. The identification of these responsibilities originates in OMB A-130 and is included in the FSIS IT Security Standards.

“Privileged User” defined:

A privileged user is someone authorized access to departmental/office/bureau/component computer resources when that access provides the capability to alter the properties, behavior or control of the information system/network. It includes, but is not limited to, any of the following types of access:

a. “Super user,” “root,” or equivalent access, such as access to the control functions of the information system/network, administration of user accounts, etc.

b. Access to change control parameters (e.g., routing tables, path priorities, addresses) of routers, multiplexers, and other key information system/network equipment or software.

c. Ability and authority to control and change program files, and other users’ access to data.

d. Direct access to operating system level functions (also called unmediated access) that would permit system controls to be bypassed or changed.

e. Access and authority for installing, configuring, monitoring or troubleshooting the security monitoring functions of information systems/networks (e.g., network/system analyzers; intrusion detection software; firewalls) or in performance of cyber/network operations.

Who is covered by these rules?

These rules extend to all privileged users (FSIS employees and contractors) who use any computing resources that support the mission and functions of the Food Safety and Inspection Service. All privileged users will review and provide signature or electronic verification to these rules annually, or upon change of assigned responsibilities, whichever occurs first.

What are the penalties for Noncompliance?

Compliance with these rules will be enforced through sanctions commensurate with the level of infraction. Actions may include a verbal or written warning, removal of system access for a specific period of time, reassignment to other duties, or termination, depending on the severity of the violation. In addition, activities that lead to or cause the disclosure of classified information may result in criminal prosecution under the U.S. Code, Title 18, Section 798, and other applicable statutes.

Responsibilities Complying Privileged Users will:

1. Understand that it is their responsibility to comply with all security measures necessary to prevent the unauthorized disclosure, modification, or destruction of information; follow appropriate system security policies, guidelines and procedures

2. Agree to the FSIS General Rules of Behavior.

3. Minimize exposure and risk by utilizing a separate account to perform privileged functions from general user functions.

4. Not establish or reset any account utilizing the same password for more than one account, and will not provide the user name and password at the same time through the same medium.

5. Grant read or write authority no higher than is granted to him/her (e.g., a component level user administrator shall not assign department level access to another user administrator).

6. Access application programs only for the purpose of creating or maintaining files.

7. Not make modifications to system configurations that could impact availability or security of the system without the approval of the Change Control Board and/or change management process.

8. Not perform general user activities under the same account (user name and password) due to the security requirement for separation of duties.

9. Protect all passwords from unauthorized disclosure.

10. Not share accounts with another privileged user.

11. Make the system available at any time to the SAISO for inspection and review of audit logs.

12. Grant only read-only access to audit files to the Security Auditor; grant access to general system information only if a need-to-know is established and authorization is received from the ISSO.

13. Make the computer(s) available for periodic reviews of the security configuration by independent testers

14. Make changes to system configuration as directed to meet Vulnerability and Patch Management requirements.

15. Immediately record and report any security incidents to the ISSPM.

I acknowledge and understand the responsibilities associated with my role as a Privileged User, and I will comply with the February 10, 2006, Privileged User Rules of Behavior. The Statement of acknowledgement can be provided via email.

Typed Name

SCIENTIFIC INTERGRITY TRAINING (APR 2017)

In accordance with the United States Department of Agriculture (USDA) Department Regulation 1074-001 for contracts that are awarded in accordance with Federal Acquisition Regulations (FAR) and Agriculture Acquisition Regulations (AGAR), the FSIS requests that contractor employees complete at least one Scientific Integrity training course within ninety (90) days after contract award. Contractor employees must be assigned to a current FSIS contract to receive the free training. Contractor employees may take the course at any place of their choice. An acceptable course is one that issued to the contractor employee through the USDA AgLearn training system. A certificate issued by AgLearn showing completion of training is to be provided to the Contracting Officer’s Representative (COR). The COR and/or Contracting Officer (CO) can be contacted for further information on procedures for Scientific Integrity training.

Note to CORs: If contractor-personnel are not able to obtain e-Authentication to access AgLearn, you must e-mail the AgLearn Helpdesk at FSISAgLearn@fsis.usda.gov to request a paper copy of the course. Once contractor-personnel completes the training and notify the COR, the COR shall e-mail FSISAgLearn@fsis.usda.gov and request a course completion certificate be issued for the contractor-personnel. The COR should retain a copy as part of their COR records and send a copy of the certificate to the CO.

Software License Line Item Data (May 2018) The following language and deliverable schedule must be inserted into all work statements for contractor support that require the contractor to provide software licenses to USDA, or may involve the contractor providing software licenses to USDA during performance of the contract. The deliverable schedule may be modified to fit the deliverable schedule format used.

Insert the following text in statements of work:

In accordance with Office of Management and Budget Memorandum M-16-12, Category Management Policy 16-1: Improving the Acquisition and Management of Information Technology: Software Licensing, USDA must maintain an inventory of its software licenses, including pricing data. The contractor shall provide line item pricing data on all software licenses provided to USDA at award and/or during performance of the contract/order. The attachment entitled “Software Template Line Item Pricing” must be completed and provided to the Contracting Officer’s Representative within 10 days of award, or within 10 days of activation for licenses provided after the award date.

Deliverable Schedule: