A0002 W15QKN-20-Q-0054.pdf

AMENDMENT OF SOLICITATION/MODIFICATION OF CONTRACT 1. Contract ID Code Page Of

2. Amendment/Modification No.

3. Effective Date

4. Requisition/Purchase Req No.

5. Project No. (If applicable)

6. Issued By Code 7. Administered By (If other than Item 6) Code

8. Name And Address Of Contractor (No., Street, City, County, State and Zip Code)

9A. Amendment Of Solicitation No.

9B. Dated (See Item 11)

10A. Modification Of Contract/Order No.

10B. Dated (See Item 13) Code Facility Code

11. THIS ITEM ONLY APPLIES TO AMENDMENTS OF SOLICITATIONS

The above numbered solicitation is amended as set forth in item 14. The hour and date specified for receipt of Offers is extended, is not extended.

Offers must acknowledge receipt of this amendment prior to the hour and date specified in the solicitation or as amended by one of the following methods:

(a) By completing items 8 and 15, and returning ____________ copies of the amendments: (b) By acknowledging receipt of this amendment on each copy of the offer submitted; or (c) By separate letter or telegram which includes a reference to the solicitation and amendment numbers. FAILURE OF YOUR ACKNOWLEDGMENT TO BE RECEIVED AT THE PLACE DESIGNATED FOR THE RECEIPT OF OFFERS PRIOR TO THE HOUR AND DATE SPECIFIED MAY RESULT IN REJECTION OF YOUR OFFER. If by virtue of this amendment you desire to change an offer already submitted, such change may be made by telegram or letter, provided each telegram or letter makes reference to the solicitation and this amendment, and is received prior to the opening hour and date specified.

12. Accounting And Appropriation Data (If required)

13. THIS ITEM ONLY APPLIES TO MODIFICATIONS OF CONTRACTS/ORDERS

It Modifies The Contract/Order No. As Described In Item 14.

A. This Change Order is Issued Pursuant To: The Changes Set Forth In Item 14 Are Made In

The Contract/Order No. In Item 10A.

B. The Above Numbered Contract/Order Is Modified To Reflect The Administrative Changes (such as changes in paying office, appropriation data, etc.) Set

Forth In Item 14, Pursuant To The Authority of FAR 43.103(b).

C. This Supplemental Agreement Is Entered Into Pursuant To Authority Of:

D. Other (Specify type of modification and authority)

E. IMPORTANT: Contractor is not, is required to sign this document and return _______________ copies to the Issuing Office.

14. Description Of Amendment/Modification (Organized by UCF section headings, including solicitation/contract subject matter where feasible.)

Except as provided herein, all terms and conditions of the document referenced in item 9A or 10A, as heretofore changed, remains unchanged and in full force and effect.

15A. Name And Title Of Signer (Type or print)

16A. Name And Title Of Contracting Officer (Type or print)

15B. Contractor/Offeror 15C. Date Signed 16B. United States Of America 16C. Date Signed

By (Signature of person authorized to sign) (Signature of Contracting Officer)

NSN 7540-01-152-8070

PREVIOUS EDITIONS UNUSABLE

30-105-02 STANDARD FORM 30 (REV. 10-83)

Prescribed by GSA FAR (48 CFR) 53.243

SEE SCHEDULE

X

Firm Fixed Price

W15QKN

ARMY CONTRACTING COMMAND - NJ

5418 SOUTH SCOTT PLAZA

JOINT BASE MDL, NJ 08640

JAMES MARTIN

EMAIL: JAMES.J.MARTIN3.CIV@MAIL.MIL

W15QKN-20-Q-0054

2020SEP11

X

X 2020SEP22 10:00am

2 signed

SEE SECOND PAGE FOR DESCRIPTION

1 8

CONTINUATION SHEET

Reference No. of Document Being Continued Page of

Name of Offeror or Contractor:

PIIN/SIIN MOD/AMD

SUPPLEMENTAL INFORMATION

Buyer Name: JAMES MARTIN

Buyer Office Symbol/Telephone Number: CCNJ-IT/(609)562-6653

Type of Contract 1: Firm Fixed Price

Kind of Contract: Supply Contracts and Priced Orders

*** End of Narrative A0000 ***

Amendment 002 to W15QKN-20-C-0054 is as follows:________________________________________________

CLIN 0001 remains unchanged at:_______________________________

30 new IBM i2 Analyst Notebook Standard Software Licenses with 12-months of technical and software maintenance support.

CLIN 0002 is revised:

From: 12-months of technical and software maintenance support for 33 IBM i2 Analyst Notebook Standard

Software Licenses previously purchased by USACIDC that require reinstatement.

To: 12-months of technical and software maintenance support for 49 IBM i2 Analyst Notebook Standard____

Software Licenses previously purchased by USACIDC that require reinstatement.

CLIN 0003 is hereby deleted.____________________________

CLIN 1001 remains unchanged at:________________________________

12-months of concurrrent technical and software maintenance support for 79 IBM i2 Analyst Notebook Standard Software Licenses.

Complete revised Request for Quote (RFQ) with Statement of Work (SOW) is below. Clauses and Provisions are contained in original RFQ_____________________________________________________________________________________________________________________________________

W15QKN-20-Q-0054._________________

Regulatory Cite Title Date_______________ _____ ____

52.224-4001 DISCLOSURE OF UNIT PRICE INFORMATION (AS7029) OCT/2010

This constitutes notification pursuant to Executive Order 12600, Pre-Disclosure Notification Procedures for Confidential Commercial

Information (June 23, 1987), of our intention to release unit prices in response to any request under the Freedom of Information Act, 5

USC 552. Unit price is defined as the contract price per unit or item purchased. We consider any objection to be waived unless the

Contracting Officer is notified of your objection to such posting prior to submission of initial proposals.

Additional Instructions to FAR 52.212-1 "Instructions to Offerors":___________________________________________________________________

1. The U.S. Army Contracting Command-New Jersey has a requirement in support of the U.S. Army Criminal Investigation Command (USACIDC), Intelligence Division, for 30 new IBM i2 Analyst Notebook Standard Software Licenses and technical and software maintenance support for

49 IBM i2 Analyst Notebook Standard Software Licenses previously purchased by USACIDC that require reinstatement. The period of performance shall be a 12-month base period with one 12-month option period. The base period includes 30 new IBM i2 Analyst Notebook

Standard Software Licenses with technical and software maintenance support and 49 reinstated licenses requiring technnical and software maintenance support. The 12-month option period shall provide for 12-months of concurrrent technical and software maintenance support for 79 of the subject IBM i2 Analyst Notebook Standard Software Licenses.

2. The anticipated contract type is award of a Firm Fixed Price Contract. The North American Industry Classification Systems (NAICS) code for this effort is 511210, Software Publishers, with a size standard of $41,500,000.00. This solicitation is Unrestricted and has been assigned RFQ Number W15QKN-20-Q-0054 for tracking purposes.

3. It is requested that Offerors submit a proposal in response to this RFQ and the SOW (Section C). Offerors shall include specifications of the proposed requirement. Partial quotes will not be accepted and Offerors responses must be in full compliance with the instructions contained in this RFQ. Please ensure that all attached RFQ documentation has been read thoroughly and submit a response specifying RFQ W15QKN-20-Q-0054 by the date/time indicated. Proposals shall be submitted no later than 22 September 2020 by 10:00 AM

EST. All proposals shall be sent via email to the Contract Specialist, James Martin, at james.j.martin3.civ@mail.mil and the Contracting

Officer, Wendella Baptiste, at wendella.a.baptiste.civ@mail.mil. It is the responsibility of the Offeror to ensure the Government

2 8

W15QKN-20-Q-0054

Name of Offeror or Contractor:

PIIN/SIIN MOD/AMD

receives the submitted proposal by the due date/time. Any proposals received after the date/time specified for receipt of offers shall be determined late and will not be considered for award.

4. In accordance with FAR 52.212-2, the Government intends to make an award to the Contractor who submits the lowest price, technically acceptable quote that is deemed responsive and responsible by the Contracting Officer. To be found technically acceptable, the Offeror must meet the requirements as specified in the RFQ and SOW.

5. As a part of the proposal preparation process, the Government will offer potential Offerors the opportunity for due diligence. This will enhance the Offerors understanding of the requirements. All questions regarding these requirements may be submitted via email no later than 21 September 2020 by 12:00 Noon EST to the Contract Specialist, James Martin. All correspondence shall be submitted by email in writing specifying RFQ W15QKN-20-Q-0054/IBM i2 Analyst Notebook Standard Software Licenses.

6. An Offeror's quote MUST list your DUNS number, CAGE code, and Federal Tax ID Number with Company name, Point of Contact and phone number. All contractors must complete their Online Representations and Certifications before contract award through the System for Award

Management (SAM) website. Offerors may include a complete copy of the provision at FAR 51.212-3 with their quote.

7. The contents of this RFQ shall not be interpreted as authorizing work to commence, and shall not serve as a basis for any future claims against the Government.

*** END OF NARRATIVE A0001 ***

3 8

PIIN/SIIN

Page of

Name of Offeror or Contractor:

ITEM NO SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

Reference No. of Document Being Continued

MOD/AMD

SUPPLIES OR SERVICES AND PRICES/COSTS

0001 IBM I2 ANALYST NOTEBOOK SOFTWARE LICENSES 30 EA $ $ _________________________________________ ______________ __________________

COMMODITY NAME: BASE PERIOD LICENSES

CLIN CONTRACT TYPE:

Firm Fixed Price

Mfr CAGE: 99999

Mfr Part Number: 99999999

The contractor shall provide for 30 software licenses of the most up to date version of IBM i2 Analyst

Notebook Standard with 12-months of technical and software maintenance support.

IBM Passport

Advantage Site

Number: 3465603

(End of narrative A001)

Packaging and Marking _____________________

Inspection and Acceptance _________________________

INSPECTION: Destination ACCEPTANCE: Destination

Deliveries or Performance _________________________

DOC SUPPL

REL CD MILSTRIP ADDR SIG CD MARK FOR TP CD ______ ________ ______ ______ ________ _____

001 3

DEL REL CD QUANTITY DEL DATE __________ ______________ ___________

001 30 0030

FOB POINT: Destination

SHIP TO:

(W81PNB) W4VK MAJ PROC FRAUD UNIT CID

USACIDC

27130 TELEGRAPH ROAD

QUANTICO VA 22134-0001

0002 TECHNICAL AND SOFTWARE MAINTENANCE SUPPORT 49 EA $ $ __________________________________________ ______________ __________________

COMMODITY NAME: BASE PERIOD MAINTENANCE

CLIN CONTRACT TYPE:

Firm Fixed Price

Mfr CAGE: 99999

Mfr Part Number: 99999999

4 8

PIIN/SIIN

Page of

Name of Offeror or Contractor:

ITEM NO SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

Reference No. of Document Being Continued

MOD/AMD

12-months of technical and software maintenance support for 49 IBM i2 Analyst Notebook Standard

Software Licenses previously purchased by USACIDC that require reinstatement.

IBM Passport Advantage Site Number: 3465603

(End of narrative A001)

Packaging and Marking _____________________

Inspection and Acceptance _________________________

INSPECTION: Destination ACCEPTANCE: Destination

1001 IBM I2 ANALYTICAL NOTEBOOK SOFTWARE MAINTENANCE _______________________________________________

SUPPORT 79 EA $ $ _______ ______________ __________________

COMMODITY NAME: OPTION PERIOD 01

CLIN CONTRACT TYPE:

Firm Fixed Price

Mfr CAGE: 99999

Mfr Part Number: 99999999

Packaging and Marking _____________________

Inspection and Acceptance _________________________

INSPECTION: Destination ACCEPTANCE: Destination

Deliveries or Performance _________________________

DOC SUPPL

REL CD MILSTRIP ADDR SIG CD MARK FOR TP CD ______ ________ ______ ______ ________ _____

001 3

DEL REL CD QUANTITY DEL DATE __________ ______________ ___________

001 79 0030

FOB POINT: Destination

SHIP TO:

(W81PNB) W4VK MAJ PROC FRAUD UNIT CID

USACIDC

27130 TELEGRAPH ROAD

QUANTICO VA 22134-0001

5 8

Name of Offeror or Contractor:

PIIN/SIIN MOD/AMD

DESCRIPTION/SPECIFICATIONS/WORK STATEMENT

STATEMENT OF WORK (SOW)

U.S. Army Criminal Investigation Division, HQ

IBM Analyst Notebook Standard Software Licensing and Maintenance Support

18 September 2020

1.0 Requirement Description

1.1 Scope: The contractor shall provide 30 concurrent licenses of IBM i2 Analyst Notebook Standard Software for use by the U.S. Army_________

Criminal Investigation Division (USACIDC), HQs, 12-months of technical and software maintenance support, and software maintenance support for 49 licenses previously purchased by USACIDC that require reinstatement. This requirement shall also include one 12-month option period of concurrent software maintenance support for 79 IBM i2 Analyst Notebook Standard Software licenses upon base period of performance expiration.

1.2. Contract Type: The Government anticipates award of a firm-fixed price type contract for the required licenses, technical and___________________ software maintenance support.

1.3 Specifications: The contractor shall provide for 30 concurrent software licenses of the most up to date version of IBM i2 Analyst___________________

Notebook Standard, 12-months of technical and software maintenance support, software maintenance support for 49 licenses already purchased by USACIDC that require reinstatement, and one 12-month option period of concurrent software maintenance support for 79 IBM i2

Analyst Notebook Standard Software licenses.

IBM Passport Advantage Site Number: 3465603

*The Green Purchasing Policy, Electronic Product Environmental Assessment Tool (EPEAT) does not apply to this requirement, therefore an

EPEAT waiver is not required.

1.4 Period of Performance: The period of performance will be one 12 month base period from date of award and one 12 month option_________________________ period.

1.5 Delivery: The contractor shall provide all licenses within 30 business days of order award. The contractor shall contact the below_____________

Point of Contact three business days before delivery to set up time/date to deliver the licenses and coordinate installation access.

Accelerated deliveries are acceptable and encouraged at no additional cost to the Government. Option period of performance, if exercised, shall be for 12-months upon base period of performance expiration. The contractor shall furnish all licenses in an effective, protected and timely manner. Licenses will then be installed by USACIDC IT Support to individually designated workstations. The

Contractor shall deliver to the below point of contact:

a) \*)All Licenses shall be delivered to:

US Army CID, Intel Division

27130 Telegraph Road

Quantico, VA 22134

Phone: TBD

Email: TBD

DODAAC: W81PNB

1.5.1 Contractor shall obtain acknowledgement of delivery to the designated site._____

2.0 Security Requirements

2.1 Delivery Location: The location for delivery is on a military installation. The contractor will have no need to access this_____________________ facility. Licenses will be delivered via secure website for install by USACIDC IT support personnel.

3.0 General Information

3.1 Government Furnished Equipment/Materials/Facilities: Not applicable.________________________________________________________

3.2 Inspection/Acceptance /FOB Terms: Inspection and Acceptance shall be at Destination._____________________________________

3.3 Quality Assurance: The government shall evaluate the contractors performance under this contract in accordance with the terms of_____________________ the contract to assure supplies/services meet the requirements of this SOW.

6 8

Name of Offeror or Contractor:

PIIN/SIIN MOD/AMD

3.4 Government Holidays: The Contractor shall not deliver items on the following holidays: New Years Day, Martin Luther King Day,_______________________

Presidents Day, Good Friday, Memorial Day, Independence Day, Labor Day, Columbus Day, Veterans Day, Thanksgiving Day, and Christmas Day.

3.5 Travel/Special Requirements: Not applicable._______________________________

4.0 IMPLEMENTATION OF ENHANCED SECURITY PROTECTIONS FOR CONTRACTOR INFORMATION SYSTEMS

4.1. System Security Plan and Plans of Action and Milestones (SSP/POAM)_______________________________________________________________________

Reviews_______

4.1.1 Within thirty (30) days of contract award, unless otherwise notified by the Government, the Contractor shall make its System

Security Plan(s) (SSP(s)) for its covered contractor information system(s) available for review by the Government at the Contractor's facility. The SSP(s) shall describe how the National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171 security requirements are implemented as required by Defense Federal Acquisition Regulation Supplement (DFARS) clause 252.204-7012, which is included in this contract, and identify all applicable Commercial and Government Entity Code codes affected. The Contractor shall fully cooperate in the Government's review of the SSPs at the Contractor's facility.

4.1.2 If the Government determines that the SSP(s) does not adequately describe how the NIST SP 800-171 security requirements are implemented, then the Government shall notify the Contractor of each identified deficiency. The Contractor shall correct any identified deficiencies within thirty (30) days of notification by the Government. The contracting officer may provide for a correction period longer than thirty (30) days and, in such a case, may require the Contractor to submit a Plan of Action and Milestones (POAM) for the correction of the identified deficiencies. The Contractor shall immediately notify the contracting officer of any failure or anticipated failure to meet a milestone in such a POAM.

4.1.3 Upon conclusion of the correction period, the Government may conduct a follow-on review of the SSP(s) at the Contractor's facilities. The Government may continue to conduct follow-on reviews until the Government determines that the Contractor has corrected all identified deficiencies in the SSP(s).

4.1.4 The Government may, in its sole discretion or in response to a cyber incident, conduct subsequent reviews at the Contractor's site to verify the information in the SSP(s). The Government may conduct reviews at any time upon thirty (30) days' notice to the Contractor.

4.2. Compliance to NIST SP 800-171__________________________________

4.2.1 The Contractor shall fully implement the Controlled Unclassified Information (CUI) Security Requirements (Requirements) in NIST SP

800-171 in effect at the time the solicitation is issued or as authorized by the Contracting Officer, or establish a SSP(s) and POAMs) that varies from NIST SP 800-171 only in accordance with DFARS clause 252.204-7012(b)(2), for all covered contractor information systems affecting this contract.

4.2.2 Notwithstanding the allowance for such variation, the Contractor shall identify in any SSP and POAM their plans to implement the following, at a minimum:

4.2.2.1 Implement Requirement 3.5.3 (Multi-factor authentication). This means that multi-factor authentication is required for all users, privileged and unprivileged accounts that log into a network. In other words, any system that is not standalone should be required to utilize acceptable multi-factor authentication. For legacy systems and systems that cannot support this requirement, a combination of physical and logical protections acceptable to the Government may be substituted;

4.2.2.2 Implement Requirement 3.1.5 (least privilege) and associated Requirements, and identify practices that the Contractor implements to restrict the unnecessary sharing with, or flow of, covered defense information to its subcontractors, suppliers, or vendors based on need-to-know principles;

4.2.2.3 Implement Requirement 3.1.12 (monitoring and control remote access sessions)-Require monitoring and controlling of remote access sessions and include mechanisms to audit the sessions and methods;

4.2.2.4 Audit user privileges on at least an annual basis;

4.2.2.5 Implement Requirement 3.13.11 (Federal Information Processing Standards (FIPS) 140-2 validated cryptology or implementation of

National Security Agency- or NIST-approved algorithms (i.e., FIPS 140-2 Annex A: Advanced Encryption Standard (AES) Or Triple Data

Encryption Standard (DES) or compensating controls as documented in a SSP and POAM));

4.2.2.6 Implement Requirement 3.13.16 (Protect the confidentiality of CUI at rest) or provide a POAM for implementation which can be evaluated by the Government Program Manager for risk to the program;

4.2.2.7 Implement Requirement 3.1.19 (encrypt CUI on mobile devices) or provide a plan of action for implementation which can be

7 8

Name of Offeror or Contractor:

PIIN/SIIN MOD/AMD

evaluated by the Government Program Manager for risk to the program.

4.3. Cyber Incident Response:_____________________________

4.3.1 The Contractor shall, within fifteen (15) days of discovering the cyber incident (inclusive of the 72-hour reporting period in

DFARS clause 252.204-7012 ), deliver all data used in performance of the contract that the Contractor determines is impacted by the incident and begin assessment of potential warfighter/program impact. Incident data shall be delivered in accordance with the Department of Defense Cyber Crimes Center (DC3) Instructions for Submitting Media available at http://www.acq.osd.mil/dpap/dars/pgi/docs/lnstructions_for_Submitting_Media.docx . In delivery of the incident data, the

Contractor shall, to the extent practical, remove contractor-owned information from Government covered defense information.

4.3.2 If the Contractor subsequently identifies any such data not previously delivered to DC3, then the Contractor shall immediately notify the contracting officer in writing and shall deliver the incident data within ten (10) days of identification. In such a case, the Contractor may request a delivery date later than ten (10) days after identification. The contracting officer will approve or disapprove the request after coordination with DC3.

4.4. Army Counterintelligence (Cl) Outreach___________________________________________

The Contractor shall engage, whenever practicable, with Army Cl industry outreach efforts and consider recommendations for hardening of covered contractor information systems affecting Army programs and technologies; and make Contractor personnel available for threat briefings specific to foreign intelligence threats to Army programs and technologies.

5. Army Cl/Industry Monitoring______________________________

5.1 In the event of a cyber incident or at any time the Government has indication of a vulnerability or potential vulnerability, the

Contractor shall cooperate with the Army Cl, which may include cooperation related to: threat indicators; pre-determined incident information derived from the Contractor's infrastructure systems; and the continuous provision of all Contractor, subcontractor, or vendor logs that show network activity, including any additional logs the Contractor, subcontractor or vendor agrees to initiate as a result of the cyber incident or notice of actual or potential vulnerability.

5.2 If the Government determines that the collection of all logs does not adequately protect its interests, the Contractor will coordinate with Army Cl to implement additional measures, which may include allowing the installation of an appropriate network device that is owned and maintained by the Army Cl, on the Contractor's information systems or information technology assets. The specific details (e.g., type of device, type of data gathered, monitoring period) regarding the installation of an Army Cl network device shall be the subject of a separate agreement negotiated between Army Cl and the Contractor. In the alternative, the Contractor may install network sensor capabilities or a network monitoring service, either of which must be reviewed for acceptability by Army Cl. Use of this alternative approach shall also be the subject of a separate agreement negotiated between Army Cl and the Contractor.

5.3 In all cases, the collection or provision of data and any activities associated with this statement of work shall be in accordance with federal, state, and non-US law.

*** END OF NARRATIVE C0001 ***

8 8