Attach_0007_-_Addt_Clause_Guide_ITSS_1Nov2016.docx

Clause Addendum NEC-RI ITSS (Additional Clause Guide – Attachment 0007) 6 September 2016; Version 1

52.0000-4000 02 NON-RELEASE OF CONTRACT INFORMATION (MAR 2000)

1. Any proprietary, confidential commercial, trade secret or similar type of information in the contract resulting from this solicitation may not be released to anyone outside the Government.

2. Do not release proprietary, confidential commercial, trade secret or similar type of information from this contract to anyone inside the Government that does not have a legitimate need to know the information.

3. If in doubt about what information in the contract may be released, contact the Contracting Officer.

4. Criminal penalties are provided by 18 U.S.C. for the improper release of proprietary and/or confidential commercial information.

(End of notice)

52.0000-4001 CLAUSES/SOLICITATION PROVISIONS INCORPORATED BY REFERENCE (FEB 1998) (FAR 52.252-1/52.252-2)

This solicitation incorporates one or more clauses and/or solicitation provisions by reference, with the same force and effect as if they were given in full text. Upon request, the Contracting Officer will make their full text available. The offeror is cautioned that the listed provisions may include blocks that must be completed by the offeror and submitted with its quotation or offer. In lieu of submitting the full text of those provisions, the offeror may identify the provision by paragraph identifier and provide the appropriate information with its quotation or offer. Also, the full text of a solicitation provision may be accessed electronically at these addresses:

http://farsite.hill.af.mil/; http://www.arnet.gov/far/; http://akss.dau.mil/jsp/default.jsp;

(End of clause/provision)

52.0000-4035 ROCK ISLAND ARSENAL SITE CLAUSE (JUN 2015)

ROCK ISLAND ARSENAL SECURITY, LAW ENFORCMENT, FIRE PREVENTION, AND SAFETY REQUIREMENTS. Any contractor personnel entering Rock Island Arsenal (RIA) as the result of this order/contract are required to adhere to all regulations governing safety, law enforcement, security, and fire prevention in effect at the time of entrance. Failure to comply with said regulations may result in immediate removal from RIA. The contractor shall bear full responsibility of the consequences of said removal. Further clarifications of RIA regulations are available from the Contracting Officer for this order/contract.

Emergency Phone Number for Rock Island Arsenal. Dial 9-1-1 FOR POLICE, FIRE, AMBULANCE. State your name, location, nature of emergency and answer any questions the dispatcher may have. Stay on the line with the dispatcher until you are told you can hang up. If calling from a cell phone, tell the dispatcher that you are calling from the Rock Island Arsenal.

1. Operations Security (OPSEC) Review:

a. All contractor/sub-contractor employees will insure an OPSEC review is conducted through coordination with the COR, by a (level II) certified, Operations Security Officer by the originating command and/or organization prior to the release of any of the following products; (a reviewed product may be, but is not limited to), picture, map, blue print, memorandum, letter, article, academic paper, video, briefing, contract, news release, technical document, proposal, plan, order, response to Privacy Act requests, or other visual or electronic media. The obligation for prior OPSEC review applies to releases occurring both during and after completion of the contract. If the command/organization does not have a Level II certified OPSEC officer the review will be sent to the next higher headquarters.

b. The contractor/sub-contractor will be responsible for establishing and maintaining an OPSEC program to adequately manage, protect and control critical, sensitive and classified information that has been provided or generated under the contract.

2. SECURITY REQUIREMENTS:

a. Physical Security. The contractor shall be responsible for proper security and safeguarding of all property within designated work areas, to include all vehicles and storage areas. Loss or theft of property/equipment will be reported to RIA Police immediately upon discovery.

b. Installation Access. All personnel requesting access to Rock Island Arsenal will only enter through a manned and operational Access Control Point and present a United States National or State issued identification that is capable of being scanned for valid entry. All contractor and contractor employees' vehicles, equipment, and packages are subject to inspection or examination (search) at entry/exit of the Arsenal. Security personnel/police will conduct the inspection deemed necessary to enforce security requirements. The contractor shall comply with all installation and other applicable security regulations, requirements, and instructions.

c. Restricted Areas.

(1) Contractor personnel requiring access to a restricted area are required to obtain proper identification and authorization. Access or escort with the owner/occupant of the restricted area shall be coordinated through the Contracting Officer’s Representative (COR).

(2) Government Administrative Office Areas. Government personnel will be working in office areas during normal working hours. Contractor employees shall cooperate with personnel in the immediate area where any service or maintenance work is being performed. Work performed after normal duty hours shall be coordinated with the Contracting Officer or his designated representative.

d. Photographic Equipment Restrictions:

(1) There are restrictions on the use of photographic devices in all non-public areas of Arsenal Island. This includes, but is not limited to, digital cameras, cell phones, and personal data assistants (PDAs) with cameras. Per U.S. Army Regulation 360-1, taking or producing ground or aerial photographs, sketches, or graphic representations of classified military equipment or installations designated as restricted areas is punishable by law (18 United States Code 795). Reproducing, publishing, or selling this type of material is also punishable by law unless the photograph, sketch, or graphic representation indicates it has been reviewed and cleared for release by proper authority (18 USC 797). Video, still photos, digital photos, sketches, and graphic representations are for official use only and are not authorized for public release. The contractor must get permission from the Physical Security Office, Bldg 225, to use any type of photographic device at the Access Control Points or in any Restricted Area.

(2) Upon completion of this contract, all critical and sensitive information (video, still photos, digital photos, sketches, graphic representations, etc.) that is no longer needed, must be destroyed (burned, shredded, etc.) to prevent the inadvertent disclosure and reconstruction of this material.

e. Electronic Access. The COR must coordinate, request, and issue electronic access keys for contractor personnel. Contractor personnel must report the loss of electronic keys immediately to the COR.

f. Key Control. The Director, Public Works key custodian, thru the COR, is responsible for issuing keys to the contractor. The contractor shall establish a key control system IAW AR 190-11, Physical Security of Arms Ammunition and Explosives, and AR 190-51, Security of Unclassified Army Property (Sensitive and Non-sensitive), to ensure that none of the keys issued to the contractor are lost, misplaced, or used by unauthorized persons. Government keys shall not be duplicated by the contractor.

(1) Replacement. The contractor shall be responsible for all costs incurred as a result of the contractor losing any key. The contractor shall reimburse the government for replacement of locks or keys required as a result of the contractor losing any key(s).

(2) Entrance to Locked Areas. The contractor shall not permit entrance to locked areas to any person (other than employees of the contractors engaged in the performance of work in those areas) without authorization by the COR.

(3) Lock Combinations. The contractor shall ensure that no lock combinations are made available to unauthorized persons.

g. Industrial Security:

(1) Contractor personnel requiring issuance of a government Common Access Card (CAC) and/or require access to any government Automated Information System (AIS), must obtain a favorable National Agency Check with Inquiries (NACI) or equivalent personnel security investigation, initiated by the Garrison Security & Intelligence Division.

(2) Foreign Nationals must be escorted by a US Citizen at all times. This person must be a cleared government employee or a contractor employed on RIA.

(3) Access to the installation may be denied during increased readiness or Force Protection Conditions (FPCONs).

3. GENERAL SAFETY AND OCCUPATIONAL HEALTH GUIDANCE:

a. The Army has an overall goal of ensuring that contracted work is performed using procedures and risk controls that ensure workers, the public and the environment are not endangered.

b. Contractors must comply with applicable Federal, State, and local codes and standards, including Safety and Occupational Health (SOH) requirements, as well as any additional specific requirements invoked by the contract. These requirements are listed in, but not limited to: (1) DoD Instruction 6055.1, "DoD Occupational Safety and Health Program," (2) Army Regulation 385–10, "The Army Safety Program," (3) Department of the Army Pamphlet 385–10, "Army Safety Program," (4) Occupational Safety and Health Administration, General Industry Standards, CFR 1910, (5) Occupational Safety and Health Administration, Construction Standards, CFR 1926, (6) U.S. Army Corps of Engineers Safety and Health Requirements Manual, EM 385–1–1, (7) Local Installation Safety and Health Regulations.

c. Army contractors will be required to have a Safety and Occupational Health Program implemented that is tailored to meet the safety requirements of each contract and the associated tasks and products of that contract. This program will be documented in the contractor’s safety plan.

d. Contract activities will be conducted in a safe and healthful manner that minimizes accidents as well as impacts on Army operations and members of the public.

e. Contractors are responsible for the safety and health of their employees and protection of the public at contractor plants and work sites.

4. Automated Information Systems (AIS) Access:

a. The contractor will ensure that all automation systems are operated, used, maintained and disposed of IAW AR 380-5, AR 380-67, AR 25-1, DOD Directives 5200.1, 5200.1-R, 5200-40, and 5200-40M, and all other RIA and higher headquarters regulations.

b. Government Computer Access. The contractor will be responsible for the following items for personnel accessing government systems:

- No contractor computer accessing a government system will be allowed to access a non-government system through any means.

- The contractor will support compliance with all Information Assurance Vulnerability Alerts (IAVA), Information Assurance Vulnerability Bulletins, and Tech. Tips.

- The contractor will ensure that all computers and devices are accredited prior to connection to any government network.

- The contractor will report information assurance (computer) incidents immediately to their Information Assurance Support Officer.

- The contractor will ensure that only approved virus detection software is installed on computers.

- The contractor will scan all media utilizing approved virus detection software before it is introduced into computers.

- Contractors will ensure that individuals accessing government computer systems sign and comply with the Acceptable Use Policy (AUP) and complete initial and annual information assurance awareness training.

- The contractor will not process classified data on computers that are not accredited for classified processing.

- The contractor will not share personally assigned accounts, passwords, or PINs with anyone.

- The contractor will use Command Access Card (CAC) as the primary system access credential.

- The contractor will not allow anyone else to operate the computer while they are logged on.

- The contractor will not use unapproved accounts (such as Hotmail or Yahoo mail) for official army business.

The use of a commercial Internet Service Provider (ISP) or email accounts for official purposes is prohibited.

- The contractor will not install their personally owned software, Shareware, Freeware, Public Domain or software downloaded from the INTERNET on a government system.

- The contractor will not be simultaneously connected to a local area network and an active dial-up modem.

- The contractor will not be allowed remote management capabilities in the defense perimeter of the RIA.

5. PARKING:

a. Parking is on a first-come, first served basis, provided the parking space is not posted with a reserved, visitor or handicapped parking sign. Parking is allowed in “marked” spaces only. At no time will a contractor park within 40 feet of an inhabited building. Violator’s vehicle may be subject to ticket, or towed at contractor expense.

b. All valid spaces are clearly marked with white lines on both sides of the parking space. Vehicles parked in other than valid spaces are subject to being issued a parking ticket.

6. SMOKING POLICY: All contractor personnel must comply with local smoking policy. See COR for local policy.

7. GOVERNMENT INSPECTIONS AND INVESTIGATIONS: The government reserves the right to conduct announced or unannounced inspections and investigations at any time, pertaining to government information, equipment and/or facilities. This includes, but is not limited to, security, safety, fire prevention, and environmental inspections. The contractor shall cooperate with government officials in the conduct of all investigations.

8. REMOVAL OF CONTRACTOR OR GOVERMENT-FURNISHED PROPERTY: The following procedures are prescribed for the issuance of passes for removing contractor owned material and equipment which has been brought onto the Rock Island Arsenal by authorized contractors for use in accomplishing work under a contract, or government-furnished property which, under the terms of a contract, may properly be removed by the contractor.

a. It will be the responsibility of the contracting officer, or designated inspector, to determine that property being removed by a contractor is property of the contractor, or government-furnished property being removed under the terms of the applicable contract. In case government-furnished property is involved, it will be the responsibility of the individuals designated above to insure that all accounting papers prescribed by the contract or other regulations have been completed before the contractor is permitted to remove the property.

b. All contractor owned property will be labeled with the contractor’s name for quick identification.

9. EQUAL EMPLOYMENT OPPORTUNITY (EEO) SERVICES: EEO does not service contractors. However, if a government employee allegedly discriminates against a contractor employee, the RIA Garrison EEO office should be contacted.

(End of clause)

52.0000-4919 CONTRACTOR PERFORMANCE INFORMATION (DEC 2005)

52.203-16 Preventing Personal Conflicts of Interest (DEC 2011)

(a) Definitions. As used in this clause--

Acquisition function closely associated with inherently governmental functions means supporting or providing advice or recommendations with regard to the following activities of a Federal agency:

(1) Planning acquisitions.

(2) Determining what supplies or services are to be acquired by the Government, including developing statements of work.

(3) Developing or approving any contractual documents, to include documents defining requirements, incentive plans, and evaluation criteria.

(4) Evaluating contract proposals.

(5) Awarding Government contracts.

(6) Administering contracts (including ordering changes or giving technical direction in contract performance or contract quantities, evaluating contractor performance, and accepting or rejecting contractor products or services).

(7) Terminating contracts.

(8) Determining whether contract costs are reasonable, allocable, and allowable.

Covered employee means an individual who performs an acquisition function closely associated with inherently governmental functions and is--

(1) An employee of the contractor; or

(2) A subcontractor that is a self-employed individual treated as a covered employee of the contractor because there is no employer to whom such an individual could submit the required disclosures.

Non-public information means any Government or third-party information that--

(1) Is exempt from disclosure under the Freedom of Information Act (5 U.S.C. 552) or otherwise protected from disclosure by statute, Executive order, or regulation; or

(2) Has not been disseminated to the general public and the Government has not yet determined whether the information can or will be made available to the public.

Personal conflict of interest means a situation in which a covered employee has a financial interest, personal activity, or relationship that could impair the employee's ability to act impartially and in the best interest of the Government when performing under the contract. (A de minimis interest that would not ``impair the employee's ability to act impartially and in the best interest of the Government'' is not covered under this definition.)

(1) Among the sources of personal conflicts of interest are--

(i) Financial interests of the covered employee, of close family members, or of other members of the covered employee's household;

(ii) Other employment or financial relationships (including seeking or negotiating for prospective employment or business); and

(iii) Gifts, including travel.

(2) For example, financial interests referred to in paragraph (1) of this definition may arise from--

(i) Compensation, including wages, salaries, commissions, professional fees, or fees for business referrals;

(ii) Consulting relationships (including commercial and professional consulting and service arrangements, scientific and technical advisory board memberships, or serving as an expert witness in litigation);

(iii) Services provided in exchange for honorariums or travel expense reimbursements;

(iv) Research funding or other forms of research support;

(v) Investment in the form of stock or bond ownership or partnership interest (excluding diversified mutual fund investments);

(vi) Real estate investments;

(vii) Patents, copyrights, and other intellectual property interests; or

(viii) Business ownership and investment interests.

(b) Requirements. The Contractor shall--

(1) Have procedures in place to screen covered employees for potential personal conflicts of interest, by--

(i) Obtaining and maintaining from each covered employee, when the employee is initially assigned to the task under the contract, a disclosure of interests that might be affected by the task to which the employee has been assigned, as follows:

(A) Financial interests of the covered employee, of close family members, or of other members of the covered employee's household.

(B) Other employment or financial relationships of the covered employee (including seeking or negotiating for prospective employment or business).

(C) Gifts, including travel; and

(ii) Requiring each covered employee to update the disclosure statement whenever the employee's personal or financial circumstances change in such a way that a new personal conflict of interest might occur because of the task the covered employee is performing.

(2) For each covered employee--

(i) Prevent personal conflicts of interest, including not assigning or allowing a covered employee to perform any task under the contract for which the Contractor has identified a personal conflict of interest for the employee that the Contractor or employee cannot satisfactorily prevent or mitigate in consultation with the contracting agency;

(ii) Prohibit use of non-public information accessed through performance of a Government contract for personal gain; and

(iii) Obtain a signed non-disclosure agreement to prohibit disclosure of non-public information accessed through performance of a Government contract.

(3) Inform covered employees of their obligation--

(i) To disclose and prevent personal conflicts of interest;

(ii) Not to use non-public information accessed through performance of a Government contract for personal gain; and

(iii) To avoid even the appearance of personal conflicts of interest;

(4) Maintain effective oversight to verify compliance with personal conflict-of-interest safeguards;

(5) Take appropriate disciplinary action in the case of covered employees who fail to comply with policies established pursuant to this clause; and

(6) Report to the Contracting Officer any personal conflict-of-interest violation by a covered employee as soon as it is identified. This report shall include a description of the violation and the proposed actions to be taken by the Contractor in response to the violation. Provide follow-up reports of corrective actions taken, as necessary. Personal conflict-of-interest violations include--

(i) Failure by a covered employee to disclose a personal conflict of interest;

(ii) Use by a covered employee of non-public information accessed through performance of a Government contract for personal gain; and

(iii) Failure of a covered employee to comply with the terms of a non-disclosure agreement.

(c) Mitigation or waiver. (1) In exceptional circumstances, if the Contractor cannot satisfactorily prevent a personal conflict of interest as required by paragraph (b)(2)(i) of this clause, the Contractor may submit a request through the Contracting Officer to the Head of the Contracting Activity for--

(i) Agreement to a plan to mitigate the personal conflict of interest; or

(ii) A waiver of the requirement.

(2) The Contractor shall include in the request any proposed mitigation of the personal conflict of interest.

(3) The Contractor shall--

(i) Comply, and require compliance by the covered employee, with any conditions imposed by the Government as necessary to mitigate the personal conflict of interest; or

(ii) Remove the Contractor employee or subcontractor employee from performance of the contract or terminate the applicable subcontract.

(d) Subcontract flowdown. The Contractor shall include the substance of this clause, including this paragraph (d), in subcontracts--

(1) That exceed $150,000; and

(2) In which subcontractor employees will perform acquisition functions closely associated with inherently governmental functions (i.e., instead of performance only by a self-employed individual).

52.204-2 SECURITY REQUIREMENTS (AUG 1996)

(a) This clause applies to the extent that this contract involves access to information classified "Confidential," "Secret," or "Top Secret."

(b) The Contractor shall comply with (1) the Security Agreement (DD Form 441), including the National Industrial Security Program Operating Manual (DOD 5220.22-M); and (2) any revisions to that manual, notice of which has been furnished to the Contractor.

(c) If, subsequent to the date of this contract, the security classification or security requirements under this contract are changed by the Government and if the changes cause an increase or decrease in security costs or otherwise affect any other term or condition of this contract, the contract shall be subject to an equitable adjustment as if the changes were directed under the Changes clause of this contract.

(d) The Contractor agrees to insert terms that conform substantially to the language of this clause, including this paragraph (d) but excluding any reference to the Changes clause of this contract, in all subcontracts under this contract that involve access to classified information.

52.204-4 Printed or Copied Double-Sided on Postconsumer Fiber Content Paper (May 2011)

Postconsumer fiber means—

(1) Paper, paperboard, and fibrous materials from retail stores, office buildings, homes, and so forth, after they have passed through their end-usage as a consumer item, including: used corrugated boxes; old newspapers; old magazines; mixed waste paper; tabulating cards; and used cordage; or

(2) All paper, paperboard, and fibrous materials that enter and are collected from municipal solid waste; but not

(3) Fiber derived from printers' over-runs, converters' scrap, and over-issue publications.

(b) The Contractor is required to submit paper documents, such as offers, letters, or reports that are printed or copied double-sided on paper containing at least 30 percent postconsumer fiber, whenever practicable, when not using electronic commerce methods to submit information or data to the Government.

52.204-7 System for Award Management (July 2013)

(a) Definitions. As used in this provision--

Data Universal Numbering System (DUNS) number means the 9-digit number assigned by Dun and Bradstreet, Inc. (D&B) to identify unique business entities.

Data Universal Numbering System +4 (DUNS+4) number means the DUNS number assigned by D&B plus a 4-character suffix that may be assigned by a business concern. (D&B has no affiliation with this 4-character suffix.) This 4-character suffix may be assigned at the discretion of the business concern to establish additional System for Award Management records for identifying alternative Electronic Funds Transfer (EFT) accounts (see the FAR at Subpart 32.11) for the same parent concern.

Registered in the System for Award Management SAM database means that--

(1) The offeror has entered all mandatory information, including the DUNS number or the DUNS+4 number, the Contractor and Government Entity (CAGE) code, as well as data required by the Federal Funding Accountability and Transparency Act of 2006 (see Subpart 4.14) into the SAM database;

(2) The offeror has completed the Core, Assertions, and Representations and Certifications, and Points of Contact sections of the registration in the SAM database;

(3) The Government has validated all mandatory data fields, to include validation of the Taxpayer Identification Number (TIN) with the Internal Revenue Service (IRS). The offeror will be required to provide consent for TIN validation to the Government as a part of the SAM registration process; and

(4) The Government has marked the record ``Active''.

(b)(1) By submission of an offer, the offeror acknowledges the requirement that a prospective awardee shall be registered in the SAM database prior to award, during performance, and through final payment of any contract, basic agreement, basic ordering agreement, or blanket purchasing agreement resulting from this solicitation.

(2) The offeror shall enter, in the block with its name and address on the cover page of its offer, the annotation “DUNS” or “DUNS +4” followed by the DUNS or DUNS +4 number that identifies the offeror's name and address exactly as stated in the offer. The DUNS number will be used by the Contracting Officer to verify that the offeror is registered in the SAM database.

(c) If the offeror does not have a DUNS number, it should contact Dun and Bradstreet directly to obtain one.

(1) An offeror may obtain a DUNS number--

(i) Via the Internet at http://fedgov.dnb.com/webform or if the offeror does not have internet access, it may call Dun and Bradstreet at 1-866-705-5711 if located within the United States; or

(ii) If located outside the United States, by contacting the local Dun and Bradstreet office. The offeror should indicate that it is an offeror for a U.S. Government contract when contacting the local Dun and Bradstreet office.

(2) The offeror should be prepared to provide the following information:

(i) Company legal business.

(ii) Tradestyle, doing business, or other name by which your entity is commonly recognized.

(iii) Company Physical Street Address, City, State, and Zip Code.

(iv) Company Mailing Address, City, State and Zip Code (if separate from physical).

(v) Company Telephone Number.

(vi) Date the company was started.

(vii) Number of employees at your location.

(viii) Chief executive officer/key manager.

(ix) Line of business (industry).

(x) Company Headquarters name and address (reporting relationship within your entity).

(d) If the Offeror does not become registered in the SAM database in the time prescribed by the Contracting Officer, the Contracting Officer will proceed to award to the next otherwise successful registered Offeror.

(e) Processing time, which normally takes 48 hours, should be taken into consideration when registering. Offerors who are not registered should consider applying for registration immediately upon receipt of this solicitation.

(f) Offerors may obtain information on registration at https://www.acquisition.gov.

52.204-9 PERSONAL IDENTITY VERIFICATION OF CONTRACTOR PERSONNEL (JAN 2011)

(a) The Contractor shall comply with agency personal identity verification procedures identified in the contract that implement Homeland Security Presidential Directive-12 (HSPD-12), Office of Management and Budget (OMB) guidance M-05-24, and Federal Information Processing Standards Publication (FIPS PUB) Number 201.

(b) The Contractor shall account for all forms of Government-provided identification issued to the Contractor employees in connection with performance under this contract. The Contractor shall return such identification to the issuing agency at the earliest of any of the following, unless otherwise determined by the Government:

(1) When no longer needed for contract performance.

(2) Upon completion of the Contractor employee's employment.

(3) Upon contract completion or termination.

(c) The Contracting Officer may delay final payment under a contract if the Contractor fails to comply with these requirements.

(d) The Contractor shall insert the substance of this clause, including this paragraph (d), in all subcontracts when the subcontractor`s employees are required to have routine physical access to a Federally-controlled facility and/or routine access to a Federally-controlled information system. It shall be the responsibility of the prime Contractor to return such identification to the issuing agency in accordance with the terms set forth in paragraph (b) of this section, unless otherwise approved in writing by the Contracting Officer.

(End of Clause)

52.204-13 SYSTEM FOR AWARD MANAGEMENT MAINTENANCE (JULY 2013)

Data Universal Numbering System (DUNS) number means the 9-digit number assigned by Dun and Bradstreet, Inc. (D&B) to identify unique business entities, which is used as the identification number for Federal Contractors.

Data Universal Numbering System+4 (DUNS+4) number means the DUNS number assigned by D&B plus a 4-character suffix that may be assigned by a business concern. (D&B has no affiliation with this 4-character suffix.) This 4-character suffix may be assigned at the discretion of the business concern to establish additional SAM records for identifying alternative Electronic Funds Transfer (EFT) accounts (see the FAR at subpart 32.11) for the same concern.

Registered in the System for Award Management (SAM) database means that—

(1) The Contractor has entered all mandatory information, including the DUNS number or the DUNS+4 number, the Contractor and Government Entity (CAGE) code, as well as data required by the Federal Funding Accountability and Transparency Act of 2006 (see subpart 4.14), into the SAM database;

(2) The Contractor has completed the Core, Assertions, Representations and Certifications, and Points of Contact sections of the registration in the SAM database;

(3) The Government has validated all mandatory data fields, to include validation of the Taxpayer Identification Number (TIN) with the Internal Revenue Service (IRS). The Contractor will be required to provide consent for TIN validation to the Government as a part of the SAM registration process; and

(4) The Government has marked the record ``Active''.

System for Award Management (SAM) means the primary Government repository for prospective Federal awardee and Federal awardee information and the centralized Government system for certain contracting, grants, and other assistance-related processes. It includes—

(1) Data collected from prospective Federal awardees required for the conduct of business with the Government;

(2) Prospective contractor-submitted annual representations and certifications in accordance with FAR subpart 4.12; and

(3) Identification of those parties excluded from receiving Federal contracts, certain subcontracts, and certain types of Federal financial and non-financial assistance and benefits.

(b) The Contractor is responsible for the accuracy and completeness of the data within the SAM database, and for any liability resulting from the Government's reliance on inaccurate or incomplete data. To remain registered in the SAM database after the initial registration, the Contractor is required to review and update on an annual basis, from the date of initial registration or subsequent updates, its information in the SAM database to ensure it is current, accurate and complete. Updating information in the SAM does not alter the terms and conditions of this contract and is not a substitute for a properly executed contractual document.

(c)(1)(i) If a Contractor has legally changed its business name, doing business as name, or division name (whichever is shown on the contract), or has transferred the assets used in performing the contract, but has not completed the necessary requirements regarding novation and change-of-name agreements in subpart 42.12, the Contractor shall provide the responsible Contracting Officer a minimum of one business day's written notification of its intention to—

(A) Change the name in the SAM database;

(B) Comply with the requirements of subpart 42.12 of the FAR; and

(C) Agree in writing to the timeline and procedures specified by the responsible Contracting Officer. The Contractor shall provide with the notification sufficient documentation to support the legally changed name.

(ii) If the Contractor fails to comply with the requirements of paragraph (c)(1)(i) of this clause, or fails to perform the agreement at paragraph (c)(1)(i)(C) of this clause, and, in the absence of a properly executed novation or change-of-name agreement, the SAM information that shows the Contractor to be other than the Contractor indicated in the contract will be considered to be incorrect information within the meaning of the ``Suspension of Payment'' paragraph of the electronic funds transfer (EFT) clause of this contract.

(2) The Contractor shall not change the name or address for EFT payments or manual payments, as appropriate, in the SAM record to reflect an assignee for the purpose of assignment of claims (see FAR subpart 32.8, Assignment of Claims). Assignees shall be separately registered in the SAM. Information provided to the Contractor's SAM record that indicates payments, including those made by EFT, to an ultimate recipient other than that Contractor will be considered to be incorrect information within the meaning of the ``Suspension of Payment'' paragraph of the EFT clause of this contract.

(3) The Contractor shall ensure that the DUNS number is maintained with Dun & Bradstreet throughout the life of the contract. The Contractor shall communicate any change to the DUNS number to the Contracting Officer within 30 days after the change, so an appropriate modification can be issued to update the data on the contract. A change in the DUNS number does not necessarily require a novation be accomplished. Dun & Bradstreet may be contacted—

(i) Via the internet at http://fedgov.dnb.com/webform or if the Contractor does not have internet access, it may call Dun and Bradstreet at 1-866-705-5711 if located within the United States; or

(ii) If located outside the United States, by contacting the local Dun and Bradstreet office.

(d) Contractors may obtain additional information on registration and annual confirmation requirements at https://www.acquisition.gov.

52.204-16 COMMERCIAL AND GOVERNMENT ENTITY CODE REPORTING (JUL 2016)

(a) Definition. As used in this provision--

Commercial and Government Entity (CAGE) code means—

(1) An identifier assigned to entities located in the United States or its outlying areas by the Defense Logistics Agency (DLA) Commercial and Government Entity (CAGE) Branch to identify a commercial or government entity; or

(2) An identifier assigned by a member of the North Atlantic Treaty Organization (NATO) or by the NATO Support and Procurement Agency (NSPA) to entities located outside the United States and its outlying areas that the DLA Commercial and Government Entity (CAGE) Branch records and maintains in the CAGE master file. This type of code is known as a NATO CAGE (NCAGE) code.

(b) The Offeror shall enter its CAGE code in its offer with its name and address or otherwise include it prominently in its proposal. The CAGE code entered must be for that name and address. Enter ``CAGE'' before the number. The CAGE code is required prior to award.

(c) CAGE codes may be obtained via--

(1) Registration in the System for Award Management (SAM) at www.sam.gov. If the Offeror is located in the United States or its outlying areas and does not already have a CAGE code assigned, the DLA Commercial and Government Entity (CAGE) Branch will assign a CAGE code as a part of the SAM registration process. SAM registrants located outside the United States and its outlying areas shall obtain a NCAGE code prior to registration in SAM (see paragraph (c)(3) of this provision).

(2) The DLA Commercial and Government Entity (CAGE) Branch. If registration in SAM is not required for the subject procurement, and the offeror does not otherwise register in SAM, an offeror located in the United States or its outlying areas may request that a CAGE code be assigned by submitting a request at https://cage.dla.mil.

(3) The appropriate country codification bureau. Entities located outside the United States and its outlying areas may obtain an NCAGE code by contacting the Codification Bureau in the foreign entity's country if that country is a member of NATO or a sponsored nation. NCAGE codes may be obtained from the NSPA at https://eportal.nspa.nato.int/AC135Public/scage/CageList.aspx if the foreign entity's country is not a member of NATO or a sponsored nation. Points of contact for codification bureaus, as well as additional information on obtaining NCAGE codes, are available at http://www.nato.int/structur/AC/135/main/links/contacts.htm.

(d) Additional guidance for establishing and maintaining CAGE codes is available at https://cage.dla.mil.

(e) When a CAGE Code is required for the immediate owner and/or the highest-level owner by 52.204-17 or 52.212-3(p), the Offeror shall obtain the respective CAGE Code from that entity to supply the CAGE Code to the Government.

(f) Do not delay submission of the offer pending receipt of a CAGE code.

(End of Provision)

52.204-17 OWNERSHIP OR CONTROL OF OFFEROR (JUL 2016)

Commercial and Government Entity (CAGE) code means—

(1) An identifier assigned to entities located in the United States or its outlying areas by the Defense Logistics Agency (DLA) Commercial and Government Entity (CAGE) Branch to identify a commercial or government entity; or

(2) An identifier assigned by a member of the North Atlantic Treaty Organization (NATO) or by the NATO Support and Procurement Agency (NSPA) to entities located outside the United States and its outlying areas that the DLA Commercial and Government Entity (CAGE) Branch records and maintains in the CAGE master file. This type of code is known as a NATO CAGE (NCAGE) code.

Highest-level owner means the entity that owns or controls an immediate owner of the offeror, or that owns or controls one or more entities that control an immediate owner of the offeror. No entity owns or exercises control of the highest level owner.

Immediate owner means an entity, other than the offeror, that has direct control of the offeror. Indicators of control include, but are not limited to, one or more of the following: Ownership or interlocking management, identity of interests among family members, shared facilities and equipment, and the common use of employees.

(b) The Offeror represents that it [ ___ ] has or [ ___ ] does not have an immediate owner. If the Offeror has more than one immediate owner (such as a joint venture), then the Offeror shall respond to paragraph (c) and if applicable, paragraph (d) of this provision for each participant in the joint venture.

(c) If the Offeror indicates ``has'' in paragraph (b) of this provision, enter the following information:

Immediate owner CAGE code:

Immediate owner legal name: ___

(Do not use a ``doing business as'' name)

Is the immediate owner owned or controlled by another entity?:

[ ___ ] Yes or [ ___ ] No.

(d) If the Offeror indicates ``yes'' in paragraph (c) of this provision, indicating that the immediate owner is owned or controlled by another entity, then enter the following information:

Highest-level owner CAGE code:

Highest-level owner legal name:

(Do not use a ``doing business as'' name)

(End of provision)

52.204-18 COMMERCIAL AND GOVERNMENT ENTITY CODE MAINTENANCE (JUL 2016)

(a) Definition. As used in this clause--

Commercial and Government Entity (CAGE) code means--

(1) An identifier assigned to entities located in the United States or its outlying areas by the Defense Logistics Agency (DLA) Commercial and Government Entity (CAGE) Branch to identify a commercial or government entity; or

(2) An identifier assigned by a member of the North Atlantic Treaty Organization (NATO) or by the NATO Support and Procurement Agency (NSPA) to entities located outside the United States and its outlying areas that the DLA Commercial and Government Entity (CAGE) Branch records and maintains in the CAGE master file. This type of code is known as a NATO CAGE (NCAGE) code.

(b) Contractors shall ensure that the CAGE code is maintained throughout the life of the contract. For contractors registered in the System for Award Management (SAM), the DLA Commercial and Government Entity (CAGE) Branch shall only modify data received from SAM in the CAGE master file if the contractor initiates those changes via update of its SAM registration. Contractors undergoing a novation or change-of-name agreement shall notify the contracting officer in accordance with subpart 42.12. The contractor shall communicate any change to the CAGE code to the contracting officer within 30 days after the change, so that a modification can be issued to update the CAGE code on the contract.

(c) Contractors located in the United States or its outlying areas that are not registered in SAM shall submit written change requests to the DLA Commercial and Government Entity (CAGE) Branch. Requests for changes shall be provided at https://cage.dla.mil. Change requests to the CAGE master file are accepted from the entity identified by the code.

(d) Contractors located outside the United States and its outlying areas that are not registered in SAM shall contact the appropriate National Codification Bureau (points of contact available at http://www.nato.int/structur/AC/135/main/links/contacts.htm) or NSPA at https://eportal.nspa.nato.int/AC135Public/scage/CageList.aspx to request CAGE changes.

(e) Additional guidance for maintaining CAGE codes is available at https://cage.dla.mil.

(End of Clause)

52.204-19 INCORPORATION BY REFERENCE OF REPRESENTATIONS AND CERTIFICATIONS (DEC 2014)

The Contractor's representations and certifications, including those completed electronically via the System for Award Management (SAM), are incorporated by reference into the contract.

52.204-21 BASIC SAFEGUARDING OF COVERED CONTRACTOR INFORMATION SYSTEMS (JUN 2016)

Covered contractor information system means an information system that is owned or operated by a contractor that processes, stores, or transmits Federal contract information.

Federal contract information means information, not intended for public release, that is provided by or generated for the Government under a contract to develop or deliver a product or service to the Government, but not including information provided by the Government to the public (such as on public Web sites) or simple transactional information, such as necessary to process payments.

Information means any communication or representation of knowledge such as facts, data, or opinions, in any medium or form, including textual, numerical, graphic, cartographic, narrative, or audiovisual (Committee on National Security Systems Instruction (CNSSI) 4009).

Information system means a discrete set of information resources organized for the collection, processing, maintenance, use, sharing, dissemination, or disposition of information (44 U.S.C. 3502).

Safeguarding means measures or controls that are prescribed to protect information systems.

(b) Safeguarding requirements and procedures.

(1) The Contractor shall apply the following basic safeguarding requirements and procedures to protect covered contractor information systems. Requirements and procedures for basic safeguarding of covered contractor information systems shall include, at a minimum, the following security controls:

(i) Limit information system access to authorized users, processes acting on behalf of authorized users, or devices (including other information systems).

(ii) Limit information system access to the types of transactions and functions that authorized users are permitted to execute.

(iii) Verify and control/limit connections to and use of external information systems.

(iv) Control information posted or processed on publicly accessible information systems.

(v) Identify information system users, processes acting on behalf of users, or devices.

(vi) Authenticate (or verify) the identities of those users, processes, or devices, as a prerequisite to allowing access to organizational information systems.

(vii) Sanitize or destroy information system media containing Federal Contract Information before disposal or release for reuse.

(viii) Limit physical access to organizational information systems, equipment, and the respective operating environments to authorized individuals.

(ix) Escort visitors and monitor visitor activity; maintain audit logs of physical access; and control and manage physical access devices.

(x) Monitor, control, and protect organizational communications (i.e., information transmitted or received by organizational information systems) at the external boundaries and key internal boundaries of the information systems.

(xi) Implement subnetworks for publicly accessible system components that are physically or logically separated from internal networks.

(xii) Identify, report, and correct information and information system flaws in a timely manner.

(xiii) Provide protection from malicious code at appropriate locations within organizational information systems.

(xiv) Update malicious code protection mechanisms when new releases are available.

(xv) Perform periodic scans of the information system and real-time scans of files from external sources as files are downloaded, opened, or executed.

(2) Other requirements. This clause does not relieve the Contractor of any other specific safeguarding requirements specified by Federal agencies and departments relating to covered contractor information systems generally or other Federal safeguarding requirements for controlled unclassified information (CUI) as established by Executive Order 13556.

(c) Subcontracts. The Contractor shall include the substance of this clause, including this paragraph (c), in subcontracts under this contract (including subcontracts for the acquisition of commercial items, other than commercially available off-the-shelf items), in which the subcontractor may have Federal contract information residing in or transiting through its information system.

52.209-7 INFORMATION REGARDING RESPONSIBILITY MATTERS (JULY 2013)

Administrative proceeding means a non-judicial process that is adjudicatory in nature in order to make a determination of fault or liability (e.g., Securities and…