W9114F23Q0055-0002.pdf

AMENDMENT OF SOLICITATION/MODIFICATION OF CONTRACT

Except as provided herein, all terms and conditions of the document referenced in Item 9A or 10A, as heretofore changed, remains unchanged and in full force and effect.

15A. NAME AND TITLE OF SIGNER (Type or print)

30-105-04EXCEPTION TO SF 30

APPROVED BY OIRM 11-84

STANDARD FORM 30 (Rev. 10-83) Prescribed by GSA

FAR (48 CFR) 53.243

The purpose of this amendment is to add additional information reference to Softw are License and add/remove FAR and DFARS clauses.

See the summary of changes for details.

1. CONTRACT ID CODE PAGE OF PAGES

J 1 14

16A. NAME AND TITLE OF CONTRACTING OFFICER (Type or print)

16C. DATE SIGNED

BY 16-Aug-2023

16B. UNITED STATES OF AMERICA15C. DATE SIGNED15B. CONTRACTOR/OFFEROR

(Signature of Contracting Officer)(Signature of person authorized to sign)

8. NAME AND ADDRESS OF CONTRACTOR (No., Street, County, State and Zip Code) X W9114F23Q0055

X 9B. DATED (SEE ITEM 11)

25-Jul-2023

10B. DATED (SEE ITEM 13)

9A. AMENDMENT OF SOLICITATION NO.

11. THIS ITEM ONLY APPLIES TO AMENDMENTS OF SOLICITATIONS

X The above numbered solicitation is amended as set forth in Item 14. The hour and date specified for receipt of Offer is extended, X is not extended.

Offer must acknowledge receipt of this amendment prior to the hour and date specified in the solicitation or as amended by one of the following methods:

(a) By completing Items 8 and 15, and returning 1 copies of the amendment; (b) By acknowledging receipt of this amendment on each copy of the offer submitted;

or (c) By separate letter or telegram which includes a reference to the solicitation and amendment numbers. FAILURE OF YOUR ACKNOWLEDGMENT TO BE RECEIVED AT THE PLACE DESIGNATED FOR THE RECEIPT OF OFFERS PRIOR TO THE HOUR AND DATE SPECIFIED MAY RESULT IN

REJECTION OF YOUR OFFER. If by virtue of this amendment you desire to change an offer already submitted, such change may be made by telegram or letter, provided each telegram or letter makes reference to the solicitation and this amendment, and is received prior to the opening hour and date specified.

12. ACCOUNTING AND APPROPRIATION DATA (If required)

13. THIS ITEM APPLIES ONLY TO MODIFICATIONS OF CONTRACTS/ORDERS.

IT MODIFIES THE CONTRACT/ORDER NO. AS DESCRIBED IN ITEM 14.

A. THIS CHANGE ORDER IS ISSUED PURSUANT TO: (Specify authority) THE CHANGES SET FORTH IN ITEM 14 ARE MADE IN THE

CONTRACT ORDER NO. IN ITEM 10A.

B. THE ABOVE NUMBERED CONTRACT/ORDER IS MODIFIED TO REFLECT THE ADMINISTRATIVE CHANGES (such as changes in paying office, appropriation date, etc.) SET FORTH IN ITEM 14, PURSUANT TO THE AUTHORITY OF FAR 43.103(B).

C. THIS SUPPLEMENTAL AGREEMENT IS ENTERED INTO PURSUANT TO AUTHORITY OF:

D. OTHER (Specify type of modification and authority)

E. IMPORTANT: Contractor is not, is required to sign this document and return copies to the issuing office.

14. DESCRIPTION OF AMENDMENT/MODIFICATION (Organized by UCF section headings, including solicitation/contract subject matter where feasible.)

10A. MOD. OF CONTRACT/ORDER NO.

2. AMENDMENT/MODIFICATION NO. 5. PROJECT NO.(If applicable)

6. ISSUED BY

3. EFFECTIVE DATE

16-Aug-2023

CODE

W40M RHCO EUROPE

MEDICAL READINESS CONTR OFC EUROPE

CMR 402

APO AE 09180-0402

W9114F 7. ADMINISTERED BY (If other than item 6)

4. REQUISITION/PURCHASE REQ. NO.

CODE

See Item 6

FACILITY CODECODE

EMAIL:TEL:

W9114F23Q0055

SECTION SF 30 BLOCK 14 CONTINUATION PAGE

SUMMARY OF CHANGES

SECTION SF 1449 - CONTINUATION SHEET

The following have been added by reference:

252.203-7005 Representation Relating to Compensation of Former DoD

Officials

SEP 2022

252.227-7000 Non-estoppel OCT 1966 252.227-7001 Release Of Past Infringement SEP 2019 252.227-7015 Technical Data--Commercial Products and Commercial

Services

MAR 2023

252.227-7017 Identification and Assertion of Use, Release, or Disclosure Restrictions

JAN 2023

252.227-7019 Validation of Asserted Restrictions--Computer Software JAN 2023 252.227-7027 Deferred Ordering Of Technical Data Or Computer Software APR 1988 252.227-7028 Technical Data or Computer Software Previously Delivered to the Government

JUN 1995

252.227-7032 Rights In Technical Data And Computer Software (Foreign) JUN 1975 252.227-7037 Validation of Restrictive Markings on Technical Data JAN 2023 252.229-7001 Alt I Tax Relief (APR 2020) - Alternate I APR 2020

The following have been added by full text:

ADDENDUM TO 252.203-7005

Improper Business Practices and Personal Conflicts of Interest

1. The quoter’s attention is directed to FAR, Part 3 and DFARS, Part 203, “Improper Business Practices and Personal Consultant Conflicts of Interest.”

2. 252.203-7005 Representation Relating to Compensation of Former DoD Officials (Nov 2011)

(a) Definition. “Covered DoD official” is defined in the clause at 252.203-7000, Requirements Relating to Compensation of Former DoD Officials.

(b) By submission of this quotation, the quoter represents, to the best of its knowledge and belief, that all covered DoD officials employed by or otherwise receiving compensation from the quoter, and who are expected to undertake activities on behalf of the quoter for any resulting contract, are presently in compliance with all post-employment restrictions covered by 18 U.S.C. 207, 41 U.S.C.

2101-2107, and 5 CFR parts 2637 and 2641, including Federal Acquisition Regulation 3.104-2.

3. Use of Former DoD/Defense Health Agency (DHA) Employees and Uniformed Service Members in

Proposal Preparation.

The involvement of a former DoD/DHA employee/member in a quoter’s quotation preparation may give rise to an unfair competitive advantage or the appearance thereof, if the former DoD/DHAemployee/ member acquired non-public, competitively-useful information in his or her former position. Such knowledge could include proprietary information of competitor’s performance on past or current contracts with similar requirements or source selection sensitive information pertaining to this procurement. Consequently, the Offeror must notify the Contracting Officer prior to the involvement in the quotation preparation by a former DoD/DHA employee/member reasonably expected to have had access to such information. Based on the notification, the Contracting Officer will make a determination whether involvement of the former DoD/DHA employee/member in quotation preparation could create an unfair competitive advantage or appearance thereof. The Contracting Officer will further determine whether any mitigation measures taken or proposed by the quoter are adequate to alleviate this concern or whether the offeror will be disqualified from the competition. Failure to comply with these procedures may result in the offeror’s disqualification for award.

(End of provision)

252.204-7012 SAFEGUARDING COVERED DEFENSE INFORMATION AND CYBER INCIDENT

REPORTING (JAN 2023)

(a) Definitions. As used in this clause--

Adequate security means protective measures that are commensurate with the consequences and probability of loss, misuse, or unauthorized access to, or modification of information.

Compromise means disclosure of information to unauthorized persons, or a violation of the security policy of a system, in which unauthorized intentional or unintentional disclosure, modification, destruction, or loss of an object, or the copying of information to unauthorized media may have occurred.

Contractor attributional/proprietary information means information that identifies the contractor(s), whether directly or indirectly, by the grouping of information that can be traced back to the contractor(s) (e.g., program description, facility locations), personally identifiable information, as well as trade secrets, commercial or financial information, or other commercially sensitive information that is not customarily shared outside of the company.

Controlled technical information means technical information with military or space application that is subject to controls on the access, use, reproduction, modification, performance, display, release, disclosure, or dissemination.

Controlled technical information would meet the criteria, if disseminated, for distribution statements B through F using the criteria set forth in DoD Instruction 5230.24, Distribution Statements on Technical Documents. The term does not include information that is lawfully publicly available without restrictions.

Covered contractor information system means an unclassified information system that is owned, or operated by or for, a contractor and that processes, stores, or transmits covered defense information.

Covered defense information means unclassified controlled technical information or other information, as described in the Controlled Unclassified Information (CUI) Registry at http://www.archives.gov/cui/registry/category-list.html, that requires safeguarding or dissemination controls pursuant to and consistent with law, regulations, and Governmentwide policies, and is--

(1) Marked or otherwise identified in the contract, task order, or delivery order and provided to the contractor by or on behalf of DoD in support of the performance of the contract; or

(2) Collected, developed, received, transmitted, used, or stored by or on behalf of the contractor in support of the performance of the contract.

Cyber incident means actions taken through the use of computer networks that result in a compromise or an actual or potentially adverse effect on an information system and/or the information residing therein.

Forensic analysis means the practice of gathering, retaining, and analyzing computer-related data for investigative purposes in a manner that maintains the integrity of the data.

Information system means a discrete set of information resources organized for the collection, processing, maintenance, use, sharing, dissemination, or disposition of information.

Malicious software means computer software or firmware intended to perform an unauthorized process that will have adverse impact on the confidentiality, integrity, or availability of an information system. This definition includes a virus, worm, Trojan horse, or other code-based entity that infects a host, as well as spyware and some forms of adware.

Media means physical devices or writing surfaces including, but is not limited to, magnetic tapes, optical disks, magnetic disks, large-scale integration memory chips, and printouts onto which covered defense information is recorded, stored, or printed within a covered contractor information system.

Operationally critical support means supplies or services designated by the Government as critical for airlift, sealift, intermodal transportation services, or logistical support that is essential to the mobilization, deployment, or sustainment of the Armed Forces in a contingency operation.

Rapidly report means within 72 hours of discovery of any cyber incident.

Technical information means technical data or computer software, as those terms are defined in the clause at DFARS 252.227-7013, Rights in Technical Data--Other Than Commercial Products and Commercial Services, regardless of whether or not the clause is incorporated in this solicitation or contract. Examples of technical information include research and engineering data, engineering drawings, and associated lists, specifications, standards, process sheets, manuals, technical reports, technical orders, catalog-item identifications, data sets, studies and analyses and related information, and computer software executable code and source code.

(b) Adequate security. The Contractor shall provide adequate security on all covered contractor information systems.

To provide adequate security, the Contractor shall implement, at a minimum, the following information security protections:

(1) For covered contractor information systems that are part of an information technology (IT) service or system operated on behalf of the Government, the following security requirements apply:

(i) Cloud computing services shall be subject to the security requirements specified in the clause 252.239-7010, Cloud Computing Services, of this contract.

(ii) Any other such IT service or system (i.e., other than cloud computing) shall be subject to the security requirements specified elsewhere in this contract.

(2) For covered contractor information systems that are not part of an IT service or system operated on behalf of the Government and therefore are not subject to the security requirement specified at paragraph (b)(1) of this clause, the following security requirements apply:

(i) Except as provided in paragraph (b)(2)(ii) of this clause, the covered contractor information system shall be subject to the security requirements in National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171, “Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations” (available via the internet at http://dx.doi.org/10.6028/NIST.SP.800-171) in effect at the time the solicitation is issued or as authorized by the Contracting Officer.

(ii)(A) The Contractor shall implement NIST SP 800-171, as soon as practical, but not later than December 31, 2017. For all contracts awarded prior to October 1, 2017, the Contractor shall notify the DoD Chief Information Officer (CIO), via email at osd.dibcsia@mail.mil, within 30 days of contract award, of any security requirements specified by NIST SP 800-171 not implemented at the time of contract award.

(B) The Contractor shall submit requests to vary from NIST SP 800-171 in writing to the Contracting Officer, for consideration by the DoD CIO. The Contractor need not implement any security requirement adjudicated by an authorized representative of the DoD CIO to be nonapplicable or to have an alternative, but equally effective, security measure that may be implemented in its place.

(C) If the DoD CIO has previously adjudicated the contractor's requests indicating that a requirement is not applicable or that an alternative security measure is equally effective, a copy of that approval shall be provided to the Contracting Officer when requesting its recognition under this contract.

(D) If the Contractor intends to use an external cloud service provider to store, process, or transmit any covered defense information in performance of this contract, the Contractor shall require and ensure that the cloud service provider meets security requirements equivalent to those established by the Government for the Federal Risk and Authorization Management Program (FedRAMP) Moderate baseline (https://www.fedramp.gov/resources/documents/) and that the cloud service provider complies with requirements in paragraphs (c) through (g) of this clause for cyber incident reporting, malicious software, media preservation and protection, access to additional information and equipment necessary for forensic analysis, and cyber incident damage assessment.

(3) Apply other information systems security measures when the Contractor reasonably determines that information systems security measures, in addition to those identified in paragraphs (b)(1) and (2) of this clause, may be required to provide adequate security in a dynamic environment or to accommodate special circumstances (e.g., medical devices) and any individual, isolated, or temporary deficiencies based on an assessed risk or vulnerability. These measures may be addressed in a system security plan.

(c) Cyber incident reporting requirement.

(1) When the Contractor discovers a cyber incident that affects a covered contractor information system or the covered defense information residing therein, or that affects the contractor's ability to perform the requirements of the contract that are designated as operationally critical support and identified in the contract, the Contractor shall--

(i) Conduct a review for evidence of compromise of covered defense information, including, but not limited to, identifying compromised computers, servers, specific data, and user accounts. This review shall also include analyzing covered contractor information system(s) that were part of the cyber incident, as well as other information systems on the Contractor's network(s), that may have been accessed as a result of the incident in order to identify compromised covered defense information, or that affect the Contractor's ability to provide operationally critical support; and

(ii) Rapidly report cyber incidents to DoD at https://dibnet.dod.mil.

(2) Cyber incident report. The cyber incident report shall be treated as information created by or for DoD and shall include, at a minimum, the required elements at https://dibnet.dod.mil.

(3) Medium assurance certificate requirement. In order to report cyber incidents in accordance with this clause, the Contractor or subcontractor shall have or acquire a DoD-approved medium assurance certificate to report cyber incidents. For information on obtaining a DoD-approved medium assurance certificate, see https://public.cyber.mil/eca/.

(d) Malicious software. When the Contractor or subcontractors discover and isolate malicious software in connection with a reported cyber incident, submit the malicious software to DoD Cyber Crime Center (DC3) in accordance with instructions provided by DC3 or the Contracting Officer. Do not send the malicious software to the Contracting Officer.

(e) Media preservation and protection. When a Contractor discovers a cyber incident has occurred, the Contractor shall preserve and protect images of all known affected information systems identified in paragraph (c)(1)(i) of this clause and all relevant monitoring/packet capture data for at least 90 days from the submission of the cyber incident report to allow DoD to request the media or decline interest.

(f) Access to additional information or equipment necessary for forensic analysis. Upon request by DoD, the Contractor shall provide DoD with access to additional information or equipment that is necessary to conduct a forensic analysis.

(g) Cyber incident damage assessment activities. If DoD elects to conduct a damage assessment, the Contracting Officer will request that the Contractor provide all of the damage assessment information gathered in accordance with paragraph (e) of this clause.

(h) DoD safeguarding and use of contractor attributional/proprietary information. The Government shall protect against the unauthorized use or release of information obtained from the contractor (or derived from information obtained from the contractor) under this clause that includes contractor attributional/proprietary information, including such information submitted in accordance with paragraph (c). To the maximum extent practicable, the Contractor shall identify and mark attributional/proprietary information. In making an authorized release of such information, the Government will implement appropriate procedures to minimize the contractor attributional/proprietary information that is included in such authorized release, seeking to include only that information that is necessary for the authorized purpose(s) for which the information is being released.

(i) Use and release of contractor attributional/proprietary information not created by or for DoD. Information that is obtained from the contractor (or derived from information obtained from the contractor) under this clause that is not created by or for DoD is authorized to be released outside of DoD--

(1) To entities with missions that may be affected by such information;

(2) To entities that may be called upon to assist in the diagnosis, detection, or mitigation of cyber incidents;

(3) To Government entities that conduct counterintelligence or law enforcement investigations;

(4) For national security purposes, including cyber situational awareness and defense purposes (including with Defense Industrial Base (DIB) participants in the program at 32 CFR part 236); or

(5) To a support services contractor (“recipient”) that is directly supporting Government activities under a contract that includes the clause at 252.204-7009, Limitations on the Use or Disclosure of Third-Party Contractor Reported Cyber Incident Information.

(j) Use and release of contractor attributional/proprietary information created by or for DoD. Information that is obtained from the contractor (or derived from information obtained from the contractor) under this clause that is created by or for DoD (including the information submitted pursuant to paragraph (c) of this clause) is authorized to be used and released outside of DoD for purposes and activities authorized by paragraph (i) of this clause, and for any other lawful Government purpose or activity, subject to all applicable statutory, regulatory, and policy based restrictions on the Government's use and release of such information.

(k) The Contractor shall conduct activities under this clause in accordance with applicable laws and regulations on the interception, monitoring, access, use, and disclosure of electronic communications and data.

(l) Other safeguarding or reporting requirements. The safeguarding and cyber incident reporting required by this clause in no way abrogates the Contractor's responsibility for other safeguarding or cyber incident reporting pertaining to its unclassified information systems as required by other applicable clauses of this contract, or as a result of other applicable U.S. Government statutory or regulatory requirements.

(m) Subcontracts. The Contractor shall--

(1) Include this clause, including this paragraph (m), in subcontracts, or similar contractual instruments, for operationally critical support, or for which subcontract performance will involve covered defense information, including subcontracts for commercial products or commercial services, without alteration, except to identify the parties. The Contractor shall determine if the information required for subcontractor performance retains its identity as covered defense information and will require protection under this clause, and, if necessary, consult with the Contracting Officer; and

(2) Require subcontractors to--

(i) Notify the prime Contractor (or next higher-tier subcontractor) when submitting a request to vary from a NIST SP 800-171 security requirement to the Contracting Officer, in accordance with paragraph (b)(2)(ii)(B) of this clause; and

(ii) Provide the incident report number, automatically assigned by DoD, to the prime Contractor (or next higher-tier subcontractor) as soon as practicable, when reporting a cyber incident to DoD as required in paragraph (c) of this clause.

(End of clause)

252.211-7008 USE OF GOVERNMENT-ASSIGNED SERIAL NUMBERS (SEP 2010)

(a) Definitions. As used in this clause--

Government-assigned serial number means a combination of letters or numerals in a fixed human-readable information format (text) conveying information about a major end item, which is provided to a contractor by the requiring activity with accompanying technical data instructions for marking the Government-assigned serial number on major end items to be delivered to the Government.

Major end item means a final combination of component parts and/or materials which is ready for its intended use and of such importance to operational readiness that review and control of inventory management functions (procurement, distribution, maintenance, disposal, and asset reporting) is required at all levels of life cycle management. Major end items include aircraft; ships; boats; motorized wheeled, tracked, and towed vehicles for use on highway or rough terrain; weapon and missile end items; ammunition; and sets, assemblies, or end items having a major end item as a component.

Unique item identifier (UII) means a set of data elements permanently marked on an item that is globally unique and unambiguous and never changes in order to provide traceability of the item throughout its total life cycle. The term includes a concatenated UII or a DoD-recognized unique identification equivalent.

(b) The Contractor shall mark the Government-assigned serial numbers on those major end items as specified by line item in the Schedule, in accordance with the technical instructions for the placement and method of application identified in the terms and conditions of the contract.

(c) The Contractor shall register the Government-assigned serial number along with the major end item's UII at the time of delivery in accordance with the provisions of the clause at DFARS 252.211-7003(d).

(d) The Contractor shall establish the UII for major end items for use throughout the life of the major end item. The Contractor may elect, but is not required, to use the Government-assigned serial number to construct the UII.

252.246-7003 NOTIFICATION OF POTENTIAL SAFETY ISSUES (JAN 2023)

Credible information means information that, considering its source and the surrounding circumstances, supports a reasonable belief that an event has occurred or will occur.

Critical safety item means a part, subassembly, assembly, subsystem, installation equipment, or support equipment for a system that contains a characteristic, any failure, malfunction, or absence of which could have a safety impact.

Safety impact means the occurrence of death, permanent total disability, permanent partial disability, or injury or occupational illness requiring hospitalization; loss of a weapon system; or property damage exceeding $1,000,000.

Subcontractor means any supplier, distributor, vendor, or firm that furnishes supplies or services to or for the Contractor or another subcontractor under this contract.

(b) The Contractor shall provide notification, in accordance with paragraph (c) of this clause, of--

(1) All nonconformances for parts identified as critical safety items acquired by the Government under this contract;

and

(2) All nonconformances or deficiencies that may result in a safety impact for systems, or subsystems, assemblies, subassemblies, or parts integral to a system, acquired by or serviced for the Government under this contract.

(c) The Contractor--

(1) Shall notify the Administrative Contracting Officer (ACO) and the Procuring Contracting Officer (PCO) as soon as practicable, but not later than 72 hours, after discovering or acquiring credible information concerning nonconformances and deficiencies described in paragraph (b) of this clause; and

(2) Shall provide a written notification to the ACO and the PCO within 5 working days that includes--

(i) A summary of the defect or nonconformance;

(ii) A chronology of pertinent events;

(iii) The identification of potentially affected items to the extent known at the time of notification;

(iv) A point of contact to coordinate problem analysis and resolution; and

(v) Any other relevant information.

(d) The Contractor--

(1) Is responsible for the notification of potential safety issues occurring with regard to an item furnished by any subcontractor; and

(2) Shall facilitate direct communication between the Government and the subcontractor as necessary.

(e) Notification of safety issues under this clause shall be considered neither an admission of responsibility nor a release of liability for the defect or its consequences. This clause does not affect any right of the Government or the Contractor established elsewhere in this contract.

(f) Subcontracts.

(1) The Contractor shall include the substance of this clause, including this paragraph (f), in subcontracts for--

(i) Parts identified as critical safety items;

(ii) Systems and subsystems, assemblies, and subassemblies integral to a system; or

(iii) Repair, maintenance, logistics support, or overhaul services for systems and subsystems, assemblies, subassemblies, and parts integral to a system.

(2) For those subcontracts, including subcontracts for commercial products or commercial services, described in paragraph (f)(1) of this clause, the Contractor shall require the subcontractor to provide the notification required by paragraph (c) of this clause to--

(i) The Contractor or higher-tier subcontractor; and

(ii) The ACO and the PCO, if the subcontractor is aware of the ACO and the PCO for the contract.

252.246-7008 SOURCES OF ELECTRONIC PARTS (JAN 2023)

Authorized aftermarket manufacturer means an organization that fabricates a part under a contract with, or with the express written authority of, the original component manufacturer based on the original component manufacturer's designs, formulas, and/or specifications.

Authorized supplier means a supplier, distributor, or an aftermarket manufacturer with a contractual arrangement with, or the express written authority of, the original manufacturer or current design activity to buy, stock, repackage, sell, or distribute the part.

Contract manufacturer means a company that produces goods under contract for another company under the label or brand name of that company.

Contractor-approved supplier means a supplier that does not have a contractual agreement with the original component manufacturer for a transaction, but has been identified as trustworthy by a contractor or subcontractor.

Electronic part means an integrated circuit, a discrete electronic component (including, but not limited to, a transistor, capacitor, resistor, or diode), or a circuit assembly (section 818(f)(2) of Pub. L. 112-81).

Original component manufacturer means an organization that designs and/or engineers a part and is entitled to any intellectual property rights to that part.

Original equipment manufacturer means a company that manufactures products that it has designed from purchased components and sells those products under the company's brand name.

Original manufacturer means the original component manufacturer, the original equipment manufacturer, or the contract manufacturer.

(b) Selecting suppliers. In accordance with section 818(c)(3) of the National Defense Authorization Act for Fiscal Year 2012 (Pub. L. 112-81), as amended by section 817 of the National Defense Authorization Act for Fiscal Year 2015 (Pub. L. 113-291 and section 885 of the National Defense Authorization Act for Fiscal Year 2016 (Pub. L.

114-92)), the Contractor shall—

(1) First obtain electronic parts that are in production by the original manufacturer or an authorized aftermarket manufacturer or currently available in stock from--

(i) The original manufacturers of the parts;

(ii) Their authorized suppliers; or

(iii) Suppliers that obtain such parts exclusively from the original manufacturers of the parts or their authorized suppliers;

(2) If electronic parts are not available as provided in paragraph (b)(1) of this clause, obtain electronic parts that are not in production by the original manufacturer or an authorized aftermarket manufacturer, and that are not currently available in stock from a source listed in paragraph (b)(1) of this clause, from suppliers identified by the Contractor as contractor-approved suppliers, provided that--

(i) For identifying and approving such contractor-approved suppliers, the Contractor uses established counterfeit prevention industry standards and processes (including inspection, testing, and authentication), such as the DoD-adopted standards at https://assist.dla.mil;

(ii) The Contractor assumes responsibility for the authenticity of parts provided by such contractor-approved suppliers; and

(iii) The Contractor's selection of such contractor-approved suppliers is subject to review, audit, and approval by the Government, generally in conjunction with a contractor purchasing system review or other surveillance of purchasing practices by the contract administration office, or if the Government obtains credible evidence that a contractor-approved supplier has provided counterfeit parts. The Contractor may proceed with the acquisition of electronic parts from a contractor-approved supplier unless otherwise notified by DoD; or

(3)(i) Take the actions in paragraph (b)(3)(ii) of this clause if the Contractor--

(A) Obtains an electronic part from--

(1) A source other than any of the sources identified in paragraph (b)(1) or (b)(2) of this clause, due to nonavailability from such sources; or

(2) A subcontractor (other than the original manufacturer) that refuses to accept flowdown of this clause; or

(B) Cannot confirm that an electronic part is new or previously unused and that it has not been comingled in supplier new production or stock with used, refurbished, reclaimed, or returned parts.

(ii) If the contractor obtains an electronic part or cannot confirm an electronic part pursuant to paragraph (b)(3)(i) of this clause--

(A) Promptly notify the Contracting Officer in writing. If such notification is required for an electronic part to be used in a designated lot of assemblies to be acquired under a single contract, the Contractor may submit one notification for the lot, providing identification of the assemblies containing the parts (e.g., serial numbers);

(B) Be responsible for inspection, testing, and authentication, in accordance with existing applicable industry standards; and

(C) Make documentation of inspection, testing, and authentication of such electronic parts available to the Government upon request.

(c) Traceability. If the Contractor is not the original manufacturer of, or authorized supplier for, an electronic part, the Contractor shall--

(1) Have risk-based processes (taking into consideration the consequences of failure of an electronic part) that enable tracking of electronic parts from the original manufacturer to product acceptance by the Government, whether the electronic part is supplied as a discrete electronic part or is contained in an assembly;

(2) If the Contractor cannot establish this traceability from the original manufacturer for a specific electronic part, be responsible for inspection, testing, and authentication, in accordance with existing applicable industry standards; and

(3)(i) Maintain documentation of traceability (paragraph (c)(1) of this clause) or the inspection, testing, and authentication required when traceability cannot be established (paragraph (c)(2) of this clause) in accordance with FAR subpart 4.7; and

(ii) Make such documentation available to the Government upon request.

(d) Government sources. Contractors and subcontractors are still required to comply with the requirements of paragraphs (b) and (c) of this clause, as applicable, if--

(1) Authorized to purchase electronic parts from the Federal Supply Schedule;

(2) Purchasing electronic parts from suppliers accredited by the Defense Microelectronics Activity; or

(3) Requisitioning electronic parts from Government inventory/stock under the authority of 252.251-7000, Ordering from Government Supply Sources.

(i) The cost of any required inspection, testing, and authentication of such parts may be charged as a direct cost.

(ii) The Government is responsible for the authenticity of the requisitioned parts. If any such part is subsequently found to be counterfeit or suspect counterfeit, the Government will--

(A) Promptly replace such part at no charge; and

(B) Consider an adjustment in the contract schedule to the extent that replacement of the counterfeit or suspect counterfeit electronic parts caused a delay in performance.

(e) Subcontracts. The Contractor shall include the substance of this clause, including this paragraph (e), in subcontracts, including subcontracts for commercial products, that are for electronic parts or assemblies containing electronic parts, unless the subcontractor is the original manufacturer.

The following have been modified:

ADDENDUM TO 52.212-4

Addendum to FAR 52.212-4 Contract Terms and Conditions-Commercial Items

1. 52.212-4(s) is tailored as follows:

52.212-4(s), Order of Precedence. Any inconsistencies in this solicitation or contract shall be resolved by giving precedence in the following order:

(1) The schedule of supplies/services.

(2) The Assignments, Disputes, Payments, Invoice, Other Compliances, Compliance with Laws Unique to Government Contracts, Unauthorized Obligations, and Commercial Supplier Agreements-Unenforceable Clauses paragraphs of this clause.

(3) The clause at 52.212-5.

(4) Addenda to this solicitation or contract, including any commercial supplier agreements as amended by the Commercial Supplier Agreements - Unenforceable Clauses provision.

(5) Solicitation provisions if this is a solicitation.

(6) Other paragraphs of this clause.

(7) The Standard Form 1449.

(8) Other documents, exhibits, and attachments.

(9) The specification.

2. New subsection 52.212-4(w) is added as follows:

52.212-4(w), Commercial Supplier Agreements - Unenforceable Clauses.

(1) “Commercial supplier agreement” means terms and conditions customarily offered tot eh public by vendors of supplies or services that meet the definition of “commercial item” set forth in FAR 2.101 and intended to create a binding legal obligation to the end user. Commercial supplier agreements are particularly common in information technology acquisitions, including acquisitions of commercial computer software and commercial technical data, but they may apply to any supply or service. The term applies–

(i) Regardless of the format or style of the document. For example, a commercial supplier agreement may be styled as standard terms of sale or lease, Terms of Service (TOS), End User License Agreement (EULA), Commercial Software License Agreement, or another similar legal instrument or agreement;

(ii) Regardless of the media or delivery mechanism used. For example, a commercial supplier agreement may be presented as one or more paper documents or may appear on a computer or other electronic device screen during a purchase, software installation, other product delivery, registration for a service, or another transaction.

(2) When any supply or service acquired under this contract is subject to a commercial supplier agreement (as defined herein), the following language shall be deemed incorporated into the commercial supplier agreement.

As used herein, “this agreement” means the commercial supplier agreement:

(3) Notwithstanding any other provision of this agreement, when the end user is an agency or instrumentality of the U.S. Government, the following shall apply:

(i) Applicability. This agreement is a part of a contract between the commercial supplier and the U.S.

Government for the acquisition of the supply or service that necessitates a license or other similar legal instrument (including all contracts, task orders, delivery orders, or call orders under FAR Part 12).

(ii) End user. This agreement shall bind the ordering activity as end user but shall not operate to bind a Government employee or person acting on behalf of the Government in his or her personal capacity.

(iii) Law and disputes. This agreement is governed by Federal law.

(A) Any language purporting to subject the U.S. Government to the laws of a U.S. state, U.S. territory, district, or municipality, or a foreign nation, except where Federal law expressly provides for the application of such laws, is hereby deleted.

(B) Any language requiring dispute resolution in a specific forum or venue that is different from that prescribed by applicable Federal law is hereby deleted.

(C) Any language prescribing a different time period for bringing an action than that prescribed by applicable Federal law in relation to a dispute is hereby deleted.

(iv) Continued performance. The supplier or licensor shall not unilaterally revoke, terminate or suspend any rights granted to the Government except as allowed by this contract. If the supplier or licensor believes the ordering activity to be in breach of the agreement, it shall pursue its rights under the Contract Disputes Act or other applicable Federal statute while continuing performance as set forth in subparagraph (d) (Disputes).

(v) Arbitration; equitable or injunctive relief. In the event of a claim or dispute arising under or relating to this agreement, a binding arbitration shall not be used unless specifically authorized by agency guidance, and equitable or injunctive relief, including the award of attorney fees, costs or interest, may be awarded against the U.S. Government only when explicitly provided by statute (e.g., Prompt Payment Act or Equal Access to Justice Act).

(vi) Updating terms.

(A) After award, the contractor may unilaterally revise terms if they are not material. A material change is defined as:

(1) Terms that change Government rights or obligations;

(2) Terms that increase Government prices;

(3) Terms that decrease overall level of service; or

(4) Terms that limit any other Government right addressed elsewhere in this contract.

(B) For revisions that will materially change the terms of the contract, the revised commercial supplier agreement must be incorporated into the contract using a bilateral modification.

(C) Any agreement terms or conditions unilaterally revised subsequent to award that are inconsistent with any material term or provision of this contract shall not be enforceable against the Government, and the Government shall not be deemed to have consented to them.

(vii) No automatic renewals. If any license or service tied to periodic payment is provided under this agreement (e.g., annual software maintenance or annual lease term), such license or service shall not renew automatically upon expiration of its current term without prior express consent by an authorized Government representative.

(viii) Indemnification. Any clause of this agreement requiring the commercial supplier or licensor to defend or indemnify the end user is hereby amended to provide that the U.S. Department of Justice has the sole right to represent the United States in any such action, in accordance with 28 U.S.C. 516.

(ix) Audits. Any clause of this agreement permitting the commercial supplier or licensor to audit the end user's compliance with this agreement is hereby amended as follows:

(A) Discrepancies found in an audit may result in a charge by the commercial supplier or licensor to the ordering activity. Any resulting invoice must comply with the proper invoicing requirements specified in the underlying Government contract or order.

(B) This charge, if disputed by the ordering activity, will be resolved in accordance with subparagraph

(d) (Disputes); no payment obligation shall arise on the part of the ordering activity until the conclusion of the dispute process.

(C) Any audit requested by the contractor will be performed at the contractor's expense, without reimbursement by the Government.

(x) Taxes or surcharges. Any taxes or surcharges which the commercial supplier or licensor seeks to pass along to the Government as end user will be governed by the terms of the underlying Government contract or order and, in any event, must be submitted to the Contracting Officer for a determination of applicability prior to invoicing unless specifically agreed to otherwise in the Government contract.

(xi) Non-assignment. This agreement may not be assigned, nor may any rights or obligations thereunder be delegated, without the Government's prior approval, except as expressly permitted under subparagraph (b) of this clause.

(xii) Confidential information. If this agreement includes a confidentiality clause, such clause is hereby amended to state that neither the agreement nor the contract price list, as applicable, shall be deemed “confidential information.” Issues regarding release of “unit pricing” will be resolved consistent with the Freedom of Information Act. Notwithstanding anything in this agreement to the contrary, the Government may retain any confidential information as required by law, regulation or its internal document retention procedures for legal, regulatory or compliance purposes; provided, however, that all such retained confidential information will continue to be subject to the confidentiality obligations of this agreement.

(4) If any language, provision, or clause of this agreement conflicts or is inconsistent with the preceding paragraph (w)(1), the language, provisions, or clause of paragraph (w)(1) shall prevail to the extent of such inconsistency.

3. New subsection 52.212-4(x) is added as follows:

(x) The non-FAR Part 12 discretionary FAR and DFARS clauses included herein are incorporated into this contract either by reference or in full text. If incorporated by reference, see clause 52.252-2 herein for locations where full text can be found.

(End of Addendum)

52.233-2 SERVICE OF PROTEST (SEP 2006)

(a) Protests, as defined in section 33.101 of the Federal Acquisition Regulation, that are filed directly with an agency, and copies of any protests that are filed with the Government Accountability Office (GAO), shall be served on the Contracting Officer by obtaining written and dated acknowledgment of receipt from Mr. Matthew R. Elden.

Contracting Officer:

Michael Hughes Chief, Medical Logistics Branch Medical Readiness Contracting Office - Europe US Army Medical Command Army Health Contracting Activity Landstuhl, Germany 66849 Office: +49-06371-9464-7443

DSN 314-590-7443

(b) The copy of any protest shall be received in the office designated above within one day of filing a protest with the GAO.

(End of provision)

The following have been deleted:

252.225-7001 Buy American And Balance Of Payments Program--Basic JAN 2023 252.225-7002 Qualifying Country Sources As Subcontractors MAR 2022 252.229-7001 Tax Relief APR 2020

(End of Summary of Changes)