W912BV24Q0026_Amendment 0002 to New FY 24 Gate Attendant Solicitation_Released.pdf

AMENDMENT OF SOLICITATION/MODIFICATION OF CONTRACT

Except as provided herein, all terms and conditions of the document referenced in Item 9A or 10A, as heretofore changed, remains unchanged and in full force and effect.

15A. NAME AND TITLE OF SIGNER (Type or print)

30-105-04EXCEPTION TO SF 30

APPROVED BY OIRM 11-84

STANDARD FORM 30 (Rev. 10-83) Prescribed by GSA

FAR (48 CFR) 53.243

See Block 14 Continuation Page

1. CONTRACT ID CODE PAGE OF PAGES

1 14

16A. NAME AND TITLE OF CONTRACTING OFFICER (Type or print)

16C. DATE SIGNED

BY 26-Jan-2024

16B. UNITED STATES OF AMERICA15C. DATE SIGNED15B. CONTRACTOR/OFFEROR

(Signature of Contracting Officer)(Signature of person authorized to sign)

8. NAME AND ADDRESS OF CONTRACTOR (No., Street , County, State and Zip Code) X W912BV24Q0026

X 9B. DATED (SEE ITEM 11)

16-Nov-2023

10B. DATED (SEE ITEM 13)

9A. AMENDMENT OF SOLICITATION NO.

11. THIS ITEM ONLY APPLIES TO AMENDMENTS OF SOLICITATIONS

X The above numbered solicitation is amended as set forth in Item 14. The hour and date specified for receipt of Offer X is extended, is not extended.

Offer must acknowledge receipt of this amendment prior to the hour and date specified in the solicitation or as amended by one of the following methods:

(a) By completing Items 8 and 15, and returning 1 copies of the amendment; (b) By acknowledging receipt of this amendment on each copy of the offer submitted;

or (c) By separate letter or telegram which includes a reference to the solicitation and amendment numbers. FAILURE OF YOUR ACKNOWLEDGMENT TO BE RECEIVED AT THE PLACE DESIGNATED FOR THE RECEIPT OF OFFERS PRIOR TO THE HOUR AND DATE SPECIFIED MAY RESULT IN

REJECTION OF YOUR OFFER. If by virtue of this amendment you desire to change an offer already submitted, such change may be made by telegram or letter, provided each telegram or letter makes reference to the solicitation and this amendment, and is received prior to the opening hour and date specified.

12. ACCOUNTING AND APPROPRIATION DATA (If required)

13. THIS ITEM APPLIES ONLY TO MODIFICATIONS OF CONTRACTS/ORDERS.

IT MODIFIES THE CONTRACT/ORDER NO. AS DESCRIBED IN ITEM 14.

A. THIS CHANGE ORDER IS ISSUED PURSUANT TO: (Specify authority) THE CHANGES SET FORTH IN ITEM 14 ARE MADE IN THE

CONTRACT ORDER NO. IN ITEM 10A.

B. THE ABOVE NUMBERED CONTRACT/ORDER IS MODIFIED TO REFLECT THE ADMINISTRATIVE CHANGES (such as changes in paying office, appropriation date, etc.) SET FORTH IN ITEM 14, PURSUANT TO THE AUTHORITY OF FAR 43.103(B).

C. THIS SUPPLEMENTAL AGREEMENT IS ENTERED INTO PURSUANT TO AUTHORITY OF:

D. OTHER (Specify type of modification and authority)

E. IMPORTANT: Contractor is not, is required to sign this document and return copies to the issuing office.

14. DESCRIPTION OF AMENDMENT/MODIFICATION (Organized by UCF section headings, including solicitation/contract subject matter where feasible.)

10A. MOD. OF CONTRACT/ORDER NO.

2. AMENDMENT/MODIFICATION NO.

5. PROJECT NO.(If applicable)

6. ISSUED BY

3. EFFECTIVE DATE

25-Jan-2024

CODE

CONTRACTING DIV

US ARMY CORPS OF ENGINEERS, TULSA DISTRICT

2488 E. 81ST STREET

TULSA OK 74137-4290

W912BV 7. ADMINISTERED BY (If other than item 6)

4. REQUISITION/PURCHASE REQ. NO.

CODE

See Item 6

FACILITY CODECODE

EMAIL:TEL:

X 1

W912BV24Q0026

SECTION SF 30 BLOCK 14 CONTINUATION PAGE

SUMMARY OF CHANGES

SECTION SF 30 - BLOCK 14 CONTINUATION PAGE

The following have been added by full text:

BLOCK 14 CONTINUATION PAGE

Amendment to New FY 24 Gate Attendant Solicitation, Amendment 0002, is hereby issued to:

1. Incorporate clauses 252.204-7008. 252.204-7009, 252.204-7019, 252.204-7020 and 252.204-7024 into the solicitation. As a result, offerors will be required to enter a National Institute Standards and Technology (NIST) score in the Supplier Performance Risk System (SPRS) to be eligible for award.

2. Extend the due date of quotes from 5 February 2024 at 9:00 am to 19 February 2024 at 9:00 am.

3. Add two new gate attendant locations to Site-specific Statement of Work, i.e., Virgil Point 4-day at Hugo Lake and Chicken Creek Shift B at Tenkiller Lake.

All other items remain unchanged.

The Government POC for this amendment is Clinton Yandell, clinton.j.yandell@usace.army.mil.

The following have been modified:

INSTRUCTIONS TO OFFERORS

Information and Instructions to Offerors 2024 Gate Attendant Openings – The U.S. Army Corps of Engineers – Tulsa District has various locations open for Gate Attendant positions starting in the 2024 contract year.

If you have never had a Government Contract and need to know where to start, read below.

Note: When accessing any websites referenced in this solicitation it is recommended you type the internet address in the address bar or your web browser instead of using a search engine as you may be directed to the wrong website.

1. Register in SAM. It does not cost anything to register in SAM. Click on “Create a User Account” on the lower left page in the blue field. Complete the information fields to register. The payment information you input in this website will be how and where you receive your payment for services. Include the NAICS code 721211 in your registration. All persons contracting with the Corps of Engineers must be registered and remain in an “active status” in the SAM database throughout the contract period. You CAN NOT use a government employee’s information in your registration such as phone number, email address, name or physical address. It is your responsibility to provide this information or obtain this information for registration.

2. Submit your quote. While your information is processing follow the directions below under “I’m ready to submit a quote” to fill out the proper paperwork and submit. An award cannot be made to an offeror unless their registration is complete.

I’m ready to submit a quote.

Review the Following- Read the entire solicitation. Ensure you read the General Scope of Work located under Section C of this solicitation and the Site Specific Scope located in a separate document. These sections cover all the requirements for work that is to be performed. The General Scope of Work applies to all areas that are advertised. The Site Specific Scope of

Work details the work to be completed at a specific area such as the dates of performance, shift times, and special requirements (bonding and background checks). Review the Successful Quote Checklist.

In an effort to simplify the process, all gate attendant announcements will be posted to this announcement.

This solicitation will apply to all gate attendant requirements. See document titled Round 1 for the specific date that quotes are due for those locations, the site specific scope of work and the pricing schedule for each location. After selections are made from Round 1, a Round 2 may be posted for areas that we were unable to fill with Round 1 or additional locations that we were unaware that needed to be filled. Multiple rounds may be issued throughout the year. The purpose of this process is to make it easier for offerors to find the opportunities. If you click on follow, the SAM system should email you when a new document is posted;

however, save the link to this announcement and check it periodically in case the system fails to notify you.

Feel free to send me feedback on this process at Clinton.J.Yandell@usace.army.mil. My intent is to make the process easier not harder so your feedback will assist me in determining if this process can be continued in the future.

There are PTAC centers (Procurement Technical Assistance Centers) that can help submit your quote or getting registered in DNB or SAM. You can locate a PTAC center at http://www.aptac-us.org/new/Govt_Contracting/find.php. PTAC offers their services at little or no charge. You may need to access your local library or office supply store to print, scan, email, fax or mail your quote. There may be a fee for these services.

Return the Following-

1- A completed 1st page of the solicitation. If any amendments are issued a signed copy of the first page must also be returned. Please check https://beta.sam.gov/ for any issued amendments or sign up through https://beta.sam.gov/ to receive notifications of any issued amendment. (Click the follow button to be notified of changes posted)

2- Completed Offeror’s Information Sheet – (Found on the next few pages.)

3- The Pricing Schedule for each area you are submitting a quote for. The Pricing schedule is the next page after the Site Specific Scope of Work of each area in in the document titled Round 1, Round 2… Please ensure that the Round document that you are using is the current active round (see due date at the top of the document).

4- Representations and Certifications. If you have NOT filled out Representations & Certifications through http://www.sam.gov, fill out all representations and certifications found in this solicitation. Please note that provisions 52.204-24 and 52.204-26 must be filled out in this solicitation as the provisions have changed.

Failure to complete and return these two provisions will render your offer un-awardable.

Only return the pages listed above.

Email is the preferred method of submission, but you may mail, fax or hand deliver your quote with the information below.

Mail When mailing your quote ensure you write the address exactly as written below.

US Army Corps of Engineers, Tulsa District ATTN; CECT-SWT-E, Clinton J. Yandell

(W912BV24Q0026)

2488 E. 81st Street

Tulsa, OK 74137-4290

Email Emailed quotes must be received in a supported Adobe or Microsoft Office file format. These formats are the only acceptable methods of submitting a quote electronically. Cloud storage providers, google docs, web-based drop boxes, OneNote/OneDrive, URLs, web-based format, or any other virtual/web-based memory service are NOT acceptable methods of submitting a quote electronically. All documents must be attached in one file. Reference the solicitation in the subject line. Send quotes to E-mail address CESWT‐CT‐SS‐Quotes@usace.army.mil and copy Clinton J. Yandell. Ensure your quote is received before the due date and time. In order for your quote to be considered responsive, all required materials must be received before the due date and time. If all required materials are not received your quote will not be considered.

FAX

When faxing your quote use a cover page to address it to the attention of Clinton J. Yandell and provide the solicitation number, your name, a telephone number you can be reached at and how many pages you are sending.

This ensures we have received all pages of your quote.

FAX: 918-669-7436

OR

Hand Deliver If your submission will be hand-carried, please provide notification to the Contract Specialist at least one working day in advance (918-669-7078) or Clinton J. Yandell or you may contact Mieko G. Alley at 918-669-4308 or Mieko.G.Alley@usace.army.mil,as unescorted visitors are not allowed in the Contracting Division offices. Please consider in your arrival that visitors must go through security check points on the 16th floor of the 20 story Building.

Offerors can only submit their documents to the Contract Specialist or a Contracting Officer of the Tulsa District Office. The address of the Tulsa District Office is below:

US Army Corps of Engineers, Tulsa District 2488 E. 81st Street Tulsa, OK 74137-4290

Offerors will be evaluated and award will be made to the lowest-priced, responsible offeror, whose quote conforms to the requirement of the solicitation.

All Gate Attendant contract terms consist of a Base-Year Plus Two (2) Option Years (2024 through 2026).

Options may be exercised at the sole discretion of the Government. The total duration of this contract, including the exercising of any options under this provision, shall not exceed three (3) years.

OPTION YEARS:

Option to Extend the term of the contract (unilateral). The Government may extend the term of this contract by written notice to the contractor at least 30-days before the expiration date of the current performance period. This written notice will be issued in the form of a letter, requiring execution/agreement by both the Government and the contractor. The Government may informally contact the contractor prior to issuance of this written notice to ensure availability of the contractor for the extension period.

If the Option is exercised, the extended contract shall be considered to include Option Clause

52.217-9; however the Government retains the right not to extend the contract by exercising the option year(s).

PAYMENT INFORMATION:

1. Payment information is inputted into your http://www.sam.gov registration.

2. All payments are issued through our Finance Center located in Millington, TN.

3. Payment issues need to be addressed to the Finance Center.

4. Payments will be made on a monthly basis (30-Days).

5. Your registration in SAM must be active to receive payment.

This requirement is set aside as 100% Total Small Business. See Clause 52.219-6, Notice of Total Small Business Set-Aside in this Request for Quotation for details. This clause includes all general conditions required by the Tulsa District Corps of Engineers for Gate Attendant positions.

SHIFTS OF TEN (10) HOURS OR GREATER REQUIRE TWO PERSONS

You will be asked to list the name(s) of the individual(s) to work as Gate Attendants. The people listed cannot change during the duration of the contract and the work performed cannot be subcontracted. If any situation arises where any of the individuals cannot perform the contract duties the Lake POC or Contracting Officer must be notified immediately.

Background check info If you are selected for award a background check will be required. Do not obtain the background check now. You will be instructed to do so if you are selected. All persons handling Government monies or accessing a Government computer system are required to have a current local law enforcement background check submitted to the Point of Contact (POC). The Corps of Engineers reserves the right to deny access to any individual who has any derogatory information in the background check or whose presence, in the opinion of the Contracting Officer, would be disruptive. Background check disqualifying factors include: Any felony conviction; a misdemeanor conviction within the previous five years for a crime of violence, drug use / possession, or theft. If an individual does not have a disqualifying factor but has a misdemeanor conviction then those individuals will be evaluated or considered on a case by case basis.

Successful Packet Checklist

_____ You have entered a National Institute of Standards and Technology (NIST) score in the Supplier Performance Risk System (SPRS). The NIST score is a responsibility item. Those without a NIST score in SPRS will be deemed NON-RESPONSIBLE and will not be eligible for award.

___ You have registered in SAM at http://www.sam.gov.

____ You are currently active in SAM (http://www.sam.gov). SAM requires you log in annually to update your information to remain in an active status. Ensure to log in and make sure your account is active.

____ Your NAICS code listed in your SAM account is 721211. If you have not listed this code in your SAM account you must log in and add this number.

____ You have checked to see if any amendments have been issued on http://www.sam.gov. If any amendments are issued acknowledge the amendment(s) by signing and returning the first page and any other documents that are mentioned in the amendment. If an amendment is issued after you have submitted your quote, submit the signed amendment. You do not need to resubmit your whole quote package.

____ NO cross outs or strike through marks. Submit a legible quote with no correction marks

____ You are ensuring your quote will be submitted before the due date and time. The due date and time is in block 8 on the first page of the solicitation. If any amendments are issued the date may be extended and the new date will be listed in the amendment. Quotes that are late and/or incomplete will not be considered for award.

____ Do not return every page of the solicitation. Only the documents listed.

Successful Packet Checklist

____Fill out the First Page of the Solicitation and return

___Block 12 Discount for Prompt Payment. A prompt payment discount is the amount your invoice will be discounted if the Government pays your bill early. For example: If your invoice is for $100 and you offer a discount of 1% within 20 days, and the Government pays you within 20 days, your payment would be $99. If this block is empty we will default Net 30 (total net amount paid within 30 days).

___Block 17a include the following:

___ Name of Individual(s) as it appears in SAM ___ Address ___ Email

___ Telephone number that you can be reached during the business hours of 8:00 a.m. to 4:30 p.m.

CST

___Block 30a - Signature ___Block 30b – Print Name ___Block 30c – Date

Fill out the Pricing Schedule and Return

___Return the Pricing Schedule for each area you are submitting for. The Pricing Schedule for each area is located after each Site Specific Scope of Work in Section C.

___ Input a unit price and total price. The unit price is the amount you are quoting on a daily basis. The unit price (amount per day) multiplied by the number of days equals the total amount. For example if you are quoting a price of $100 per day and there are 90 days of work in the base year, the total price will be $9,000. ($100 x 90 = $9,000) ____Ensure all prices on line items are filled in. All line items must be priced to be considered for award.

You will need to pay special attention to the start and end dates and the total number of work days posted in the Base year and each Option year because they may change.

____Unit prices must be rounded to the nearest cent (hundredths).

$20.56 IS an acceptable price.

$20.564 IS NOT an acceptable price.

Do not round total amount numbers.

___ Fill out your name as it appears in SAM and sign the bottom of each Pricing Schedule.

Offeror’s Information Sheet __Complete and return the Offeror’s Information Sheet provided on the next page.

You may apply to any of the areas listed in this solicitation. Preferences of your top 5 areas are given consideration when evaluating quotes. The Government will choose the location for Gate Attendants based on the best value to the Government.

Representations and Certifications

____ You have filled out the Representations and Certifications online OR have filled out the Representations and Certifications in this solicitation. Note: provisions 52.204-24 and 52.204-26 must be filled out in this solicitation as the provisions have changed. Failure to complete and return these two provisions will render your offer un-awardable.

National Institute of Standards and Technology (NIST) Score

_____ You have entered a National Institute of Standards and Technology (NIST) score in the Supplier Performance Risk System (SPRS). The NIST score is a responsibility item. Those without a NIST score in SPRS will be deemed NON-RESPONSIBLE and will not be eligible for award.

The SPRS NIST Special Publication 800-171 website provides a comprehensive set of reference materials to assist you in this effort. This website is found at: https://www.sprs.csd.disa.mil/nistsp.htm and includes guides, frequently asked questions, and tutorials.

Potential offerors are encouraged to allow ample time to complete this responsibility item.

NEED HELP:

If you need assistance with SAM, NIST or preparing your quote, please contact your local Procurement Technical Assistance Center (PTAC). You may find your PTAC here: https://www.aptac-us.org/contracting-assistance/.

How Quotes Will Be Evaluated

*** You may be selected for any areas that you have submitted quotes.

(i) Price evaluation: The government shall review acceptable offers by lowest price. Price reasonableness and affordability will also be evaluated.

(ii) Past Performance: The Government will review all CPARS evaluations regardless of project and may contact points of contacts or evaluate any information provided to the Contract Specialist or Contracting Officer to include USACE District Past Performance files. Offerors must demonstrate the following minimum acceptability standards:

All past or current performance must have overall ratings of Satisfactory, Acceptable or above.

Any derogatory information may be grounds for an Unacceptable rating.

Offerors with no past performance information will receive an “Acceptable” rating for this factor.

Award will be made to the lowest-priced, responsible offeror, whose quote conforms to the requirement of the solicitation.

Offeror’s Information Sheet

(W912BV24Q0026)

(Return this page with your quote.)

Name(s) as appears in SAM: _______________________________________________

Address: _______________________________________________

Phone or Contact No.: _______________________________________________

Email: _______________________________________________

Unique Entity ID (UEI): ________________________________________________ (If you are registering and have not been assigned a cage code number yet write “Pending”.

List the individual(s) that will work as Gate Attendant(s).

1- _______________________

2-_________________________

SECTION A - SOLICITATION/CONTRACT FORM

The required response date/time 19-Feb-2024 09:00 AM has been added.

SECTION I - CONTRACT CLAUSES

The following have been added by reference:

252.204-7009 Limitations on the Use or Disclosure of Third-Party

Contractor Reported Cyber Incident Information

JAN 2023

252.204-7012 Safeguarding Covered Defense Information and Cyber Incident Reporting

JAN 2023

252.204-7020 NIST SP 800-171 DOD ASSESSMENT REQUIREMENTS (NOV 2023)

(a) Definitions.

Basic Assessment means a contractor's self-assessment of the contractor's implementation of NIST SP 800-171 that-

(1) Is based on the Contractor's review of their system security plan(s) associated with covered contractor information system(s);

(2) Is conducted in accordance with the NIST SP 800-171 DoD Assessment Methodology; and

(3) Results in a confidence level of "Low" in the resulting score, because it is a self-generated score.

Covered contractor information system has the meaning given in the clause 252.204-7012, Safeguarding Covered Defense Information and Cyber Incident Reporting, of this contract.

High Assessment means an assessment that is conducted by Government personnel using NIST SP 800-171A, Assessing Security Requirements for Controlled Unclassified Information that--

(1) Consists of--

(i) A review of a contractor's Basic Assessment;

(ii) A thorough document review;

(iii) Verification, examination, and demonstration of a Contractor's system security plan to validate that NIST SP 800-171 security requirements have been implemented as described in the contractor's system security plan; and

(iv) Discussions with the contractor to obtain additional information or clarification, as needed; and

(2) Results in a confidence level of "High" in the resulting score.

Medium Assessment means an assessment conducted by the Government that--

(1) Consists of--

(i) A review of a contractor's Basic Assessment;

(ii) A thorough document review; and

(iii) Discussions with the contractor to obtain additional information or clarification, as needed; and

(2) Results in a confidence level of "Medium" in the resulting score.

(b) Applicability. This clause applies to covered contractor information systems that are required to comply with the National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171, in accordance with Defense Federal Acquisition Regulation System (DFARS) clause at 252.204-7012, Safeguarding Covered Defense Information and Cyber Incident Reporting, of this contract.

(c) Requirements. The Contractor shall provide access to its facilities, systems, and personnel necessary for the Government to conduct a Medium or High NIST SP 800-171 DoD Assessment, as described in NIST SP 800-171 DoD Assessment Methodology at https://www.acq.osd.mil/asda/dpc/cp/cyber/docs/safeguarding/NIST-SP-800-171- Assessment-Methodology-Version-1.2.1-6.24.2020.pdf, if necessary.

(d) Procedures. Summary level scores for all assessments will be posted in the Supplier Performance Risk System (SPRS) (https://www.sprs.csd.disa.mil/) to provide DoD Components visibility into the summary level scores of strategic assessments.

(1) Basic Assessments. A contractor may submit, via encrypted email, summary level scores of Basic Assessments conducted in accordance with the NIST SP 800-171 DoD Assessment Methodology to webptsmh@navy.mil for posting to SPRS.

(i) The email shall include the following information:

(A) Version of NIST SP 800-171 against which the assessment was conducted.

(B) Organization conducting the assessment (e.g., Contractor self-assessment).

(C) For each system security plan (security requirement 3.12.4) supporting the performance of a DoD contract--

(1) All industry Commercial and Government Entity (CAGE) code(s) associated with the information system(s) addressed by the system security plan; and

(2) A brief description of the system security plan architecture, if more than one plan exists.

(D) Date the assessment was completed.

(E) Summary level score (e.g., 95 out of 110, NOT the individual value for each requirement).

(F) Date that all requirements are expected to be implemented (i.e., a score of 110 is expected to be achieved) based on information gathered from associated plan(s) of action developed in accordance with NIST SP 800-171.

(ii) If multiple system security plans are addressed in the email described at paragraph (b)(1)(i) of this section, the Contractor shall use the following format for the report:

Brief CAGE codes description of Date of Total Date score of System security plan supported by this the plan assessment score 110 will plan architecture achieved

(2) Medium and High Assessments. DoD will post the following Medium and/or High Assessment summary level scores to SPRS for each system security plan assessed:

(i) The standard assessed (e.g., NIST SP 800-171 Rev 1).

(ii) Organization conducting the assessment, e.g., DCMA, or a specific organization (identified by Department of Defense Activity Address Code (DoDAAC)).

(iii) All industry CAGE code(s) associated with the information system(s) addressed by the system security plan.

(iv) A brief description of the system security plan architecture, if more than one system security plan exists.

(v) Date and level of the assessment, i.e., medium or high.

(vi) Summary level score (e.g., 105 out of 110, not the individual value assigned for each requirement).

(vii) Date that all requirements are expected to be implemented (i.e., a score of 110 is expected to be achieved) based on information gathered from associated plan(s) of action developed in accordance with NIST SP 800-171.

(e) Rebuttals. (1) DoD will provide Medium and High Assessment summary level scores to the Contractor and offer the opportunity for rebuttal and adjudication of assessment summary level scores prior to posting the summary level scores to SPRS (see SPRS User's Guide https://www.sprs.csd.disa.mil/pdf/SPRS_Awardee.pdf).

(2) Upon completion of each assessment, the contractor has 14 business days to provide additional information to demonstrate that they meet any security requirements not observed by the assessment team or to rebut the findings that may be of question.

(f) Accessibility.

(1) Assessment summary level scores posted in SPRS are available to DoD personnel, and are protected, in accordance with the standards set forth in DoD Instruction 5000.79, Defense-wide Sharing and Use of Supplier and Product Performance Information (PI).

(2) Authorized representatives of the Contractor for which the assessment was conducted may access SPRS to view their own summary level scores, in accordance with the SPRS Software User's Guide for Awardees/Contractors available at https://www.sprs.csd.disa.mil/pdf/SPRS_Awardee.pdf.

(3) A High NIST SP 800-171 DoD Assessment may result in documentation in addition to that listed in this clause.

DoD will retain and protect any such documentation as "Controlled Unclassified Information (CUI)" and intended for internal DoD use only. The information will be protected against unauthorized use and release, including through the exercise of applicable exemptions under the Freedom of Information Act (e.g., Exemption 4 covers trade secrets and commercial or financial information obtained from a contractor that is privileged or confidential).

(g) Subcontracts.

(1) The Contractor shall insert the substance of this clause, including this paragraph (g), in all subcontracts and other contractual instruments, including subcontracts for the acquisition of commercial products or commercial services (excluding commercially available off-the-shelf items).

(2) The Contractor shall not award a subcontract or other contractual instrument, that is subject to the implementation of NIST SP 800-171 security requirements, in accordance with DFARS clause 252.204-7012 of this contract, unless the subcontractor has completed, within the last 3 years, at least a Basic NIST SP 800-171 DoD Assessment, as described in https://www.acq.osd.mil/asda/dpc/cp/cyber/docs/safeguarding/NIST-SP-800-171- Assessment-Methodology-Version-1.2.1-6.24.2020.pdf, for all covered contractor information systems relevant to its offer that are not part of an information technology service or system operated on behalf of the Government.

(3) If a subcontractor does not have summary level scores of a current NIST SP 800-171 DoD Assessment (i.e., not more than 3 years old unless a lesser time is specified in the solicitation) posted in SPRS, the subcontractor may conduct and submit a Basic Assessment, in accordance with the NIST SP 800-171 DoD Assessment Methodology, to webptsmh@navy.mil for posting to SPRS along with the information required by paragraph (d) of this clause.

(End of clause)

SECTION K - REPRESENTATIONS, CERTIFICATIONS AND OTHER STATEMENTS OF OFFERORS

252.204-7008 Compliance With Safeguarding Covered Defense Information

Controls

OCT 2016

SECTION L - INSTRUCTIONS, CONDITIONS AND NOTICES TO BIDDERS

252.204-7024 Notice on the Use of the Supplier Performance Risk System MAR 2023

252.204-7019 NOTICE OF NIST SP 800-171 DOD ASSESSMENT REQUIREMENTS (NOV 2023)

(a) Definitions.

Basic Assessment, Medium Assessment, and High Assessment have the meaning given in the clause 252.204-7020, NIST SP 800-171 DoD Assessments.

Covered contractor information system has the meaning given in the clause 252.204-7012, Safeguarding Covered Defense Information and Cyber Incident Reporting, of this solicitation.

(b) Requirement. In order to be considered for award, if the Offeror is required to implement NIST SP 800-171, the Offeror shall have a current assessment (i.e., not more than 3 years old unless a lesser time is specified in the solicitation) (see 252.204-7020) for each covered contractor information system that is relevant to the offer, contract, task order, or delivery order. The Basic, Medium, and High NIST SP 800-171 DoD Assessments are described in the NIST SP 800-171 DoD Assessment Methodology located at https://www.acq.osd.mil/asda/dpc/cp/cyber/docs/safeguarding/NIST-SP-800-171-Assessment-Methodology- Version-1.2.1-6.24.2020.pdf.

(c) Procedures.

(1) The Offeror shall verify that summary level scores of a current NIST SP 800-171 DoD Assessment (i.e., not more than 3 years old unless a lesser time is specified in the solicitation) are posted in the Supplier Performance Risk System (SPRS) (https://www.sprs.csd.disa.mil/) for all covered contractor information systems relevant to the offer.

(2) If the Offeror does not have summary level scores of a current NIST SP 800-171 DoD Assessment (i.e., not more than 3 years old unless a lesser time is specified in the solicitation) posted in SPRS, the Offeror may conduct and submit a Basic Assessment to webptsmh@navy.mil for posting to SPRS in the format identified in paragraph (d) of this provision.

(d) Summary level scores. Summary level scores for all assessments will be posted 30 days post-assessment in SPRS to provide DoD Components visibility into the summary level scores of strategic assessments.

(1) Basic Assessments. An Offeror may follow the procedures in paragraph (c)(2) of this provision for posting Basic Assessments to SPRS.

(i) The email shall include the following information:

(A) Cybersecurity standard assessed (e.g., NIST SP 800-171 Rev 1).

(B) Organization conducting the assessment (e.g., Contractor self-assessment).

(C) For each system security plan (security requirement 3.12.4) supporting the performance of a DoD contract--

(1) All industry Commercial and Government Entity (CAGE) code(s) associated with the information system(s) addressed by the system security plan; and

(2) A brief description of the system security plan architecture, if more than one plan exists.

(D) Date the assessment was completed.

(E) Summary level score (e.g., 95 out of 110, NOT the individual value for each requirement).

(F) Date that all requirements are expected to be implemented (i.e., a score of 110 is expected to be achieved) based on information gathered from associated plan(s) of action developed in accordance with NIST SP 800-171.

(ii) If multiple system security plans are addressed in the email described at paragraph (d)(1)(i) of this section, the Offeror shall use the following format for the report:

Brief CAGE codes description of Date of Total Date score of System security plan supported by this the plan assessment score 110 will plan architecture achieved

(2) Medium and High Assessments. DoD will post the following Medium and/or High Assessment summary level scores to SPRS for each system assessed:

(i) The standard assessed (e.g., NIST SP 800-171 Rev 1).

(ii) Organization conducting the assessment, e.g., DCMA, or a specific organization (identified by Department of Defense Activity Address Code (DoDAAC)).

(iii) All industry CAGE code(s) associated with the information system(s) addressed by the system security plan.

(iv) A brief description of the system security plan architecture, if more than one system security plan exists.

(v) Date and level of the assessment, i.e., medium or high.

(vi) Summary level score (e.g., 105 out of 110, not the individual value assigned for each requirement).

(vii) Date that all requirements are expected to be implemented (i.e., a score of 110 is expected to be achieved) based on information gathered from associated plan(s) of action developed in accordance with NIST SP 800-171.

(3) Accessibility.

(i) Assessment summary level scores posted in SPRS are available to DoD personnel, and are protected, in accordance with the standards set forth in DoD Instruction 5000.79, Defense-wide Sharing and Use of Supplier and Product Performance Information (PI).

(ii) Authorized representatives of the Offeror for which the assessment was conducted may access SPRS to view their own summary level scores, in accordance with the SPRS Software User's Guide for Awardees/Contractors available at https://www.sprs.csd.disa.mil/pdf/SPRS_Awardee.pdf.

(iii) A High NIST SP 800-171 DoD Assessment may result in documentation in addition to that listed in this section.

DoD will retain and protect any such documentation as "Controlled Unclassified Information (CUI)" and intended for internal DoD use only. The information will be protected against unauthorized use and release, including through the exercise of applicable exemptions under the Freedom of Information Act (e.g., Exemption 4 covers trade secrets and commercial or financial information obtained from a contractor that is privileged or confidential).

(End of provision)

(End of Summary of Changes)