W912CH24R0036-0001 Amendment.pdf

AMENDMENT OF SOLICITATION/MODIFICATION OF CONTRACT 1. Contract ID Code Page Of

2. Amendment/Modification No.

3. Effective Date

4. Requisition/Purchase Req No.

5. Project No. (If applicable)

6. Issued By Code 7. Administered By (If other than Item 6) Code

8. Name And Address Of Contractor (No., Street, City, County, State and Zip Code)

9A. Amendment Of Solicitation No.

9B. Dated (See Item 11)

10A. Modification Of Contract/Order No.

10B. Dated (See Item 13) Code Facility Code

11. THIS ITEM ONLY APPLIES TO AMENDMENTS OF SOLICITATIONS

The above numbered solicitation is amended as set forth in item 14. The hour and date specified for receipt of Offers is extended, is not extended.

Offers must acknowledge receipt of this amendment prior to the hour and date specified in the solicitation or as amended by one of the following methods:

(a) By completing items 8 and 15, and returning ____________ copies of the amendments: (b) By acknowledging receipt of this amendment on each copy of the offer submitted; or (c) By separate letter or telegram which includes a reference to the solicitation and amendment numbers. FAILURE OF YOUR ACKNOWLEDGMENT TO BE RECEIVED AT THE PLACE DESIGNATED FOR THE RECEIPT OF OFFERS PRIOR TO THE HOUR AND DATE SPECIFIED MAY RESULT IN REJECTION OF YOUR OFFER. If by virtue of this amendment you desire to change an offer already submitted, such change may be made by telegram or letter, provided each telegram or letter makes reference to the solicitation and this amendment, and is received prior to the opening hour and date specified.

12. Accounting And Appropriation Data (If required)

13. THIS ITEM ONLY APPLIES TO MODIFICATIONS OF CONTRACTS/ORDERS

It Modifies The Contract/Order No. As Described In Item 14.

A. This Change Order is Issued Pursuant To: The Changes Set Forth In Item 14 Are Made In

The Contract/Order No. In Item 10A.

B. The Above Numbered Contract/Order Is Modified To Reflect The Administrative Changes (such as changes in paying office, appropriation data, etc.) Set

Forth In Item 14, Pursuant To The Authority of FAR 43.103(b).

C. This Supplemental Agreement Is Entered Into Pursuant To Authority Of:

D. Other (Specify type of modification and authority)

E. IMPORTANT: Contractor is not, is required to sign this document and return _______________ copies to the Issuing Office.

14. Description Of Amendment/Modification (Organized by UCF section headings, including solicitation/contract subject matter where feasible.)

Except as provided herein, all terms and conditions of the document referenced in item 9A or 10A, as heretofore changed, remains unchanged and in full force and effect.

15A. Name And Title Of Signer (Type or print)

16A. Name And Title Of Contracting Officer (Type or print)

15B. Contractor/Offeror 15C. Date Signed 16B. United States Of America 16C. Date Signed

By (Signature of person authorized to sign) (Signature of Contracting Officer)

NSN 7540-01-152-8070

PREVIOUS EDITIONS UNUSABLE

30-105-02 STANDARD FORM 30 (REV. 10-83)

Prescribed by GSA FAR (48 CFR) 53.243

SEE SCHEDULE

X

Firm Fixed Price

0001 2025APR25

W912CH

ACC-DTA

6501 E. 11 MILE RD.

DETROIT ARSENAL, MI 48397-5000

JUSTINE BROUGHTON

EMAIL: JUSTINE.R.BROUGHTON.CIV@ARMY.MIL

W912CH-24-R-0036

2025APR14

X

X 2025MAY27 03:00pm

/SIGNED/

2 signed

SEE SECOND PAGE FOR DESCRIPTION

1 9

CONTINUATION SHEET

Reference No. of Document Being Continued Page of

Name of Offeror or Contractor:

PIIN/SIIN MOD/AMD

SECTION A - SUPPLEMENTAL INFORMATION

Buyer Name: JUSTINE BROUGHTON

Buyer Office Symbol/Telephone Number: CCTA-APS-B/(586)282-7504

Type of Contract 1: Firm Fixed Price

Kind of Contract: Supply Contracts and Priced Orders

*** End of Narrative A0000 ***

A.1 BACKGROUND/DESCRIPTION OF THE ACTION

This solicitation is intended to result in the award of a single five-year Indefinite Quantity Indefinite Delivery (IDIQ) type Contract for the estimated supplies specified. The resulting contract will establish pricing to be utilized through issuance of delivery orders for discrete quantities for the period stated in the schedule. The Government bears no responsibility to issue an initial minimum order upon base contract award. For further guidance related to a IDIQ type contract, see FAR 52.216-22, Indefinite Quantity, and DFARS

252.216-7006, Ordering.

A.1.1 This solicitation is a total small business set-aside in accordance with (IAW) FAR 19.502-2.

A.1.2 There is a Technical Data Package (TDP) associated with this procurement. The TDP is Distribution Statement D, which limits access to the Department of Defense (DoD) and U.S. DoD contractors only. Please refer to Section C for additional information.

A.2 MINIMUM AND MAXIMUM QUANTITY OF SUPPLIES

A.2.1 In accordance with (IAW) Federal Acquisition Regulation (FAR) 16.504(a)(4)(ii), the minimum quantity of supplies the Government will acquire under this contract is 15 each. The Government will satisfy this minimum quantity requirement by issuing the first delivery order (DO) for the stated minimum at the time of IDIQ contract award.

A.2.1.1 The Government is NOT obligated to purchase any additional requirements beyond the Minimum Guaranteed Quantity.

A.2.2 The minimum quantity is 15 each and the maximum quantity is 625 each for the Parts Kit, Hydraulic.

A.3 ORDERING PERIOD

There will be five, one-year ordering periods beginning the date of IDIQ contract award.

A.4 DELIVERY ORDER AWARDS

Future delivery orders will be awarded IAW FAR 52.216-19, Order Limitations, and FAR 52.216-22, Indefinite Quantity, and DFARS 252.216-

7006, Ordering.

A.5 SOLICITATION STRUCTURE

A.5.1 Particular attention should be given to clauses and paragraphs throughout the solicitation that require the contractor to fill-in various information.

A.5.2 The Government will utilize North American Industry Classification System (NAICS) code 334419 (Other Electronic Component

Manufacturing). This NAICS code will also be assigned to subsequent awarded delivery orders thereunder.

A.5.3 System for Award Management (SAM), Size Standards, and NAICS Codes. Failure to register in SAM for the corresponding NAICS code identified in paragraph A.5.2 prior to submitting a proposal against this solicitation may preclude an award being made to your company.

A.6 SYSTEM FOR AWARD MANAGEMENT (SAM), SIZE STANDARDS, AND NAICS CODES

Failure to register in SAM for the corresponding NAICS code identified in paragraph A.3 prior to submitting a proposal against this

Solicitation may preclude an award being made to your company. Offerors should be aware of how U.S. Small Business (SB) concerns are defined in FAR Part 19, Defense Federal Acquisition Regulation Supplement (DFARS) Part 19, and 13 CFR 121, Small Business Size

Regulations. Offerors are advised to review 13 CFR 121.103, "How does SBA Determine Affiliation".

A.7 DISTRIBUTION AND DESTRUCTION OF EXPORT CONTROL TECHNICAL DATA PACKAGE

A.7.1 This solicitation and resulting contract contains technical data whose export is restricted by the Arms Export Control Act

(Section 2751 of Title 22, United States Code) or the Export Control Reform Act of 2018 (Chapter 58 Sections 48014852 of Title 50, 2 9

W912CH-24-R-0036

Name of Offeror or Contractor:

PIIN/SIIN MOD/AMD

United States Code). Violations of these export laws are subject to severe criminal penalties. Disseminate in accordance with provision of DoD Directive 5230.25 and DoD Instruction 2040.02. This also applies to distribution of the TDP to all SUBCONTRACTORS at every level.

A.7.2 To be eligible to gain access to this export controlled TDP (via DoDSAFE) an offeror must have a current DD 2345, Militarily

Critical Technical Data Agreement certification on file with the Defense Logistics Information Service (DLIS). To obtain certification, contractors must submit a DD Form 2345 to the United States (U.S.)/Canada Joint Certification Office (JCO), along with a copy of supporting documentation. DD Form 2345 and instructions can be found on the Joint Certification Program website at:

http://www.dla.mil/HQ/InformationOperations/Offers/Products/LogisticsApplications/JCP.aspx Processing time is estimated at six (6) to ten (10) weeks after receipt. Upon receipt of certification, an offeror may request the TDP in accordance with the solicitation's

Section C Technical Data Package instructions.

A.7.3 Upon completion of the purposes for which Government Technical Data has been provided, the offeror, and all subcontractors, vendors, and sub-vendors of the offeror, are required to destroy all documents, including all reproductions, duplications, or copies thereof as may have been further distributed.

A.7.4 Destruction of this technical data shall be accomplished by: shredding, pulping, burning, or melting any physical copies of the

TDP and/or deletion or removal of downloaded TDP files from computer drives and electronic devices, and any copies of those files.

A.8 ELECTRONIC CONTRACTING

A.8.1 All Army Contracting Command Detroit Arsenal solicitations will be publicized on the System for Award Management website

(https://www.sam.gov ). Any additional attachments, including Technical Data Packages (TDPs) when available electronically, will be separate attachments or links embedded in the solicitation.

A.8.2 Interested Offerors shall submit a proposal via email to the Contract Specialist, Justine

Broughton,(justine.r.broughton.civ@army.mil) and cc the corresponding Contracting Officer, Scott Follen, (scott.l.follen2.civ@army.mil) with the subject header: Proposal Submission - W912CH-24-R-0036 (company name). Once a proposal is received, the Contract

Specialist/Contracting Officer will reply with the respective Offeror stating receipt of proposal submission.

A.8.3.1 Maximum size of each e-mail shall be 10 megabytes. You may use multiple e-mail messages for each bid/submission, however, you must annotate the subject lines as described above for each message, and number them in this manner: Message 1 of 3, 2 of 3, 3 of 3.

Bids can be submitted can be submitted using any of the following electronic formats:

A.8.3.2 Microsoft Office Products; Word, Excel, or PowerPoint. Spreadsheets must be sent in a format that includes all formulate macro and format information. Print image is not acceptable.

A.8.3.3 Files in Adobe PDF (Portable Document Format). Scanners should be set to 300 dots per inch.

A.8.3.4 Files in HTML (Hypertext Markup Language). HTML documents must not contain active links to live Internet sites or pages. All linked information must be contained within your electronic bid/offer and be accessible offline.

A.8.3.5 Other electronic formats are not acceptable. Ensure that filenames of attachments DO NOT contain spaces to limit virus scanners rejecting the email as unscannable.

A.8.4 Please pay close attention to the Issued By block location on the cover page of the solicitation for closing date and time. The closing date and time is based on the local time of the listed location of the Issued By office. In accordance with FAR 15.208(a), offerors are responsible for submitting proposals, and any revisions, and modifications, so as to be received by the Government office designated in the solicitation by the time specified.

A.8.5 It is the responsibility of the Offeror to ensure the proposal/quote is received by the date and time specified on the cover page of this solicitation. In accordance with FAR 15.208, if the proposal/quote was not received at the initial point of entry to the

Government infrastructure (in this case, received through SAM) by the exact date and time specified on the cover page of this solicitation, it will be determined late. Proposal/quote is defined to mean ALL volumes or parts required in the solicitation are included in the electronic submission.

Note: There is no "expected" or "target" length of time for proposal submission; size and content may be factors, therefore offerors are strongly cautioned when submitting proposals to allow adequate time for submission.

A.8.6 Solicitations may remain posted on www.sam.gov after the solicitation closing date. If the response deadline has passed for the solicitation, vendors will no longer be able to submit electronic responses.

A.8.7 Any award issued as a result of this solicitation will be distributed electronically. In the event of a FOIA request for a copy of any award issued as a result of this solicitation, or any subsequent modifications to the contract, the contract and modifications will be released, including the awarded unit price. This is the notice required by Executive Order 12600 (June 23, 1987) of the

3 9

Name of Offeror or Contractor:

PIIN/SIIN MOD/AMD

Governments intention to release unit prices in response to any request under the Freedom of Information Act (FOIA), 5 USC 552. Unit price is defined as the contract price per unit or item purchased as it appears in Section B of the contract and is NOT referring to nor does it include Cost or Pricing data/information. If an Offeror objects to such release in the base contract or contract modifications, the Offeror must notify the contracting officer in writing prior to the closing date identified in this solicitation and include the rationale for the objection consistent with the provisions of FOIA. A release determination will be made based on rationale given.

A.8.8 Questions pertaining to this solicitation should be directed to the Contract Specialist identified on the cover page of this solicitation. For technical assistance in doing business with the Government, and doing business electronically, please visit the

Procurement Technical Assistance Center (PTAC) website at http://www.aptac-us.org/ to locate a regional center.

A.9 ACKNOWLEDGEMENT OF AMENDMENTS

Acknowledge all the amendments received from the Government by identifying the amendment number and its issue date below:

Amendment Number: Date:

A.10 ARMY CONTRACTING COMMAND DETROIT ARSENAL (DTA) OMBUDSPERSON

Information regarding the Ombudsperson for this contract is located at the following website: https://www.tacom.army.mil/ombudsperson

. (Best viewed using Google Chrome or Microsoft Edge.

A.11 ALL OR NONE

A.11.1 Offers in response to this solicitation must be submitted for the total quantity of the items identified in the solicitation.

A.11.2 ONLY ONE AWARD WILL BE MADE AS A RESULT OF THIS SOLICITATION.

A.11.3 OFFERS SUBMITTED FOR LESS THAN THE TOTAL QUANTITIES OF ALL THE ITEMS IN THIS SOLICITATION WILL BE DEEMED NONRESPONSIVE.

*** END OF NARRATIVE A0001 ***

SOLICITATION: W912CH-24-R-0036

AMENDMENT: 0001

1. The purpose of this amendment is to:

SF 30:

Extend the Offer Due Date from 15 May 2025 to 27 May 2025.

SECTION A:

Change A.7 DISTRIBUTION AND DESTRUCTION OF EXPORT CONTROL TECHNICAL DATA PACKAGE

SECTION C:

Change C.1 TECHNICAL DATA PACKAGE INFORMATION

2. All other terms and conditions, except for those addressed above, remain unchanged and are in full force and affect.

*** END OF NARRATIVE A0002 ***

4 9

Name of Offeror or Contractor:

PIIN/SIIN MOD/AMD

SECTION C - DESCRIPTION/SPECIFICATIONS/WORK STATEMENT

C.1 TECHNICAL DATA PACKAGE INFORMATION

C.1.1 The following Xd item applies to this solicitation:

[ ] 1. There is no Technical Data Package (TDP) included with this solicitation.

[ X ] 2. The TDP for this solicitation (Attachment 0004) resides within the DoDSafe Site associated with this solicitation number:

W912CH-24-R-0036

To access the data through DoDSafe Site:

a. Email Justine Broughton, email justine.r.broughton.civ@amry.mil and enter subject as TECHNICAL DATA PACKAGE (TDP) 12284862 to request drop off.

b. Your JCP DD2345 then will be verified.

c. If approved, a Drop Off of files will be sent you from DoD SAFE.

C.1.2 TDPs that have an Export Control Warning Notice are subject to the Arms Export Control Act (Section 2751 of Title 22, United

States Code) or the Export Control Reform Act of 2018 (Chapter 58 Sections 48014852 of Title 50, United States Code).

C.1.3 Further dissemination of the TDP must be in accordance with provisions of DoD Directive 5230.25, DoDI 5230.24, its Distribution

Statement markings, and U.S. export control laws. This also applies to distribution of the TDP to all SUBCONTRACTORS at every level.

C.1.4 To obtain these TDPs, contractors must have a current DD 2345, Militarily Critical Technical Data Agreement on file with Defense

Logistics Information Service (DLIS). To obtain certification, go to DD FORM 2345 Instructions and DD 2345.

C.1.5 Upon completion of the purposes for which Government Technical Data has been provided, the Contractor is required to destroy all documents, including all reproductions, duplications, or copies thereof as may have been further distributed by the Contractor.

Destruction of this technical data shall be accomplished by: shredding, pulping, burning, or melting any physical copies of the TDP and/or deletion or removal of downloaded TDP files from computer drives and electronic devices, and any copies of those files.

C.1.6 If technical data is otherwise restricted, select Request Explicit Access. This will generate an email to the Contract

Specialist and Contracting Officer at Army Contract Command - Warren (DTA) with all the information needed to grant contractor access to restricted documents. SAM will automatically generate an email stating when the requesting contractor has permission to view or download

TDP items.

C.1.7 If multiple individuals in the contractors organization need access to the Technical Data Package (TDP) for a solicitation and an explicit access request is required, each individual MUST submit an explicit access request to be granted approval to view the TDP.

Those same individuals MUST be registered in SAM. Any individuals no longer with the company should be deleted. Questions related to registration in SAM should be directed to https://www.sam.gov/ The SAM helpdesk phone number is (866) 606-8220. Vendors are responsible for placing correct information in SAM.

C.2 DRAWING LIMITATIONS

C.2.1 The drawings supplied with this contract are not shop or process drawings. The drawings are engineering design drawings, are adequate to permit manufacture, and:

C.2.1.1 depict the completed (item(s), and

C.2.1.2 serve as the basis for inspection of the completed item(s).

C.2.2 These drawings DO NOT cover intermediate drawings/specifications or steps in the manufacturing process. As a result, even if all the dimensions and tolerances specified in the engineering design drawing for each individual part are met, a cumulative unacceptable fit for the contract item could result.

C.2.3 The Contractor is responsible for producing the shop or process drawings needed to cover intermediate steps in the manufacturing process.

5 9

Name of Offeror or Contractor:

PIIN/SIIN MOD/AMD

C.2.4 The Contractor agrees that he has obtained all specifications and drawings necessary to manufacture the items being solicited in accordance with the TDP including all incorporated specifications and drawings. The contractor is responsible for having all drawings and specifications. Delivery delays are not excusable where the contractor asserts that it did not have a specification or drawing and has failed to request, in writing, the specification from either the Contracting Officer or Contract Specialist prior to the solicitation closing date.

C.2.5 Failure to produce an end item with a cumulative fit that conforms to Government drawings, specifications or other supplemental manufacturing documentation, will result in the Contractor being responsible for correcting this condition at no additional cost to the

Government and no delivery schedule extension.

C.3 ACQUISITION OF SOURCE-CONTROLLED PART NUMBER

One or more of the drawings for part of the contract item set forth in the Schedule and in the Technical Data Package specify manufacturer's part numbers. Since complete Government technical data for such part or parts are not available, it is understood that the Contractor, by accepting this contract, agrees to furnish only the listed manufacturer's part number(s) for those components of the contract item. It is further understood and agreed that references to manufacturer's part numbers herein shall be deemed to include all changes or revisions thereto which the approved manufacturer has made effective as of the first date of delivery of any of the items under this contract; provided, that no change or revision that affects the interchangeability (ability to be interchanged with previous parts and to match with all mating parts when assembled) of the listed manufacturer's part shall be incorporated into the contract item without the prior written approval of the Procuring Contracting Officer.

C.4 OPSEC TRAINING REQUIREMENT

Per AR 530-1, Operations Security, new contractor employees must complete Level I OPSEC training within 30 calendar days of reporting for duty. All contractor employees must complete annual OPSEC awareness training. OPSEC awareness training is available at:

https://securityawareness.usalearning.gov/opsec/index.htm . The Contractor shall maintain the training certificates/proof of completion and make them available to the Contracting Officers Representative (COR) or Procuring Contracting Officer (PCO) upon request.

C.5 REQUIREMENT FOR AN OPSEC STANDING OPERATION PROCEDURE/PLAN

C.5.1 The contractor is subject to provisions of the TACOM LCMC OPSEC Standing Operating Procedures (SOP/Plan)(Attachment 0003), or other U.S. Government OPSEC plan, per AR 530-1, Operations Security. This SOP/Plan (Attachment 0003) specifies the governments critical information, why it needs to be protected, where it is located, who is responsible for it, and how to protect it.

C.5.2 The contractor will receive a copy of the SOP/Plan (Attachment 0003) at time of award. Local form STA Form 7114 (or similar) will be used to document and record security OPSEC reviews which are conducted by G2, TACOM LCMC or individual organizations supporting

OPSEC Officers.

C.5.3 The contractor shall identify an individual who will be an OPSEC Coordinator. The contractor will ensure that this individual is OPSEC Level I.

C.6 CONFIGURATION MANAGEMENT DOCUMENTATION

C.6.1 The Contractor may submit Engineering Change Proposals (ECPs), Requests for Variance (RFVs), and Notices of Revision (NORs) for the requirements in the Government-provided Technical Data Package (TDP).

C.6.2 The Configuration Change Management section of SAE EIA-649-1 (current revision) Configuration Management Requirement for Defense

Contracts, Paragraph 3.3, shall be used for configuration control of material with the following exclusions: paragraph 3.3(3); and the second sentence of paragraph 3.3.1.8.1(1).

C.6.3 Furnished item(s) shall conform to the approved configuration requirements/revision unless an RFV is processed and approved as provided by Paragraph e. below. The term "Request for Variance" includes Requests for Deviations and Waivers.

C.6.4 Value Engineering Change Proposals (VECPs) for cost saving improvements to the TDP should not be processed per SAE EIA-649-1

(current revision) and should be referred to Section I Clause 52.248-1 VALUE ENGINEERING.

C.6.5 All ECPs submitted will be deemed routine. The Contractor must include justification for an ECP it considers emergency or urgent in the submittal and include all supporting documentation.

C.6.6 For ECPs, RFVs, and NORs, the Contractor must submit the documentation listed in sub-paragraphs e (i) through e (iii). Failure to submit a complete legible package may result in return of the ECP/RFV/NOR without processing.

C.6.6.1 for ECPs, the Contractor shall prepare and deliver the ECP in accordance with (IAW) CDRL A001.

6 9

Name of Offeror or Contractor:

PIIN/SIIN MOD/AMD

C.6.6.2 for RFVs, the Contractor shall prepare and deliver the RFV IAW CDRL A002.

C.6.6.3 for NORs, the Contractor shall prepare and deliver the NOR IAW CDRL A003.

C.6.7 The Governments acceptance of the data deliverable required by CDRL/DD Form 1423 in e(i)-(iii) above signifies only that the data satisfies the requirements of the DID and is considered acceptable for Government processing. Acceptance of the data deliverable does not signify "technical approval" of the change proposed by the deliverable and should not be interpreted as authorizing the

Contractor to proceed with the work proposed by the change. Disposition of the change (approval/disapproval) will follow acceptance of the CDRL at the Governments sole discretion. Incorporation of an approved RFV or ECP will require execution of a contract modification.

C.6.8 The Contractor should direct questions regarding the status of an ECP or RFV to the Procuring Contracting Officer (PCO), copy to the Administrative Contracting Officer (ACO).

C.6.9 The submission of an ECP/RFV/NOR does not affect the required delivery date of the contract.

C.7 ADDITIONAL GUIDELINES FOR CONTROLLED UNCLASSIFIED INFORMATION

C.7.1 General: There are types of information that are not classified but that require application of access and distribution controls and protective measures for a variety of reasons. This information is known as controlled unclassified information (CUI). The types of information considered CUI are U.S. Government technical information and information listed at the CUI registry

(https://www.archives.gov/cui/registry/category-list ). When handling CUI material, all personnel are to comply with these requirements and follow their company policy and/or applicable Non-Disclosure Agreement (NDA) concerning the protection of proprietary information in situations not clearly stated herein.

C.7.2 Technical Information Description: Any recorded information related to experimental, developmental, or engineering works that can be used to define an engineering or manufacturing process, or can be used to design, procure, produce, support, maintain, operate, repair, or overhaul program material. The data may be graphic or pictorial delineations in media (e.g., computer software, drawings, or photographs), text in specifications, related performance or design documents, or computer printouts. Examples of technical information include research and engineering data, engineering drawings, and associated lists, specifications, standards, process sheets, manuals, technical reports, catalog-item identifications, and related information, and computer software documentation.

C.7.3 CUI Information Description: Unclassified Information that requires safeguarding or dissemination controls pursuant to and consistent with applicable law, regulations, and government-wide or LRGWP policies but is not classified under EO 13526, (Classified

National Security Information).

C.7.4 CUI Markings All documents containing CUI will carry the CUI markings in accordance with DoDI 5200.48. Discontinue all use of legacy or other markings not permitted or included in either the CUI Registry or DoDI 5200.48. Marking of Technical Information will include the statement provided in the Security Classification Guide. If the contents of the technical document require more than one

Distribution Statement, apply the most restrictive statement. This does not preclude additional mandated markings as may be required by the contract.

C.7.5 Protection of CUI Information

C.7.5.1 Access: CUI may be released only to an individual who has a valid need for such access in connection with the accomplishment of a lawful and authorized Government purpose. Further dissemination of such information will be at the discretion of the Government

Security Manager. All personnel supporting this contract shall sign a CUI Nondisclosure Agreement prior to gaining access to the information. Personnel no longer requiring access to CUI must dispose (see Disposal below) or surrender any in their possession and terminate future access to it.

C.7.5.2 Storing/Handling: During working hours, take reasonable steps to minimize risk of access to CUI by unauthorized personnel.

After working hours, when not in physical possession of the owner, all CUI (whether hardcopy or optical media (e.g., DVDs, CDs) that contain CUI) must be afforded a reasonable degree of physical protection to prevent theft of program information (e.g., store CUI information in locked desks or file cabinets, locked rooms, cable lock laptops, storing in a trunk, storing out of site or similar means). Do not display CUI in public places e.g., airports, airplanes, restaurants). Electronic storing and processing of CUI shall be in accordance with DFARS 252.204-7012 Safeguarding Controlled Defense Information and Cyber Incident Reporting. Do not process CUI on public computers (e.g., those available for use by the general public in kiosks, hotel business centers), public wireless networks or computers that do not have access control. Personally owned computers and personally owned devices are not authorized to process CUI.

Portable electronic devices (e.g., smartphones, laptop computers, tablets), nonportable computers, and removable media (e.g., external hard drives, flash drives, USB drives; not including optical media) must be physically and electronically protected as described in this instruction, DFARS 252.204-7012 and DoDI 8582.01.

C.7.5.3 Dissemination: CUI printed documents and material may be transmitted through mail channels, commercial carrier or hand-carried without formal courier orders. CUI information may be disseminated to DoD personnel and DoD contractors to conduct official business

7 9

Name of Offeror or Contractor:

PIIN/SIIN MOD/AMD

for the program. If dissemination is required outside of DoD personnel or DoD contractors, contact the Government Security Manager for approval. Technical information will follow the release instructions identified in the Distribution Statement. Use secure communications whenever possible; however, land-line telephones are more secure than cellular telephones and should be used whenever available for discussions involving CUI. Transmit voice and facsimile transmissions only when you have a reasonable assurance that only authorized recipients will have access to the transmission. Digital transmission shall comply with the below: All transmission and/or dissemination of CUI (i.e., email and file transfers) must use NIST/NIAP-approved cryptographic products/algorithms, e.g., DoD-approved Public Key

Infrastructure

Certification or DoD Safe Exchange at https://safe.apps.mil/ . These are available at http://iase.disa.mil/pki/eca or http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140val-all.htm . This encryption requirement includes communications that contain passcodes to teleconferences or web conferences where there is a reasonable expectation that CUI may be discussed. When encryption is not available, a government collaborative suite (aka Integrated Digital Environment [IDE]) must be used to transmit CUI.

C.7.5.3.1 Contractor-hosted collaborative suites may be used for digital transmission and/or dissemination of CUI by personnel not located on a government backbone (e.g., NIPRNET), provided the following conditions apply: 1) Use only NIST/NIAP-approved cryptographic products/algorithms. The latest validation lists may be obtained at http://iase.disa.mil/pki/eca or http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140val-all.htm ; and, 2) Use an internally hosted service that does not use a third-party collaborative suite service provider.

C.7.5.3.2 Do not post CUI to web pages that are publicly available or have access limited only by domain/IP restrictions. As permitted by other contract provisions, CUI may be posted to web pages that control access through the use of a DoD approved Public Key

Infrastructure Certification and that provide protection via use of secure sockets, or other equivalent technologies. These are available at http://iase.disa.mil/pki/eca .

C.7.5.3.3 As new technologies become available in the electronics arena, care should be given to providing a reasonable degree of protection from known vulnerabilities.

C.7.5.3.4 The Internet is Public Access. CUI must be reviewed and officially approved by the TACOM Public Affairs Officer for public release before placing on the Internet. This is not applicable when the Internet is used for e-mail transmissions and encryption is used as noted above.

C.7.5.4 Disposal: The contractor shall ensure any covered defense information provided by the Government under this contract is destroyed or sanitized from contractor-owned media and reported in accordance with NIST Special Publication (SP) 800-88, Rev 1, Guidelines for Media Sanitization , December 2014, and in accordance with Section 2002.14 of Title 32, CFR. Destroy CUI documents may be destroyed by means approved for classified information or by any other means making it unreadable, indecipherable, and unrecoverable.

C.7.5.5 Report of Loss of CUI: Report any loss of CUI to the Government Security Manager. Initial reports shall be made as expeditiously as possible in all cases within 72 hours of discovery. If additional information is required after submission and review of the initial report, guidance will be provided at that time. Initial report content shall include the following information as available.

C.7.5.5.1 Applicable dates, including dates of compromise and dates of discovery.

C.7.5.5.2 Threat methodology, including all known resources used (e.g. IP addresses, domain names, software tools.

C.7.5.5.3 Account of what actions the threat(s) may have taken on victim system/network.

C.7.5.5.4 What information may have been compromised or lost, and its potential impact on government programs.

C.8 THREAT AWARENESS REPORTING PROGRAM

C.8.1 All contractor employees with security clearances working on any Army contract must receive annual TARP training by a Counter

Intelligence (CI) agent, or other authorized designated training method, per Army Regulation 381-12, para. 2-4b, Threat Awareness and

Reporting Program (TARP). The in-person training is the preferred method, and is available by contacting the local CI Office to arrange for the conduct of training.

C.8.2 The Contractor shall contact the CI Office within (30) days of contract award to schedule TARP training. Once training is complete, the Contractor shall maintain the training certificates/proof of completion and make them available to the Contracting

Officers Representative (COR) or Procuring Contracting Officer (PCO) upon request.

C.8.3 The Contractor shall contact the CI Office to schedule training for any new employee whose performance commences after award, and who did not attend the initial TARP training session. Upon completion of the TARP training, certification/proof of completion shall be provided as required in paragraph (b).In special circumstances (on deployments or in remote locations) when in-person training is not available, TARP computer based training (CBT), which has been approved by Deputy Chief of Staff (DCS), G-2, is the only authorized

8 9

Name of Offeror or Contractor:

PIIN/SIIN MOD/AMD

online training method permitted. This alternate CBT training is only authorized in special circumstances with written approval obtained from the PCO. Upon receipt of the necessary written approval, contractor employees possessing an Army Knowledge Online (AKO) account and password or a Common Access Card can register and complete the online TARP training course by utilizing the Army Learning Management

System (ALMS) at: www.lms.army.mil .

*** END OF NARRATIVE C0001 ***

9 9