ML19156A346

Task Order No. 31310019F0052 Under Contract No. NNG15SD19B

ML19156A346
Person / Time
Issue date:	06/05/2019
From:	Jessica Chu Acquisition Management Division
To:	Raph T Alvarez Associates
References
NNG15SD19B
Download: ML19156A346 (8)

Text

NRCPAYMENTS PARKERSBURG WV 26106-1328 PO BOX 1328 BUREAU OF THE FISCAL SERVICE ADMIN TRAINING GROUP AVERY STREET A3-G FISCAL ACCOUNTING PROGRAM 303-482-0198 160759135 SEE ADDENDUM IS CHECKED CODE 18a. PAYMENT WILL BE MADE BY CODE FACILITY CODE 17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT SUCH ADDRESS IN OFFER OFFEROR NRCHQ WASHINGTON DC 20555-0001 MAIL STOP TWFN-07B20M ACQUISITION MANAGEMENT DIVISION US NRC - HQ NRCHQ CODE

16. ADMINISTERED BY CODE X

X 541519 SIZE STANDARD:

100.00

% FOR:

SET ASIDE:

UNRESTRICTED OR NRCHQ RFP IFB

10. THIS ACQUISITION IS CODE RFQ

14. METHOD OF SOLICITATION 13b. RATING NAICS:

SMALL BUSINESS 05/13/2019 JESSICA CHU 31310019F0052 06/03/2019 (No collect calls)

INFORMATION CALL FOR SOLICITATION

8. OFFER DUE DATE/LOCAL TIME

b. TELEPHONE NUMBER

a. NAME

4. ORDER NUMBER

3. AWARD/

6. SOLICITATION 31310019Q0046

5. SOLICITATION NUMBER SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS

1. REQUISITION NUMBER PAGE OF 1

8 OCIO-19-0129 OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, & 30 TELEPHONE NO.

TYSONS CORNER VA 22102-3817 GREENSBORO DR SUITE 230 ATTN TALON RAPH ALVAREZ ASSOCIATES LLC 17a. CONTRACTOR/

WASHINGTON DC 20555-0001 NUCLEAR REGULATORY COMMISSION NUCLEAR REGULATORY COMMISSION

15. DELIVER TO WASHINGTON DC 20555-0001 MAIL STOP TWFN-07B20M ACQUISITION MANAGEMENT DIVISION

9. ISSUED BY

7.

NNG15SD19B

2. CONTRACT NO.

EFFECTIVE DATE

$150.

18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a UNLESS BLOCK BELOW ISSUE DATE DELIVERY FOR FOB DESTINA-TION UNLESS BLOCK IS MARKED

11.

SEE SCHEDULE

12. DISCOUNT TERMS 30 THIS CONTRACT IS A RATED ORDER UNDER DPAS (15 CFR 700) 13a.

SERVICE-DISABLED VETERAN-OWNED SMALL BUSINESS HUBZONE SMALL BUSINESS 8(A)

US NRC - HQ WOMEN-OWNED SMALL BUSINESS (WOSB) ELIGIBLE UNDER THE WOMEN-OWNED SMALL BUSINESS PROGRAM EDWOSB 24.

AMOUNT 23.

UNIT PRICE 22.

UNIT

21.

QUANTITY 20.

SCHEDULE OF SUPPLIES/SERVICES 19.

ITEM NO.

Accounting Info:

2019-X0200-FEEBASED-10-10D011-10B113-6166-51-J-144

-2574-51-J-144-6166 Period of Performance: 06/03/2019 to 06/02/2020 00001 Q-Audit Qmulos App for Enterprise Audit Perpetual License 200GB/Day Part Number: Q-APP-EA-PL-200GB Qty: 1.25 Continued...

(Use Reverse and/or Attach Additional Sheets as Necessary)

$112,923.36 HEREIN, IS ACCEPTED AS TO ITEMS:

X X

X DATED JESSICA CHU 06/05/2019

. YOUR OFFER ON SOLICITATION (BLOCK 5),

INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE SET FORTH COP ES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND DELIVER ARE ARE 31c. DATE SIGNED 27b. CONTRACT/PURCHASE ORDER NCORPORATES BY REFERENCE FAR 52 212-4. FAR 52 212-5 IS ATTACHED. ADDENDA 31a. UNITED STATES OF AMERICA (SIGNATURE OF CONTRACTING OFFICER) 30c. DATE SIGNED 31b. NAME OF CONTRACTING OFFICER (Type or print)

ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND ON ANY ADDITIONAL SHEETS SUBJECT TO THE TERMS AND CONDITIONS SPECIFIED.

27a. SOLICITATION NCORPORATES BY REFERENCE FAR 52 212-1, 52.212-4. FAR 52.212-3 AND 52.212-5 ARE ATTACHED. ADDENDA

26. TOTAL AWARD AMOUNT (For Govt. Use Only)

OFFER STANDARD FORM 1449 (REV. 2/2012)

Prescribed by GSA - FAR (48 CFR) 53.212 ARE NOT ATTACHED.

ARE NOT ATTACHED.

AUTHORIZED FOR LOCAL REPRODUCTION PREVIOUS EDITION IS NOT USABLE 30b. NAME AND TITLE OF SIGNER (Type or print) 30a. SIGNATURE OF OFFEROR/CONTRACTOR

28. CONTRACTOR IS REQU RED TO SIGN THIS DOCUMENT AND RETURN

25. ACCOUNTING AND APPROPRIATION DATA See schedule

29. AWARD OF CONTRACT: REF.

32e. MA LING ADDRESS OF AUTHORIZED GOVERNMENT REPRESENTATIVE 32c. DATE 32b. SIGNATURE OF AUTHORIZED GOVERNMENT REPRESENTATIVE ACCEPTED, AND CONFORMS TO THE CONTRACT, EXCEPT AS NOTED:

32a. QUANTITY IN COLUMN 21 HAS BEEN RECEIVED INSPECTED

40. PAID BY

39. S/R VOUCHER NUMBER

38. S/R ACCOUNT NUMBER

37. CHECK NUMBER FINAL PARTIAL

36. PAYMENT FINAL PARTIAL

35. AMOUNT VERIFIED CORRECT FOR

34. VOUCHER NUMBER

33. SHIP NUMBER COMPLETE 32g. E-MA L OF AUTHORIZED GOVERNMENT REPRESENTATIVE 42d. TOTAL CONTAINERS 42c. DATE REC'D (YY/MM/DD) 42b. RECEIVED AT (Location) 42a. RECEIVED BY (Print) 41c. DATE 41b. SIGNATURE AND TITLE OF CERTIFY NG OFFICER 41a. I CERTIFY THIS ACCOUNT IS CORRECT AND PROPER FOR PAYMENT STANDARD FORM 1449 (REV. 2/2012) BACK 24.

AMOUNT 23.

UNIT PRICE 22.

UNIT

21.

QUANTITY 20.

SCHEDULE OF SUPPLIES/SERVICES 19.

ITEM NO.

00002 Q-Audit Qmulos App for Enterprise Audit 200GB/Day Enterprise Support 1 Year *POP Starts on delivery and is valid for 1 year Qmulos Part Number: Q-APP-EA-200GB-P-ES Qty: 1.25 00003 Qmulos Professional Services Premium App Configuration - 5 days - T&E excluded Qmulos Part Number: Q-PS-APP-BASE-US-5 Qty: 1 The obligated amount of award: $112,923.36. The total for this award is shown in box 26.

32f. TELEPHONE NUMBER OF AUTHORIZED GOVERNMENT REPRESENTATIVE 32d. PRINTED NAME AND TITLE OF AUTHORIZED GOVERNMENT REPRESENTATIVE 8

2 of

NNG15SD19B/31310019F0052 Page 3 of 8 BRIEF PROJECT TITLE AND WORK DESCRIPTION (a) The title of this project is: Purchase of QMULOS SUPPORT & LICENSES (b) Summary work description:

The Contractor shall provide:

Vendor Part Number Description Quantity Unit Price Total Qmulos Q-APP-EA-PL-200GB Q-Audit Qmulos App for Enterprise Audit Perpetual License 200GB/Day 1.25 Qmulos Q-APP-EA-200GB-P-ES Q-Audit Qmulos App for Enterprise Audit 200GB/Day Enterprise Support 1 Year

• POP Starts on delivery and is valid for 1 year Qmulos 1.25 Qmulos Q-PS-APP-BASE-US-5 Qmulos Professional Services Premium App Configuration - 5 days -

T&E excluded Qmulos 1

TOTAL

$112,923.36 Brand Name Justification:

The brand name procurement of the Qmulos Q-Audit app for Splunk will allow the NRC to have improved visibility to insider threats, reduce manual efforts related to audit log review, and identify internal risks from network intrusions. This product also supports the National Institute of Standards and Technology audit controls for FISMA compliance. Th Q-Audit app from Qmulos is unique in that it will integrate with the NRCs existing Splunk infrastructure to provide capabilities that will address gaps in three critical security areas: FISMA compliance through automation of audit log monitoring, insider threat detection, and identification of unauthorized lateral network movement for incident response.. Comparable solutions from other vendors only focus on one of these areas of security concern and do not provide similar administrative efficiencies because of their limited ability to integrate with the agencys Splunk system.

Qmulos Q-Audit will leverage the agencys Splunk log management architecture to enable real time monitoring and alerting of potential security and compliance issues, providing insight into NRCs risk posture, enterprise wide, by system, and by organization. Given the wide and varied nature of security controls employed, only a solution built on a big data platform, like Splunk, can scale, accommodate variability, and provide the visibility required to stay compliant and thwart todays threats. When combined with all four classes of evidence for organizational, management, and technical controls Qmulos Q-Audit will provide benefits to the NRC through enhanced monitoring at the enterprise, system, and asset levels. With out-of-the-box control mappings from authoritative sources, and the ability to create custom overlays for other enterprise requirements, the ability to address numerous compliance mandates and audits is streamlined.

Enterprise audit capabilities are mandated for all National Security Systems; when the Intelligence Community Standard 500-27 was published defining the requirements for insider threat auditable events based on best practices, a foundational and defensible gold standard to build an insider threat program upon was created. Q-Audit provides an enterprise class solution with access to real time analytics and alerts with support for enterprise, cloud, and hybrid environments. Based on a prescriptive audit policy that holistically defines what one should audit and log on their network, Q-Audit includes features that support compliance

NNG15SD19B/31310019F0052 Page 4 of 8 efforts, inform security operations, and enable insider threat detection efforts with the ability to monitor, analyze, and alert on anomalies.

The Qmulos Enterprise Audit (Q-Audit) App automates the collection, analytics, and reporting of Enterprise Audit events based on the Intelligence Community Standards 500-27 (ICS 500-27).

The app collects data from technologies such as Microsoft Windows, Microsoft Active Directory/Lightweight Directory Access Protocol (LDAP), Linux and data loss prevention (DLP) oriented logs.

ICS 500-27 was developed to ensure that Intelligence Community (IC) members are monitoring privileged activities to identify potential events of concern and is considered a required component of Insider Threat programs.

(End of Clause)

PERIOD OF PERFORMANCE This contract shall commence on June 3, 2019 and will expire on June 2, 2020.

(End of Clause)

CONSIDERATION AND OBLIGATION-FIRM-FIXED-PRICE The total amount of the Firm-Fixed-Price portion of this contract is $112,923.36, and this amount is fully-funded.

(End of Clause)

INSPECTION AND ACCEPTANCE BY THE NRC (SEP 2013)

Inspection and acceptance of the deliverable items to be furnished hereunder shall be made by the NRC Contracting Officers Representative (COR) at the destination, accordance with FAR 52.247 F.o.b. Destination.

Contract Deliverables:

1. Q-Audit Qmulos App for Enterprise Audit Perpetual License 200GB/Day, qty: 1.25

2. Q-Audit Qmulos App for Enterprise Audit 200GB/Day Enterprise Support 1 Year, qty: 1.25

3. Qmulos Professional Services Premium App Configuration - 5 days - T&E excluded Qmulos, qty: 1 (End of Clause)

BRANDING The Contractor is required to use the statement below in any publications, presentations, articles, products, or materials funded under this contract/order, to the extent practical, in order to provide NRC with recognition for its involvement in and contribution to the project. If the work performed is funded entirely with NRC funds, then the contractor must acknowledge that information in its documentation/presentation.

Work Supported by the U.S. Nuclear Regulatory Commission (NRC), Office of Chief Information Officer, under Contract/order number NNG15SD19B/31310019F0052.

(End of Clause)

PACKAGING AND MARKING

NNG15SD19B/31310019F0052 Page 5 of 8 (a) The Contractor shall package material for shipment to the NRC in such a manner that will ensure acceptance by common carrier and safe delivery at destination. Containers and closures shall comply with the Surface Transportation Board, Uniform Freight Classification Rules, or regulations of other carriers as applicable to the mode of transportation.

(b) On the front of the package, the Contractor shall clearly identify the contract number under which the product is being provided.

(c) Additional packaging and/or marking requirements are as follows: N/A.

(End of Clause)

FAR Clauses Incorporated by Reference 52.204-13 SYSTEM FOR AWARD MANAGEMENT MAINTENANCE. (OCT 2018) 52.204-19 INCORPORATION BY REFERENCE OF REPRESENTATIONS AND CERTIFICATIONS. (DEC 2014) 52.204-23 PROHIBITION ON CONTRACTING FOR HARDWARE, SOFTWARE, AND SERVICES DEVELOPED OR PROVIDED BY KASPERSKY LAB AND OTHER COVERED ENTITIES. (JUL 2018) 52.209-6 PROTECTING THE GOVERNMENT'S INTEREST WHEN SUBCONTRACTING WITH CONTRACTORS DEBARRED, SUSPENDED, OR PROPOSED FOR DEBARMENT. (OCT 2015) 52.222-3 CONVICT LABOR. (JUN 2003) 52.223-6 DRUG-FREE WORKPLACE. (MAY 2001) 52.225-1 BUY AMERICAN - SUPPLIES. (MAY 2014) 52.227-19 COMMERCIAL COMPUTER SOFTWARE LICENSE. (DEC 2007)

FAR Clauses Incorporated by Full Text 52.217-6 OPTION FOR INCREASED QUANTITY. (MAR 1989)

The Government may increase the quantity of supplies called for in the Schedule at the unit price specified. The Contracting Officer may exercise the option by written notice to the Contractor at any time prior to contract expiration. Delivery of the added items shall continue at the same rate as the like items called for under the contract, unless the parties otherwise agree.

(End of clause) 52.252-2 CLAUSES INCORPORATED BY REFERENCE. (FEB 1998)

This contract incorporates one or more clauses by reference, with the same force and effect as if they were given in full text. Upon request, the Contracting Officer will make their full text available.

Also, the full text of a clause may be accessed electronically at this/these address(es):

www.acquisition.gov/far https://www.nrc.gov/about-nrc/contracting/48cfr-ch20.html (End of clause)

NRCAR Clauses Incorporated by Reference 2052.209-72 CONTRACTOR ORGANIZATIONAL CONFLICTS OF INTEREST. (JAN 1993) 2052.215-73 AWARD NOTIFICATION AND COMMITMENT OF PUBLIC FUNDS (OCT 1999)

NRCAR Clauses Incorporated by Full Text

NNG15SD19B/31310019F0052 Page 7 of 8 (End of Clause)

USE OF AUTOMATED CLEARING HOUSE (ACH) ELECTRONIC PAYMENT/REMITTANCE ADDRESS The Debt Collection Improvement Act of 1996 requires that all Federal payments except IRS tax refunds be made by Electronic Funds Transfer. lt is the policy of the Nuclear Regulatory Commission to pay government vendors by the Automated Clearing House (ACH) electronic funds transfer payment system. Item 15C of the Standard Form 33 may be disregarded.

(End of Clause)

ELECTRONIC PAYMENT (DEC 2017)

The Debt Collection Improvement Act of 1996 requires that all payments except IRS tax refunds be made by Electronic Funds Transfer. Payment shall be made in accordance with FAR 52.232-33, entitled Payment by Electronic Funds Transfer-System for Award Management.

To receive payment, the contractor shall prepare invoices in accordance with NRCs Billing Instructions. Claims shall be submitted through the Invoice Processing Platform (IPP)

(https://www.ipp.gov/). Back up documentation shall be included as required by the NRCs Billing Instructions.

(End of Clause)

BILLING INSTRUCTIONS FOR FIXED-PRICE TYPE CONTRACTS (JULY 2017)

General: During performance and through final payment of this contract, the contractor is responsible for the accuracy and completeness of data within the System for Award Management (SAM) database and the Invoice Processing Platform (IPP) system and for any liability resulting from the Governments reliance on inaccurate or incomplete SAM and/or IPP data.

The contractor shall prepare invoices/vouchers for payment of deliverables identified in the contract, in the manner described herein. FAILURE TO SUBMIT INVOICES/VOUCHERS IN ACCORDANCE WITH THESE INSTRUCTIONS MAY RESULT IN REJECTION OF THE INVOICE/VOUCHER AS IMPROPER.

Electronic Invoice/Voucher Submissions: Invoices/vouchers shall be submitted electronically to the U.S. Nuclear Regulatory Commission (NRC) is through the Invoice Processing Platform (IPP) at www.ipp.gov.

Purchase of Capital Property: ($50,000 or more with life of one year or longer)

Contractors must report to the Contracting Officer, electronically, any capital property acquired with contract funds having an initial cost of $50,000 or more, in accordance with procedures set forth in NRC Management Directive (MD) 11.1, NRC Acquisition of Supplies and Services.

Agency Payment Office: Payment will be made by the office designated in the contract in Block 12 of Standard Form 26, Block 25 of Standard Form 33, or Block 18a of Standard Form 1449, whichever is applicable.

Frequency: The contractor shall submit invoices/vouchers for payment once each month, unless otherwise authorized by the Contracting Officer.

NNG15SD19B/31310019F0052 Page 8 of 8 Supporting Documentation: Any supporting documentation required to substantiate the amount billed shall be included as an attachment to the invoice created in IPP. If the necessary supporting documentation is not included, the invoice will be rejected.

Task Order Contracts: The contractor must submit a separate invoice/voucher for each individual task order with pricing information.

Final vouchers/invoices shall be marked "FINAL INVOICE" or "FINAL VOUCHER".

Currency: Invoices/Vouchers must be expressed in U.S. Dollars.

Supersession: These instructions supersede previous Billing Instructions for Fixed-Price Type Contracts (JAN 2015).

Does my company need to register in IPP?

If your company is currently registered in IPP and doing business with other Federal Agencies in IPP, you will not be required to re-register.

If your company is not currently registered in IPP, please note the following:

You will be receiving an invitation to register for IPP from IPP Customer Support, STLS.IPPHELPDESK@stls.frb.org.

IPP Customer Support will send you two emails: the first email will contain the initial administrative IPP User ID and the second email, sent within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> of receipt of the first email, will contain a temporary password.

Please add the Customer Support email address (STLS.IPPHELPDESK@stls.frb.org) to your address book so you do not disregard these emails or mistake them for spam.

During registration, one initial administrative user account will be created for your company and this user will be responsible for setting up all other user accounts including other administrators.

Registration is complete when the initial administrative user logs into the IPP web site with the User ID and password provided by Treasury and accepts the rules of behavior.

What type of is training provided?

Vendor training materials, including a first time login tutorial, user guides, a quick reference guide, and frequently asked questions are available on Treasurys IPP website. Individuals within your company responsible for submitting invoices should review these materials before work begins on the contract.

How do I receive assistance with IPP?

Treasurys IPP Customer Support team provides vendor assistance related to the IPP application, and is also available to assist IPP users and to answer any questions related to accessing IPP or completing the registration process. IPP application support is also available via phone at (866) 973-3131, Monday through Friday from 8:00 am to 6:00 pm ET, and via email at IPPCustomerSupport@fiscal.treasury.gov.

Specific questions regarding your contract or task order should be directed to the appropriate NRC Contracting Officer.