ML19164A033

Contract No. 313100169C0004

ML19164A033
Person / Time
Issue date:	06/12/2019
From:	Jessica Chu Acquisition Management Division
To:
References
313100169C0004
Download: ML19164A033 (52)

Text

1. REQUISITION NUMBER PAGE OF SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, & 30 NSIR-19-0040 1 52

2. CONTRACT NO. 3. AWARD/ 4. ORDER NUMBER 5. SOLICITATION NUMBER 6. SOLICITATION 31310019C0004/ EFFECTIVE DATE ISSUE DATE 0353/19/0616 06/17/2019

7. FOR SOLICITATION a. NAME b. TELEPHONE NUMBER (No collect calls) 8. OFFER DUE DATE/LOCAL TIME INFORMATION CALL: BANU GOLDFEIZ

9. ISSUED BY CODE NRCHQ 10. THIS ACQUISITION IS UNRESTRICTED OR X SET ASIDE: 100.00  % FOR:

WOMEN-OWNED SMALL BUSINESS US NRC - HQ SMALL BUSINESS (WOSB) ELIGIBLE UNDER THE WOMEN-OWNED ACQUISITION MANAGEMENT DIVISION X HUBZONE SMALL SMALL BUSINESS PROGRAM NAICS: 541519 BUSINESS EDWOSB MAIL STOP TWFN-07B20M SERVICE-DISABLED X 8(A)

WASHINGTON DC 20555-0001 VETERAN-OWNED SIZE STANDARD: 150 SMALL BUSINESS

11. DELIVERY FOR FOB DESTINA- 12. DISCOUNT TERMS 13b. RATING TION UNLESS BLOCK IS 13a. THIS CONTRACT IS A MARKED 30 RATED ORDER UNDER

14. METHOD OF SOLICITATION SEE SCHEDULE DPAS (15 CFR 700)

RFQ IFB RFP

15. DELIVER TO CODE NRCHQ 16. ADMINISTERED BY CODE NRCHQ NUCLEAR REGULATORY COMMISSION US NRC - HQ NUCLEAR REGULATORY COMMISSION ACQUISITION MANAGEMENT DIVISION WASHINGTON DC 20555-0001 MAIL STOP TWFN-07B20M WASHINGTON DC 20555-0001 17a. CONTRACTOR/ CODE FACILITY 18a. PAYMENT WILL BE MADE BY CODE OFFEROR CODE NRCPAYMENTS See Schedule FISCAL ACCOUNTING PROGRAM ADMIN TRAINING GROUP AVERY STREET A3-G BUREAU OF THE FISCAL SERVICE PO BOX 1328 PARKERSBURG WV 26106-1328 TELEPHONE NO.

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT SUCH ADDRESS IN OFFER 18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a UNLESS BLOCK BELOW IS CHECKED SEE ADDENDUM

19. 20. 21. 22. 23. 24.

ITEM NO. SCHEDULE OF SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT SMALL BUSINESS ADMINISTRATION 035002541 CLARK BATY ASSOCIATES LLC ATTN DIANA BATY 1231 GOOD HOPE RD SE UNIT B WASHINGTON DC 200206907 2029698522 Accounting Info:

Continued ...

(Use Reverse and/or Attach Additional Sheets as Necessary)

25. ACCOUNTING AND APPROPRIATION DATA 26. TOTAL AWARD AMOUNT (For Govt. Use Only)

See schedule $3,508,475.60 27a. SOLICITATION INCORPORATES BY REFERENCE FAR 52.212-1, 52.212-4. FAR 52.212-3 AND 52.212-5 ARE ATTACHED. ADDENDA ARE ARE NOT ATTACHED.

X 27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA ARE X ARE NOT ATTACHED.

X 28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN 1 29. AWARD OF CONTRACT: REF. OFFER COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND DELIVER DATED . YOUR OFFER ON SOLICITATION (BLOCK 5),

ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND ON ANY ADDITIONAL INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE SET FORTH SHEETS SUBJECT TO THE TERMS AND CONDITIONS SPECIFIED. HEREIN, IS ACCEPTED AS TO ITEMS:

30a. SIGNATURE OF OFFEROR/CONTRACTOR 31a. UNITED STATES OF AMERICA (SIGNATURE OF CONTRACTING OFFICER) 30b. NAME AND TITLE OF SIGNER (Type or print) 30c. DATE SIGNED 31b. NAME OF CONTRACTING OFFICER (Type or print) 31c. DATE SIGNED JESSICA CHU 06/12/2019 AUTHORIZED FOR LOCAL REPRODUCTION STANDARD FORM 1449 (REV. 2/2012)

PREVIOUS EDITION IS NOT USABLE Prescribed by GSA - FAR (48 CFR) 53.212

2 of 52

19. 20. 21. 22. 23. 24.

ITEM NO. SCHEDULE OF SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT 2019-X0200-FEEBASED-11-11D002-11B206-6020-11-1-156

-251A-11-1-156-6020 Period of Performance: 06/17/2019 to 06/16/2020 00001 Base Period - Information Assurance System Support Line Item Ceiling:

Incrementally Funded Amount:

00002 Base Period Travel per FAR 31.205-46 Line Item Ceiling:

10001 BASE Period - Inspection Preparation SELF (OPTIONAL)

Amount: (Option Line Item)

Anticipated Exercise Date06/17/2019 10002 Base Period - Declared Emergency SELF (OPTIONAL)

Amount: (Option Line Item)

Anticipated Exercise Date06/17/2019 20001 Option Period 1 - Information Assurance System Support Amount: (Option Line Item)

Continued ...

32a. QUANTITY IN COLUMN 21 HAS BEEN RECEIVED INSPECTED ACCEPTED, AND CONFORMS TO THE CONTRACT, EXCEPT AS NOTED:

32b. SIGNATURE OF AUTHORIZED GOVERNMENT REPRESENTATIVE 32c. DATE 32d. PRINTED NAME AND TITLE OF AUTHORIZED GOVERNMENT REPRESENTATIVE 32e. MAILING ADDRESS OF AUTHORIZED GOVERNMENT REPRESENTATIVE 32f. TELEPHONE NUMBER OF AUTHORIZED GOVERNMENT REPRESENTATIVE 32g. E-MAIL OF AUTHORIZED GOVERNMENT REPRESENTATIVE

33. SHIP NUMBER 34. VOUCHER NUMBER 35. AMOUNT VERIFIED 36. PAYMENT 37. CHECK NUMBER CORRECT FOR COMPLETE PARTIAL FINAL PARTIAL FINAL

38. S/R ACCOUNT NUMBER 39. S/R VOUCHER NUMBER 40. PAID BY 41a. I CERTIFY THIS ACCOUNT IS CORRECT AND PROPER FOR PAYMENT 42a. RECEIVED BY (Print) 41b. SIGNATURE AND TITLE OF CERTIFYING OFFICER 41c. DATE 42b. RECEIVED AT (Location) 42c. DATE REC'D (YY/MM/DD) 42d. TOTAL CONTAINERS STANDARD FORM 1449 (REV. 2/2012) BACK

REFERENCE NO. OF DOCUMENT BEING CONTINUED PAGE OF CONTINUATION SHEET 31310019C0004/0353/19/0616 3 52 NAME OF OFFEROR OR CONTRACTOR See Schedule ITEM NO. SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT (A) (B) (C) (D) (E) (F)

Anticipated Exercise Date06/17/2020 20002 Option Period 1 Travel per FAR 31.205-46 Amount: (Option Line Item)

Anticipated Exercise Date06/17/2020 30001 Option Period 1 - Inspection Preparation SELF (OPTIONAL)

Amount: (Option Line Item)

Anticipated Exercise Date06/17/2020 30002 Option Period 1 - Declared Emergency SELF (OPTIONAL)

Amount: (Option Line Item)

Anticipated Exercise Date06/17/2020 40001 Option Period 2 - Information Assurance System Support Amount: $ (Option Line Item)

Anticipated Exercise Date06/17/2021 40002 Option Period 2 Travel per FAR 31.205-46 Amount: (Option Line Item)

Anticipated Exercise Date06/17/2021 50001 Option Period 2 - Inspection Preparation SELF (OPTIONAL)

Amount: (Option Line Item)

Anticipated Exercise Date06/17/2021 50002 Option Period 2 - Declared Emergency SELF (OPTIONAL)

Amount: (Option Line Item)

Anticipated Exercise Date06/17/2021 The obligated amount of award: . The total for this award is shown in box 26.

NSN 7540-01-152-8067 OPTIONAL FORM 336 (4-86)

Sponsored by GSA FAR (48 CFR) 53.110

313100169C0004 Page 4 of 52 SECTION B - Supplies or Services/Prices B.1 BRIEF PROJECT TITLE AND WORK DESCRIPTION (a) The title of this project is: Information Assurance System Support (IASS)

(b) Summary work description: The Contractor shall provide Information Assurance and Security (IAS) support services, and Information Assurance Operations Services (IAOS) to ensure compliance with the Federal Information Security Management Act (FISMA),

and Department of Defense (DoD) compliance on NRCs Secure Information Technology (IT) systems. See Section C for more information.

(End of Clause)

B.2 CONSIDERATION AND OBLIGATION-FIRM-FIXED-PRICE The total amount of the Firm-Fixed-Price portion of this contract is $1,097,441.20, and this contact incrementally funded for $600,00.00 through December 2019. This is an incrementally-funded contract and H.6- Limitation of Funds applies.

(End of Clause)

313100169C0004 Page 5 of 52 SECTION C - Description/Specifications C.1 Background The United States Nuclear Regulatory Commission (NRC) is a federally mandated agency whose primary mission is to regulate the commercial use of nuclear materials within the United States. The NRC provides licensing and regulation of nuclear reactors and industrial research use of nuclear materials, and the possession, use, processing, handling, and disposal of nuclear materials.

The proposed follow-on acquisition will allow the Information Security Branch (ISB) to continue to support the Program Manager, ISB, in the development of Information Assurance Systems Support (IASS) of new and required vulnerability lifecycle management processes and documentation, which includes accreditation, remediation, continuous monitoring and assessments.

C.2 Objective The objective of this procurement is to acquire Information Assurance and Security (IAS) support services, and Information Assurance Operations Services (IAOS) in an effort to ensure compliance with the Federal Information Security Management Act (FISMA), and Department of Defense (DoD) compliance on NRCs Secure Information Technology (IT) systems.

C.3 Scope of Work Within the scope of the IAOS, the Contractor shall provide the NRC with continuous assessment with the ability to support all classified NRC computing and networks.

In general, the Contractor shall provide Information Assurance (IA), cyber security solutions, and lifecycle system support in an optimal manner to ensure the confidentiality, integrity and availability of the NRC standalone classified systems. The Contractor shall provide IA related analysis, testing, evaluation and assessment, as defined by Department of Defense (DoD), Committee of National Security Systems (CNSS), and National Institute of Standards and Technology (NIST) various policies, directives, and guidance to support IA accreditation. Contractor shall also support Information Security Branch in the development of required accreditation documentation and in its approval process. The Information Assurance skills required under this statement of work and scope shall be derived from both DoD 8140.01 and DoD 8570.01M policy or the equivalent follow-on or replacement technical guidance. The Contractor shall be familiar with NRC NSIR classified ecosystem to minimize disruption to current NRC NSIR operations.

The NRC will prioritize deployment schedules and action / tasking to the Contractor within the framework of this Statement of Work.

C.3.1. Information Assurance Program/Project Management Support

313100169C0004 Page 6 of 52

a. Contractor shall plan all steps and procedures, schedule, and complete (manage) each accreditation package as a project. Coordinate, as a minimum, appropriate milestone review with each System / Site Owner which includes but is not limited to kick-off meeting, Certification

&Accreditation (C&A) documentation and evaluation reviews and directed remediation reviews.

b. Contractor shall provide Management oversight to report and schedule resources to complete C&A projects.

c. Contractor shall develop and maintain a C&A Plan of Action and Milestone (POA&M) on all accreditation activities, to include all NRC sites and secure systems. POA&Ms shall be updated, at a minimum, at every milestone date and whenever an action item is completed or updated.

d. Contractor shall provide centralized reporting and coordination with Computer Network Defense Service Provider (CNDSP) and Defense Information Service Agency (DISA) during the C&A process.

e. Contractor shall coordinate and provide the response to C&A documentation related data calls, as directed by the Government.

f. Contractor shall provide the agenda for C&A Collaboration meeting, provide meeting minutes, and post them to the portal, as directed by the COR/ACOR.

g. Contractor shall provide support to Enterprise IA Management during annual security assessment for secure networks.

C.3.2. Certification & Accreditation Support

a. Contractor is responsible for technical execution and compliance with NRCs secure C&A process. C&A must be performed in accordance with Department of Defense (DoD) Instruction 8510.01 (RMF), CNSSI 1254 (Risk Management Framework, Data Element Standards, and Reciprocity Process for National Security Systems), and NIST 800-37 (Guide for Applying the Risk Management Framework to Federal Information Systems). The scope of this effort centers on executing all steps necessary for obtaining and maintaining complete Certification and Accreditation (C&A) packages for all NRC Secure IT systems and sites.

b. Contractor shall perform all steps necessary, as stipulated in DoD and IC instructions and from C&A Collaboration meetings, to coordinate and ensure NRCs secure IT systems and sites are accredited in accordance with current DoD and IC policies.

c. Contractor shall assist NRCs Information Security Branch with security evaluations and must provide detailed recommendations on any current and new IT development efforts to ensure an efficient, successful C&A process.

313100169C0004 Page 7 of 52

d. Contractor shall maintain the following: NRC Requirements Traceability Matrix Tool, Security Test and Evaluation (ST&E) tools to include but not limited to network and database scanners, vulnerability scanning tools (Security Center, Nessus), STIG Compliance tools (Security Readiness Review (SRR), Security Readiness Guide (SRG), and Security Content Automation Protocol (SCAP).

e. Contractor shall assist NRC with Federal, DoD, and IC reporting as they pertain to C&A requirements.

C.3.3. IA Liaison Support to Project Teams

a. Contractor shall provide IA related guidance for systems development and upgrade projects and attend kick-off, milestone and technical meetings as required by the COR/ACOR and shall ensure a C&A Analyst is assigned to every new and current project.

b. Contractor shall provide IA related guidance for Licensee projects as directed by COR/ACOR. The Contactor shall travel to regional offices to provide technical support and training on secure systems when directed by the COR/ACOR. This will require one resource to be on-site for one week per year or as directed by the COR/ACOR, at each regional office.

Regional offices are currently located:

• King of Prussia, PA Region I

• Atlanta, GA Region II

• Lisle, IL Region III

• Arlington, TX Region IV C.3.4. Communications Security Assurance A requirement exists for the Communications Security Assurance (CSA) to ensure compliance with the Committee on National Security Systems (CNSS) and National Security Agency (NSA) policy on Nuclear Regulatory Commissions CSA program and systems.

a. As directed by the COR/ACOR, the Contractor shall provide to the CSA related analysis, test, evaluation and assessments, as defined by CNSS and NSA policies to support COMSEC and CSA accreditation.

b. The Contractor shall also provide guidance and assist the Information Security Branch in the development of required accreditation documentation and in its approval process. The Communication Assurance skills required under this statement of work and scope shall be derived from NSA/CSS Policy Manual 3-16 and all other directed policy as defined by the Government.

c. Contractor shall provide centralized reporting support on all CSA activities, as directed by the COR/ACOR.

313100169C0004 Page 8 of 52

d. Contractor shall provide centralized reporting and coordination support with Central Office of Record and COMSEC Manager during the CSA activity, as directed by the COR/ACOR.

e. Contractor shall coordinate with the COR/ACOR on remediation of CSA issues as a result of Security Test and Evaluation (ST&E).

f. Contractor shall coordinate and provide the response to CSA data calls, as directed by the COR/ACOR.

g. Contractor shall attend CSA meetings, coordinate and provide the response to CSA data calls as required by the COR/ACOR.

C.3.5 Manage COMSEC Programs, NRC Classified Networks, and Policy Enforcement

a. Contractor is responsible for supporting NRCs COMSEC systems and all of NRCs equipment related to and in support of NRCs Secure Information Systems and Networks.

b. Contractor shall support NRCs COMSEC Inventory Systems and all corresponding equipment. These include the following systems but not limited to: Key Management Infrastructure (KMI), COMSEC Accountability and Reporting Distribution Systems (CARDS), Local COMSEC Management System (LCMS)/Electronic Key Management System (EKMS).

c. Contractor shall perform all steps necessary, as stipulated in DoD and IC instructions to ensure NRCs secure IT systems and sites are accredited in accordance with current DoD and IC concept of operations for use with COMSEC equipment.

d. Contractor shall adhere to NRCs current CSA methodology. Any deviations from the current methodology will require approval by the COR/ACOR.

e. Contractor efforts will support multiple defined enclaves:

• One White Flint

• Two White Flint

• Three White Flint

• Regional Offices

f. Contractor shall assist NRCs Information Security Branch with security evaluations and provide detailed recommendations to the COR/ACOR on any current and new IT development efforts to ensure an efficient, successful CSA process.

g. Contractor shall have demonstrated experience and past performance supporting COMSEC Accounts, the handling of keying material and knowledge of Crypto Systems in order to minimize impact to the NRC COMSEC Program.

313100169C0004 Page 9 of 52 C.3.6 Manage Secure Communications Information Management Systems (SCIMS)

a. Contractor shall plan, design, and implement a vulnerability and patch Management program for the standardized system baseline supporting all of NRCs standalone classified systems.

b. Contractor shall be responsible for the complete system lifecycle of the NRC Standardized Baseline solution, to include systems administration, security control implementation, and maintenance to the baseline image.

c. Contractor shall be responsible for verifying that the standardized system baseline meets the Committee on National Security Systems (CNSS) and Risk Management Framework (RMF) requirements, industry best practices, and DISA Security Technical Implementation Guides (STIG).

The Contractor shall work with external auditors to certify these controls are met.

d. Contractor shall travel to support the SCIMS project as directed by COR /

ACOR.

e. Contractor shall maintain the SCIMS project asset management and equipment lifecycle for the GFE SCIMS equipment by providing software upgrade and equipment maintenance.

f. Contractor shall develop and maintain SCIMS supporting documentation.

C.4 Reserved C.5 Significant Event Labor Funding (SELF) (Optional CLINs)

SELF (Significant Event Labor Funding) is provided for use during a significant event that requires the contactors to be at NRC HQ for an extended period of time to include weekend work or on call for 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> support throughout the event for troubleshooting, installation or replacement of inoperative secure communications equipment or network systems. SELF is divided into two potential events:

1.) Optional CLIN - Inspection Preparation SELF is activated for unplanned security inspections that require the staff to work extended hours outside of the core hours of operation, to include nights and/or weekends in order to successfully prepare for and support the inspection.

2.) Optional CLIN - Declared Emergency SELF is activated in the event that the NRC declares a state of emergency, activating the headquarters operation center for more than a 24-hour period. In general, contractors will not be required to be on site 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> per day but may be called in to support specific off hour meetings and will be expected to support off hour outages of the aforementioned Secure Communication Systems.

313100169C0004 Page 10 of 52 C.6 Certification and License Requirements N/A C.7 Reporting Requirements C.7.1 Monthly Letter Status Report (MLSR)

The Contractor shall provide a Monthly Letter Status Report which consists of a technical progress report and financial status report. This report will be used by the Government to assess the adequacy of the resources proposed by the contractor to accomplish the work contained in this SOW and provide status of contractor progress in achieving tasks and producing deliverables. The report shall include contract summary information, work completed during the specified period, milestone schedule information, problem resolution, travel plans, and staff hour summary.

C.7.2 Final Report The Contractor shall provide a final report summarizing the work performed and the results and conclusions under this contract.

C.8 List of Deliverables Section # Deliverable Due Date Format Submit to C.6.1 MLSR 1 [Monthly Report] 20th of the Word CO/COR following month Document C.6.2 Final Report 2 [Final Report] 30 days prior to Word COR contract expiration Document C.9 Release of Publications N/A C.10 Place of Performance The work to be performed under this contract will be primarily performed at the following NRC offices:

NRC Headquarters Rockville MD King of Prussia, PA Region I Atlanta, GA Region II Lisle, IL Region III Arlington, TX Region IV C.11 Recognized Holidays

313100169C0004 Page 11 of 52 The Contractor shall adhere to all Federal Holidays as determined by the U.S.

Government for each fiscal/calendar year.

New Year's Day Martin Luther King, Jr. Birthday Washington's Birthday (Presidents Day)

Memorial Day Independence Day (4th of July)

Labor Day Columbus Day Veterans Day Thanksgiving Day Christmas Day C.12 Hours of Operation

a. For normal support at NRC Headquarters, the core hours of operation are defined as 0600 to 1700 Eastern Time, Monday through Friday, excluding government holidays for the NRC. Support services may be required outside of regular work hour schedule. In the event of inclement weather, natural disaster or any other reason that requires the Government to close, the Contractor shall be able to work remotely for a limited time in a limited unclassified capacity at the Government discretion.

b. Outside of the core hours of operation, the Contractor shall provide on-call personnel that can respond to any critical requirement. Contractor shall provide the COR/ACOR with points of contact for after-hours emergent requirements. This shall include both primary and alternate phone numbers.

C.13 Contractor Travel The Contractor may be authorized travel expenses consistent with the substantive provisions of the Federal Travel Regulation (FTR) and the limitation of funds specified in this contract. All travel requires written Government approval from the CO, unless otherwise delegated to the COR/ACOR. The Contractor may be authorized travel expenses to travel to NRCs Regional Offices to provide technical support and training on secure systems. The frequency of travel may be one visit to each regional office per year as directed by the COR/ACOR.

Travel will be reimbursed in accordance with FAR 31.205-46, Travel costs and the General Services Administrations Federal Travel Regulations at:

http://www.gsa.gov/portal/content/104790 C.14 Applicable Publications (Current Editions)

The Contractor shall comply with the following applicable regulations, publications, manuals, and local policies and procedures:

1. DoD Directive 8140.01 Cyberspace Workforce Management

2. Department of Defense (DoD) Instruction 8510.01 (RMF)

313100169C0004 Page 12 of 52

3. CNSSI 1254 (Risk Management Framework, Data Element Standards, and Reciprocity Process for National Security Systems)

4. NIST 800-37 (Guide for Applying the Risk Management Framework to Federal Information Systems).

C.15 Security Requirements The Contractor shall return NRC issued Personal Identification Verification (PIV) cards/badges to the COR/ACOR at the end of the contract period of performance. If a contractor personnel voluntarily leaves the company, the badge must be returned on the employees final day of employment. Once the badge is returned to the NRC, the contractor personnel will no longer have access to NRC buildings, sensitive automated information technology systems or data. Additional information related to the returning of PIV badges can be found in Management Directive 12.1, Section 5.

313100169C0004 Page 13 of 52 SECTION D - Packaging and Marking D.1 BRANDING The Contractor is required to use the statement below in any publications, presentations, articles, products, or materials funded under this contract, to the extent practical, in order to provide NRC with recognition for its involvement in and contribution to the project. If the work performed is funded entirely with NRC funds, then the contractor must acknowledge that information in its documentation/presentation.

Work Supported by the U.S. Nuclear Regulatory Commission (NRC), Office of Nuclear Security and Incident Response, under Contract number 31310019C0004.

(End of Clause)

313100169C0004 Page 14 of 52 SECTION E - Inspection and Acceptance E.1 INSPECTION AND ACCEPTANCE BY THE NRC (SEP 2013)

Inspection and acceptance of the deliverable items to be furnished hereunder shall be made by the NRC Contracting Officers Representative (COR) at the destination, accordance with FAR 52.247 F.o.b. Destination.

Contract Deliverables: See Attachment 1 Statement of Work Section C.7 for the list of the deliverables.

(End of Clause)

313100169C0004 Page 15 of 52 SECTION F - Deliveries or Performance F.1 PERIOD OF PERFORMANCE ALTERNATE This contract shall commence on June 15, 2019 and will expire on June 14, 2020. The term of this contract may be extended at the option of the Government for two (2) additional one-year periods.

Base Period: 06/17/2019 to 06/16/2020 Option Period 1: 06/17/2020 to 06/16/2021 Option Period 2: 06/17/2021 to 06/16/2022 (End of Clause)

F.2 PLACE OF DELIVERY-REPORTS The items to be furnished hereunder shall be delivered, with all charges paid by the Contractor, to NRC COR/Alternate COR.

(End of Clause)

313100169C0004 Page 16 of 52 SECTION G - Contract Administration Data G.1 CONTRACTING OFFICER REPRESENTATIVE (a) The contracting officer's authorized representative, hereinafter referred to as the COR, for this contract is:

Name: Richard Petrucelli Phone: 301-415-2100 Email: Richard.Petrucelli@nrc.gov Alternate COR Name: Nick Ballam Phone: 301-415-3516 Email: Nick.Ballam@nrc.gov (b) The Contractor Officer shall:

(b) Performance of the work under this contract is subject to the technical direction of the COR/ACOR. The term technical direction is defined to include the following:

(1) Provide advice and guidance to the contractor in the preparation of drawings, specifications, or technical portions of the work description.

(2) Review and, where required by contract, approve technical reports, drawings, specifications, and technical information to be delivered by the contractor to the Government under the contract.

(c) Technical direction must be within the general statement of work stated in the contract. The COR/ACOR does not have the authority to and may not issue any technical direction which:

(1) Constitutes an assignment of work outside the general scope of the contract.

(2) Constitutes a change as defined in the "Changes" clause of this contract.

(3) In any way causes an increase or decrease in the total estimated contract cost or the time required for contract performance.

(4) Changes any of the expressed terms, conditions, or specifications of the contract.

(5) Terminates the contract, settles any claim or dispute arising under the contract, or issues any unilateral directive whatever.

(d) All technical directions must be issued in writing by the COR/ACOR or must be confirmed by the COR/ACOR in writing within ten (10) working days after verbal issuance.

(e) The contractor shall proceed promptly with the performance of technical directions duly issued by the COR/ACOR in the manner prescribed by this clause and within the COR/ACORs authority under the provisions of this clause.

313100169C0004 Page 17 of 52 (f) If, in the opinion of the contractor, any instruction or direction issued by the COR/ACOR is within one of the categories defined in paragraph (c) of this section, the contractor may not proceed but shall notify the contracting officer in writing within five (5) working days after the receipt of any instruction or direction and shall request that contracting officer to modify the BPA Call accordingly. Upon receiving the notification from the contractor, the contracting officer shall issue an appropriate contract modification or advise the contractor in writing that, in the contracting officer's opinion, the technical direction is within the scope of this article and does not constitute a change under the "Changes" clause.

(g) Any unauthorized commitment or direction issued by the COR/ACOR or others may result in an unnecessary delay in the contractor's performance and may even result in the contractor expending funds for unallowable costs under the contract.

(h) A failure of the parties to agree upon the nature of the instruction or direction or upon the contract action to be taken with respect to the instruction or direction is subject to 52.233 Disputes.

(i) In addition to providing technical direction as defined in paragraph (b) of the section, the contract COR/ACOR shall:

(1) Monitor the contractor's technical progress, including surveillance and assessment of performance, and recommend to the contracting officer changes in requirements.

(2) Assist the contractor in the resolution of technical problems encountered during performance.

(3) Review all costs requested for reimbursement by the contractor and submit to the contracting officer recommendations for approval, disapproval, or suspension of payment for supplies and services required under this contract.

(End of Clause)

G.2 REGISTRATION IN FEDCONNECT (JULY 2014)

The Nuclear Regulatory Commission (NRC) uses Compusearch Software Systems secure and auditable two-way web portal, FedConnect, to communicate with vendors and contractors. FedConnect provides bi-directional communication between the vendor/contractor and the NRC throughout pre-award, award, and post-award acquisition phases. Therefore, in order to do business with the NRC, vendors and contractors must register to use FedConnect at https://www.fedconnect.net/FedConnect. The individual registering in FedConnect must have authority to bind the vendor/contractor. There is no charge for using FedConnect. Assistance with FedConnect is provided by Compusearch Software Systems, not the NRC. FedConnect contact and assistance information is provided on the FedConnect web site at https://www.fedconnect.net/FedConnect.

G.3 ELECTRONIC PAYMENT (DEC 2017)

The Debt Collection Improvement Act of 1996 requires that all payments except IRS tax refunds be made by Electronic Funds Transfer. Payment shall be made in accordance

313100169C0004 Page 18 of 52 with FAR 52.232-33, entitled Payment by Electronic Funds Transfer-System for Award Management.

To receive payment, the contractor shall prepare invoices in accordance with NRCs Billing Instructions. Claims shall be submitted through the Invoice Processing Platform (IPP) (https://www.ipp.gov/). Back up documentation shall be included as required by the NRCs Billing Instructions.

(End of Clause)

313100169C0004 Page 19 of 52 SECTION H - Special Contract Requirements H.1 52.219-11 SPECIAL 8(A) CONTRACT CONDITIONS. (FEB 1990)

The Small Business Administration (SBA) agrees to the following:

(a) To furnish the supplies or services set forth in this contract according to the specifications and the terms and conditions hereof by subcontracting with an eligible concern pursuant to the provisions of section 8(a) of the Small Business Act, as amended (15 U.S.C. 637(a)).

(b) That in the event SBA does not award a subcontract for all or a part of the work hereunder, this contract may be terminated either in whole or in part without cost to either party.

(c) Except for novation agreements and advance payments, delegate to the United States Nuclear Regulatory Commission the responsibility for administering the subcontract to be awarded hereunder with complete authority to take any action on behalf of the Government under the terms and conditions of the subcontract; provided, however, that the United States Nuclear Regulatory Commission shall give advance notice to the SBA before it issues a final notice terminating the right of a subcontractor to proceed with further performance, either in whole or in part, under the subcontract for default or for the convenience of the Government.

(d) That payments to be made under any subcontract awarded under this contract will be made directly to the subcontractor by the United States Nuclear Regulatory Commission.

(e) That the subcontractor awarded a subcontract hereunder shall have the right of appeal from decisions of the Contracting Officer cognizable under the "Disputes" clause of said subcontract.

(f) To notify the United States Nuclear Regulatory Commission Contracting Officer immediately upon notification by the subcontractor that the owner or owners upon whom 8(a) eligibilities was based plan to relinquish ownership or control of the concern.

H.2 52.219-12 SPECIAL 8(A) SUBCONTRACT CONDITIONS (FEB1990)

(a) The Small Business Administration (SBA) has entered into Contract No.

31310019C0004 with the U.S. Nuclear Regulatory Commission to furnish the supplies or services as described therein. A copy of the contract is attached hereto and made a part hereof.

(b) The Clark Baty Associated LLC., hereafter referred to as the subcontractor, agrees and acknowledges as follows:

(1) That it will, for and on behalf of the SBA, fulfill and perform all of the requirements of Contract No. 31310019C0004 for the consideration stated

313100169C0004 Page 20 of 52 therein and that it has read and is familiar with each and every part of the contract.

(2) That the SBA has delegated responsibility, except for novation agreements and advance payments, for the administration of this subcontract to the U.S. Nuclear Regulatory Commission with complete authority to take any action on behalf of the Government under the terms and conditions of this contract.

(3) That it will not subcontract the performance of any of the requirements of this subcontract to any lower tier subcontractor without the prior written approval of the SBA and the designated Contracting Officer of the U.S.

Nuclear Regulatory Commission.

(4) That is will notify the U.S. Nuclear Regulatory Commission Contracting Officer in writing immediately upon entering an agreement (either oral or written) to transfer all or part of its stock or other ownership interest to any other party.

(c) Payments, including any progress payments under this subcontract, will be made directly to the subcontractor by the U.S. Nuclear Regulatory Commission.

H.3 52.219-17 SECTION 8(A) AWARD. (JAN 2017)

(a) By execution of a contract, the Small Business Administration (SBA) agrees to the following:

(1) To furnish the supplies or services set forth in the contract according to the specifications and the terms and conditions by subcontracting with the Offeror who has been determined an eligible concern pursuant to the provisions of section 8(a) of the Small Business Act, as amended (15 U.S.C. 637(a)).

(2) Except for novation agreements, delegates to the Nuclear Regulatory Commission (NRC) the responsibility for administering the contract with complete authority to take any action on behalf of the Government under the terms and conditions of the contract; provided, however that the contracting agency shall give advance notice to the SBA before it issues a final notice terminating the right of the subcontractor to proceed with further performance, either in whole or in part, under the contract.

(3) That payments to be made under the contract will be made directly to the subcontractor by the contracting activity.

(4) To notify the NRC Contracting Officer immediately upon notification by the subcontractor that the owner or owners upon whom 8(a) eligibility was based plan to relinquish ownership or control of the concern.

(5) That the subcontractor awarded a subcontract hereunder shall have the right of appeal from decisions of the cognizant Contracting Officer under the "Disputes" clause of the subcontract.

313100169C0004 Page 21 of 52 (b) The offeror/subcontractor agrees and acknowledges that it will, for and on behalf of the SBA, fulfill and perform all of the requirements of the contract.

(c) The offeror/subcontractor agrees that it will not subcontract the performance of any of the requirements of this subcontract to any lower tier subcontractor without the prior written approval of the SBA and the cognizant Contracting Officer of the NRC.

(End of clause)

H.4 GOVERNMENT FURNISHED EQUIPMENT/PROPERTY (a) The NRC will provide the contractor with the following items for use under this contract:

1. NRC will provide on-site office space and furnishings (workstation, furniture, chairs, and telephone) for Contractor personnel. Additionally, the NRC will provide hardware and software to include appropriate computers/workstations and network equipment and connections for Contractor personnel located in NRC space. NRC will also provide paper, pencils and related office supplies for the on-site staff. Employees on NRC sites may use NRC copying machines and facsimile transmission capabilities as required, on a limited, non-interfering basis and exclusively for official business.

2. The NRC will provide Contractor with all available documentation, software, manuals, diagnostic routines, warranty information, equipment configurations and any other available information necessary to perform service under this contract.

All documentation provided to Contractor will remain the property of the NRC.

(b) Only the equipment/property listed above in the quantities shown will be provided by the Government. The contractor shall be responsible and accountable for all Government property provided under this contract and shall comply with the provisions of the FAR Government Property Clause under this contract and FAR Subpart 45.5, as in effect on the date of this contract. The contractor shall investigate and provide written notification to the NRC Contracting Officer (CO) and the NRC Division of Facilities and Security, Physical Security Branch of all cases of loss, damage, or destruction of Government property in its possession or control not later than 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> after discovery.

The contractor must report stolen Government property to the local police and a copy of the police report must be provided to the CO and to the Division of Facilities and Security, Office of Administration.

(d) All other equipment/property required in performance of the contract shall be furnished by the Contractor.

(End of Clause)

H.5 AWARD NOTIFICATION AND COMMITMENT OF PUBLIC FUNDS The contracting officer is the only individual who can legally obligate funds or commit the NRC to the expenditure of public funds in connection with this procurement. This means that unless provided in a contract document or specifically authorized by the contracting officer, NRC technical personnel may not issue contract modifications, give formal

313100169C0004 Page 22 of 52 contractual commitments, or otherwise bind, commit, or obligate the NRC contractually.

Informal unauthorized commitments, which do not obligate the NRC and do not entitle the contractor to payment, may include:

(1) Encouraging a potential contractor to incur costs prior to receiving a contract; (2) Requesting or requiring a contractor to make changes under a contract without formal contract modifications; (3) Encouraging a contractor to incur costs under a cost-reimbursable contract in excess of those costs contractually allowable; and (4) Committing the Government to a course of action with regard to a potential contract, contract change, claim, or dispute.

(End of Clause)

H.6 LIMITATION OF FUNDS (a) The parties estimate that performance of this contract will not cost the Government more than the estimated cost specified in the Schedule. The Contractor agrees to use its best efforts to perform the work specified in the Schedule and all obligations under this contract within the estimated cost.

(b) The Schedule specifies the amount presently available for payment by the Government and allotted to this contract, the items covered, and the period of performance it is estimated the allotted amount will cover. The parties contemplate that the Government will allot additional funds incrementally to the contract up to the full estimated cost to the Government specified in the Schedule. The Contractor agrees to perform, or have performed, work on the contract up to the point at which the total amount paid and payable by the Government under the contract approximates but does not exceed the total amount actually allotted by the Government to the contract.

(c) The Contractor shall notify the Contracting Officer in writing whenever it has reason to believe that the costs it expects to incur under this contract in the next 60 days, when added to all costs previously incurred, will exceed 75 percent of the total amount so far allotted to the contract by the Government. The notice shall state the estimated amount of additional funds required to continue performance for the period specified in the Schedule.

(d) Sixty days before the end of the period specified in the Schedule, the Contractor shall notify the Contracting Officer in writing of the estimated amount of additional funds, if any, required to continue timely performance under the contract or for any further period specified in the Schedule or otherwise agreed upon, and when the funds will be required.

(e) If, after notification, additional funds are not allotted by the end of the period specified in the Schedule or another agreed-upon date, upon the Contractors written request

313100169C0004 Page 23 of 52 the Contracting Officer will terminate this contract on that date in accordance with the provisions of the Termination clause of this contract. If the Contractor estimates that the funds available will allow it to continue to discharge its obligations beyond that date, it may specify a later date in its request, and the Contracting Officer may terminate this contract on that later date.

(f) Except as required by other provisions of this contract, specifically citing and stated to be an exception to this clause --

(1) The Government is not obligated to reimburse the Contractor for costs incurred in excess of the total amount allotted by the Government to this contract; and (2) The Contractor is not obligated to continue performance under this contract (including actions under the Termination clause of this contract) or otherwise incur costs in excess of the amount then allotted to the contract by the Government.

(g) The estimated cost shall be increased to the extent that the amount allotted by the Government.

(h) No notice, communication, or representation in any form other than that specified in subparagraph (f)(2) above, or from any person other than the Contracting Officer, shall affect the amount allotted by the Government to this contract. In the absence of the specified notice, the Government is not obligated to reimburse the Contractor for any costs in excess of the total amount allotted by the Government to this contract, whether incurred during the course of the contract or as a result of termination.

(i) When and to the extent that the amount allotted by the Government to the contract is increased, any costs the Contractor incurs before the increase that are in excess the amount previously allotted by the Government unless the Contracting Officer issues a termination or other notice and directs that the increase is solely to cover termination or other specified expenses.

(j) Change orders shall not be considered an authorization to exceed the amount allotted by the Government specified in the Schedule, unless they contain a statement increasing the amount allotted.

(k) Nothing in this clause shall affect the right of the Government to terminate this contract. If this contract is terminated, the Government and the Contractor shall negotiate an equitable distribution of all property produced or purchased under the contract, based upon the share of costs incurred by each.

H.7 CONTRACTOR RESPONSIBILITY FOR PROTECTING PERSONALLY IDENTIFIABLE INFORMATION (PII)

In accordance with the Office of Management and Budget's guidance to Federal agencies and the Nuclear Regulatory Commission's (NRC) implementing policy and procedures, a contractor (including subcontractors and contractor employees), who performs work on behalf of the NRC, is responsible for protecting, from unauthorized access or disclosure, personally identifiable information (PII) that may be provided,

313100169C0004 Page 24 of 52 developed, maintained, collected, used, or disseminated, whether in paper, electronic, or other format, during performance of this contract.

A contractor who has access to NRC owned or controlled PII, whether provided to the contractor by the NRC or developed, maintained, collected, used, or disseminated by the contractor during the course of contract performance, must comply with the following requirements:

(1) General. In addition to implementing the specific requirements set forth in this clause, the contractor must adhere to all other applicable NRC guidance, policy and requirements for the handling and protection of NRC owned or controlled PII. The contractor is responsible for making sure that it has an adequate understanding of such guidance, policy and requirements.

(2) Use, Ownership, and Nondisclosure. A contractor may use NRC owned or controlled PII solely for purposes of this contract and may not collect or use such PII for any purpose outside the contract without the prior written approval of the NRC Contracting Officer. The contractor must restrict access to such information to only those contractor employees who need the information to perform work under this contract and must ensure that each such contractor employee (including subcontractors' employees) signs a nondisclosure agreement, in a form suitable to the NRC Contracting Officer, prior to being granted access to the information. The NRC retains sole ownership and rights to its PII. Unless the contract states otherwise, upon completion of the contract, the contractor must turn over all PII in its possession to the NRC and must certify in writing that it has not retained any NRC owned or controlled PII except as otherwise authorized in writing by the NRC Contracting Officer.

(3) Security Plan. When applicable, and unless waived in writing by the NRC Contracting Officer, the contractor must work with the NRC to develop and implement a security plan setting forth adequate procedures for the protection of NRC owned or controlled PII as well as the procedures which the contractor must follow for notifying the NRC in the event of any security breach. The plan will be incorporated into the contract and must be implemented and followed by the contractor once it has been approved by the NRC Contracting Officer. If the contract does not include a security plan at the time of contract award, a plan must be submitted for the approval of the NRC Contracting Officer within 30 days after contract award.

(4) Breach Notification. The contractor must immediately notify the NRC Contracting Officer and the NRC Contracting Officers Representative (COR) upon discovery of any suspected or confirmed breach in the security of NRC owned or controlled PII.

(5) Legal Demands for Information. If a legal demand is made for NRC owned or controlled PII (such as by subpoena), the contractor must immediately notify the NRC Contracting Officer and the NRC Contracting Officers Representative (COR). After notification, the NRC will determine whether and to what extent to comply with the legal demand. The Contracting Officer will then notify the contractor in writing of the determination and such notice will indicate the extent of disclosure authorized, if any.

The contractor may only release the information specifically demanded with the written permission of the NRC Contracting Officer.

313100169C0004 Page 25 of 52 (6) Audits. The NRC may audit the contractor's compliance with the requirements of this clause, including through the use of online compliance software.

(7) Flow-down. The prime contractor will flow this clause down to subcontractors that would be covered by any portion of this clause, as if they were the prime contractor.

(8) Remedies:

(a) The contractor is responsible for implementing and maintaining adequate security controls to prevent the loss of control or unauthorized disclosure of NRC owned or controlled PII in its possession. Furthermore, the contractor is responsible for reporting any known or suspected loss of control or unauthorized access to PII to the NRC in accordance with the provisions set forth in Article 4 above.

(b) Should the contractor fail to meet its responsibilities under this clause, the NRC reserves the right to take appropriate steps to mitigate the contractor's violation of this clause. This may include, at the sole discretion of the NRC, termination of the subject contract.

(9) Indemnification. Notwithstanding any other remedies available to the NRC, the contractor will indemnify the NRC against all liability (including costs and fees) for any damages arising out of violations of this clause.

(End of Clause)

H.8 AUTHORITY TO USE GOVERNMENT PROVIDED SPACE AT NRC HEADQUARTERS (SEP 2013)

Prior to occupying any Government provided space at NRC Headquarters in Rockville Maryland, the Contractor shall obtain written authorization to occupy specifically designated government space, via the NRC Contracting Officers Representative (COR),

from the Chief, Space Design Branch, Office of Administration. Failure to obtain this prior authorization can result in one, or a combination, of the following remedies as deemed appropriate by the Contracting Officer.

(1) Rental charge for the space occupied will be deducted from the invoice amount due the Contractor (2) Removal from the space occupied (3) Contract Termination (End of Clause)

H.9 RULES OF BEHAVIOR FOR AUTHORIZED COMPUTER USE In accordance with Appendix III, "Security of Federal Automated Information Resources," to Office of Management and Budget (OMB) Circular A-130, "Management of Federal Information Resources," NRC has established rules of behavior for individual users who access all IT computing resources maintained and operated by the NRC or on behalf of the NRC. In response to the direction from OMB, NRC has issued the "Agency-wide Rules of Behavior for Authorized Computer Use" policy, hereafter referred

313100169C0004 Page 26 of 52 to as the rules of behavior. The rules of behavior for authorized computer use will be provided to NRC computer users, including contractor personnel, as part of the annual computer security awareness course.

The rules of behavior apply to all NRC employees, contractors, vendors, and agents (users) who have access to any system operated by the NRC or by a contractor or outside entity on behalf of the NRC. This policy does not apply to licensees. The next revision of Management Directive 12.5, "NRC Automated Information Security Program,"

will include this policy. The rules of behavior can be viewed at http://www.internal.nrc.gov/CSO/documents/ROB.pdf or use NRCs external Web-based ADAMS at http://wba.nrc.gov:8080/ves/ (Under Advanced Search, type ML082190730 in the Query box).

The rules of behavior are effective immediately upon acknowledgement of them by the person who is informed of the requirements contained in those rules of behavior. All current contractor users are required to review and acknowledge the rules of behavior as part of the annual computer security awareness course completion. All new NRC contractor personnel will be required to acknowledge the rules of behavior within one week of commencing work under this contract and then acknowledge as current users thereafter. The acknowledgement statement can be viewed at http://www.internal.nrc.gov/CSO/documents/ROB_Ack.pdf or use NRCs external Web-based ADAMS at http://wba.nrc.gov:8080/ves/ (Under Advanced Search, type ML082190730 in the Query box).

The NRC Computer Security Office will review and update the rules of behavior annually beginning in FY 2011 by December 31st of each year. Contractors shall ensure that their personnel to which this requirement applies acknowledge the rules of behavior before beginning contract performance and, if the period of performance for the contract lasts more than one year, annually thereafter. Training on the meaning and purpose of the rules of behavior can be provided for contractors upon written request to the NRC Contracting Officers Representative (COR).

The contractor shall flow down this clause into all subcontracts and other agreements that relate to performance of this contract/order if such subcontracts/agreements will authorize access to NRC electronic and information technology (EIT) as that term is defined in FAR 2.101.

(End of Clause)

H.10 ANNUAL AND FINAL CONTRACTOR PERFORMANCE EVALUATIONS Annual and final evaluations of contractor performance under this contract will be prepared in accordance with FAR Subpart 42.15, "Contractor Performance Information,"

normally at or near the time the contractor is notified of the NRC's intent to exercise the contract option. If the multi-year contract does not have option years, then an annual evaluation will be prepared N/A. Final evaluations of contractor performance will be prepared at the expiration of the contract during the contract closeout process.

The Contracting Officer will transmit the NRC Contracting Officers Representatives (COR) annual and final contractor performance evaluations to the contractor's Project Manager, unless otherwise instructed by the contractor. The contractor will be permitted

313100169C0004 Page 27 of 52 thirty days to review the document and submit comments, rebutting statements, or additional information.

Where a contractor concurs with, or takes no exception to an annual performance evaluation, the Contracting Officer will consider such evaluation final and releasable for source selection purposes. Disagreements between the parties regarding a performance evaluation will be referred to an individual one level above the Contracting Officer, whose decision will be final.

The Contracting Officer will send a copy of the completed evaluation report, marked "Source Selection Information, to the contractor's Project Manager for their records as soon as practicable after it has been finalized. The completed evaluation report also will be used as a tool to improve communications between the NRC and the contractor and to improve contract performance.

The completed annual performance evaluation will be used to support future award decisions in accordance with FAR 42.1502 and 42.1503. During the period the information is being used to provide source selection information, the completed annual performance evaluation will be released to only two parties - the Federal government personnel performing the source selection evaluation and the contractor under evaluation if the contractor does not have a copy of the report already.

(End of Clause)

313100169C0004 Page 28 of 52 SECTION I - Contract Clauses I.1 52.204-13 SYSTEM FOR AWARD MANAGEMENT MAINTENANCE. (OCT 2018)

(a) Definitions. As used in this clause-Electronic Funds Transfer (EFT) indicator means a four-character suffix to the unique entity identifier. The suffix is assigned at the discretion of the commercial, nonprofit, or Government entity to establish additional System for Award Management (SAM) records for identifying alternative EFT accounts (see subpart 32.11) for the same entity.

Registered in the System for Award Management (SAM) means that-(1) The Contractor has entered all mandatory information, including the unique entity identifier and the EFT indicator (if applicable), the Commercial and Government Entity (CAGE) code, as well as data required by the Federal Funding Accountability and Transparency Act of 2006 (see subpart 4.14), into SAM; (2) The Contractor has completed the Core, Assertions, Representations and Certifications, and Points of Contact sections of the registration in SAM; (3) The Government has validated all mandatory data fields, to include validation of the Taxpayer Identification Number (TIN) with the Internal Revenue Service (IRS). The Contractor will be required to provide consent for TIN validation to the Government as a part of the SAM registration process; and (4) The Government has marked the record "Active".

System for Award Management (SAM) means the primary Government repository for prospective Federal awardee and Federal awardee information and the centralized Government system for certain contracting, grants, and other assistance-related processes. It includes-(1) Data collected from prospective Federal awardees required for the conduct of business with the Government; (2) Prospective contractor-submitted annual representations and certifications in accordance with FAR subpart 4.12; and (3) Identification of those parties excluded from receiving Federal contracts, certain subcontracts, and certain types of Federal financial and non-financial assistance and benefits.

Unique entity identifier means a number or other identifier used to identify a specific commercial, nonprofit, or Government entity. See www.sam.gov for the designated entity for establishing unique entity identifiers.

(b) If the solicitation for this contract contained the provision 52.204-7 with its Alternate I, and the Contractor was unable to register prior to award, the

313100169C0004 Page 29 of 52 Contractor shall be registered in SAM within 30 days after award or before three days prior to submission of the first invoice, whichever occurs first.

(c) The Contractor shall maintain registration in SAM during contract performance and through final payment of any contract, basic agreement, basic ordering agreement, or blanket purchasing agreement. The Contractor is responsible for the currency, accuracy and completeness of the data within SAM, and for any liability resulting from the Government's reliance on inaccurate or incomplete data. To remain registered in SAM after the initial registration, the Contractor is required to review and update on an annual basis, from the date of initial registration or subsequent updates, its information in SAM to ensure it is current, accurate and complete. Updating information in SAM does not alter the terms and conditions of this contract and is not a substitute for a properly executed contractual document.

(d)(1)(i) If a Contractor has legally changed its business name or "doing business as" name (whichever is shown on the contract), or has transferred the assets used in performing the contract, but has not completed the necessary requirements regarding novation and change-of-name agreements in subpart 42.12, the Contractor shall provide the responsible Contracting Officer a minimum of one business day's written notification of its intention to-(A) Change the name in SAM; (B) Comply with the requirements of subpart 42.12 of the FAR; and (C) Agree in writing to the timeline and procedures specified by the responsible Contracting Officer. The Contractor shall provide with the notification sufficient documentation to support the legally changed name.

(ii) If the Contractor fails to comply with the requirements of paragraph (d)(1)(i) of this clause, or fails to perform the agreement at paragraph (d)(1)(i)(C) of this clause, and, in the absence of a properly executed novation or change-of-name agreement, the SAM information that shows the Contractor to be other than the Contractor indicated in the contract will be considered to be incorrect information within the meaning of the "Suspension of Payment" paragraph of the electronic funds transfer (EFT) clause of this contract.

(2) The Contractor shall not change the name or address for EFT payments or manual payments, as appropriate, in SAM record to reflect an assignee for the purpose of assignment of claims (see FAR subpart 32.8, Assignment of Claims). Assignees shall be separately registered in SAM. Information provided to the Contractor's SAM record that indicates payments, including those made by EFT, to an ultimate recipient other than that Contractor will be considered to be incorrect information within the meaning of the "Suspension of Payment" paragraph of the EFT clause of this contract.

313100169C0004 Page 30 of 52 (3) The Contractor shall ensure that the unique entity identifier is maintained with the entity designated at www.sam.gov for establishment of the unique entity identifier throughout the life of the contract. The Contractor shall communicate any change to the unique entity identifier to the Contracting Officer within 30 days after the change, so an appropriate modification can be issued to update the data on the contract. A change in the unique entity identifier does not necessarily require a novation be accomplished.

(e) Contractors may obtain additional information on registration and annual confirmation requirements at https://www.sam.gov.

(End of clause)

I.2 52.212-5 CONTRACT TERMS AND CONDITIONS REQUIRED TO IMPLEMENT STATUTES OR EXECUTIVE ORDERS - COMMERCIAL ITEMS. (JAN 2019)

(a) The Contractor shall comply with the following Federal Acquisition Regulation (FAR) clauses, which are incorporated in this contract by reference, to implement provisions of law or Executive orders applicable to acquisitions of commercial items:

(1) 52.203-19, Prohibition on Requiring Certain Internal Confidentiality Agreements or Statements (JAN 2017) (section 743 of Division E, Title VII, of the Consolidated and Further Continuing Appropriations Act, 2015 (Pub. L. 113-235) and its successor provisions in subsequent appropriations acts (and as extended in continuing resolutions)).

(2) 52.204-23, Prohibition on Contracting for Hardware, Software, and Services Developed or Provided by Kaspersky Lab and Other Covered Entities (JUL 2018) (Section 1634 of Pub. L. 115-91).

(3) 52.209-10, Prohibition on Contracting with Inverted Domestic Corporations (NOV 2015).

(4) 52.233-3, Protest After Award (AUG 1996) (31 U.S.C. 3553).

(5) 52.233-4, Applicable Law for Breach of Contract Claim (OCT 2004)

(Public Laws 108-77 and 108-78 (19 U.S.C. 3805 note)).

(b) The Contractor shall comply with the FAR clauses in this paragraph (b) that the Contracting Officer has indicated as being incorporated in this contract by reference to implement provisions of law or Executive orders applicable to acquisitions of commercial items: (Contracting Officer check as appropriate.)

[X] (1) 52.203-6, Restrictions on Subcontractor Sales to the Government (SEP 2006), with Alternate I (OCT 1995) (41 U.S.C. 4704 and 10 U.S.C.

2402).

[ ] (2) 52.203-13, Contractor Code of Business Ethics and Conduct (OCT 2015) (41 U.S.C. 3509).

313100169C0004 Page 31 of 52

[ ] (3) 52.203-15, Whistleblower Protections under the American Recovery and Reinvestment Act of 2009 (JUN 2010) (Section 1553 of Pub. L. 111-5). (Applies to contracts funded by the American Recovery and Reinvestment Act of 2009.)

[X] (4) 52.204-10, Reporting Executive Compensation and First-Tier Subcontract Awards (OCT 2018) (Pub. L. 109-282) (31 U.S.C. 6101 note).

(5) (Reserved)

[X] (6) 52.204-14, Service Contract Reporting Requirements (OCT 2016)

(Pub. L. 111-117, section 743 of Div. C).

[ ] (7) 52.204-15, Service Contract Reporting Requirements for Indefinite-Delivery Contracts (OCT 2016) (Pub. L. 111-117, section 743 of Div. C).

[ ] (8) 52.209-6, Protecting the Government's Interest When Subcontracting with Contractors Debarred, Suspended, or Proposed for Debarment. (OCT 2015) (31 U.S.C. 6101 note).

[ ] (9) 52.209-9, Updates of Publicly Available Information Regarding Responsibility Matters (OCT 2018) (41 U.S.C. 2313).

[ ] (10) (Reserved)

[ ] (11)(i) 52.219-3, Notice of HUBZone Set-Aside or Sole-Source Award (NOV 2011) (15 U.S.C. 657a).

[ ] (ii) Alternate I (NOV 2011) of 52.219-3.

[ ] (12)(i) 52.219-4, Notice of Price Evaluation Preference for HUBZone Small Business Concerns (OCT 2014) (if the offeror elects to waive the preference, it shall so indicate in its offer) (15 U.S.C. 657a).

[ ] (ii) Alternate I (JAN 2011) of 52.219-4.

[ ] (13) (Reserved)

[X] (14)(i) 52.219-6, Notice of Total Small Business Set-Aside (NOV 2011) (15 U.S.C. 644).

[ ] (ii) Alternate I (NOV 2011).

[ ] (iii) Alternate II (NOV 2011).

[ ] (15)(i) 52.219-7, Notice of Partial Small Business Set-Aside (JUN 2003) (15 U.S.C. 644).

[ ] (ii) Alternate I (OCT 1995) of 52.219-7.

[ ] (iii) Alternate II (MAR 2004) of 52.219-7.

313100169C0004 Page 32 of 52

[X] (16) 52.219-8, Utilization of Small Business Concerns (OCT 2018) (15 U.S.C. 637(d)(2) and (3)).

[ ] (17)(i) 52.219-9, Small Business Subcontracting Plan (AUG 2018) (15 U.S.C. 637(d)(4)).

[ ] (ii) Alternate I (NOV 2016) of 52.219-9.

[ ] (iii) Alternate II (NOV 2016) of 52.219-9.

[ ] (iv) Alternate III (NOV 2016) of 52.219-9.

[ ] (v) Alternate IV (AUG 2018) of 52.219-9.

[ ] (18) 52.219-13, Notice of Set-Aside of Orders (NOV 2011) (15 U.S.C.

644(r)).

[X] (19) 52.219-14, Limitations on Subcontracting (JAN 2017) (15 U.S.C.

637(a)(14)).

[ ] (20) 52.219-16, Liquidated Damages-Subcontracting Plan (JAN 1999)

(15 U.S.C. 637(d)(4)(F)(i)).

[ ] (21) 52.219-27, Notice of Service-Disabled Veteran-Owned Small Business Set-Aside (NOV 2011) (15 U.S.C. 657f).

[ ] (22) 52.219-28, Post Award Small Business Program Rerepresentation (JUL 2013) (15 U.S.C. 632(a)(2)).

[ ] (23) 52.219-29, Notice of Set-Aside for, or Sole Source Award to, Economically Disadvantaged Women-Owned Small Business Concerns (DEC 2015) (15 U.S.C. 637(m)).

[ ] (24) 52.219-30, Notice of Set-Aside for, or Sole Source Award to, Women-Owned Small Business Concerns Eligible Under the Women-Owned Small Business Program (DEC 2015) (15 U.S.C. 637(m)).

[X] (25) 52.222-3, Convict Labor (JUN 2003) (E.O. 11755).

[ ] (26) 52.222-19, Child Labor-Cooperation with Authorities and Remedies (JAN 2018) (E.O. 13126).

[ ] (27) 52.222-21, Prohibition of Segregated Facilities (APR 2015).

[ ] (28)(i) 52.222-26, Equal Opportunity (SEP 2016) (E.O. 11246).

[ ] (ii) Alternate I (FEB 1999) of 52.222-26.

[ ] (29)(i) 52.222-35, Equal Opportunity for Veterans (OCT 2015) (38 U.S.C. 4212).

[ ] (ii) Alternate I (JUL 2014) of 52.222-35.

313100169C0004 Page 33 of 52

[ ] (30)(i) 52.222-36, Equal Opportunity for Workers with Disabilities (JUL 2014) (29 U.S.C. 793).

[ ] (ii) Alternate I (JUL 2014) of 52.222-36.

[ ] (31) 52.222-37, Employment Reports on Veterans (FEB 2016) (38 U.S.C. 4212).

[ ] (32) 52.222-40, Notification of Employee Rights Under the National Labor Relations Act (DEC 2010) (E.O. 13496).

[ ] (33)(i) 52.222-50, Combating Trafficking in Persons (JAN 2019) (22 U.S.C. chapter 78 and E.O. 13627).

[ ] (ii) Alternate I (MAR 2015) of 52.222-50 (22 U.S.C. chapter 78 and E.O. 13627).

[ ] (34) 52.222-54, Employment Eligibility Verification (OCT 2015). (E. O.

12989). (Not applicable to the acquisition of commercially available off-the-shelf items or certain other types of commercial items as prescribed in 22.1803.)

[ ] (35)(i) 52.223-9, Estimate of Percentage of Recovered Material Content for EPA-Designated Items (MAY 2008) (42 U.S.C.

6962(c)(3)(A)(ii)). (Not applicable to the acquisition of commercially available off-the-shelf items.)

[ ] (ii) Alternate I (MAY 2008) of 52.223-9 (42 U.S.C.

6962(i)(2)(C)). (Not applicable to the acquisition of commercially available off-the-shelf items.)

[ ](36) 52.223-11, Ozone-Depleting Substances and High Global Warming Potential Hydrofluorocarbons (JUN 2016) (E.O. 13693).

[ ](37) 52.223-12, Maintenance, Service, Repair, or Disposal of Refrigeration Equipment and Air Conditioners (JUN 2016) (E.O. 13693).

[ ] (38)(i) 52.223-13, Acquisition of EPEAT-Registered Imaging Equipment (JUN 2014) (E.O.s 13423 and 13514).

[ ] (ii) Alternate I (OCT 2015) of 52.223-13.

[ ] (39)(i) 52.223-14, Acquisition of EPEAT-Registered Televisions (JUN 2014) (E.O.s 13423 and 13514).

(ii) Alternate I (JUN 2014) of 52.223-14.

[ ] (40) 52.223-15, Energy Efficiency in Energy-Consuming Products (DEC 2007) (42 U.S.C. 8259b).

[ ] (41)(i) 52.223-16, Acquisition of EPEAT-Registered Personal Computer Products (OCT 2015) (E.O.s 13423 and 13514).

313100169C0004 Page 34 of 52

[ ](ii) Alternate I (JUN 2014) of 52.223-16.

[X] (42) 52.223-18, Encouraging Contractor Policies to Ban Text Messaging While Driving (AUG 2011)

[ ] (43) 52.223-20, Aerosols (JUN 2016) (E.O. 13693).

[ ] (44) 52.223-21, Foams (JUN 2016) (E.O. 13693).

[ ] (45)(i) 52.224-3, Privacy Training (JAN 2017) (5 U.S.C. 552a).

[ ] (ii) Alternate I (JAN 2017) of 52.224-3.

[ ] (46) 52.225-1, Buy American-Supplies (MAY 2014) (41 U.S.C. chapter 83).

[ ] (47)(i) 52.225-3, Buy American-Free Trade Agreements-Israeli Trade Act (MAY 2014) (41 U.S.C. chapter 83, 19 U.S.C. 3301 note, 19 U.S.C.

2112 note, 19 U.S.C. 3805 note, 19 U.S.C. 4001 note, Pub. L. 103-182, 108-77, 108-78, 108-286, 108-302, 109-53, 109-169, 109-283, 110-138, 112-41, 112-42, and 112-43.

[ ] (ii) Alternate I (MAY 2014) of 52.225-3.

[ ] (iii) Alternate II (MAY 2014) of 52.225-3.

[ ] (iv) Alternate III (MAY 2014) of 52.225-3.

[ ] (48) 52.225-5, Trade Agreements (AUG 2018) 19 U.S.C. 2501, et seq.,

19 U.S.C. 3301 note).

[X] (49) 52.225-13, Restrictions on Certain Foreign Purchases (JUN 2008) (E.O.'s, proclamations, and statutes administered by the Office of Foreign Assets Control of the Department of the Treasury).

[ ] (50) 52.225-26, Contractors Performing Private Security Functions Outside the United States (Oct 2016) (Section 862, as amended, of the National Defense Authorization Act for Fiscal Year 2008; 10 U.S.C. 2302 Note).

[ ] (51) 52.226-4, Notice of Disaster or Emergency Area Set-Aside (NOV 2007) (42 U.S.C. 5150).

[ ] (52) 52.226-5, Restrictions on Subcontracting Outside Disaster or Emergency Area (NOV 2007) (42 U.S.C. 5150).

[ ] (53) 52.232-29, Terms for Financing of Purchases of Commercial Items (FEB 2002) (41 U.S.C. 4505, 10 U.S.C. 2307(f)).

[ ] (54) 52.232-30, Installment Payments for Commercial Items (JAN 2017) (41 U.S.C. 4505, 10 U.S.C. 2307(f)).

313100169C0004 Page 35 of 52

[ ] (55) 52.232-33, Payment by Electronic Funds Transfer-System for Award Management (OCT 2018) (31 U.S.C. 3332).

[ ] (56) 52.232-34, Payment by Electronic Funds Transfer - Other than System for Award Management (JUL 2013) (31 U.S.C. 3332).

[ ] (57) 52.232-36, Payment by Third Party (MAY 2014) (31 U.S.C. 3332).

[ ] (58) 52.239-1, Privacy or Security Safeguards (AUG 1996) (5 U.S.C.

552a).

[ ] (59) 52.242-5, Payments to Small Business Subcontractors (JAN 2017)(15 U.S.C. 637(d)(12)).

[ ] (60)(i) 52.247-64, Preference for Privately Owned U.S.-Flag Commercial Vessels (FEB 2006) (46 U.S.C. Appx. 1241(b) and 10 U.S.C.

2631).

[ ] (ii) Alternate I (APR 2003) of 52.247-64.

[ ] (iii) Alternate II (FEB 2006) of 52.247-64.

(c) The Contractor shall comply with the FAR clauses in this paragraph (c),

applicable to commercial services, that the Contracting Officer has indicated as being incorporated in this contract by reference to implement provisions of law or Executive orders applicable to acquisitions of commercial items: (Contracting Officer check as appropriate.)

[X] (1) 52.222-17, Nondisplacement of Qualified Workers (MAY 2014)

(E.O. 13495).

[ ] (2) 52.222-41, Service Contract Labor Standards (AUG 2018) (41 U.S.C. chapter 67).

[ ] (3) 52.222-42, Statement of Equivalent Rates for Federal Hires (MAY 2014) (29 U.S.C. 206 and 41 U.S.C. chapter 67).

[ ] (4) 52.222-43, Fair Labor Standards Act and Service Contract Labor Standards-Price Adjustment (Multiple Year and Option Contracts) (AUG 2018) (29 U.S.C. 206 and 41 U.S.C. chapter 67).

[ ] (5) 52.222-44, Fair Labor Standards Act and Service Contract Labor Standards-Price Adjustment (MAY 2014) (29 U.S.C 206 and 41 U.S.C.

chapter 67).

[ ] (6) 52.222-51, Exemption from Application of the Service Contract Labor Standards to Contracts for Maintenance, Calibration, or Repair of Certain Equipment-Requirements (MAY 2014) (41 U.S.C. chapter 67).

[ ] (7) 52.222-53, Exemption from Application of the Service Contract Labor Standards to Contracts for Certain Services-Requirements (MAY 2014) (41 U.S.C. chapter 67).

313100169C0004 Page 36 of 52

[ ] (8) 52.222-55, Minimum Wages Under Executive Order 13658 (DEC 2015).

[ ] (9) 52.222-62, Paid Sick Leave Under Executive Order 13706 (JAN 2017) (E.O. 13706).

[ ] (10) 52.226-6, Promoting Excess Food Donation to Nonprofit Organizations (MAY 2014) (42 U.S.C. 1792).

(d) Comptroller General Examination of Record. The Contractor shall comply with the provisions of this paragraph (d) if this contract was awarded using other than sealed bid, is in excess of the simplified acquisition threshold, and does not contain the clause at 52.215-2, Audit and Records - Negotiation.

(1) The Comptroller General of the United States, or an authorized representative of the Comptroller General, shall have access to and right to examine any of the Contractor's directly pertinent records involving transactions related to this contract.

(2) The Contractor shall make available at its offices at all reasonable times the records, materials, and other evidence for examination, audit, or reproduction, until 3 years after final payment under this contract or for any shorter period specified in FAR Subpart 4.7, Contractor Records Retention, of the other clauses of this contract. If this contract is completely or partially terminated, the records relating to the work terminated shall be made available for 3 years after any resulting final termination settlement. Records relating to appeals under the disputes clause or to litigation or the settlement of claims arising under or relating to this contract shall be made available until such appeals, litigation, or claims are finally resolved.

(3) As used in this clause, records include books, documents, accounting procedures and practices, and other data, regardless of type and regardless of form. This does not require the Contractor to create or maintain any record that the Contractor does not maintain in the ordinary course of business or pursuant to a provision of law.

(e)(1) Notwithstanding the requirements of the clauses in paragraphs (a), (b), (c),

and (d) of this clause, the Contractor is not required to flow down any FAR clause, other than those in this paragraph (e)(1) of this paragraph in a subcontract for commercial items. Unless otherwise indicated below, the extent of the flow down shall be as required by the clause-(i) 52.203-13, Contractor Code of Business Ethics and Conduct (OCT 2015) (41 U.S.C. 3509).

(ii) 52.203-19, Prohibition on Requiring Certain Internal Confidentiality Agreements or Statements (JAN 2017) (section 743 of Division E, Title VII, of the Consolidated and Further Continuing Appropriations Act, 2015 (Pub. L. 113-235) and its successor provisions in subsequent appropriations acts (and as extended in continuing resolutions)).

313100169C0004 Page 37 of 52 (iii) 52.204-23, Prohibition on Contracting for Hardware, Software, and Services Developed or Provided by Kaspersky Lab and Other Covered Entities (JUL 2018) (Section 1634 of Pub. L. 115-91).

(iv) 52.219-8, Utilization of Small Business Concerns (OCT 2018)

(15 U.S.C. 637(d)(2) and (3)), in all subcontracts that offer further subcontracting opportunities. If the subcontract (except subcontracts to small business concerns) exceeds $700,000 ($1.5 million for construction of any public facility), the subcontractor must include 52.219-8 in lower tier subcontracts that offer subcontracting opportunities.

(v) 52.222-17, Nondisplacement of Qualified Workers (MAY 2014)

(E.O. 13495). Flow down required in accordance with paragraph (l) of FAR clause 52.222-17.

(vi) 52.222-21, Prohibition of Segregated Facilities (APR 2015).

(vii) 52.222-26, Equal Opportunity (SEP 2016) (E.O. 11246).

(viii) 52.222-35, Equal Opportunity for Veterans (OCT 2015) (38 U.S.C. 4212).

(ix) 52.222-36, Equal Opportunity for Workers with Disabilities (JUL 2014) (29 U.S.C. 793).

(x) 52.222-37, Employment Reports on Veterans (FEB 2016) (38 U.S.C. 4212).

(xi) 52.222-40, Notification of Employee Rights Under the National Labor Relations Act (DEC 2010) (E.O. 13496). Flow down required in accordance with paragraph (f) of FAR clause 52.222-40.

(xii) 52.222-41, Service Contract Labor Standards (AUG 2018) (41 U.S.C. chapter 67).

(xiii) [X] (A) 52.222-50, Combating Trafficking in Persons (JAN 2019) (22 U.S.C. chapter 78 and E.O. 13627).

[ ] (B) Alternate I (MAR 2015) of 52.222-50 (22 U.S.C.

chapter 78 and E.O. 13627).

(xiv) 52.222-51, Exemption from Application of the Service Contract Labor Standards to Contracts for Maintenance, Calibration, or Repair of Certain Equipment-Requirements (MAY 2014) (41 U.S.C. chapter 67).

(xv) 52.222-53, Exemption from Application of the Service Contract Labor Standards to Contracts for Certain Services-Requirements (MAY 2014) (41 U.S.C. chapter 67).

313100169C0004 Page 38 of 52 (xvi) 52.222-54, Employment Eligibility Verification (OCT 2015) (E.

O. 12989).

(xvii) 52.222-55, Minimum Wages Under Executive Order 13658 (DEC 2015).

(xviii) 52.222-62 Paid Sick Leave Under Executive Order 13706 (JAN 2017) (E.O. 13706).

(xix)(A) 52.224-3, Privacy Training (JAN 2017) (5 U.S.C. 552a).

(B) Alternate I (JAN 2017) of 52.224-3.

(xx) 52.225-26, Contractors Performing Private Security Functions Outside the United States (Oct 2016) (Section 862, as amended, of the National Defense Authorization Act for Fiscal Year 2008; 10 U.S.C. 2302 Note).

(xxi) 52.226-6, Promoting Excess Food Donation to Nonprofit Organizations (MAY 2014) (42 U.S.C. 1792). Flow down required in accordance with paragraph (e) of FAR clause 52.226-6.

(xxii) 52.247-64, Preference for Privately Owned U.S.-Flag Commercial Vessels (FEB 2006) (46 U.S.C. Appx. 1241(b) and 10 U.S.C. 2631). Flow down required in accordance with paragraph (d) of FAR clause 52.247-64.

(2) While not required, the Contractor May include in its subcontracts for commercial items a minimal number of additional clauses necessary to satisfy its contractual obligations.

(End of clause)

I.3 52.217-8 OPTION TO EXTEND SERVICES. (NOV 1999)

The Government may require continued performance of any services within the limits and at the rates specified in the contract. These rates may be adjusted only as a result of revisions to prevailing labor rates provided by the Secretary of Labor. The option provision may be exercised more than once, but the total extension of performance hereunder shall not exceed 6 months. The Contracting Officer may exercise the option by written notice to the Contractor at any time prior to contract expiration.

(End of clause)

I.4 52.217-9 OPTION TO EXTEND THE TERM OF THE CONTRACT. (MAR 2000)

(a) The Government may extend the term of this contract by written notice to the Contractor at any time prior to contract expiration. The preliminary notice does not commit the Government to an extension.

(b) If the Government exercises this option, the extended contract shall be considered to include this option clause.

313100169C0004 Page 39 of 52 (c) The total duration of this contract, including the exercise of any options under this clause, shall not exceed 3 years.

(End of clause)

I.5 52.232-19 AVAILABILITY OF FUNDS FOR THE NEXT FISCAL YEAR. (APR 1984)

Funds are not presently available for performance under this contract beyond December 2019. The Government's obligation for performance of this contract beyond that date is contingent upon the availability of appropriated funds from which payment for contract purposes can be made. No legal liability on the part of the Government for any payment may arise for performance under this contract beyond December 2019, until funds are made available to the Contracting Officer for performance and until the Contractor receives notice of availability, to be confirmed in writing by the Contracting Officer.

(End of clause)

I.6 2052.204-70 SECURITY. (OCT 1999)

(a) Security/Classification Requirements Form. The attached NRC Form 187 (See List of Attachments) furnishes the basis for providing security and classification requirements to prime contractors, subcontractors, or others (e.g., bidders) who have or may have an NRC contractual relationship that requires access to classified information or matter, access on a continuing basis (in excess of 90 or more days) to NRC Headquarters controlled buildings, or otherwise requires NRC photo identification or card-key badges.

(b) It is the contractor's duty to safeguard National Security Information, Restricted Data, and Formerly Restricted Data. The contractor shall, in accordance with the Commission's security regulations and requirements, be responsible for safeguarding National Security Information, Restricted Data, and Formerly Restricted Data, and for protecting against sabotage, espionage, loss, and theft, the classified documents and material in the contractor's possession in connection with the performance of work under this contract. Except as otherwise expressly provided in this contract, the contractor shall transmit to the Commission any classified matter in the possession of the contractor or any person under the contractor's control in connection with performance of this contract upon completion or termination of this contract.

(1) The contractor shall complete a certificate of possession to be furnished to the Commission specifying the classified matter to be retained if the retention is:

(i) Required after the completion or termination of the contract; and (ii) Approved by the contracting officer.

(2) The certification must identify the items and types or categories of matter retained, the conditions governing the retention of the matter and their period of retention, if known. If the retention is approved by the contracting officer, the security provisions of the contract continue to be applicable to the matter retained.

(c) In connection with the performance of the work under this contract, the contractor may be furnished, or may develop or acquire, proprietary data (trade secrets) or confidential or privileged technical, business, or financial information, including

313100169C0004 Page 40 of 52 Commission plans, policies, reports, financial plans, internal data protected by the Privacy Act of 1974 (Pub. L.93-579), or other information which has not been released to the public or has been determined by the Commission to be otherwise exempt from disclosure to the public. The contractor agrees to hold the information in confidence and not to directly or indirectly duplicate, disseminate, or disclose the information, in whole or in part, to any other person or organization except as necessary to perform the work under this contract. The contractor agrees to return the information to the Commission or otherwise dispose of it at the direction of the contracting officer. Failure to comply with this clause is grounds for termination of this contract.

(d) Regulations. The contractor agrees to conform to all security regulations and requirements of the Commission which are subject to change as directed by the NRC Division of Facilities and Security and the Contracting Officer. These changes will be under the authority of the FAR Changes clause referenced in Section I of this document.

(e) Definition of National Security Information. As used in this clause, the term National Security Information means information that has been determined pursuant to Executive Order 12958 or any predecessor order to require protection against unauthorized disclosure and that is so designated.

(f) Definition of Restricted Data. As used in this clause, the term Restricted Data means all data concerning design, manufacture, or utilization of atomic weapons; the production of special nuclear material; or the use of special nuclear material in the production of energy but does not include data declassified or removed from the Restricted Data category under to Section 142 of the Atomic Energy Act of 1954, as amended.

(g) Definition of Formerly Restricted Data. As used in this clause the term Formerly Restricted Data means all data removed from the Restricted Data category under Section 142-d of the Atomic Energy Act of 1954, as amended.

(h) Security clearance personnel. The contractor may not permit any individual to have access to Restricted Data, Formerly Restricted Data, or other classified information, except in accordance with the Atomic Energy Act of 1954, as amended, and the Commission's regulations or requirements applicable to the particular type or category of classified information to which access is required. The contractor shall also execute a Standard Form 312, Classified Information Nondisclosure Agreement, when access to classified information is required.

(i) Criminal liabilities. Disclosure of National Security Information, Restricted Data, and Formerly Restricted Data relating to the work or services ordered hereunder to any person not entitled to receive it, or failure to safeguard any Restricted Data, Formerly Restricted Data, or any other classified matter that may come to the contractor or any person under the contractor's control in connection with work under this contract, may subject the contractor, its agents, employees, or subcontractors to criminal liability under the laws of the United States. (See the Atomic Energy Act of 1954, as amended, 42 U.S.C. 2011 et seq.; 18 U.S.C. 793 and 794; and Executive Order 12958.)

(j) Subcontracts and purchase orders. Except as otherwise authorized, in writing, by the contracting officer, the contractor shall insert provisions similar to the foregoing in all subcontracts and purchase orders under this contract.

313100169C0004 Page 41 of 52 (k) In performing contract work, the contractor shall classify all documents, material, and equipment originated or generated by the contractor in accordance with guidance issued by the Commission. Every subcontract and purchase order issued under the contract that involves originating or generating classified documents, material, and equipment must provide that the subcontractor or supplier assign the proper classification to all documents, material, and equipment in accordance with guidance furnished by the contractor.

(End of Clause)

I.7 2052.204-71 SITE ACCESS BADGE REQUIREMENTS. (JAN 1993)

During the life of this contract, the rights of ingress and egress for contractor personnel must be made available as required. In this regard, all contractor personnel whose duties under this contract require their presence on-site shall be clearly identifiable by a distinctive badge furnished by the Government. The Project Officer shall assist the contractor in obtaining the badges for contractor personnel. It is the sole responsibility of the contractor to ensure that each employee has proper identification at all times. All prescribed identification must be immediately delivered to the Security Office for cancellation or disposition upon the termination of employment of any contractor personnel. Contractor personnel shall have this identification in their possession during on-site performance under this contract. It is the contractor's duty to assure that contractor personnel enter only those work areas necessary for performance of contract work and to assure the safeguarding of any Government records or data that contractor personnel may come into contact with.

(End of Clause)

I.8 SECURITY REQUIREMENTS FOR BUILDING ACCESS APPROVAL (SEP 2013)

The Contractor shall ensure that all its employees, subcontractor employees or consultants who are assigned to perform the work herein for contract performance for periods of more than 30 calendar days at NRC facilities, are approved by the NRC for unescorted NRC building access.

The Contractor shall conduct a preliminary federal facilities security screening interview or review for each of its employees, subcontractor employees, and consultants and submit to the NRC only the names of candidates for contract performance that have a reasonable probability of obtaining approval necessary for access to NRC's federal facilities. The Contractor shall pre-screen its applicants for the following:

(a) felony arrest in the last seven (7) years; (b) alcohol related arrest within the last five (5) years; (c) record of any military courts-martial convictions in the past ten (10) years; (d) illegal use of narcotics or other controlled substances possession in the past year, or illegal purchase, production, transfer, or distribution of narcotics or other controlled substances in the last seven (7) years; and (e) delinquency on any federal debts or bankruptcy in the last seven (7) years.

The Contractor shall make a written record of its pre-screening interview or review (including any information to mitigate the responses to items listed in (a) - (e)), and have the applicant verify the pre-screening record or review, sign and date it. Two (2) copies of the pre-screening signed record or review shall be supplied to the Division of Facilities

313100169C0004 Page 42 of 52 and Security, Personnel Security Branch (DFS/PSB) with the Contractor employee's completed building access application package.

The Contractor shall further ensure that its employees, any subcontractor employees and consultants complete all building access security applications required by this clause within fourteen (14) calendar days of notification by DFS/PSB of initiation of the application process. Timely receipt of properly completed records of the Contractor's signed pre-screening record or review and building access security applications (submitted for candidates that have a reasonable probability of obtaining the level of access authorization necessary for access to NRC's facilities) is a contract requirement.

Failure of the Contractor to comply with this contract administration requirement may be a basis to cancel the award, or terminate the contract for default, or offset from the contract's invoiced cost or price the NRC's incurred costs or delays as a result of inadequate pre-screening by the Contractor. In the event of cancellation or termination, the NRC may select another firm for contract award.

A Contractor, subcontractor employee or consultant shall not have access to NRC facilities until he/she is approved by DFS/PSB. Temporary access may be approved based on a favorable NRC review and discretionary determination of their building access security forms. Final building access will be approved based on favorably adjudicated checks by the Government. However, temporary access approval will be revoked and the Contractor's employee may subsequently be denied access in the event the employee's investigation cannot be favorably determined by the NRC. Such employee will not be authorized to work under any NRC contract requiring building access without the approval of DFS/PSB. When an individual receives final access, the individual will be subject to a review or reinvestigation every five (5) or ten (10) years, depending on their job responsibilities at the NRC.

The Government shall have and exercise full and complete control and discretion over granting, denying, withholding, or terminating building access approvals for individuals performing work under this contract. Individuals performing work under this contract at NRC facilities for a period of more than 30 calendar days shall be required to complete and submit to the Contractor representative an acceptable OPM Standard Form 85 (Questionnaire for Non-Sensitive Positions), and two (2) FD 258 (Fingerprint Charts).

Non-U.S. citizens must provide official documentation to the DFS/PSB, as proof of their legal residency. This documentation can be a Permanent Resident Card, Temporary Work Visa, Employment Authorization Card, or other official documentation issued by the U.S. Citizenship and Immigration Services. Any applicant with less than five (5) years residency in the U.S. will not be approved for building access. The Contractor shall submit the documents to the NRC Contracting Officers Representative (COR) who will give them to DFS/PSB.

DFS/PSB may, among other things, grant or deny temporary unescorted building access approval to an individual based upon its review of the information contained in the OPM Standard Form 85 and the Contractor's pre-screening record. Also, in the exercise of its authority, the Government may, among other things, grant or deny permanent building access approval based on the results of its review or investigation. This submittal requirement also applies to the officers of the firm who, for any reason, may visit the NRC work sites for an extended period of time during the term of the contract. In the event that DFS/PSB are unable to grant a temporary or permanent building access approval, to any individual performing work under this contract, the Contractor is

313100169C0004 Page 43 of 52 responsible for assigning another individual to perform the necessary function without any delay in the contract's performance schedule, or without adverse impact to any other terms or conditions of the contract. The Contractor is responsible for informing those affected by this procedure of the required building access approval process (i.e.,

temporary and permanent determinations), and the possibility that individuals may be required to wait until permanent building access approvals are granted before beginning work in NRC's buildings.

CANCELLATION OR TERMINATION OF BUILDING ACCESS/ REQUEST The Contractor shall immediately notify the COR when a Contractor or subcontractor employee or consultant's need for NRC building access approval is withdrawn or the need by the Contractor employee's for building access terminates. The COR will immediately notify DFS/PSB (via e-mail) when a Contractor employee no longer requires building access. The Contractor shall be required to return any NRC issued badges to the COR for return to DFS/FSB (Facilities Security Branch) within three (3) days after their termination.

(End of Clause)

I.9 SECURITY REQUIREMENTS FOR INFORMATION TECHNOLOGY LEVEL I OR LEVEL II ACCESS APPROVAL (JUL 2016)

The contractor must identify all individuals selected to work under this contract. The NRC Contracting Officers Representative (COR) shall make the final determination of the level, if any, of IT access approval required for all individuals working under this contract/order using the following guidance. The Government shall have full and complete control and discretion over granting, denying, withholding, or terminating IT access approvals for contractor personnel performing work under this contract/order.

The contractor shall conduct a preliminary security interview or review for each employee requiring IT level I or II access and submit to the Government only the names of candidates that have a reasonable probability of obtaining the level of IT access approval for which the employee has been proposed. The contractor shall pre-screen its applicants for the following:

(a) felony arrest in the last seven (7) years; (b) alcohol related arrest within the last five (5) years; (c) record of any military courts-martial convictions in the past ten (10) years; (d) illegal use of narcotics or other controlled substances possession in the past year, or illegal purchase, production, transfer, or distribution of narcotics or other controlled substances in the last seven (7) years; and (e) delinquency on any federal debts or bankruptcy in the last seven (7) years.

The contractor shall make a written record of its pre-screening interview or review (including any information to mitigate the responses to items listed in (a) - (e)), and have the employee verify the pre-screening record or review, sign and date it. The contractor shall supply two (2) copies of the signed contractor's pre-screening record or review to the NRC Contracting Officers Representative (COR), who will then provide them to the NRC Office of Administration, Division of Facilities and Security, Personnel Security Branch with the employees completed IT access application package.

313100169C0004 Page 44 of 52 The contractor shall further ensure that its personnel complete all IT access approval security applications required by this clause within fourteen (14) calendar days of notification by the NRC Contracting Officers Representative (COR) of initiation of the application process. Timely receipt of properly completed records of the pre-screening record and IT access approval applications (submitted for candidates that have a reasonable probability of obtaining the level of security assurance necessary for access to NRC's IT systems/data) is a requirement of this contract/order. Failure of the contractor to comply with this requirement may be a basis to terminate the contract/order for cause, or to offset from the contract's invoiced cost or price the NRC's incurred costs or delays as a result of inadequate pre-screening by the contractor.

SECURITY REQUIREMENTS FOR IT LEVEL I Performance under this contract/order will involve contractor personnel who perform services requiring direct access to or operation of agency sensitive information technology systems or data (IT Level I). The IT Level I involves responsibility for: (a) the planning, direction, and implementation of a computer security program; (b) major responsibility for the direction, planning, and design of a computer system, including hardware and software; (c) the capability to access a computer system during its operation or maintenance in such a way that could cause or that has a relatively high risk of causing grave damage; or (d) the capability to realize a significant personal gain from computer access.

Contractor personnel shall not have access to sensitive information technology systems or data until they are approved by DFS/PSB and they have been so informed in writing by the NRC Contracting Officers Representative (COR). Temporary IT access may be approved by DFS/PSB based on a favorable review or adjudication of their security forms and checks. Final IT access may be approved by DFS/PSB based on a favorably review or adjudication of a completed background investigation. However, temporary access authorization approval will be revoked and the employee may subsequently be denied IT access in the event the employees investigation cannot be favorably adjudicated. Such an employee will not be authorized to work under any NRC contract/order requiring IT access without the approval of DFS/PSB, as communicated in writing to the contractor by the NRC Contracting Officers Representative (COR). Where temporary access authorization has been revoked or denied by DFS/PSB, the contractor shall assign another contractor employee to perform the necessary work under this contract/order without delay to the contract/order performance schedule, or without adverse impact to any other terms or conditions of the contract/order. When an individual receives final IT access approval from DFS/PSB, the individual will be subject to a reinvestigation every ten (10) years thereafter (assuming continuous performance under contracts/orders at NRC) or more frequently in the event of noncontinuous performance under contracts/orders at NRC.

CORs are responsible for submitting the completed access/clearance request package as well as other documentation that is necessary to DFS/PSB. The contractor shall submit a completed security forms packet, including the OPM Standard Form (SF) 86 (online Questionnaire for National Security Positions), two (2) copies of the Contractor's signed pre-screening record, and two (2) FD 258 fingerprint charts, to DFS/PSB for review and adjudication, prior to the individual being authorized to perform work under this contract/order requiring access to sensitive information technology systems or data.

Non-U.S. citizens must provide official documentation to the DFS/PSB, as proof of their

313100169C0004 Page 45 of 52 legal residency. This documentation can be a Permanent Resident Card, Temporary Work Visa, Employment Authorization Card, or other official documentation issued by the U.S. Citizenship and Immigration Services. Any applicant with less than seven (7) years residency in the U.S. will not be approved for IT Level I access. The Contractor shall submit the documents to the NRC Contracting Officers Representative (COR) who will give them to DFS/PSB. The contractor shall ensure that all forms are accurate, complete, and legible. Based on DFS/PSB review of the contractor employees security forms and/or the receipt of adverse information by NRC, the contractor individual may be denied access to NRC facilities and sensitive information technology systems or data until a final determination is made by DFS/PSB. The contractor individuals clearance status will thereafter be communicated to the contractor by the NRC Contracting Officers Representative (COR) regarding the contractor persons eligibility.

In accordance with NRCAR 2052.204-70 "Security," IT Level I contractors shall be subject to the attached NRC Form 187 and SF-86. Together, these furnish the basis for providing security requirements to contractors that have or may have an NRC contractual relationship which requires access to or operation of agency sensitive information technology systems, remote development and/or analysis of sensitive information technology systems or data, or other access to such systems and data; access on a continuing basis (in excess more than 30 calendar days) to NRC buildings; or otherwise requires issuance of an unescorted NRC badge.

SECURITY REQUIREMENTS FOR IT LEVEL II Performance under this contract/order will involve contractor personnel that develop and/or analyze sensitive information technology systems or data or otherwise have access to such systems or data (IT Level II).

The IT Level II involves responsibility for the planning, design, operation, or maintenance of a computer system and all other computer or IT positions.

Contractor personnel shall not have access to sensitive information technology systems or data until they are approved by DFS/PSB and they have been so informed in writing by the NRC Contracting Officers Representative (COR). Temporary access may be approved by DFS/PSB based on a favorable review of their security forms and checks.

Final IT access may be approved by DFS/PSB based on a favorably adjudication.

However, temporary access authorization approval will be revoked and the contractor employee may subsequently be denied IT access in the event the employee's investigation cannot be favorably adjudicated. Such an employee will not be authorized to work under any NRC contract/order requiring IT access without the approval of DFS/PSB, as communicated in writing to the contractor by the NRC Contracting Officers Representative (COR). Where temporary access authorization has been revoked or denied by DFS/PSB, the contractor is responsible for assigning another contractor employee to perform the necessary work under this contract/order without delay to the contract/order performance schedule, or without adverse impact to any other terms or conditions of the contract/order. When a contractor employee receives final IT access approval from DFS/PSB, the individual will be subject to a review or reinvestigation every ten (10) years (assuming continuous performance under contract/order at NRC) or more frequently in the event of noncontinuous performance under contract/order at NRC.

313100169C0004 Page 46 of 52 CORs are responsible for submitting the completed access/clearance request package as well as other documentation that is necessary to DFS/PSB. The contractor shall submit a completed security forms packet, including the OPM Standard Form (SF) 86 (online Questionnaire for National Security Positions), two (2) copies of the Contractor's signed pre-screening record and two (2) FD 258 fingerprint charts, to DFS/PSB for review and adjudication, prior to the contractor employee being authorized to perform work under this contract/order. Non-U.S. citizens must provide official documentation to the DFS/PSB, as proof of their legal residency. This documentation can be a Permanent Resident Card, Temporary Work Visa, Employment Authorization Card, or other official documentation issued by the U.S. Citizenship and Immigration Services. Any applicant with less than seven (7) years residency in the U.S. will not be approved for IT Level II access. The Contractor shall submit the documents to the NRC Contracting Officers Representative (COR) who will give them to DFS/PSB. The contractor shall ensure that all forms are accurate, complete, and legible. Based on DFS/PSB review of the contractor employees security forms and/or the receipt of adverse information by NRC, the contractor employee may be denied access to NRC facilities, sensitive information technology systems or data until a final determination is made by DFS/PSB regarding the contractor persons eligibility.

In accordance with NRCAR 2052.204-70 "Security," IT Level II contractors shall be subject to the attached NRC Form 187, SF-86, and contractor's record of the pre-screening. Together, these furnish the basis for providing security requirements to contractors that have or may have an NRC contractual relationship which requires access to or operation of agency sensitive information technology systems, remote development and/or analysis of sensitive information technology systems or data, or other access to such systems or data; access on a continuing basis (in excess of more than 30 calendar days) to NRC buildings; or otherwise requires issuance of an unescorted NRC badge.

CANCELLATION OR TERMINATION OF IT ACCESS/REQUEST When a request for IT access is to be withdrawn or canceled, the contractor shall immediately notify the NRC Contracting Officers Representative (COR) by telephone so that the access review may be promptly discontinued. The notification shall contain the full name of the contractor employee and the date of the request. Telephone notifications must be promptly confirmed by the contractor in writing to the NRC Contracting Officers Representative (COR), who will forward the confirmation to DFS/PSB. Additionally, the contractor shall immediately notify the NRC Contracting Officers Representative (COR) in writing, who will in turn notify DFS/PSB, when a contractor employee no longer requires access to NRC sensitive automated information technology systems or data, including the voluntary or involuntary separation of employment of a contractor employee who has been approved for or is being processed for IT access.

The contractor shall flow the requirements of this clause down into all subcontracts and agreements with consultants for work that requires them to access NRC IT resources.

(End of Clause)

I.10 DRUG FREE WORKPLACE TESTING: UNESCORTED ACCESS TO NUCLEAR FACILITIES, ACCESS TO CLASSIFIED INFORMATION OR SAFEGUARDS

313100169C0004 Page 47 of 52 INFORMATION, OR PERFORMING IN SPECIALLY SENSITIVE POSITIONS (OCT 2014) proposed for performance or performing under this contract shall be subject to pre-assignment, random, reasonable suspicion, and post-accident drug testing: (1) individuals who have access to classified information (National Security Information and/or Restricted Data); (2) individuals who have access to Safeguards information (section 147 of the Atomic Energy Act of 1954, as amended); (3) individuals who are authorized to carry firearms while performing work under this contract; (4) individuals who are required to operate government vehicles or transport passengers for the NRC; (5) individuals who are required to operate hazardous equipment at NRC facilities; (6) individuals who administer the agencys drug program or who have Employee Assistance Program duties; (7) individuals who have unescorted access to vital or protected areas of Nuclear Power Plants, Category 1 Fuel Cycle Facilities, or Uranium Enrichment Facilities; or (8) incident/emergency response personnel (including on-call).

The NRC Drug Program Manager will schedule the drug testing for all individuals who are subject to testing under this clause. The consequences of refusing to undergo drug testing or a refusal to cooperate in such testing, including not appearing at the scheduled appointment time, will result in the Agencys refusal of the contractor employee to work under any NRC contract. Any contractor employee found to be using, distributing or possessing illegal drugs, or any contractor employee who fails to receive a verified negative drug test result under this program while in a duty status will immediately be removed from working under the NRC contract. The contractor will be notified of the denial or revocation of the individual's authorization to have access to information and ability to perform under the contract. The individual may not work on any NRC contract for a period of not less than one year from the date of the failed, positive drug test and will not be considered for reinstatement unless evidence of rehabilitation, as determined by the NRC "drug testing contractor's" Medical Review Officer, is provided.

Contractor drug testing records are protected under the NRC Privacy Act Systems of Records, System 35, "Drug Testing Program Records - NRC" found at:

http://www.nrc.gov/reading-rm/foia/privacy-systems.html.

I.11 SAFETY OF ON-SITE CONTRACTOR PERSONNEL Ensuring the safety of occupants of Federal buildings is a responsibility shared by the professionals implementing our security and safety programs and the persons being protected. The NRC's Office of Administration (ADM) Division of Facilities and Security (DFS) has coordinated an Occupant Emergency Plan (OEP) for NRC Headquarters buildings with local authorities. The OEP has been approved by the Montgomery County Fire and Rescue Service. It is designed to improve building occupants' chances of survival, minimize damage to property, and promptly account for building occupants when necessary.

The contractor's Project Director shall ensure that all personnel working full time on-site at NRC Headquarters read the NRC's OEP, provided electronically on the NRC Intranet at http://www.internal.nrc.gov/ADM/OEP.pdf. The contractor's Project Director also shall emphasize to each staff member that they are to be familiar with and guided by the OEP, as well as by instructions given by emergency response personnel in situations which pose an immediate health or safety threat to building occupants.

313100169C0004 Page 48 of 52 The NRC Contracting Officers Representative (COR) shall ensure that the contractor's Project Director has communicated the requirement for on-site contractor staff to follow the guidance in the OEP. The NRC Contracting Officers Representative (COR) also will assist in accounting for on-site contract persons in the event of a major emergency (e.g.,

explosion occurs and casualties or injuries are suspected) during which a full evacuation will be required, including the assembly and accountability of occupants. The NRC DFS will conduct drills periodically to train occupants and assess these procedures.

(End of Clause)

I.12 2052.215-77 TRAVEL APPROVALS AND REIMBURSEMENT. (OCT 1999)

(a) Total expenditure for travel may not exceed $26,000.00 without the prior approval of the contracting officer.

(b) All foreign travel must be approved in advance by the NRC on NRC Form 445, Request for Approval of Official Foreign Travel, and must be in compliance with FAR 52.247-63 Preference for U.S. Flag Air Carriers. The contractor shall submit NRC Form 445 to the NRC no later than 30 days before beginning travel.

(c) The contractor must receive written approval from the NRC Project Officer before taking travel that was unanticipated in the Schedule (i.e., travel not contemplated in the Statement of Work, or changes to specific travel identified in the Statement of Work).

(d) The contractor will be reimbursed only for travel costs incurred that are directly related to this contract and are allowable subject to the limitations prescribed in FAR 31.205-46.

(e) It is the responsibility of the contractor to notify the contracting officer in accordance with the Limitations of Cost clause of this contract when, at any time, the contractor learns that travel expenses will cause the contractor to exceed the estimated costs specified in the Schedule.

(f) Reasonable travel costs for research and related activities performed at State and nonprofit institutions, in accordance with Section 12 of Pub. L. 100-679, must be charged in accordance with the contractor's institutional policy to the degree that the limitations of Office of Management and Budget (OMB) guidance are not exceeded. Applicable guidance documents include OMB Circular A-87, Cost Principles for State and Local Governments; OMB Circular A-122, Cost Principles for Nonprofit Organizations; and OMB Circular A-21, Cost Principles for Educational Institutions.

(End of Clause)

I.13 2052.211-70 PREPARATION OF TECHNICAL REPORTS. (JAN 1993)

All technical reports required by Section C and all Technical Progress Reports required by Section F are to be prepared in accordance with the attached Management Directive 3.8, "Unclassified Contractor and Grantee Publications in the NUREG Series."

Management Directive 3.8 is not applicable to any Contractor Spending Plan (CSP) and any Financial Status Report that may be included in this contract. (See List of Attachments).

313100169C0004 Page 49 of 52 (End of Clause)

I.14 52.237-3 CONTINUITY OF SERVICES. (JAN 1991)

(a) The Contractor recognizes that the services under this contract are vital to the Government and must be continued without interruption and that, upon contract expiration, a successor, either the Government or another contractor, may continue them. The Contractor agrees to (1) furnish phase-in training and (2) exercise its best efforts and cooperation to affect an orderly and efficient transition to a successor.

(b) The Contractor shall, upon the Contracting Officer's written notice, (1) furnish phase-in, phase-out services for up to 90 days after this contract expires and (2) negotiate in good faith a plan with a successor to determine the nature and extent of phase-in, phase-out services required. The plan shall specify a training program and a date for transferring responsibilities for each division of work described in the plan and shall be subject to the Contracting Officer's approval.

The Contractor shall provide sufficient experienced personnel during the phase-in, phase-out period to ensure that the services called for by this contract are maintained at the required level of proficiency.

(c) The Contractor shall allow as many personnel as practicable to remain on the job to help the successor maintain the continuity and consistency of the services required by this contract. The Contractor also shall disclose necessary personnel records and allow the successor to conduct on-site interviews with these employees. If selected employees are agreeable to the change, the Contractor shall release them at a mutually agreeable date and negotiate transfer of their earned fringe benefits to the successor.

(d) The Contractor shall be reimbursed for all reasonable phase-in, phase-out costs (i.e., costs incurred within the agreed period after contract expiration that result from phase-in, phase-out operations) and a fee (profit) not to exceed a pro rata portion of the fee (profit) under this contract.

(End of clause)

I.15 52.249-1 TERMINATION FOR CONVENIENCE OF THE GOVERNMENT (FIXED-PRICE) (SHORT FORM). (APR 1984)

The Contracting Officer, by written notice, may terminate this contract, in whole or in part, when it is in the Government's interest. If this contract is terminated, the rights, duties, and obligations of the parties, including compensation to the Contractor, shall be in accordance with Part 49 of the Federal Acquisition Regulation in effect on the date of this contract.

(End of clause)

I.16 COMPLIANCE WITH SECTION 508 OF THE REHABILITATION ACT OF 1973, AS AMENDED (SEP 2013)

In 1998, Congress amended the Rehabilitation Act of 1973 (29 U.S.C. §794d) as amended by the Workforce Investment Act of 1998 (P.L. 105 - 220), August 7, 1998 to

313100169C0004 Page 50 of 52 require Federal agencies to make their electronic and information technology (EIT) accessible to people with disabilities. Inaccessible technology interferes with an ability to obtain and use information quickly and easily. Section 508 was enacted to eliminate barriers in information technology, open new opportunities for people with disabilities, and encourage development of technologies that will help achieve these goals. The law applies to all Federal agencies when they develop, procure, maintain, or use electronic and information technology. Under Section 508 (29 U.S.C. §794d), agencies must give disabled employees and members of the public access to information that is comparable to access available to others.

Specifically, Section 508 of that Act requires that when Federal agencies develop, procure, maintain, or use EIT, Federal employees with disabilities have access to and use of information and data that is comparable to the access and use by Federal employees who are not individuals with disabilities, unless an undue burden would be imposed on the agency. (36 C.F.R. §1194 implements Section 508 of the Rehabilitation Act of 1973, as amended, and is viewable at: http://www.access-board.gov/sec508/standards.htm)

Exceptions.

All EIT that the government acquires by purchase or by lease/rental under this contract must meet the applicable accessibility standards at 36 C.F.R. Part 1194, unless one or more of the following exceptions at FAR 39.204 applies to this acquisition (applicable if checked):

[ ] The EIT is for a national security system.

[ ] The EIT is acquired by a contractor incidental to a contract.

[ ] The EIT is located in spaces frequented only by service personnel for maintenance, repair or occasional monitoring of equipment.

[ ] Compliance with the applicable 36 C.F.R. Part 1194 provisions would impose an undue burden on the agency.

Applicable Standards.

The following accessibility standards from 36 C.F.R. Part 1194 have been determined to be applicable to this contract/order. See www.section508.gov for more information:

[ ] 1194.21 Software applications and operating systems.

[ ] 1194.22 Web-based intranet and internet information and applications. 16 rules.

[ ] 1194.23 Telecommunications products.

[ ] 1194.24 Video and multimedia products.

[ ] 1194.25 Self contained, closed products.

[ ] 1194.26 Desktop and portable computers.

[ ] 1194.31 Functional performance criteria.

313100169C0004 Page 51 of 52

[ ] 1194.41 Information, documentation, and support.

Note: Under the Exceptions paragraph, the Contracting Officer should check the boxes for any exceptions that apply. If no exceptions apply, then the Contracting Officer should, under the Applicable Standards paragraph, check the boxes that indicate which of the standards apply. See FAR Subpart 39.2 and www.section508.gov for additional guidance.

(End of Clause)

I.17 52.252-2 CLAUSES INCORPORATED BY REFERENCE. (FEB 1998)

This contract incorporates one or more clauses by reference, with the same force and effect as if they were given in full text. Upon request, the Contracting Officer will make their full text available. Also, the full text of a clause may be accessed electronically at this/these address(es):

http://www.acquisition.gov/far https://www.nrc.gov/about-nrc/contracting/48cfr-ch20.html (End of clause) 52.202-1 DEFINITIONS. (NOV 2013) 52.203-16 PREVENTING PERSONAL CONFLICTS OF INTEREST. (DEC 2011) 52.203-17 CONTRACTOR EMPLOYEE WHISTLEBLOWER RIGHTS AND REQUIREMENT TO INFORM EMPLOYEES OF WHISTLEBLOWER RIGHTS. (APR 2014) 52.204-9 PERSONAL IDENTITY VERIFICATION OF CONTRACTOR PERSONNEL.

(JAN 2011) 52.204-19 INCORPORATION BY REFERENCE OF REPRESENTATIONS AND CERTIFICATIONS. (DEC 2014) 52.204-21 BASIC SAFEGUARDING OF COVERED CONTRACTOR INFORMATION SYSTEMS. (JUN 2016) 52.212-4 CONTRACT TERMS AND CONDITIONS - COMMERCIAL ITEMS. (OCT 2018) 52.227-14 RIGHTS IN DATA-GENERAL. (MAY 2014) - ALTERNATE I (DEC 2007) 52.232-39 UNENFORCEABILITY OF UNAUTHORIZED OBLIGATIONS. (JUN 2013) 52.237-2 PROTECTION OF GOVERNMENT BUILDINGS, EQUIPMENT, AND VEGETATION. (APR 1984) 52.242-13 BANKRUPTCY. (JUL 1995) 52.242-15 STOP-WORK ORDER. (AUG 1989) 2052.222-70 NONDISCRIMINATION BECAUSE OF AGE. (JAN 1993)

313100169C0004 Page 52 of 52 SECTION J - List of Documents, Exhibits and Other Attachments Attachment Number Title Billing Instructions for Firm Fixed Price Type Contracts IASS Price Schedule