AMENDMENT NOTICE: This is a combined synopsis/solicitation for commercial items prepared in accordance with the format in FAR Subpart 12.6, as supplemented with additional information included in this notice. The solicitation number is 19bh2023q0018 and is issued as a Request for Quote (RFQ), unless otherwise indicated herein. The solicitation document and incorporated provisions and clauses are those in effect through Federal Acquisition Circular 2023-04. The associated North American Industrial Classification System (NAICS) code for this procurement is 423430 with a small business size standard of 250.00 employees. This requirement is unrestricted and only qualified sellers may submit bids. The solicitation pricing on https://marketplace.unisonglobal.com will start on the date this solicitation is posted, and, unless otherwise displayed at https://marketplace.unisonglobal.com, will end on: 2023-08-03 15:30:00.0 Eastern Time . This time supersedes the Offers Due Time listed above. FOB Destination shall be in the Statement of Work. The U.S. Embassy Belmopan, Belize requires the following items, Brand Name or Equal, to the following: LI 001: 16gb DDR4 Memory For Desktops (Brand name or Equal), 5, EA; LI 002: Dell OptiPlex 7090 Core i7 (Brand name or Equal), 10, EA; LI 003: Panasonic Toughbook (Brand name or Equal), 2, EA; LI 004: HP Elitebook 32 GB Ram 1TB SSD (Brand name or Equal), 2, EA; LI 005: Shipping to U.S. Embassy Belmopan, 1, EA; Solicitation and Buy Attachments ***Question Submission: Interested Sellers must submit any questions concerning the solicitation at the earliest time possible to enable the Buyer to respond. Questions must be submitted by using the 'Submit a Question' feature at https://marketplace.unisonglobal.com. Questions not received within a reasonable time prior to close of the solicitation may not be considered.*** For this solicitation, U.S. Embassy Belmopan, Belize intends to conduct an online competitive reverse auction to be facilitated by the third-party reverse auction provider, Unison Marketplace. Unison Marketplace has developed an online, anonymous, browser based application to conduct the reverse auction. A Seller may submit a series of pricing bids, which descend in price during the specified period of time for the aforementioned reverse auction. U.S. Embassy Belmopan, Belize is taking this action in an effort to improve both vendor access and awareness of requests and the agency's ability to gather multiple, competed, real-time bids. All responsible Sellers that respond to this solicitation MUST submit the pricing portion of their bid using the online exchange located at https://marketplace.unisonglobal.com. There is no cost to register, review procurement data or make a bid on https://marketplace.unisonglobal.com.Sellers that are not currently registered to use https://marketplace.unisonglobal.com should proceed to https://marketplace.unisonglobal.com to complete their free registration. Sellers that require special considerations or assistance may contact Marketplace Support at 1.877.933.3243 or via email at
[email protected]. Sellers may not artificially manipulate the price of a transaction on https://marketplace.unisonglobal.com by any means. It is unacceptable to place bad faith bids, to use decoys in the https://marketplace.unisonglobal.com process or to collude with the intent or effect of hampering the competitive https://marketplace.unisonglobal.com process. Should Sellers require additional clarification, notify the point of contact or Marketplace Support at 1.877.933.3243 or
[email protected]. Use of Unison Marketplace: Buyers and Sellers agree to conduct this transaction through Unison Marketplace in compliance with the Unison Marketplace Terms of Use. Failure to comply with the below terms and conditions may result in offer being determined as non-responsive. Cybersecurity Supply Chain Risk Management Requirements (FEB 2023) (a) Definitions. As used in this clause: Covered article -The term "covered article" includes (1) "Information and Communications technology" which means (i) any equipment or interconnected system or subsystem of equipment, used in the automatic acquisition, storage, analysis, evaluation, manipulation, management, movement, control, display, switching, interchange, transmission, or reception of data or information by the executive agency, if the equipment is used by the executive agency directly or is used bya contractor under a contract with the executive agency that requires the use of that equipment, or of that equipment to a significant extent in the performance of a service or the furnishing of a product. (ii) computers, ancillary equipment (including imaging peripherals, input, output, and storage devices necessary for security and surveillance), peripheral equipment designed to be controlled by the central processing unit of a computer, software, firmware and similar procedures, services (including support services), and related resources; however, does not include any equipment acquired by a federal contractor incidental to a federal contract. (2) "Telecommunications Equipment", which means equipment, other than customer premises equipment, used by a carrier to provide telecommunications services, and includes software integral to such equipment (including upgrades). (3) "Telecommunications Service", which means the offering of telecommunications for a fee directly to the public, or to such classes of users as to be effectively available directly to the public, regardless of the facilities used. (4) "Cybersecurity Supply Chain Risk", which means the risk that a person may sabotage, maliciously introduce unwanted function, extract data, or otherwise manipulate the design, integrity, manufacturing, production, distribution, installation, operation, maintenance, disposition, or retirement of covered articles to surveil, deny, disrupt, or otherwise manipulate the function, use, or operation of the covered articles or information stored or transmitted on the covered articles. (b) Contractor Cybersecurity Supply Chain Risk Management Responsibilities. The Contractor shall take all prudent actions and comply with all Government direction (as identified in paragraph (c)) to regularly identify, assess, monitor, and mitigate cybersecurity supply chain Attachment B -C-SCRM Clause (e) Novation Agreement Notice. FAR 42.1203 require Government approval of novation agreements. For proposed novation agreements for this contract, the Contractor shall provide any information requested by the Government regarding the proposed successor's identity and information regarding its supply chain. (f) Software Bill of Materials (SBOM} Requests. For software, within 10 business days of request by a Department of State representative, the Contractor shall submit a SBOM to a designated representative. This request may be requested on one (1) or more occasions and shall be delivered at no increase in contract price. (g) SBOM Sharing Notice. The Contractor consents to the sharing of its SBOM data with other contractors, such as tool solution providers, for the sole purpose of mapping against known vulnerabilities. (h) Notification procedures for cybersecurity supply chain events. When cybersecurity supply chain events occur, the Contractor must contact the Contracting Officer or his/her designee within 12 hours of the event. (i) Subcontracts. The Contractor shall insert the substance of this clause in all subcontracts and other contractual instruments in support of this contract. U) Vulnerability Exploitability exchange (VEX). The Contractor is required to notify the Department of any discovered software vulnerabilities within 12 hours. Within three (3) days, they shall provide a report using a VEX format. (k) Attestation following Major Version Change. Critical Software, as defined by National Institute for Science and Technology (NIST) Guidance, that is provided by the Contractor or subcontractors and is modified during the contract's period of performance by a major version change (e.g., using a semantic versioning schema of Major.Minor.Patch, the software version number goes from 2.5 to 3.0) requires a new self attestation. For indefinite delivery contract vehicles, this self attestation must be provided for all critical software available for ordering on the contract vehicle when the software is modified during the contract vehicle's ordering period of performance by a major version change. The Contractor shall either (i) post the new attestation in a publicly available internet location within 15 days of the major version change and provide the COR, or Contracting Officer if a COR is not appointed, with the internet link or (ii) shall contact the COR, or Contracting Officer if a COR is not appointed, and request the agency's current software self attestation form and submit it to the Government within 15 days of the major version change. The self attestation form will contain the following elements: (i) the software producer's name; (ii) a description of which product or products the statement refers to including the number of the major version change; and (iii) a statement attesting that the software producer follows secure development practices and tasks consistent with NIST Guidance. (end of clause) The offeror shall include in its offer a completed Attachment A (C- SCRM Questionnaire) and C-SCRM Software Producer Attestation Form, which shall be completed in accordance with the attachments instructions. Failure to follow the attachments instructions may result in rejection of the offer. This factor is evaluated on a go/no-go basis. The Government will evaluate whether the submitted C-SCRM Questionnaire and C-SCRM Software Producer Attestation Form meet the definition for the Go or No-Go ratings for this factor. If this is a Brand Name Only procurement, Seller certifies that it is an authorized distributer of the brand name product being sold to the Department of State and that it has the certification/specialization level required by the manufacturer, to support both the product sale and product pricing, in accordance with applicable manufacturer certification/specialization requirements. Unless otherwise specified, Seller warrants that the products are new and in their original box(es). In addition to providing pricing at www.UnisonMarketplace.com for this solicitation, each Offeror must provide any required, NON-PRICING responses (e.g. technical proposal, representations and certifications, etc.) so that they are received no later than the closing date and time for this solicitation; these shall be uploaded with the Offeror's bid via Unison Marketplace. This solicitation requires registration with the System for Award Management (SAM) prior to award, pursuant to FAR 4.1102 and other applicable regulations and guidelines. Information can be found at www.sam.gov. Registration must be "ACTIVE" at the time of award. All Bids must be valid for 30 days from the closing date for this solicitation. No exceptions or qualifications. New equipment ONLY, NO grey market or refurbished products. Items must be in original packaging, never used, and not altered in any way. Components of the requested equipment, to include memory, must be manufacturer-approved and may not be compatible, remanufactured, or refurbished equipment. All items must be covered by manufacturers warranty and procured through a manufacturer approved distribution channel. Sellers must be able to document their ability to provide items through manufacturer approved distribution channels upon request.The Seller confirms to have sourced all products submitted in this Bid from manufacturer-approved channels for Federal sales, in accordance with all applicable laws and manufacturers current applicable policies at the time of purchase. Seller must be able to support both the product sale and product pricing, in accordance with applicable manufacturer certification / specialization requirements. If software is provided or included, Seller shall, upon request, provide Buyer with a copy of the End User License Agreement. Seller certifies that all software is licensed originally to Buyer as the original licensee authorized to use the software. All bid prices must include shipping FOB Destination. No partial shipments are permitted, unless otherwise specified by Contracting Officer at time of award. To be considered for award, all Sellers must be manufacturer federally authorized distributors/resellers of the equipment/services they are offering with a demonstrated capability of delivering the entire order within the timeframes specified by the Buyer on the award. Sellers shall be required to provide documentation as proof of authorization to be considered for award. The Offeror shall not complete the representation at paragraph (d)(1) of this provision if the Offeror has represented that it does not provide covered telecommunications equipment or services as a part of its offered products or services to the Government in the performance of any contract, subcontract, or other contractual instrument in the provision at 52.204-26, Covered Telecommunications Equipment or ServicesRepresentation, or in paragraph (v) of the provision at 52.212-3, Offeror Representations and Certifications-Commercial Items. (a) Definitions. As used in this provision Backhaul, covered telecommunications equipment or services, critical technology, interconnection arrangements, reasonable inquiry, roaming, and substantial or essential component have the meanings provided in the clause 52.204-25, Prohibition on Contracting for Certain Telecommunications and Video Surveillance Services or Equipment. (b) Prohibition. (1) Section 889(a)(1)(A) of the John S. McCain National Defense Authorization Act for Fiscal Year 2019 (Pub. L. 115-232) prohibits the head of an executive agency on or after August 13, 2019, from procuring or obtaining, or extending or renewing a contract to procure or obtain, any equipment, system, or service that uses covered telecommunications equipment or services as a substantial or essential component of any system, or as critical technology as part of any system. Nothing in the prohibition shall be construed to (i)Prohibit the head of an executive agency from procuring with an entity to provide a service that connects to the facilities of a third-party, such as backhaul, roaming, or interconnection arrangements; or (ii)Cover telecommunications equipment that cannot route or redirect user data traffic or cannot permit visibility into any user data or packets that such equipment transmits or otherwise handles. (2) Section 889(a)(1)(B) of the John S. McCain National Defense Authorization Act for Fiscal Year 2019 (Pub. L. 115-232) prohibits the head of an executive agency on or after August 13, 2020, from entering into a contract or extending or renewing a contract with an entity that uses any equipment, system, or service that uses covered telecommunications equipment or services as a substantial or essential component of any system, or as critical technology as part of any system. This prohibition applies to the use of covered telecommunications equipment or services, regardless of whether that use is in performance of work under a Federal contract. Nothing in the prohibition shall be construed to (i)Prohibit the head of an executive agency from procuring with an entity to provide a service that connects to the facilities of a third-party, such as backhaul, roaming, or interconnection arrangements; or (ii)Cover telecommunications equipment that cannot route or redirect user data traffic or cannot permit visibility into any user data or packets that such equipment transmits or otherwise handles. (c) Procedures. The Offeror shall review the list of excluded parties in the System for Award Management (SAM) (https://www.sam.gov) for entities excluded from receiving federal awards for covered telecommunications equipment or services. (d) Representation. The Offeror represents that (1)It will, will not provide covered telecommunications equipment or services to the Government in the performance of any contract, subcontract or other contractual instrument resulting from this solicitation. The Offeror shall provide the additional disclosure information required at paragraph (e)(1) of this section if the Offeror responds will in paragraph (d)(1) of this section; and (2)After conducting a reasonable inquiry, for purposes of this representation, the Offeror represents that It does, does not use covered telecommunications equipment or services, or use any equipment, system, or service that uses covered telecommunications equipment or services. The Offeror shall provide the additional disclosure information required at paragraph (e)(2) of this section if the Offeror responds does in paragraph (d)(2) of this section. (e) Disclosures. (1) Disclosure for the representation in paragraph (d)(1) of this provision. If the Offeror has responded will in the representation in paragraph (d)(1) of this provision, the Offeror shall provide the following information as part of the offer: (i)For covered equipment (A)The entity that produced the covered telecommunications equipment (include entity name, unique entity identifier, CAGE code, and whether the entity was the original equipment manufacturer (OEM) or a distributor, if known); (B)A description of all covered telecommunications equipment offered (include brand; model number, such as OEM number, manufacturer part number, or wholesaler number; and item description, as applicable); and (C)Explanation of the proposed use of covered telecommunications equipment and any factors relevant to determining if such use would be permissible under the prohibition in paragraph (b)(1) of this provision. (ii)For covered services (A)If the service is related to item maintenance: A description of all covered telecommunications services offered (include on the item being maintained: Brand; model number, such as OEM number, manufacturer part number, or wholesaler number; and item description, as applicable); or (B)If not associated with maintenance, the Product Service Code (PSC) of the service being provided; and explanation of the proposed use of covered telecommunications services and any factors relevant to determining if such use would be permissible under the prohibition in paragraph (b)(1) of this provision. (2) Disclosure for the representation in paragraph (d)(2) of this provision. If the Offeror has responded does in the representation in paragraph (d)(2) of this provision, the Offeror shall provide the following information as part of the offer: (i)For covered equipment (A)The entity that produced the covered telecommunications equipment (include entity name, unique entity identifier, CAGE code, and whether the entity was the OEM or a distributor, if known); (B)A description of all covered telecommunications equipment offered (include brand; model number, such as OEM number, manufacturer part number, or wholesaler number; and item description, as applicable); and (C)Explanation of the proposed use of covered telecommunications equipment and any factors relevant to determining if such use would be permissible under the prohibition in paragraph (b)(2) of this provision. (ii)For covered services (A)If the service is related to item maintenance: A description of all covered telecommunications services offered (include on the item being maintained: Brand; model number, such as OEM number, manufacturer part number, or wholesaler number; and item description, as applicable); or (B)If not associated with maintenance, the PSC of the service being provided; and explanation of the proposed use of covered telecommunications services and any factors relevant to determining if such use would be permissible under the prohibition in paragraph (b)(2) of this provision. (End of provision) (a) Definitions. As used in this clause Backhaul means intermediate links between the core network, or backbone network, and the small subnetworks at the edge of the network (e.g., connecting cell phones/towers to the core telephone network). Backhaul can be wireless (e.g., microwave) or wired (e.g., fiber optic, coaxial cable, Ethernet). Covered foreign country means The Peoples Republic of China. Covered telecommunications equipment or services means (1) Telecommunications equipment produced by Huawei Technologies Company or ZTE Corporation (or any subsidiary or affiliate of such entities); (2) For the purpose of public safety, security of Government facilities, physical security surveillance of critical infrastructure, and other national security purposes, video surveillance and telecommunications equipment produced by Hytera Communications Corporation, Hangzhou Hikvision Digital Technology Company, or Dahua Technology Company (or any subsidiary or affiliate of such entities); (3) Telecommunications or video surveillance services provided by such entities or using such equipment; or (4) Telecommunications or video surveillance equipment or services produced or provided by an entity that the Secretary of Defense, in consultation with the Director of National Intelligence or the Director of the Federal Bureau of Investigation, reasonably believes to be an entity owned or controlled by, or otherwise connected to, the government of a covered foreign country. Critical technology means (1) Defense articles or defense services included on the United States Munitions List set forth in the International Traffic in Arms Regulations under subchapter M of chapter I of title 22, Code of Federal Regulations; (2) Items included on the Commerce Control List set forth in Supplement No. 1 to part 774 of the Export Administration Regulations under subchapter C of chapter VII of title 15, Code of Federal Regulations, and controlled- (i) Pursuant to multilateral regimes, including for reasons relating to national security, chemical and biological weapons proliferation, nuclear nonproliferation, or missile technology; or (ii) For reasons relating to regional stability or surreptitious listening; (3) Specially designed and prepared nuclear equipment, parts and components, materials, software, and technology covered by part 810 of title 10, Code of Federal Regulations (relating to assistance to foreign atomic energy activities); (4) Nuclear facilities, equipment, and material covered by part 110 of title 10, Code of Federal Regulations (relating to export and import of nuclear equipment and material); (5) Select agents and toxins covered by part 331 of title 7, Code of Federal Regulations, part 121 of title 9 of such Code, or part 73 of title 42 of such Code; or (6) Emerging and foundational technologies controlled pursuant to section 1758 of the Export Control Reform Act of 2018 (50 U.S.C. 4817). Interconnection arrangements means arrangements governing the physical connection of two or more networks to allow the use of another's network to hand off traffic where it is ultimately delivered (e.g., connection of a customer of telephone provider A to a customer of telephone company B) or sharing data and other information resources. Reasonable inquiry means an inquiry designed to uncover any information in the entity's possession about the identity of the producer or provider of covered telecommunications equipment or services used by the entity that excludes the need to include an internal or third-party audit. Roaming means cellular communications services (e.g., voice, video, data) received from a visited network when unable to connect to the facilities of the home network either because signal coverage is too weak or because traffic is too high. Substantial or essential component means any component necessary for the proper function or performance of a piece of equipment, system, or service. (b) Prohibition. (1) Section 889(a)(1)(A) of the John S. McCain National Defense Authorization Act for Fiscal Year 2019 (Pub. L. 115-232) prohibits the head of an executive agency on or after August 13, 2019, from procuring or obtaining, or extending or renewing a contract to procure or obtain, any equipment, system, or service that uses covered telecommunications equipment or services as a substantial or essential component of any system, or as critical technology as part of any system. The Contractor is prohibited from providing to the Government any equipment, system, or service that uses covered telecommunications equipment or services as a substantial or essential component of any system, or as critical technology as part of any system, unless an exception at paragraph (c) of this clause applies or the covered telecommunication equipment or services are covered by a waiver described in FAR 4.2104. (2) Section 889(a)(1)(B) of the John S. McCain National Defense Authorization Act for Fiscal Year 2019 (Pub. L. 115-232) prohibits the head of an executive agency on or after August 13, 2020, from entering into a contract, or extending or renewing a contract, with an entity that uses any equipment, system, or service that uses covered telecommunications equipment or services as a substantial or essential component of any system, or as critical technology as part of any system, unless an exception at paragraph (c) of this clause applies or the covered telecommunication equipment or services are covered by a waiver described in FAR 4.2104. This prohibition applies to the use of covered telecommunications equipment or services, regardless of whether that use is in performance of work under a Federal contract. c) Exceptions. This clause does not prohibit contractors from providing (1) A service that connects to the facilities of a third-party, such as backhaul, roaming, or interconnection arrangements; or (2) Telecommunications equipment that cannot route or redirect user data traffic or permit visibility into any user data or packets that such equipment transmits or otherwise handles. (d) Reporting requirement. (1) In the event the Contractor identifies covered telecommunications equipment or services used as a substantial or essential component of any system, or as critical technology as part of any system, during contract performance, or the Contractor is notified of such by a subcontractor at any tier or by any other source, the Contractor shall report the information in paragraph (d)(2) of this clause to the Contracting Officer, unless elsewhere in this contract are established procedures for reporting the information; in the case of the Department of Defense, the Contractor shall report to the website at https://dibnet.dod.mil. For indefinite delivery contracts, the Contractor shall report to the Contracting Officer for the indefinite delivery contract and the Contracting Officer(s) for any affected order or, in the case of the Department of Defense, identify both the indefinite delivery contract and any affected orders in the report provided at https://dibnet.dod.mil. (2) The Contractor shall report the following information pursuant to paragraph (d)(1) of this clause (i) Within one business day from the date of such identification or notification: the contract number; the order number(s), if applicable; supplier name; supplier unique entity identifier (if known); supplier Commercial and Government Entity (CAGE) code (if known); brand; model number (original equipment manufacturer number, manufacturer part number, or wholesaler number); item description; and any readily available information about mitigation actions undertaken or recommended. (ii) Within 10 business days of submitting the information in paragraph (d)(2)(i) of this clause: any further available information about mitigation actions undertaken or recommended. In addition, the Contractor shall describe the efforts it undertook to prevent use or submission of covered telecommunications equipment or services, and any additional efforts that will be incorporated to prevent future use or submission of covered telecommunications equipment or services. (e) Subcontracts. The Contractor shall insert the substance of this clause, including this paragraph (e) and excluding paragraph (b)(2), in all subcontracts and other contractual instruments, including subcontracts for the acquisition of commercial items. (End of clause) To be considered for award, all vendors submitting bids for this requirement must self-certify conformance in their SAM.gov representations as required in FAR 52.204-24, FAR 52.204-25 and FAR 52.204-26 in accordance with FAR Interim Rule 2019-009. Vendors that fail to complete this self-certification or present with a record that does not reflect conformance at FAR 52.204-26 and FAR 52.212-3 (v) within SAM.gov will not be considered for award. (a) Definitions. As used in this provision, covered telecommunications equipment or services has the meaning provided in the clause 52.204-25, Prohibition on Contracting for Certain Telecommunications and Video Surveillance Services or Equipment. (b) Procedures. The Offeror shall review the list of excluded parties in the System for Award Management (SAM) (https://www.sam.gov) for entities excluded from receiving federal awards for covered telecommunications equipment or services. (c) Representation. The Offeror represents that it does, does not provide covered telecommunications equipment or services as a part of its offered products or services to the Government in the performance of any contract, subcontract, or other contractual instrument. (a) The Department of State's Advocate for Competition is responsible for assisting industry in removing restrictive requirements from Department of State solicitations and removing barriers to full and open competition and use of commercial items. If such a solicitation is considered competitively restrictive or does not appear properly conducive to competition and commercial practices, potential offerors are encouraged first to contact the contracting officer for the solicitation. If concerns remain unresolved, contact: (a) Definitions. As used in this provision: Foreign person means any person other than a United States person as defined below. United States person means any United States resident or national (other than an individual resident outside the United States and employed by other than a United States person), any domestic concern (including any permanent domestic establishment of any foreign concern), and any foreign subsidiary or affiliate (including any permanent foreign establishment) of any domestic concern which is controlled in fact by such domestic concern, as provided under the Export Administration Act of 1979, as amended. (b) Certification. By submitting this offer, the offeror certifies that it is not: (1) Taking or knowingly agreeing to take any action, with respect to the boycott of Israel by Arab League countries, which Section 8(a) of the Export Administration Act of 1979, as amended (50 U.S.C. 2407(a)) prohibits a United States person from taking; or, (2) Discriminating in the award of subcontracts on the basis of religion. (End of provision) All offers/bids submitted in response to this solicitation must address the approach for completing the security plan and certification and accreditation requirements as required by the clause at 652.239-71, Security Requirements for Unclassified Information Technology Resources. (End of provision) (a) General. The Contractor shall be responsible for information technology (IT) security, based on Department of State (DOS) risk assessments, for all systems connected to a Department of State (DOS) network or operated by the Contractor for DOS, regardless of location. This clause is applicable to all or any part of the contract that includes information technology resources or services in which the Contractor has physical or electronic access to DOS's information that directly supports the mission of DOS. The term information technology, as used in this clause, means any equipment, including telecommunications equipment, that is used in the automatic acquisition, storage, manipulation, management, movement, control, display, switching, interchange, transmission, or reception of data or information. This includes both major applications and general support systems as defined by OMB Circular A-130. Examples of tasks that require security provisions include: (1) Hosting of DOS e-Government sites or other IT operations; (2) Acquisition, transmission or analysis of data owned by DOS with significant replacement cost should the Contractor's copy be corrupted; and (3) Access to DOS general support systems/major applications at a level beyond that granted the general public; e.g., bypassing a firewall. (b) IT Security Plan. The Contractor shall develop, provide, implement, and maintain an IT Security Plan. This plan shall describe the processes and procedures that will be followed to ensure appropriate security of IT resources that are developed, processed, or used under this contract. The plan shall describe those parts of the contract to which this clause applies. The Contractor's IT Security Plan shall comply with applicable Federal laws that include, but are not limited to, 40 U.S.C. 11331, the Federal Information Security Management Act (FISMA) of 2002, and the E-Government Act of 2002. The plan shall meet IT security requirements in accordance with Federal and DOS policies and procedures, as they may be amended from time to time during the term of this contract that include, but are not limited to: (1) OMB Circular A-130, Management of Federal Information Resources, Appendix III, Security of Federal Automated Information Resources; (2) National Institute of Standards and Technology (NIST) Guidelines (see NIST Special Publication 800-37, Guide for the Security Certification and Accreditation of Federal Information Technology Systems (http://csrc.nist.gov/publications/nistpubs/800-37/SP800-37-final.pdf)); and (3) Department of State information security sections of the Foreign Affairs Manual (FAM) and Foreign Affairs Handbook (FAH) (http://foia.state.gov/Regs/Search.asp), specifically: (i) 12 FAM 230, Personnel Security; (ii) 12 FAM 500, Information Security (sections 540, 570, and 590); (iii) 12 FAM 600, Information Security Technology (section 620, and portions of 650); (iv) 5 FAM 1060, Information Assurance Management; and (v) 5 FAH 11, Information Assurance Handbook. (c) Submittal of IT Security Plan. Within 30 days after contract award, the Contractor shall submit the IT Security Plan to the Contracting Officer and Contracting Officer's Representative (COR) for acceptance. This plan shall be consistent with and further detail the approach contained in the contractor's proposal or sealed bid that resulted in the award of this contract and in compliance with the requirements stated in this clause. The plan, as accepted by the Contracting Officer and COR, shall be incorporated into the contract as a compliance document. The Contractor shall comply with the accepted plan. (d) Accreditation. Within six (6) months after contract award, the Contractor shall submit written proof of IT security accreditation for acceptance by the Contracting Officer. Such written proof may be furnished either by the Contractor or by a third party. Accreditation must be in accordance with NIST Special Publication 800-37. This accreditation will include a final security plan, risk assessment, security test and evaluation, and disaster recovery plan/continuity of operations plan. This accreditation, when accepted by the Contracting Officer, shall be incorporated into the contract as a compliance document, and shall include a final security plan, a risk assessment, security test and evaluation, and disaster recovery/continuity of operations plan. The Contractor shall comply with the accepted accreditation documentation. (e) Annual verification. On an annual basis, the Contractor shall submit verification to the Contracting Officer that the IT Security Plan remains valid. (f) Warning notices. The Contractor shall ensure that the following banners are displayed on all DOS systems (both public and private) operated by the Contractor prior to allowing anyone access to the system SECTION 8(A) OF THE EXPORT ADMINISTRATION ACT OF 1979, AS AMENDED (AUG 1999)(a) Section 8(a) of the U.S. Export Administration Act of 1979, as amended (50 U.S.C. 2407(a)), prohibits compliance by U.S. persons with any boycott fostered by a foreign country against a country which is friendly to the United States and which is not itself the object of any form of boycott pursuant to United States law or regulation. The Boycott of Israel by Arab League countries is such a boycott, and therefore, the following actions, if taken with intent to comply with, further, or support the Arab League Boycott of Israel, are prohibited activities under the Export Administration Act:(1) Refusing, or requiring any U.S. person to refuse to do business with or in Israel, with any Israeli concern, or with any national or resident of Israel, or with any other person, pursuant to an agreement of, or a request from or on behalf of a boycotting country;(2) Refusing, or requiring any U.S. person to refuse to employ or otherwise discriminating against any person on the basis of race, religion, sex, or national origin of that person or of any owner, officer, director, or employee of such person;(3) Furnishing information with respect to the race, religion, or national origin of any U.S. person or of any owner, officer, director, or employee of such U.S. person;(4) Furnishing information about whether any person has, has had, or proposes to have any business relationship (including a relationship by way of sale, purchase, legal or commercial representation, shipping or other transport, insurance, investment, or supply) with or in the State of Israel, with any business concern organized under the laws of the State of Israel, with any Israeli national or resident, or with any person which is known or believed to be restricted from having any business relationship with or in Israel;(5) Furnishing information about whether any person is a member of, has made contributions to, or is otherwise associated with or involved in the activities of any charitable or fraternal organization which supports the State of Israel; and,(6) Paying, honoring, confirming, or otherwise implementing letter of credit which contains any condition or requirement against doing business with the State of Israel.(b) Under Section 8(a), the following types of activities are not forbidden compliance with the boycott, and are therefore exempted from Section 8(a)s prohibitions listed in paragraphs (a)(1) through (6) above:(1) Complying or agreeing to comply with requirements:(i) Prohibiting the import of goods or services from Israel or goods produced or services provided by any business concern organized under the laws of Israel or by nationals or residents of Israel; or,(ii) Prohibiting the shipment of goods to Israel on a carrier of Israel, or by a route other than that prescribed by the boycotting country or the recipient of the shipment; (2) Complying or agreeing to comply with import and shipping document requirements with respect to the country of origin, the name of the carrier and route of shipment, the name of the supplier of the shipment or the name of the provider of other services, except that no information knowingly furnished or conveyed in response to such requirements may be stated in negative, blacklisting, or similar exclusionary terms, other than with respect to carriers or route of shipments as may be permitted by such regulations in order to comply with precautionary requirements protecting against war risks and confiscation; Buy Term Description: The selected Offeror must comply with the following commercial item terms and conditions. FAR 52.212-1, Instructions to Offerors - Commercial, applies to this acquisition. The selected Offeror must submit a completed copy of the provision at 52.212-3, Offeror Representations and Certifications - Commercial Items. FAR 52.212-4, Contract Terms and Conditions - Commercial Items, applies to this acquisition. The following FAR clauses in paragraph (b) of FAR clause 52.212-5, Contract Terms and Conditions Required To Implement Statutes or Executive Orders-Commercial Items, will apply: 52.222-21, 52.222-26, 52.222-35, 52.222-36, 52.222-37, 52.225-13, 52.232-34. The full text of a FAR clause may be accessed electronically at http://www.acquisition.gov/far/ Examination of Recordsa.With respect to matters related to this contract or a subcontract hereunder, the Department of State Office of the Inspector General, or an authorized representative, shall have upon request:1.Complete, prompt, and free access to all Contractor and Subcontractor files (in any format), documents, records, data, premises, and employees, except as limited by law; and2.The right to interview any current Contractor and Subcontractor personnel, individually and directly, with respect to such matters.b.This clause may not be construed to require the contractor or any subcontractor to create or maintain any record that the contractor or subcontractor does not maintain in the ordinary course of business or pursuant to a provision of law.c.The Contractor shall insert a clause containing all the terms of this clause, including this paragraph (c), in all subcontracts under this contract other than acquisitions described in Federal Acquisition Regulation 15.209(b)(1).(87 FR 1082, Jan 10, 2022) PROHIBITION ON A BYTEDANCE COVERED APPLICATION (JUN 2023)(a) Definitions. As used in this clauseCovered application means the social networking service TikTok or any successor application or service developed or provided by ByteDance Limited or an entity owned by ByteDance Limited.Information technology, as defined in 40 U.S.C. 11101(6)(1) Means any equipment or interconnected system or subsystem of equipment, used in the automatic acquisition, storage, analysis, evaluation, manipulation, management, movement, control, display, switching, interchange, transmission, or reception of data or information by the executive agency, if the equipment is used by the executive agency directly or is used by a contractor under a contract with the executive agency that requires the use(i) Of that equipment; or(ii) Of that equipment to a significant extent in the performance of a service or the furnishing of a product;(2) Includes computers, ancillary equipment (including imaging peripherals, input, output, and storage devices necessary for security and surveillance), peripheral equipment designed to be controlled by the central processing unit of a computer, software, firmware and similar procedures, services (including support services), and related resources; but(3) Does not include any equipment acquired by a Federal contractor incidental to a Federal contract. (b) Prohibition. Section 102 of Division R of the Consolidated Appropriations Act, 2023 (Pub. L. 117-328), the No TikTok on Government Devices Act, and its implementing guidance under Office of Management and Budget (OMB) Memorandum M-23-13, dated February 27, 2023, No TikTok on Government Devices Implementation Guidance, collectively prohibit the presence or use of a covered application on executive agency information technology, including certain equipment used by Federal contractors. The Contractor is prohibited from having or using a covered application on any information technology owned or managed by the Government, or on any information technology used or provided by the Contractor under this contract, including equipment provided by the Contractors employees; however, this prohibition does not apply if the Contracting Officer provides written notification to the Contractor that an exception has been granted in accordance with OMB Memorandum M-23-13.(c) Subcontracts. The Contractor shall insert the substance of this clause, including this paragraph (c), in all subcontracts, including subcontracts for the acquisition of commercial products or commercial services.(End of clause) Pursuant to the Trade Agreements Act (19 U.S.C. 2512(a)) (TAA), Federal acquisitions of supplies may be made only from offerors that will supply products of an eligible country under any of the free trade agreements entered into pursuant to the TAA. An article is considered a product of a country only if it is wholly a product of that country or if it has been substantially transformed in that country into a new and different article of commerce with a name, character, or use distinct from that of the original article(s). Note that any item that is a discreet article as it is sold in commerce, regardless of its ultimate function or use, cannot be considered substantially transformed based solely on its integration into IT or other systems. The Contractor and its employees shall exercise the utmost discretion in regard to all matters relating to their duties and functions. They shall not communicate to any person any information known to them by reason of their performance of services under this contract which has not been made public, except in the necessary performance of their duties or upon written authorization of the Contracting Officer. All documents and records (including photographs) generated during the performance of work under this contract shall be for the sole use and become the exclusive property of the U.S Government. Furthermore, no article, book, pamphlet, email, recording, broadcast, speech television appearance, film or photograph concerning any aspect of work performed under this contract shall be published or disseminated through any media without the prior written authorization of the Contracting Officer. These obligations do no cease upon the expiration or termination of this contract. The Contractor shall include the substance of this provision in all contracts of employment and in all subcontracts hereunder.