Microform Scanner System

NATIONAL ARCHIVES AND RECORDS ADMINISTRATION REQUEST FOR QUOTE (RFQ) For EQUIPMENT AND MAINTENANCE SERVICES FOR MICROFORM SCANNERS RFQ 88310319Q00023 This is a combined synopsis/solicitation for commercial items prepared in accordance with the format in FAR Subpart 12.6, Streamlined Procedures for Evaluation and Solicitation for Commercial Items, as supplemented with additional information included in this notice. This announcement constitutes the only solicitation; quotations are being requested. A written solicitation will not be issued. The solicitation number is 88310319Q00023 and is issued as a Request for Quotation (RFQ). This request does not commit the Government to pay any costs incurred in the preparation or the submission of a quotation or to contract for supplies or services. The solicitation document, incorporated provisions and clauses are those in effect through Federal Acquisition Circular 2005-101 effective October 26, 2018. This requirement is restricted to Small Business. CONTRACT LINE ITEM NUMBER(S): See Attachment 1, to Combined Synopsis /Solicitation. REQUIREMENT: The National Archives and Records Administration (NARA) has a requirement to obtain Equipment and Maintenance Services for a Microform Scanner System. See attached Specification. Delivery 30 days after award. FOB: Destination. The following Federal Acquisition Regulation (FAR) clauses are incorporated and are to remain in full force in any resultant contract, with the exception of FAR provisions which will be removed prior to issuance of the contract: FAR 52.212-1, Instructions to Offerors - Commercial Items (Aug 2018) - Note: Delete paragraph (h), Multiple Awards. See below for additional quotation submission instructions. EVALUATION (In lieu of FAR 52.212-2): Evaluation and award will be in accordance with Simplified Acquisition Procedures at FAR Subpart 13.106, Solicitation Competition, Evaluation of Quotations or Offers, Award and Documentation authorized by FAR Subpart 13.5, Simplified Procedures for Certain Commercial Items. NARA intends to award a fixed price contract based on Lowest Price Technically Acceptable quotation for the total contract price. Therefore, award will be made to the responsible Contractor whose quotation, conforming to the RFQ, represents the Lowest Price Technically Acceptable quotation. See Attachment 1 - Part IV, Quotation Submission Form. The firm-fixed unit prices must include the fully burdened cost for delivering the supplies required by this contract. See Attachment 1 - Part I, Schedule of Prices. The contractor agrees to hold the prices in its quotation firm for 30 days from the date specified for receipt of quotations. Exceptions taken to any terms and conditions stated in the RFQ must be clearly outlined on a separate page of the Contractor's quotation entitled "Exceptions". The Contractor must also include complete rationale, justification, and the cost impact of each exception noted. The Government reserves the right to make an award on the initial quotation without discussions. FAR 52.212-3, Offeror Representations and Certifications - Commercial Items (Oct. 2018) - The offeror shall complete only paragraphs (b) of this provision if the Offeror has completed the annual representations and certifications electronically via the System for Award Management (SAM) Web site located at http://www.sam.gov/portal. If the Offeror has not completed the annual representations and certifications electronically, the Offeror shall complete only paragraphs (c) through (u) of this provision. If an offeror has not completed the annual representations and certifications electronically at the System for Award Management (SAM) website, the offeror shall complete only paragraphs (c) through (o) of this provision. Only vendors who are current in SAM and have a valid DUNS number at quote submission date will be eligible for award. FAR 52.212-4, Contract Terms and Conditions - Commercial Items (Oct. 2018) - See Attachment 1 - Part III, Additional NARA Terms and Conditions (Addenda to FAR clause 52.212-4); FAR 52.212-5, Contract Terms and Conditions Required to Implement Statutes or Executive Orders - Commercial Items (Oct. 2018) - see Attachment 1 - Part III, FAR Clauses. Full text provisions and clauses can be found at http://www.acquisition.gov/far/. QUESTIONS: All question must be submitted to James Newell via e-mail at contact@example.gov by no later than 11:00 AM Eastern Time (ET) on February 11, 2018. CONTRACTORS ARE REQUESTED TO SUBMIT QUOTATIONS BY 11:00 AM ET ON February 21, 2018. FAILURE TO DO SO MAY RESULT IN REJECTION F THE QUOTATION AS UNTIMELY. CONTRACTORS SUBMITTING VIA E-MAIL ARE CAUTIONED TO ALLOW ONE EXTRA BUSINESS DAY FOR DELIVERY AND CONFIRM RECEIPT OF QUOTATION AS THE E-MAIL WILL NEED TO PASS THROUGH IT SECURITY. The Government will answer questions or requests for clarification via a written RFQ amendment. Failure to submit quotations by the due date may result in rejection of the quotation as untimely. Submit quotations via fax or e-mail to: ATTN: James Newell, Contract Specialist contact@example.gov Fax: +1 (555) 000-0000 This will be a firm fixed price contract. IMPORTANT INFORMATION FOR CONTRACTORS Depending on the final results of the evaluation, the resulting contract from this RFQ will include some or all of the FAR Clauses and NARA Terms and Conditions in Parts II and III. PART I THE SCHEDULE OF SUPPLIES OR SERVICES AND PRICES/COSTS 1. SUPPLIES AND/OR SERVICES TO BE FURNISHED The purpose of this contract is to acquire the services of a contractor for the Purchase and Maintenance Services for a Microform Scanner System with an External Data Storage Device 10TB including Software for the National Archives and Records Administration (NARA). This is a firm fixed price contract. All work shall be performed under the terms and conditions of the manufacturer's latest maintenance requirement and this contract as Firm-Fixed Price (FFP). The FFP will include the fully burdened cost for delivery and services required by this contract. The Contractor is required to furnish all the equipment, supplies and services that can be identified in advance, both in sufficient detail and quantities, for which a fair and reasonable price can be obtained. 2. PRICING: (a) Each Contractor shall identify the "Unit Price" and "Total Price" for the firm-fixed-priced items and services described in paragraph 3. (b) The "Unit Price" for each CLIN shall be the Contractors price for the item or services identified. (c) The "Total Price" for each separately price CLIN shall be the "Unit Price" multiplied by the Quantity. (d) The Total Firm-fixed Contract Price shall be the firm-fixed-price of all CLINS identified herein. (End of Clause) 3. SCHEDULE OF PRICES (a) In accordance with this contract, the Contractor shall provide all management, supervision, labor, material, supplies, transportation, and equipment described herein (except as specified to be furnished by the Government), and shall plan, schedule, coordinate, and assure effective performance at NARA, of the following equipment and software products listed on the following table: PRICING (submitted pricing must adhere to the below table) CLIN NO SUPPLIES/SERVICE QTY UNIT UNIT PRICE AMOUNT 0001 Microform Scanner System capable of scanning microfiche and microfilm. 1 EA 0002 External 10 TB Data Storage device compatible with system(s) listed in CLIN0001 1 EA 0003 Installation of one (1) Microform Scanners System and one (1) External Shared Storage Device and training for two (2) people. All installation and training costs shall include Travel and materials costs. 1 SE 0004 Base Year: Maintenance Services for One (1) Microform Scanner System and Data Storage device. 1 Year 0005 Option year I: Maintenance Services for One (1) Microform Scanner System and Data Storage device. 1 Year 0006 Option Year II: Maintenance Services for One (1) Microform Scanner System and Data Storage device. 1 Year 0007 Option Year III: Maintenance Services for One (1) Microform Scanner System and Data Storage device. 1 Year TOTAL, FIRM-FIXED PRICE CONTRACTOR EVALUTATION/SELECTION Competition for this requirement is restricted to Small Business. Best value for this contract will be obtained through a lowest priced technically acceptable, with technical acceptability being defined as providing the required equipment, software, installation and training and maintenance services and being an authorized reseller. The Government will only accept commercial equipment and services. By including the option clause FAR 52.217-8, six additional months of service will be evaluated by the government at the price quoted for Option Year III, i.e. half of the total Option Year III price. The six additional months does not need to be quoted, but will be for evaluation purposes only. PART II Salient Characteristics for Microform Scanner System, External Data Storage, Installation, Training and Maintenance Requirements The National Archives and Records Administration, Trust Fund (NATF), in support of the National Archives and Records Administration (NARA) require one (1) microform scanner system (microfilm and microfiche), including external shared storage device, software, training installation and maintenance services (base year plus three possible options). Salient Characteristics: Scanning system may be offered as a single unit or a combination of two units. Unit(s) must use shared and/or compatible software and have common traits and features if two machines are offered. Only one offering may be submitted per contractor; if multiple offerings are included, the contractor will be excluded. Microfilm Portion of System - Ability to scan 35mm microfilm and 16mm microfilm. - Preferable scanning of aperture cards, either in microfilm offering or microfiche offering but not both. - "Smart" software finds breaks in film images. - Scanner speed of at least 150 ppm/fpm. - Option for optical character recognition. - Devices will be used in a high production environment. - Multiple file output options (i.e., JPG, TIF, PDF, etc). - Minimum resolution of 300 dpi. - Easy interface with a PC. - Scan modes should, at least, include a grayscale option. - Capable of creating a minimum of 8-bit scanned images. - Auto-skew and centering available. - Accompanying software should allow for, at least, enhancement, rotation, and re-sizing of images. - Windows 10 OS compatibility. Microfiche Portion of System - Ability to scan microfiche. - Option for optical character recognition. - Devices will be used in a high production environment. - Multiple file output options (i.e., JPG, TIF, PDF, etc). - Minimum resolution of 300 dpi. - Easy interface with a PC. - Scan modes should, at least, include a grayscale option. - Capable of creating a minimum of 8-bit scanned images. - Auto-skew and centering available. - Accompanying software should allow for, at least, enhancement, rotation, and re-sizing of images. - Windows 10 OS compatibility. Data Storage Portion of System - Available shared external storage device - 10 TB or greater. - Transfer rates up to, or exceeding, 200 MB/s. - Power supply included. - Micro-USB 3.0 Interface. USB 2.0 Compatible. - Windows 10 OS compatibility. Maintenance Services: - Maintenance Services shall include preventative maintenance and repair (remedial) services and all consumable operating supplies to maintain the equipment in first-class operating condition. - Repair (remedial) services consist of those unscheduled services calls necessary for repairs not caused by fire, water, accident and fluctuations in electrical power or customer abuse. - The Maintenance Plan shall include all costs associated with preventive maintenance and replacement/spare parts. Response time for services shall be in accordance with the manufacturers planned schedule within normal working hours. Installation and Training - Installation by properly trained personnel. - May require interaction with NARA IT staff. - Contractor must guarantee equipment to be fully installed and operational prior to departure. - In-person training to be conducted by the Contractor after installation of machines. All travel and materials cost for installation and training services shall be included in the contractor's quote. - Training must take place within five (5) working days of machine system installation. ? PART III CONTRACT ADMINISTRATION 1. CONTRACTOR RESPONSIBILITY The Contractor is responsible for the day-to-day inspection and monitoring of the Contractor work performed to ensure compliance with contractual requirements. The results of all the Contractor quality control inspections conducted must be documented on inspection checklists and be made available to the Government during the term of the contract. 2. GOVERNMENT CONTRACT ADMINISTRATION (a) This contract will be administered by: National Archives and Records Administration Acquisitions Branch, Code BCN 8601 Adelphi Road, Room 3340 College Park, MD 20740-6001 (b) Contract Administration: The Contracting Officer (CO) has the overall responsibility for the administration of this contract. Written communication to the Contract Specialist (CS) must make reference to the contract number and must be mailed, postage prepaid, to the above address. (c) Contracting Officer (CO) Any Z Warranted Contracting Officer (CO) The CO alone, without delegation, is authorized to take actions on behalf of the Government to amend, modify, or deviate from the contract terms, conditions, requirements, specifications, details and/or delivery schedules; make final decisions on disputed deductions from contract payments for non-performance or unsatisfactory performance; terminate the contract for convenience or default; and issue final decisions regarding contractual questions or matters under dispute. However, the CO may delegate certain other responsibilities to authorized representatives. 3. DESIGNATION OF CONTRACTING OFFICER'S REPRESENTATIVE (COR) a. COR: TBD Phone: E-Mail: b. The individual named above is designated as the Contracting Officer's Representative (COR) to assist the Contract Specialist (CO) in the discharge of the CO's responsibilities. The COR is responsible for monitoring, giving progress reports to the CO, and overall technical surveillance of services to be performed under this contract and should be contacted regarding questions or problems of a technical nature. In no event will any understanding or agreement, modification, change order, or other matter deviating from the terms of the contract between the Contractor and any person other than the CO be effective or binding upon the Government. c. When, in the opinion of the contracor, the COR requests effort outside the existing scope of the contract, the Contractor must promptly notify the CO in writing. d. No action will be taken by the Contractor under such technical instruction unless the CO has issued a contractual change. e. The responsibilities of the COR include, but are not limited to, the following: (1) Serve as the point-of-contact through which the Contractor can relay questions or problems of a technical nature to the CS and the CO; (2) Be responsible for the inspection and acceptance of the services performed and determining the adequacy of performance by the Contractor in accordance with the terms and conditions of this contract; (3) Confer with representatives of the Contractor regarding any non-performance or unsatisfactory performance; following through to assure that all non-performance or unsatisfactory performance is performed/corrected or payment adjustment is recommended to the CS and the CO; (4) Review and certify invoices in accordance with invoicing instructions of the contract. Maintain a file with copies of these documents; (5) Review and evaluate Contractor's cost estimates, furnish comments, and recommendations to the CS and the CO; (6) Advise the CS of any performance problems and make recommendations for corrective action to correct performance issues; (7) Furnish the CS with any requests for change, deviation, or waiver (whether generated by Government personnel or Contractor personnel), including all supporting paperwork in connection with such change, deviation, or waiver; and 8) Submit a written evaluation to the CS and the CO within 60 days of contract completion or annually on the anniversary for contracts that include options. The evaluation must include: (i) The quality and timeliness of the Contractor's performance; and (ii) A statement as to the uses made of any deliverables furnished by the Contractor. f. In addition to the specific duties as listed above, you are also responsible for knowing the employment status of the Contractor's employees working at the National Archives and Records Administration. When you are notified that the Contractor's employee is leaving the contract or the work site has changed, you must notify BX of the new status. You should also ensure that the Contractor's employee returns the NARA issued identification when they no longer need access to the buildings. Your signature is required on the Contractor's Identification Card Authorization in order for the Contractor's employee to be issued a NARA identification badge and a proximity card. An identification badge a proximity card will not be issued without a signed Authorization that includes an expiration date. Please refer to NARA Directive 275 for more information on Contractor's employees' identification badge issuance. 4. INVOICE SUBMISSION REQUIREMENTS A. The preferred method for invoicing is through the Invoice Processing Platform (IPP) which is a secure web-based electronic invoicing and payment information system. This service is provided by the U.S. Treasury's Bureau of the Fiscal Service free of charge to federal agencies and contractors. IPP allows contractors to view information regarding their contracts and orders, electronically submit invoices and view payment information. B. The IPP website address is https://www.ipp.gov. Contractors can obtain enrollment assistance by contacting the Fiscal Service Accounts Payable Help Desk via e-mail at contact@example.gov or by phone at +1 (555) 000-0000, Option 7. C. Contractors that are not able to utilize the IPP system for submitting payment requests may submit invoices electronically by e-mail to contact@example.gov. Microsoft Excel, Adobe Acrobat Portable Document Format (PDF) and Microsoft Word are acceptable formats. D. Invoices for services shall be submitted monthly unless otherwise stated elsewhere in the contract. E. For invoice and payment questions call the Fiscal Service AP Help Desk at +1 (555) 000-0000, Option 7. DISTRIBUTION LIST: (X) Contract File - Original (X) Contractor - 1 Copy (X) Requesting Office - 2 Copies (X) Invoice Approver - COR/POC - ( ) NAF - Property (e-mail: HQ-NARA-NAF-PMB) ( ) AII Loading Dock 5. CERTIFICATION OF INVOICE a. The CO and COR will review a copy of each invoice for correctness of labor categories used, services performed, etc. The COR will certify if services/supplies are satisfactorily received and: (1) Submit this receiving report information to the payment office for payment; or (2) Authorize reimbursement by Government purchase card. b. If the CO or COR disagrees with the invoice, the CO or COR, as appropriate, will immediately: (1) Notify the paying office or withhold Government purchase card reimbursement; (2) Contact the Contractor to resolve any discrepancies, (3) Obtain a corrected invoice; and, as appropriate, (4) Forward the corrected payment information to the paying office or authorize Government purchase card reimbursement. c. If only a portion of the invoice costs are in dispute, the CO or COR, if assigned, will certify only the undisputed costs and, as appropriate, submit the payment information to the payment office for partial payment or authorize only partial Government purchase card payment. The COR will work with the Contractor to resolve any remaining disputed costs. d. If the COR cannot resolve the invoice discrepancy with the Contractor, or if a problem has been noted with the Contractor's performance, the COR shall notify the Contracting Officer, in writing, with details of the problem. 6. FINAL PAYMENT Before final NARA payment is made, the Contractor must furnish to the CO a written release of all claims against the Government arising by virtue of the contract, other than claims in stated amounts as may be specifically excluded by the Contractor from the operation of the release. If the contractor's claim to amounts payable under the contract has been assigned under the Assignment of Claims Act of 1940, as amended (31 U.S.C. 203, 41 U.S.C. 15), a release may also be requested of the assignee. To ensure that all necessary adjustments for non-performance or unsatisfactory performance have been made and a release of claims has been submitted before the contract is closed out, the final NARA payment will be made in thirty (30) calendar days after receipt of a proper invoice, date of completion of performance, or receipt of release of claims by the CO, whichever is later. 7. SECURITY OF SYSTEMS HANDLING AND PROTECTION OF PERSONALLY IDENTIFIABLE INFORMATION (SEPTEMBER 2016) (a) Applicability This clause applies to all personally identifiable information, as defined in Section B, regardless of the medium in which it is found and includes paper records. (b) Definitions. As used in this clause: "Breach" means the loss of control, compromise, unauthorized disclosure, unauthorized acquisition, unauthorized access, or any similar situation where persons other than authorized users, and for other than authorized purpose, have access or potential access to personally identifiable information, in usable form whether physical or electronic. "Personally identifiable information (PII)" means any information that permits the identity of an individual to be directly or indirectly inferred, including any other information that is linked or linkable to that individual regardless of whether the individual is a citizen of the United States, legal permanent resident, or a visitor to the United States. Examples of PII include the following: (1) Name. (2) Date of birth. (3) Mailing address. (4) Telephone number. (5) Social Security Number. (6) Email address. (7) Zip code. (8) Account numbers. (9) Certificate/license numbers. (10) Vehicle identifiers including license plates. (11) Uniform resource locators (URLs). (12) Internet protocol addresses. (13) Biometric identifiers (e.g., fingerprints). (14) Photographic facial images. (15) Any other unique identifying number or characteristic. (16) Any information where it is reasonably foreseeable that the information will be linked with other information to identify the individual. "Sensitive personally identifiable information (sensitive PII)" means a subset of PII, which if lost, compromised or disclosed without authorization, could result in substantial harm, embarrassment, inconvenience, or unfairness to an individual. (1) Complete social security numbers, alien registration numbers (A-number) and biometric identifiers (such as fingerprint, voiceprint, or iris scan) are considered sensitive PII even if they are not coupled with additional PII. (2) Additional examples include any grouping of information that contains an individual's name or other unique identifier plus one or more of the following elements: (i) Driver's license number, passport number, or truncated social security number (such as last 4 digits); (ii) Date of birth (month, day, and year); (iii) Citizenship or immigration status; (iv) Financial information such as account numbers or electronic funds transfer information; (v) Medical information; and/or (vi) System authentication information such as mother's maiden name, account passwords or personal identification numbers. (3) Other PII may be "sensitive" depending on its context, such as a list of employees with less than satisfactory performance ratings or an unlisted home address or phone number. In contrast, a business card or public telephone directory of agency employees contains PII but it is not sensitive. (c) Data Security. (1) The Contractor shall limit access to the data covered by this clause to those employees and subcontractor who require the information in order to perform their official duties under this Contract. (2) The Contractor employees, and subcontractors must physically or electronically secure sensitive PII when not in use and/or under the control of an authorized individual, and when in transit to prevent unauthorized access or loss. (3) When sensitive PII is no longer needed or required to be retained under applicable Government records retention policies, it must be destroyed, as specified in the Contract, or if not specified in the Contract, through means that will make the sensitive PII irretrievable. (4) The Contractor shall only use sensitive PII obtained under this Contract for purposes of the Contractor; it shall not be disclosed, released, disseminated, or published without the prior written consent of the Contracting Officer. (5) If it is established elsewhere in this Contract that information to be utilized under this Contract, or a portion thereof, is subject to the Privacy Act, The Contractor shall follow the rules and procedures of disclosure set forth in the Privacy Act of 1974, 5 U.S.C. 552a, and implementing regulations and policies, with respect to systems of records determined to be subject to the Privacy Act. (6) At expiration or termination of this Contract, the Contractor shall turn over all sensitive PII obtained under the Contractor that is in its possession. (d) Systems Access. Work to be performed under this Contract may require the handling of PII. The Contractor shall provide the Government access to, and information regarding those systems handling sensitive PII for the Government under the Contractor, when requested by the Government, as part of the Contractor's responsibility to ensure compliance with security requirements, and shall otherwise cooperate with the Government in assuring compliance with such requirements. Government access shall include independent testing of controls, system penetration testing by the Government, Federal Information Security Management Act data reviews, and access by agency Inspectors General (IG) for IG reviews. When requested by the NARA CO or COR or other NARA official as described herein, in connection with NARA's efforts to ensure compliance with security requirements and to maintain and safeguard against threats and hazards to the security, confidentiality, integrity, and availability of NARA Information, Contractor shall provide NARA, including the NARA OIG, (1) access to any and all information and records, including electronic information, regarding a Covered Information System, and (2) physical access to Contractor's facilities, installations, systems, operations, documents, records, and databases. Such access may include independent validation testing of controls, system penetration testing, and FISMA data reviews by NARA or agents acting on behalf of NARA, and such access shall be provided within 72 hours of the request. Additionally, Contractor shall cooperate with NARA's efforts to ensure, maintain, and safeguard the security, confidentiality, integrity, and availability of NARA information. (e) Systems Security. (1) In performing its duties related to management, operation, and/or access of systems containing PII under this Contract, the Contractor, its employees and subcontractors shall comply with all applicable security requirements and rules of conduct applicable to the agency's systems as described in: a) NARA Directive 1608 http://www.archives.gov/foia/directives/nara1608.pdf and b) FedRAMP baseline controls for moderate IT systems. (2) In addition, the use of Contractor-Owned laptops or other portable storage devices to process or store sensitive PII is prohibited under this Contract until the Contractor provides, and the Contracting Officer, in coordination with the Senior Agency Official for Privacy (SAOP) or the SAOP's designee, approves the Contractor's written acknowledgment that the following requirements are met: (i) Laptops and other portable storage devices must employ encryption that is NIST Federal Information Processing Standard (FIPS) 140-2 validated (or its successor) http://csrc.nist.gov/publications/PubsFIPS.html, and approved. (ii) The Contractor has developed and implemented a process to ensure that security and other applications software are kept current. (iii) Mobile computing devices utilize anti-virus software and a host-based firewall mechanism. (iv) Removable media, such as hard drives, flash drives, devices with flash memory, CDs and floppy disks containing sensitive PII shall not be removed from a Government facility unless they are encrypted using a NIST FIPS 140-2 or successor approved product. (v) When no longer needed, all removable media, hard drives, and flash memory shall be destroyed in accordance with Government security requirements identified in NARA's Media Protection Methodology. (vi) The Contractor shall maintain an accurate inventory of devices used in the performance of this Contract. (vii) Contractor employee annual training and rules of conduct/behavior shall be developed by NARA as part of its annual PII training program. This training will be completed within 30 days of Contractor employees beginning work on a sensitive PII project and thereafter annually. Such completion will be acknowledged by employees in writing and reported to NARA's Senior Agency Official for Privacy or the SAOP's designee. (viii) All sensitive PII obtained under this Contract shall be removed from Contractor-Owned information technology assets upon termination or expiration of Contract work. Removal must be accomplished in accordance with standard FedRAMP controls for media protection in moderate IT systems. Certification of data removal will be performed by the Contractor's Project Manager and written notification confirming acknowledgment will be delivered to the Contracting Officer within 30 days of termination/expiration of Contract work. (ix) Back up or mirrors of any systems or files containing PII shall be treated in the same manner as the original data containing PII, with the same protections and obligations. (3) The Contractor shall require FIPS 140-2 (or successor) encryption of any sensitive PII when transmitted electronically across the Internet or other public works. (f) Breach Notification to Government. (1) The Contractor has been provided with: NARA Directive 1608, and is aware of its roles, responsibilities, and relationship with the Government in case of data breach. (2) In the event of any actual or suspected breach of sensitive PII, the Contractor shall immediately, and in no event later than one hour of discovery, report the breach to the Contracting Officer, the COR, the Senior Agency Official for Privacy (currently NARA's General Counsel contact@example.gov) and the Chief Information Officer (only for IT requirements) in accordance with NARA Directive 1608. (3) The Contractor is responsible for positively verifying that notification is received and acknowledged by appropriate Government parties identified in subparagraph (2) above. (4) In the event of a confirmed, potential or suspected Security Breach, involving unauthorized exposure, loss of control, compromise, exfiltration, manipulation, disclosure, acquisition, or accessing of any Covered Information System or any NARA Information accessed by, retrievable from, processed by stored on, or transmitted within, to or from any such system, Contractor shall immediately (and in no event later than within 1 hour of discovery) report any Confirmed Breach to the NARA CO and the CO's Representative (''COR"). (5) NARA, at it...