Replace High Mast Lights - FCI Sheridan

The U.S. Department of Justice, through the Federal Bureau of Prisons, has awarded a firm-fixed-price contract to Acavati, LLC, a small business, for the replacement of high mast and perimeter lighting at FCI Sheridan in Sheridan, Oregon. The contract, valued at $116,678.82, involves the supply and installation of 146 high mast LED fixtures and 14 perimeter LED flood lights, all meeting strict technical specifications including 4000K color temperature, IP66 wet-location rating, 277–480V voltage compatibility, die-cast aluminum housing, and a five-year warranty. Delivery is due no later than August 21, 2026, under FOB Destination terms, with performance running from May 4 to September 4, 2026. The contract is a total small business set-aside under NAICS code 335132, with Acavati, LLC certified as both a Women-Owned Small Business and an Economically Disadvantaged Women-Owned Small Business. Inspection and acceptance occur at the delivery site by the Contracting Officer’s Representative, who holds exclusive authority to verify conformance to contractual requirements. The contract incorporates a range of FAR clauses, including those related to whistleblower rights, subcontracting restrictions, child labor, equal opportunity for veterans and workers with disabilities, combating trafficking in persons, and Buy American requirements. Notably, the contract includes extensive and unique privacy and data security obligations derived from DOJ-02 Contractor Privacy Requirements, which mandate strict handling of personally identifiable information, mandatory non-disclosure agreements for all personnel, prohibition of off-site work, annual cybersecurity training, and an urgent 1-hour breach notification protocol to the DOJ Security Operations Center with full responsibility for victim remediation including 18 months of credit monitoring. The contractor must also comply with privacy impact assessments, system of records notices, NIST 800-53 controls, and is forbidden from assigning or delegating any obligations without explicit government approval. All invoicing must exclude sensitive PII, and the contractor is fully self-insured against breach-related costs. The contract emphasizes strict information control, non-delegation of COR authority, and full government access to systems and logs for audit and investigation purposes.