IPE - TRAINING
Active
SPE4A8-26-R-0002FederalResponse Deadline
Contract Overview
Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.
AI Contract Overview
Show more
The contract solicitation SPE4A8-26-R-0002, issued by the Defense Logistics Agency Aviation for the Industrial Plant Equipment office, specifies a comprehensive acquisition of a Starrag Droop+Rein G 80TT T80 C machine and associated services for delivery to the Naval Foundry and Propeller Center in Philadelphia, Pennsylvania. The procurement encompasses ten distinct Contract Line Item Numbers (CLINs), including the machine itself, installation, foundation construction, training, IUID tagging, technical data delivery, OSHA certification, shipping, rigging, and a post-processor—all governed by VIBB 25-25 series technical specifications. Each CLIN is priced on a Firm Fixed Price basis with zero variance allowance, and all items are subject to a 365-day delivery window after receipt of order. Delivery is FOB destination, with final inspection and acceptance occurring at the delivery site under strict compliance with ASTM D3951 packaging standards and MIL-STD-129 and MIL-STD-130N marking and labeling requirements, including Unique Item Identification (IUID) as mandated for U.S. military property. The contract mandates strict adherence to cybersecurity and safeguarding protocols under DFARS 252.204-7012, requiring implementation of NIST SP 800-171 security controls on all contractor information systems handling covered defense information, with immediate reporting of any cyber incidents to DoD within 72 hours. Contractors must hold a DoD-approved medium assurance certificate for incident reporting and ensure any cloud services meet FedRAMP Moderate baseline protections. Subcontractors are bound by the same cybersecurity obligations. The solicitation requires full technical compliance with specified standards including OSHA, NFPA, and ISO 10791-7, and demands detailed documentation such as an Acceptance Test Plan, calibration records, and a compliance matrix. Evaluation is conducted under a Lowest Price Technically Acceptable (LPTA) methodology, with technical acceptability and past performance evaluated as pass/fail criteria. Offerors must be a Service-Disabled Veteran-Owned Small Business, provide a Unique Entity ID and CAGE code, and include supporting documentation in specified volumes through DIBBS, email, or mail by the August 14, 2026 deadline. All personnel involved in performance must comply with DoD security clearance, SPOT system registration, and personal security training requirements, particularly for operations within designated theaters.
General Info
Procurement of Starrag machine and services for Philadelphia with FOB delivery, strict cybersecurity, LPTA evaluation, and SDVOSB requirement.
Agency
Department Of Defense → ASC INDUSTRIAL PLANT EQUIPMENTView Agency
NAICS
N/A
Place of Performance
USASet-Aside
SDVOSBC
Timeline
PhaseSolicitation
Response Deadline
Organization & Contact Information
Show more
AgencyDepartment Of Defense → ASC INDUSTRIAL PLANT EQUIPMENT
Contacts1 person available
OfficeUSA
Office AddressUSA
Contacts
Full Description
Show more
CLIN 0001 Starrag Droop+Rein G 80TT T80 C Machine in accordance with VIBB 25-25-1002
DLA issues this document using the DoD authorized unit of issue, please refer to the following URL to determine the corresponding ANSI X12 unit of issue.
https://view.officeapps.live.com/op/view.aspx?src=https%3A%2F%2Fwww.dla.mil%2FPortals%2F104%2FDocuments%2FDLMS% 2FeApplications%2FLogDataAdmin%2FUnitofIssueandPurchaseUnit.xlsx&wdOrigin=BROWSELINK
ITEM NO. SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT. 0001 3408-N00001784 1.000 EA $ _______________ $ ______________ IPE Milling Equipment
PRICING TERMS: Firm Fixed Price
QTY VARIANCE: PLUS 0% MINUS 0%
INSPECTION POINT: ORIGIN
ACCEPTANCE POINT: DESTINATION
FOB: DESTINATION DELIVERY DATE: 365 DAYS ADO
PREP FOR DELIVERY:
WILL BE PACKAGED IN ACCORDANCE WITH ASTM D3951.
DELIVER TO: NAVAL FOUNDRY AND PROPELLER CENTER BUILDING 1029 1701 KITTY HAWK AVENUE PHILADELPHIA, PA 19112
GOVT USE External External External Customer RDD/ ITEM PR PRLI PR PRLI Material Need Ship Date. 0001 7013625317 0001 N/A N/A N/A 02/01/2028
SUPPLIES/SERVICES: 3460-N00004586
ITEM DESCRIPTION:
CLIN 0002 Installation in accordance with VIBB 25-25-1010
DLA issues this document using the DoD authorized unit of issue, please refer to the following URL to determine the corresponding ANSI X12 unit of issue.
https://view.officeapps.live.com/op/view.aspx?src=https%3A%2F%2Fwww.dla.mil%2FPortals%2F104%2FDocuments%2FDLMS% 2FeApplications%2FLogDataAdmin%2FUnitofIssueandPurchaseUnit.xlsx&wdOrigin=BROWSELINK
ITEM NO. SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT. 0002 3460-N00004586 1.000 EA $ _______________ $ ______________ IPE Installation
PRICING TERMS: Firm Fixed Price
QTY VARIANCE: PLUS 0% MINUS 0%
INSPECTION POINT: ORIGIN
SPE4A8-26-R-0002
SUPPLY/SERVICE: 3460-N00004586 CONT'D
ACCEPTANCE POINT: DESTINATION
FOB: DESTINATION DELIVERY DATE: 365 DAYS ADO
PREP FOR DELIVERY:
WILL BE PACKAGED IN ACCORDANCE WITH ASTM D3951.
DELIVER TO: NAVAL FOUNDRY AND PROPELLER CENTER BUILDING 1029 1701 KITTY HAWK AVENUE PHILADELPHIA, PA 19112
GOVT USE External External External Customer RDD/ ITEM PR PRLI PR PRLI Material Need Ship Date. 0002 7013625317 0002 N/A N/A N/A 06/09/2028
SUPPLIES/SERVICES: 3460-N00004584
ITEM DESCRIPTION:
CLIN 0003 Foundation in accordance with VIBB 25-25-1007
DLA issues this document using the DoD authorized unit of issue, please refer to the following URL to determine the corresponding ANSI X12 unit of issue.
https://view.officeapps.live.com/op/view.aspx?src=https%3A%2F%2Fwww.dla.mil%2FPortals%2F104%2FDocuments%2FDLMS% 2FeApplications%2FLogDataAdmin%2FUnitofIssueandPurchaseUnit.xlsx&wdOrigin=BROWSELINK
ITEM NO. SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT. 0003 3460-N00004584 1.000 EA $ _______________ $ ______________ IPE Foundation
PRICING TERMS: Firm Fixed Price
QTY VARIANCE: PLUS 0% MINUS 0%
INSPECTION POINT: DESTINATION
ACCEPTANCE POINT: DESTINATION
FOB: DESTINATION DELIVERY DATE: 365 DAYS ADO
PREP FOR DELIVERY:
WILL BE PACKAGED IN ACCORDANCE WITH ASTM D3951.
DELIVER TO: NAVAL FOUNDRY AND PROPELLER CENTER BUILDING 1029 1701 KITTY HAWK AVENUE PHILADELPHIA, PA 19112
GOVT USE External External External Customer RDD/ ITEM PR PRLI PR PRLI Material Need Ship Date. 0003 7013625317 0003 N/A N/A N/A 06/09/2028
SUPPLIES/SERVICES: 3460-N00004594
SPE4A8-26-R-0002
SUPPLY/SERVICE: 3460-N00004594 CONT'D
ITEM DESCRIPTION:
CLIN 0004 Training in accordance with VIBB 25-25-1003
DLA issues this document using the DoD authorized unit of issue, please refer to the following URL to determine the corresponding ANSI X12 unit of issue.
https://view.officeapps.live.com/op/view.aspx?src=https%3A%2F%2Fwww.dla.mil%2FPortals%2F104%2FDocuments%2FDLMS% 2FeApplications%2FLogDataAdmin%2FUnitofIssueandPurchaseUnit.xlsx&wdOrigin=BROWSELINK
ITEM NO. SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT. 0004 3460-N00004594 1.000 EA $ _______________ $ ______________ IPE Training
PRICING TERMS: Firm Fixed Price
QTY VARIANCE: PLUS 0% MINUS 0%
INSPECTION POINT: DESTINATION
ACCEPTANCE POINT: DESTINATION
FOB: DESTINATION DELIVERY DATE: 365 DAYS ADO
PREP FOR DELIVERY:
WILL BE PACKAGED IN ACCORDANCE WITH ASTM D3951.
DELIVER TO: NAVAL FOUNDRY AND PROPELLER CENTER BUILDING 1029 1701 KITTY HAWK AVENUE PHILADELPHIA, PA 19112
GOVT USE External External External Customer RDD/ ITEM PR PRLI PR PRLI Material Need Ship Date. 0004 7013625317 0004 N/A N/A N/A 06/09/2028
SUPPLIES/SERVICES: 3460-N00004587
ITEM DESCRIPTION:
CLIN 0005 IUID in accordance with VIBB 25-25-1005
DLA issues this document using the DoD authorized unit of issue, please refer to the following URL to determine the corresponding ANSI X12 unit of issue.
https://view.officeapps.live.com/op/view.aspx?src=https%3A%2F%2Fwww.dla.mil%2FPortals%2F104%2FDocuments%2FDLMS% 2FeApplications%2FLogDataAdmin%2FUnitofIssueandPurchaseUnit.xlsx&wdOrigin=BROWSELINK
ITEM NO. SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT. 0005 3460-N00004587 1.000 EA $ _______________ $ ______________ IPE IUID Tag
QTY VARIANCE: PLUS 0% MINUS 0%
INSPECTION POINT: DESTINATION
ACCEPTANCE POINT: DESTINATION
SPE4A8-26-R-0002
SUPPLY/SERVICE: 3460-N00004587 CONT'D
FOB: DESTINATION DELIVERY DATE: 365 DAYS ADO
PREP FOR DELIVERY:
WILL BE PACKAGED IN ACCORDANCE WITH ASTM D3951.
DELIVER TO: NAVAL FOUNDRY AND PROPELLER CENTER BUILDING 1029 1701 KITTY HAWK AVENUE PHILADELPHIA, PA 19112
GOVT USE External External External Customer RDD/ ITEM PR PRLI PR PRLI Material Need Ship Date. 0005 7013625317 0005 N/A N/A N/A 06/09/2028
SUPPLIES/SERVICES: 3460-N00004592
ITEM DESCRIPTION:
CLIN 0006 Technical Data in accordance with VIBB 25-25-1004
DLA issues this document using the DoD authorized unit of issue, please refer to the following URL to determine the corresponding ANSI X12 unit of issue.
https://view.officeapps.live.com/op/view.aspx?src=https%3A%2F%2Fwww.dla.mil%2FPortals%2F104%2FDocuments%2FDLMS% 2FeApplications%2FLogDataAdmin%2FUnitofIssueandPurchaseUnit.xlsx&wdOrigin=BROWSELINK
ITEM NO. SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT. 0006 3460-N00004592 1.000 LT $ _______________ $ ______________ IPE Technical Data
PRICING TERMS: Firm Fixed Price
QTY VARIANCE: PLUS 0% MINUS 0%
INSPECTION POINT: DESTINATION
ACCEPTANCE POINT: DESTINATION
FOB: DESTINATION DELIVERY DATE: 365 DAYS ADO
PREP FOR DELIVERY:
WILL BE PACKAGED IN ACCORDANCE WITH ASTM D3951.
DELIVER TO: NAVAL FOUNDRY AND PROPELLER CENTER BUILDING 1029 1701 KITTY HAWK AVENUE PHILADELPHIA, PA 19112
GOVT USE External External External Customer RDD/ ITEM PR PRLI PR PRLI Material Need Ship Date. 0006 7013625317 0006 N/A N/A N/A 06/09/2028
SUPPLIES/SERVICES: 3460-N00004588
ITEM DESCRIPTION:
SPE4A8-26-R-0002
SUPPLY/SERVICE: 3460-N00004588 CONT'D
CLIN 0007 OSHA Certification in accordance with VIBB 25-25-1006
DLA issues this document using the DoD authorized unit of issue, please refer to the following URL to determine the corresponding ANSI X12 unit of issue.
https://view.officeapps.live.com/op/view.aspx?src=https%3A%2F%2Fwww.dla.mil%2FPortals%2F104%2FDocuments%2FDLMS% 2FeApplications%2FLogDataAdmin%2FUnitofIssueandPurchaseUnit.xlsx&wdOrigin=BROWSELINK
ITEM NO. SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT. 0007 3460-N00004588 1.000 EA $ _______________ $ ______________ IPE OSHA Certification
PRICING TERMS: Firm Fixed Price
QTY VARIANCE: PLUS 0% MINUS 0%
INSPECTION POINT: DESTINATION
ACCEPTANCE POINT: DESTINATION
FOB: DESTINATION DELIVERY DATE: 365 DAYS ADO
PREP FOR DELIVERY:
WILL BE PACKAGED IN ACCORDANCE WITH ASTM D3951.
DELIVER TO: NAVAL FOUNDRY AND PROPELLER CENTER BUILDING 1029 1701 KITTY HAWK AVENUE PHILADELPHIA, PA 19112
GOVT USE External External External Customer RDD/ ITEM PR PRLI PR PRLI Material Need Ship Date. 0007 7013625317 0007 N/A N/A N/A 06/09/2028
SUPPLIES/SERVICES: 3460-N00004591
ITEM DESCRIPTION:
CLIN 0008 Shipping in accordance with VIBB 25-25-1008
DLA issues this document using the DoD authorized unit of issue, please refer to the following URL to determine the corresponding ANSI X12 unit of issue.
https://view.officeapps.live.com/op/view.aspx?src=https%3A%2F%2Fwww.dla.mil%2FPortals%2F104%2FDocuments%2FDLMS% 2FeApplications%2FLogDataAdmin%2FUnitofIssueandPurchaseUnit.xlsx&wdOrigin=BROWSELINK
ITEM NO. SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT. 0008 3460-N00004591 1.000 EA $ _______________ $ ______________ IPE Shipping
PRICING TERMS: Firm Fixed Price
QTY VARIANCE: PLUS 0% MINUS 0%
INSPECTION POINT: DESTINATION
ACCEPTANCE POINT: DESTINATION
SPE4A8-26-R-0002
SUPPLY/SERVICE: 3460-N00004591 CONT'D
FOB: DESTINATION DELIVERY DATE: 365 DAYS ADO
PREP FOR DELIVERY:
WILL BE PACKAGED IN ACCORDANCE WITH ASTM D3951.
DELIVER TO: NAVAL FOUNDRY AND PROPELLER CENTER BUILDING 1029 1701 KITTY HAWK AVENUE PHILADELPHIA, PA 19112
GOVT USE External External External Customer RDD/ ITEM PR PRLI PR PRLI Material Need Ship Date. 0008 7013625317 0008 N/A N/A N/A 06/09/2028
SUPPLIES/SERVICES: 3460-N00004590
ITEM DESCRIPTION:
CLIN 0009 Rigging in accordance with VIBB 25-25-1009
DLA issues this document using the DoD authorized unit of issue, please refer to the following URL to determine the corresponding ANSI X12 unit of issue.
https://view.officeapps.live.com/op/view.aspx?src=https%3A%2F%2Fwww.dla.mil%2FPortals%2F104%2FDocuments%2FDLMS% 2FeApplications%2FLogDataAdmin%2FUnitofIssueandPurchaseUnit.xlsx&wdOrigin=BROWSELINK
ITEM NO. SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT. 0009 3460-N00004590 1.000 EA $ _______________ $ ______________ IPE Rigging
PRICING TERMS: Firm Fixed Price
QTY VARIANCE: PLUS 0% MINUS 0%
INSPECTION POINT: DESTINATION
ACCEPTANCE POINT: DESTINATION
FOB: DESTINATION DELIVERY DATE: 365 DAYS ADO
PREP FOR DELIVERY:
WILL BE PACKAGED IN ACCORDANCE WITH ASTM D3951.
DELIVER TO: NAVAL FOUNDRY AND PROPELLER CENTER BUILDING 1029 1701 KITTY HAWK AVENUE PHILADELPHIA, PA 19112
GOVT USE External External External Customer RDD/ ITEM PR PRLI PR PRLI Material Need Ship Date. 0009 7013625317 0009 N/A N/A N/A 06/09/2028
SUPPLIES/SERVICES: 3460-N00001786
ITEM DESCRIPTION:
SPE4A8-26-R-0002
SUPPLY/SERVICE: 3460-N00001786 CONT'D
CLIN 0010 Post Processor in accordance with VIBB 25-25-1010
DLA issues this document using the DoD authorized unit of issue, please refer to the following URL to determine the corresponding ANSI X12 unit of issue.
https://view.officeapps.live.com/op/view.aspx?src=https%3A%2F%2Fwww.dla.mil%2FPortals%2F104%2FDocuments%2FDLMS% 2FeApplications%2FLogDataAdmin%2FUnitofIssueandPurchaseUnit.xlsx&wdOrigin=BROWSELINK
ITEM NO. SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT. 0010 3460-N00001786 1.000 EA $ _______________ $ ______________ IPE Post Processor
PRICING TERMS: Firm Fixed Price
QTY VARIANCE: PLUS 0% MINUS 0%
INSPECTION POINT: DESTINATION
ACCEPTANCE POINT: DESTINATION
FOB: DESTINATION DELIVERY DATE: 365 DAYS ADO
PREP FOR DELIVERY:
WILL BE PACKAGED IN ACCORDANCE WITH ASTM D3951.
DELIVER TO: NAVAL FOUNDRY AND PROPELLER CENTER BUILDING 1029 1701 KITTY HAWK AVENUE PHILADELPHIA, PA 19112
GOVT USE External External External Customer RDD/ ITEM PR PRLI PR PRLI Material Need Ship Date. 0010 7013625317 0010 N/A N/A N/A 06/09/2028
SPE4A8-26-R-0002
Form
H14 CONTRACTOR PERSONNEL SECURITY REQUIREMENTS (DEC 2021)
Part 12 Clauses
CLAUSES ADDED TO PART 12 BY ADDENDUM
252.203-7000 REQUIREMENTS RELATING TO COMPENSATION OF FORMER DOD OFFICIALS (SEP 2011) DFARS
252.203-7002 REQUIREMENT TO INFORM EMPLOYEES OF WHISTLEBLOWER RIGHTS (DEC 2022) DFARS
52.204-19 INCORPORATION BY REFERENCE OF REPRESENTATIONS AND CERTIFICATIONS (DEC 2014) FAR
252.204-7003 CONTROL OF GOVERNMENT PERSONNEL WORK PRODUCT (APR 1992) DFARS
252.204-7009 LIMITATIONS ON THE USE OR DISCLOSURE OF THIRD-PARTY CONTRACTOR REPORTED CYBER INCIDENT
INFORMATION (JAN 2023) DFARS
252.204-7012 SAFEGUARDING COVERED DEFENSE INFORMATION AND CYBER INCIDENT REPORTING (DEVIATION 2024-O0013)
(MAY 2024) DFARS
(a) Definitions. As used in this clause
Adequate security means protective measures that are commensurate with the consequences and probability of loss, misuse, or unauthorized access to, or modification of information.
Compromise means disclosure of information to unauthorized persons, or a violation of the security policy of a system, in which unauthorized intentional or unintentional disclosure, modification, destruction, or loss of an object, or the copying of information to unauthorized media may have occurred.
Contractor attributional/proprietary information means information that identifies the contractor(s), whether directly or indirectly, by the grouping of information that can be traced back to the contractor(s) (e.g., program description, facility locations), personally identifiable information, as well as trade secrets, commercial or financial information, or other commercially sensitive information that is not customarily shared outside of the company.
Controlled technical information means technical information with military or space application that is subject to controls on the access, use, reproduction, modification, performance, display, release, disclosure, or dissemination. Controlled technical information would meet the criteria, if disseminated, for distribution statements B through F using the criteria set forth in DoD Instruction 5230.24, Distribution Statements on Technical Documents. The term does not include information that is lawfully publicly available without restrictions.
Covered contractor information system means an unclassified information system that is owned, or operated by or for, a contractor and that processes, stores, or transmits covered defense information.
Covered defense information means unclassified controlled technical information or other information, as described in the Controlled Unclassified Information (CUI)
Registry at http://www.archives.gov/cui/registry/category-list.html, that requires safeguarding or dissemination controls pursuant to and consistent with law, regulations, and Governmentwide policies, and is -
(1) Marked or otherwise identified in the contract, task order, or delivery order and provided to the contractor by or on behalf of DoD in support of the performance of the contract; or
(2) Collected, developed, received, transmitted, used, or stored by or on behalf of the contractor in support of the performance of the contract.
Cyber incident means actions taken through the use of computer networks that result in a compromise or an actual or potentially adverse effect on an information system and/or the information residing therein.
Forensic analysis means the practice of gathering, retaining, and analyzing computer-related data for investigative purposes in a manner that maintains the integrity of the data.
SPE4A8-26-R-0002
Part 12 Clauses (CONTINUED)
Information system means a discrete set of information resources organized for the collection, processing, maintenance, use, sharing, dissemination, or disposition of information.
Malicious software means computer software or firmware intended to perform an unauthorized process that will have adverse impact on the confidentiality, integrity, or availability of an information system. This definition includes a virus, worm, Trojan horse, or other code-based entity that infects a host, as well as spyware and some forms of adware.
Media means physical devices or writing surfaces including, but is not limited to, magnetic tapes, optical disks, magnetic disks, large-scale integration memory chips, and printouts onto which covered defense information is recorded, stored, or printed within a covered contractor information system.
Operationally critical support means supplies or services designated by the Government as critical for airlift, sealift, intermodal transportation services, or logistical support that is essential to the mobilization, deployment, or sustainment of the Armed Forces in a contingency operation.
Rapidly report means within 72 hours of discovery of any cyber incident.
Technical information means technical data or computer software, as those terms are defined in the clause at DFARS 252.227-7013, Rights in Technical Data --Other Than Commercial Products and Commercial Services, regardless of whether or not the clause is incorporated in this solicitation or contract. Examples of technical information include research and engineering data, engineering drawings, and associated lists, specifications, standards, process sheets, manuals, technical reports, technical orders, catalog-item identifications, data sets, studies and analyses and related information, and computer software executable code and source code.
(b) Adequate security. The Contractor shall provide adequate security on all covered contractor information systems. To provide adequate security, the Contractor shall implement, at a minimum, the following information security protections:
(1) For covered contractor information systems that are part of an Information Technology (IT) service or system operated on behalf of the Government, the following security requirements apply:
(i) Cloud computing services shall be subject to the security requirements specified in the clause 252.239-7010, Cloud Computing Services, of this contract. (ii) Any other such IT service or system (i.e., other than cloud computing) shall be subject to the security requirements specified elsewhere in this contract.
(2) For covered contractor information systems that are not part of an IT service or system operated on behalf of the Government and therefore are not subject to the security requirement specified at paragraph (b)(1) of this clause, the following security requirements apply:
(i) Except as provided in paragraph (b)(2)(ii) of this clause, the covered contractor information system shall be subject to the security requirements in National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171, “Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations”, Revision 2 (available via the internet at http://dx.doi.org/10.6028/NIST.SP.800-171 ).
(ii)(A) The Contractor shall implement NIST SP 800-171, as soon as practical, but not later than December 31, 2017. For all contracts awarded prior to October 1, 2017, the Contractor shall notify the DoD Chief Information Officer (CIO), via email at osd.dibcsia@mail.mil, within 30 days of contract award, of any security requirements specified by NIST SP 800-171 not implemented at the time of contract award.
(B) The Contractor shall submit requests to vary from NIST SP 800-171 in writing to the Contracting Officer, for consideration by the DoD CIO. The Contractor need not implement any security requirement adjudicated by an authorized representative of the DoD CIO to be nonapplicable or to have an alternative, but equally effective, security measure that may be implemented in its place.
(C) If the DoD CIO has previously adjudicated the contractor's requests indicating that a requirement is not applicable or that an alternative security measure is equally effective, a copy of that approval shall be provided to the Contracting Officer when requesting its recognition under this contract.
(D) If the Contractor intends to use an external cloud service provider to store, process, or transmit any covered defense information in performance of this contract, the Contractor shall require and ensure that the cloud service provider meets security requirements equivalent to those established by the Government for the Federal Risk and Authorization Management Program (FedRAMP) Moderate baseline ( https:// http://www.fedramp.gov/resources/documents/) and that the cloud service provider complies with requirements in paragraphs (c) through (g) of this clause for cyber incident reporting, malicious software, media preservation and protection, access to additional information and equipment necessary for forensic analysis, and cyber incident damage assessment.
(3) Apply other information systems security measures when the Contractor reasonably determines that information systems security measures, in addition to those identified in paragraphs (b)(1) and (2) of this clause, may be required to provide adequate security in a dynamic environment or to accommodate special circumstances (e.g., medical devices) and any individual, isolated, or temporary deficiencies based on an assessed risk or vulnerability. These measures may be addressed in a system security plan.
(c) Cyber incident reporting requirement.
(1) When the Contractor discovers a cyber incident that affects a covered contractor information system or the covered defense information residing therein, or that affects the contractor's ability to perform the requirements of the contract that are designated as operationally critical support and identified in the contract, the Contractor shall -
SPE4A8-26-R-0002
Part 12 Clauses (CONTINUED)
(i) Conduct a review for evidence of compromise of covered defense information, including, but not limited to, identifying compromised computers, servers, specific data, and user accounts. This review shall also include analyzing covered contractor information system(s) that were part of the cyber incident, as well as other information systems on the Contractor's network(s), that may have been accessed as a result of the incident in order to identify compromised covered defense information, or that affect the Contractor's ability to provide operationally critical support; and
(ii) Rapidly report cyber incidents to DoD at https://dibnet.dod.mil.
(2) Cyber incident report. The cyber incident report shall be treated as information created by or for DoD and shall include, at a minimum, the required elements at https://dibnet.dod.mil.
(3) Medium assurance certificate requirement. In order to report cyber incidents in accordance with this clause, the Contractor or subcontractor shall have or acquire a DoD-approved medium assurance certificate to report cyber incidents. For information on obtaining a DoD-approved medium assurance certificate, see https://public.cyber.mil/eca/.
(d) Malicious software. When the Contractor or subcontractors discover and isolate malicious software in connection with a reported cyber incident, submit the malicious software to DoD Cyber Crime Center (DC3) in accordance with NSN/Part Number: 3460N00004594 Quantity: 1 EA Delivery: 365 days ADO
DLA issues this document using the DoD authorized unit of issue, please refer to the following URL to determine the corresponding ANSI X12 unit of issue.
https://view.officeapps.live.com/op/view.aspx?src=https%3A%2F%2Fwww.dla.mil%2FPortals%2F104%2FDocuments%2FDLMS% 2FeApplications%2FLogDataAdmin%2FUnitofIssueandPurchaseUnit.xlsx&wdOrigin=BROWSELINK
ITEM NO. SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT. 0001 3408-N00001784 1.000 EA $ _______________ $ ______________ IPE Milling Equipment
PRICING TERMS: Firm Fixed Price
QTY VARIANCE: PLUS 0% MINUS 0%
INSPECTION POINT: ORIGIN
ACCEPTANCE POINT: DESTINATION
FOB: DESTINATION DELIVERY DATE: 365 DAYS ADO
PREP FOR DELIVERY:
WILL BE PACKAGED IN ACCORDANCE WITH ASTM D3951.
DELIVER TO: NAVAL FOUNDRY AND PROPELLER CENTER BUILDING 1029 1701 KITTY HAWK AVENUE PHILADELPHIA, PA 19112
GOVT USE External External External Customer RDD/ ITEM PR PRLI PR PRLI Material Need Ship Date. 0001 7013625317 0001 N/A N/A N/A 02/01/2028
SUPPLIES/SERVICES: 3460-N00004586
ITEM DESCRIPTION:
CLIN 0002 Installation in accordance with VIBB 25-25-1010
DLA issues this document using the DoD authorized unit of issue, please refer to the following URL to determine the corresponding ANSI X12 unit of issue.
https://view.officeapps.live.com/op/view.aspx?src=https%3A%2F%2Fwww.dla.mil%2FPortals%2F104%2FDocuments%2FDLMS% 2FeApplications%2FLogDataAdmin%2FUnitofIssueandPurchaseUnit.xlsx&wdOrigin=BROWSELINK
ITEM NO. SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT. 0002 3460-N00004586 1.000 EA $ _______________ $ ______________ IPE Installation
PRICING TERMS: Firm Fixed Price
QTY VARIANCE: PLUS 0% MINUS 0%
INSPECTION POINT: ORIGIN
SPE4A8-26-R-0002
SUPPLY/SERVICE: 3460-N00004586 CONT'D
ACCEPTANCE POINT: DESTINATION
FOB: DESTINATION DELIVERY DATE: 365 DAYS ADO
PREP FOR DELIVERY:
WILL BE PACKAGED IN ACCORDANCE WITH ASTM D3951.
DELIVER TO: NAVAL FOUNDRY AND PROPELLER CENTER BUILDING 1029 1701 KITTY HAWK AVENUE PHILADELPHIA, PA 19112
GOVT USE External External External Customer RDD/ ITEM PR PRLI PR PRLI Material Need Ship Date. 0002 7013625317 0002 N/A N/A N/A 06/09/2028
SUPPLIES/SERVICES: 3460-N00004584
ITEM DESCRIPTION:
CLIN 0003 Foundation in accordance with VIBB 25-25-1007
DLA issues this document using the DoD authorized unit of issue, please refer to the following URL to determine the corresponding ANSI X12 unit of issue.
https://view.officeapps.live.com/op/view.aspx?src=https%3A%2F%2Fwww.dla.mil%2FPortals%2F104%2FDocuments%2FDLMS% 2FeApplications%2FLogDataAdmin%2FUnitofIssueandPurchaseUnit.xlsx&wdOrigin=BROWSELINK
ITEM NO. SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT. 0003 3460-N00004584 1.000 EA $ _______________ $ ______________ IPE Foundation
PRICING TERMS: Firm Fixed Price
QTY VARIANCE: PLUS 0% MINUS 0%
INSPECTION POINT: DESTINATION
ACCEPTANCE POINT: DESTINATION
FOB: DESTINATION DELIVERY DATE: 365 DAYS ADO
PREP FOR DELIVERY:
WILL BE PACKAGED IN ACCORDANCE WITH ASTM D3951.
DELIVER TO: NAVAL FOUNDRY AND PROPELLER CENTER BUILDING 1029 1701 KITTY HAWK AVENUE PHILADELPHIA, PA 19112
GOVT USE External External External Customer RDD/ ITEM PR PRLI PR PRLI Material Need Ship Date. 0003 7013625317 0003 N/A N/A N/A 06/09/2028
SUPPLIES/SERVICES: 3460-N00004594
SPE4A8-26-R-0002
SUPPLY/SERVICE: 3460-N00004594 CONT'D
ITEM DESCRIPTION:
CLIN 0004 Training in accordance with VIBB 25-25-1003
DLA issues this document using the DoD authorized unit of issue, please refer to the following URL to determine the corresponding ANSI X12 unit of issue.
https://view.officeapps.live.com/op/view.aspx?src=https%3A%2F%2Fwww.dla.mil%2FPortals%2F104%2FDocuments%2FDLMS% 2FeApplications%2FLogDataAdmin%2FUnitofIssueandPurchaseUnit.xlsx&wdOrigin=BROWSELINK
ITEM NO. SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT. 0004 3460-N00004594 1.000 EA $ _______________ $ ______________ IPE Training
PRICING TERMS: Firm Fixed Price
QTY VARIANCE: PLUS 0% MINUS 0%
INSPECTION POINT: DESTINATION
ACCEPTANCE POINT: DESTINATION
FOB: DESTINATION DELIVERY DATE: 365 DAYS ADO
PREP FOR DELIVERY:
WILL BE PACKAGED IN ACCORDANCE WITH ASTM D3951.
DELIVER TO: NAVAL FOUNDRY AND PROPELLER CENTER BUILDING 1029 1701 KITTY HAWK AVENUE PHILADELPHIA, PA 19112
GOVT USE External External External Customer RDD/ ITEM PR PRLI PR PRLI Material Need Ship Date. 0004 7013625317 0004 N/A N/A N/A 06/09/2028
SUPPLIES/SERVICES: 3460-N00004587
ITEM DESCRIPTION:
CLIN 0005 IUID in accordance with VIBB 25-25-1005
DLA issues this document using the DoD authorized unit of issue, please refer to the following URL to determine the corresponding ANSI X12 unit of issue.
https://view.officeapps.live.com/op/view.aspx?src=https%3A%2F%2Fwww.dla.mil%2FPortals%2F104%2FDocuments%2FDLMS% 2FeApplications%2FLogDataAdmin%2FUnitofIssueandPurchaseUnit.xlsx&wdOrigin=BROWSELINK
ITEM NO. SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT. 0005 3460-N00004587 1.000 EA $ _______________ $ ______________ IPE IUID Tag
QTY VARIANCE: PLUS 0% MINUS 0%
INSPECTION POINT: DESTINATION
ACCEPTANCE POINT: DESTINATION
SPE4A8-26-R-0002
SUPPLY/SERVICE: 3460-N00004587 CONT'D
FOB: DESTINATION DELIVERY DATE: 365 DAYS ADO
PREP FOR DELIVERY:
WILL BE PACKAGED IN ACCORDANCE WITH ASTM D3951.
DELIVER TO: NAVAL FOUNDRY AND PROPELLER CENTER BUILDING 1029 1701 KITTY HAWK AVENUE PHILADELPHIA, PA 19112
GOVT USE External External External Customer RDD/ ITEM PR PRLI PR PRLI Material Need Ship Date. 0005 7013625317 0005 N/A N/A N/A 06/09/2028
SUPPLIES/SERVICES: 3460-N00004592
ITEM DESCRIPTION:
CLIN 0006 Technical Data in accordance with VIBB 25-25-1004
DLA issues this document using the DoD authorized unit of issue, please refer to the following URL to determine the corresponding ANSI X12 unit of issue.
https://view.officeapps.live.com/op/view.aspx?src=https%3A%2F%2Fwww.dla.mil%2FPortals%2F104%2FDocuments%2FDLMS% 2FeApplications%2FLogDataAdmin%2FUnitofIssueandPurchaseUnit.xlsx&wdOrigin=BROWSELINK
ITEM NO. SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT. 0006 3460-N00004592 1.000 LT $ _______________ $ ______________ IPE Technical Data
PRICING TERMS: Firm Fixed Price
QTY VARIANCE: PLUS 0% MINUS 0%
INSPECTION POINT: DESTINATION
ACCEPTANCE POINT: DESTINATION
FOB: DESTINATION DELIVERY DATE: 365 DAYS ADO
PREP FOR DELIVERY:
WILL BE PACKAGED IN ACCORDANCE WITH ASTM D3951.
DELIVER TO: NAVAL FOUNDRY AND PROPELLER CENTER BUILDING 1029 1701 KITTY HAWK AVENUE PHILADELPHIA, PA 19112
GOVT USE External External External Customer RDD/ ITEM PR PRLI PR PRLI Material Need Ship Date. 0006 7013625317 0006 N/A N/A N/A 06/09/2028
SUPPLIES/SERVICES: 3460-N00004588
ITEM DESCRIPTION:
SPE4A8-26-R-0002
SUPPLY/SERVICE: 3460-N00004588 CONT'D
CLIN 0007 OSHA Certification in accordance with VIBB 25-25-1006
DLA issues this document using the DoD authorized unit of issue, please refer to the following URL to determine the corresponding ANSI X12 unit of issue.
https://view.officeapps.live.com/op/view.aspx?src=https%3A%2F%2Fwww.dla.mil%2FPortals%2F104%2FDocuments%2FDLMS% 2FeApplications%2FLogDataAdmin%2FUnitofIssueandPurchaseUnit.xlsx&wdOrigin=BROWSELINK
ITEM NO. SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT. 0007 3460-N00004588 1.000 EA $ _______________ $ ______________ IPE OSHA Certification
PRICING TERMS: Firm Fixed Price
QTY VARIANCE: PLUS 0% MINUS 0%
INSPECTION POINT: DESTINATION
ACCEPTANCE POINT: DESTINATION
FOB: DESTINATION DELIVERY DATE: 365 DAYS ADO
PREP FOR DELIVERY:
WILL BE PACKAGED IN ACCORDANCE WITH ASTM D3951.
DELIVER TO: NAVAL FOUNDRY AND PROPELLER CENTER BUILDING 1029 1701 KITTY HAWK AVENUE PHILADELPHIA, PA 19112
GOVT USE External External External Customer RDD/ ITEM PR PRLI PR PRLI Material Need Ship Date. 0007 7013625317 0007 N/A N/A N/A 06/09/2028
SUPPLIES/SERVICES: 3460-N00004591
ITEM DESCRIPTION:
CLIN 0008 Shipping in accordance with VIBB 25-25-1008
DLA issues this document using the DoD authorized unit of issue, please refer to the following URL to determine the corresponding ANSI X12 unit of issue.
https://view.officeapps.live.com/op/view.aspx?src=https%3A%2F%2Fwww.dla.mil%2FPortals%2F104%2FDocuments%2FDLMS% 2FeApplications%2FLogDataAdmin%2FUnitofIssueandPurchaseUnit.xlsx&wdOrigin=BROWSELINK
ITEM NO. SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT. 0008 3460-N00004591 1.000 EA $ _______________ $ ______________ IPE Shipping
PRICING TERMS: Firm Fixed Price
QTY VARIANCE: PLUS 0% MINUS 0%
INSPECTION POINT: DESTINATION
ACCEPTANCE POINT: DESTINATION
SPE4A8-26-R-0002
SUPPLY/SERVICE: 3460-N00004591 CONT'D
FOB: DESTINATION DELIVERY DATE: 365 DAYS ADO
PREP FOR DELIVERY:
WILL BE PACKAGED IN ACCORDANCE WITH ASTM D3951.
DELIVER TO: NAVAL FOUNDRY AND PROPELLER CENTER BUILDING 1029 1701 KITTY HAWK AVENUE PHILADELPHIA, PA 19112
GOVT USE External External External Customer RDD/ ITEM PR PRLI PR PRLI Material Need Ship Date. 0008 7013625317 0008 N/A N/A N/A 06/09/2028
SUPPLIES/SERVICES: 3460-N00004590
ITEM DESCRIPTION:
CLIN 0009 Rigging in accordance with VIBB 25-25-1009
DLA issues this document using the DoD authorized unit of issue, please refer to the following URL to determine the corresponding ANSI X12 unit of issue.
https://view.officeapps.live.com/op/view.aspx?src=https%3A%2F%2Fwww.dla.mil%2FPortals%2F104%2FDocuments%2FDLMS% 2FeApplications%2FLogDataAdmin%2FUnitofIssueandPurchaseUnit.xlsx&wdOrigin=BROWSELINK
ITEM NO. SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT. 0009 3460-N00004590 1.000 EA $ _______________ $ ______________ IPE Rigging
PRICING TERMS: Firm Fixed Price
QTY VARIANCE: PLUS 0% MINUS 0%
INSPECTION POINT: DESTINATION
ACCEPTANCE POINT: DESTINATION
FOB: DESTINATION DELIVERY DATE: 365 DAYS ADO
PREP FOR DELIVERY:
WILL BE PACKAGED IN ACCORDANCE WITH ASTM D3951.
DELIVER TO: NAVAL FOUNDRY AND PROPELLER CENTER BUILDING 1029 1701 KITTY HAWK AVENUE PHILADELPHIA, PA 19112
GOVT USE External External External Customer RDD/ ITEM PR PRLI PR PRLI Material Need Ship Date. 0009 7013625317 0009 N/A N/A N/A 06/09/2028
SUPPLIES/SERVICES: 3460-N00001786
ITEM DESCRIPTION:
SPE4A8-26-R-0002
SUPPLY/SERVICE: 3460-N00001786 CONT'D
CLIN 0010 Post Processor in accordance with VIBB 25-25-1010
DLA issues this document using the DoD authorized unit of issue, please refer to the following URL to determine the corresponding ANSI X12 unit of issue.
https://view.officeapps.live.com/op/view.aspx?src=https%3A%2F%2Fwww.dla.mil%2FPortals%2F104%2FDocuments%2FDLMS% 2FeApplications%2FLogDataAdmin%2FUnitofIssueandPurchaseUnit.xlsx&wdOrigin=BROWSELINK
ITEM NO. SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT. 0010 3460-N00001786 1.000 EA $ _______________ $ ______________ IPE Post Processor
PRICING TERMS: Firm Fixed Price
QTY VARIANCE: PLUS 0% MINUS 0%
INSPECTION POINT: DESTINATION
ACCEPTANCE POINT: DESTINATION
FOB: DESTINATION DELIVERY DATE: 365 DAYS ADO
PREP FOR DELIVERY:
WILL BE PACKAGED IN ACCORDANCE WITH ASTM D3951.
DELIVER TO: NAVAL FOUNDRY AND PROPELLER CENTER BUILDING 1029 1701 KITTY HAWK AVENUE PHILADELPHIA, PA 19112
GOVT USE External External External Customer RDD/ ITEM PR PRLI PR PRLI Material Need Ship Date. 0010 7013625317 0010 N/A N/A N/A 06/09/2028
SPE4A8-26-R-0002
Form
H14 CONTRACTOR PERSONNEL SECURITY REQUIREMENTS (DEC 2021)
Part 12 Clauses
CLAUSES ADDED TO PART 12 BY ADDENDUM
252.203-7000 REQUIREMENTS RELATING TO COMPENSATION OF FORMER DOD OFFICIALS (SEP 2011) DFARS
252.203-7002 REQUIREMENT TO INFORM EMPLOYEES OF WHISTLEBLOWER RIGHTS (DEC 2022) DFARS
52.204-19 INCORPORATION BY REFERENCE OF REPRESENTATIONS AND CERTIFICATIONS (DEC 2014) FAR
252.204-7003 CONTROL OF GOVERNMENT PERSONNEL WORK PRODUCT (APR 1992) DFARS
252.204-7009 LIMITATIONS ON THE USE OR DISCLOSURE OF THIRD-PARTY CONTRACTOR REPORTED CYBER INCIDENT
INFORMATION (JAN 2023) DFARS
252.204-7012 SAFEGUARDING COVERED DEFENSE INFORMATION AND CYBER INCIDENT REPORTING (DEVIATION 2024-O0013)
(MAY 2024) DFARS
(a) Definitions. As used in this clause
Adequate security means protective measures that are commensurate with the consequences and probability of loss, misuse, or unauthorized access to, or modification of information.
Compromise means disclosure of information to unauthorized persons, or a violation of the security policy of a system, in which unauthorized intentional or unintentional disclosure, modification, destruction, or loss of an object, or the copying of information to unauthorized media may have occurred.
Contractor attributional/proprietary information means information that identifies the contractor(s), whether directly or indirectly, by the grouping of information that can be traced back to the contractor(s) (e.g., program description, facility locations), personally identifiable information, as well as trade secrets, commercial or financial information, or other commercially sensitive information that is not customarily shared outside of the company.
Controlled technical information means technical information with military or space application that is subject to controls on the access, use, reproduction, modification, performance, display, release, disclosure, or dissemination. Controlled technical information would meet the criteria, if disseminated, for distribution statements B through F using the criteria set forth in DoD Instruction 5230.24, Distribution Statements on Technical Documents. The term does not include information that is lawfully publicly available without restrictions.
Covered contractor information system means an unclassified information system that is owned, or operated by or for, a contractor and that processes, stores, or transmits covered defense information.
Covered defense information means unclassified controlled technical information or other information, as described in the Controlled Unclassified Information (CUI)
Registry at http://www.archives.gov/cui/registry/category-list.html, that requires safeguarding or dissemination controls pursuant to and consistent with law, regulations, and Governmentwide policies, and is -
(1) Marked or otherwise identified in the contract, task order, or delivery order and provided to the contractor by or on behalf of DoD in support of the performance of the contract; or
(2) Collected, developed, received, transmitted, used, or stored by or on behalf of the contractor in support of the performance of the contract.
Cyber incident means actions taken through the use of computer networks that result in a compromise or an actual or potentially adverse effect on an information system and/or the information residing therein.
Forensic analysis means the practice of gathering, retaining, and analyzing computer-related data for investigative purposes in a manner that maintains the integrity of the data.
SPE4A8-26-R-0002
Part 12 Clauses (CONTINUED)
Information system means a discrete set of information resources organized for the collection, processing, maintenance, use, sharing, dissemination, or disposition of information.
Malicious software means computer software or firmware intended to perform an unauthorized process that will have adverse impact on the confidentiality, integrity, or availability of an information system. This definition includes a virus, worm, Trojan horse, or other code-based entity that infects a host, as well as spyware and some forms of adware.
Media means physical devices or writing surfaces including, but is not limited to, magnetic tapes, optical disks, magnetic disks, large-scale integration memory chips, and printouts onto which covered defense information is recorded, stored, or printed within a covered contractor information system.
Operationally critical support means supplies or services designated by the Government as critical for airlift, sealift, intermodal transportation services, or logistical support that is essential to the mobilization, deployment, or sustainment of the Armed Forces in a contingency operation.
Rapidly report means within 72 hours of discovery of any cyber incident.
Technical information means technical data or computer software, as those terms are defined in the clause at DFARS 252.227-7013, Rights in Technical Data --Other Than Commercial Products and Commercial Services, regardless of whether or not the clause is incorporated in this solicitation or contract. Examples of technical information include research and engineering data, engineering drawings, and associated lists, specifications, standards, process sheets, manuals, technical reports, technical orders, catalog-item identifications, data sets, studies and analyses and related information, and computer software executable code and source code.
(b) Adequate security. The Contractor shall provide adequate security on all covered contractor information systems. To provide adequate security, the Contractor shall implement, at a minimum, the following information security protections:
(1) For covered contractor information systems that are part of an Information Technology (IT) service or system operated on behalf of the Government, the following security requirements apply:
(i) Cloud computing services shall be subject to the security requirements specified in the clause 252.239-7010, Cloud Computing Services, of this contract. (ii) Any other such IT service or system (i.e., other than cloud computing) shall be subject to the security requirements specified elsewhere in this contract.
(2) For covered contractor information systems that are not part of an IT service or system operated on behalf of the Government and therefore are not subject to the security requirement specified at paragraph (b)(1) of this clause, the following security requirements apply:
(i) Except as provided in paragraph (b)(2)(ii) of this clause, the covered contractor information system shall be subject to the security requirements in National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171, “Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations”, Revision 2 (available via the internet at http://dx.doi.org/10.6028/NIST.SP.800-171 ).
(ii)(A) The Contractor shall implement NIST SP 800-171, as soon as practical, but not later than December 31, 2017. For all contracts awarded prior to October 1, 2017, the Contractor shall notify the DoD Chief Information Officer (CIO), via email at osd.dibcsia@mail.mil, within 30 days of contract award, of any security requirements specified by NIST SP 800-171 not implemented at the time of contract award.
(B) The Contractor shall submit requests to vary from NIST SP 800-171 in writing to the Contracting Officer, for consideration by the DoD CIO. The Contractor need not implement any security requirement adjudicated by an authorized representative of the DoD CIO to be nonapplicable or to have an alternative, but equally effective, security measure that may be implemented in its place.
(C) If the DoD CIO has previously adjudicated the contractor's requests indicating that a requirement is not applicable or that an alternative security measure is equally effective, a copy of that approval shall be provided to the Contracting Officer when requesting its recognition under this contract.
(D) If the Contractor intends to use an external cloud service provider to store, process, or transmit any covered defense information in performance of this contract, the Contractor shall require and ensure that the cloud service provider meets security requirements equivalent to those established by the Government for the Federal Risk and Authorization Management Program (FedRAMP) Moderate baseline ( https:// http://www.fedramp.gov/resources/documents/) and that the cloud service provider complies with requirements in paragraphs (c) through (g) of this clause for cyber incident reporting, malicious software, media preservation and protection, access to additional information and equipment necessary for forensic analysis, and cyber incident damage assessment.
(3) Apply other information systems security measures when the Contractor reasonably determines that information systems security measures, in addition to those identified in paragraphs (b)(1) and (2) of this clause, may be required to provide adequate security in a dynamic environment or to accommodate special circumstances (e.g., medical devices) and any individual, isolated, or temporary deficiencies based on an assessed risk or vulnerability. These measures may be addressed in a system security plan.
(c) Cyber incident reporting requirement.
(1) When the Contractor discovers a cyber incident that affects a covered contractor information system or the covered defense information residing therein, or that affects the contractor's ability to perform the requirements of the contract that are designated as operationally critical support and identified in the contract, the Contractor shall -
SPE4A8-26-R-0002
Part 12 Clauses (CONTINUED)
(i) Conduct a review for evidence of compromise of covered defense information, including, but not limited to, identifying compromised computers, servers, specific data, and user accounts. This review shall also include analyzing covered contractor information system(s) that were part of the cyber incident, as well as other information systems on the Contractor's network(s), that may have been accessed as a result of the incident in order to identify compromised covered defense information, or that affect the Contractor's ability to provide operationally critical support; and
(ii) Rapidly report cyber incidents to DoD at https://dibnet.dod.mil.
(2) Cyber incident report. The cyber incident report shall be treated as information created by or for DoD and shall include, at a minimum, the required elements at https://dibnet.dod.mil.
(3) Medium assurance certificate requirement. In order to report cyber incidents in accordance with this clause, the Contractor or subcontractor shall have or acquire a DoD-approved medium assurance certificate to report cyber incidents. For information on obtaining a DoD-approved medium assurance certificate, see https://public.cyber.mil/eca/.
(d) Malicious software. When the Contractor or subcontractors discover and isolate malicious software in connection with a reported cyber incident, submit the malicious software to DoD Cyber Crime Center (DC3) in accordance with NSN/Part Number: 3460N00004594 Quantity: 1 EA Delivery: 365 days ADO
More opportunities from Department Of Defense → ASC INDUSTRIAL PLANT EQUIPMENT
Same awarding agency