PART 4 – ADMINISTRATIVE MATTERS

SUBPART 4.2 – CONTRACT DISTRIBUTION

4.270 Electronic Document Access.

4.270-2 Procedures.

SUBPART 4.5 – ELECTRONIC COMMERCE IN CONTRACTING

4.502 Policy.

SUBPART 4.6 – CONTRACTING REPORTING

4.606 Reporting Data.

4.606-90 Source selection process data element.

SUBPART 4.7 – CONTRACTOR RECORDS RETENTION

4.703 Policy.

SUBPART 4.8 – GOVERNMENT CONTRACT FILES

4.802 Contract files.

4.804 Closeout of contract files.

4.805 Storage, handling, and contract files.

SUBPART 4.13 – PERSONAL IDENTITY VERIFICATION

4.1302 Acquisition of approved products and services for personal identity verification.

4.1303 Contract clause.

4.1303-90 Personal identity verification of contractor personnel.

4.1303-91 Operations Security (OPSEC) For On-site Contractors.

SUBPART 4.16 – UNIQUE PROCUREMENT INSTRUMENT IDENTIFIERS

4.1601 Policy.

SUBPART 4.71 – UNIFORM CONTRACT LINE ITEM NUMBERING SYSTEM

4.7103-2 Numbering procedures.

4.7104-2 Numbering procedures.

SUBPART 4.73 —SAFEGUARDING COVERED DEFENSE INFORMATION AND CYBER INCIDENT

REPORTING
4.7301 Definitions.

4.7303-1 General.

4.7303-3 Cyber incident and compromise reporting.

SUBPART 4.90 – ELECTRONIC MICROCIRCUITS RESTRICTION

4.9000 Policy.

4.9001 Definitions.

4.9002 Prohibition.

4.9003 Requirements.

4.9004 Procurement note.

SUBPART 4.2 – CONTRACT DISTRIBUTION

(Revised September 9, 2016 through PROCLTR 2016-09)

4.270 Electronic Document Access.

4.270-2 Procedures.

(a)(2) Contracting officers will accept or reject contract deficiency reports (CDRs) in EDA within 10

days of submission, and resolve the CDR within 30 days of submission. The DLA Acquisition

Operations Division is responsible to track and report performance on a monthly basis to the SPE.

Procuring organizations shall track and report monthly to the HCA.

SUBPART 4.5 – ELECTRONIC COMMERCE IN

CONTRACTING

(Revised June 11 , 2020 through PROCLTR 2020-1 2 )

4.502 Policy.

(b) The DLA Internet Bid Board System (DIBBS) ( https://www.dibbs.bsm.dla.mil/ ) is the DLA

supplier-facing portal utilized to:

(i) Post solicitations, solicitation amendments, awards, and award modifications;
(ii) Facilitate submission of quotations by suppliers in response to request for quotations;

(iii) Enable upload of offers in response to request for proposals;

(iv) Convey important messages to the supplier community; and

(v) Transmit notices of proposed contract actions and awards to Contract Opportunities (

https://sam.gov/content/opportunities ) at SAM.gov ( https://sam.gov/content/home ). Contracting

officers shall include procurement note L01 in DIBBS solicitations for purchase orders and contracts

(except indefinite delivery/indefinite quantity task or delivery order contracts, requirements

contracts, and multiple award federal supply schedule-type contracts).

*****

L01 Electronic Award Transmission (JUN 2020)

DLA provides notice of awards by either—

(1) Electronic email containing a link to the electronic copy of the Department of Defense (DD) Form

1155, Order for Supplies or Services, on the DLA Internet Bid Board System (DIBBS); or

(2) Electronic Data Interchange (EDI) 850 utilizing American National Standards Institute (ANSI)

X12 Standards through a value added network (VAN) approved by DLA Transaction Services.

Offerors/contractors can obtain information regarding EDI, ANSI X12 transactions, and VANs

approved by DLA Transaction Services at Defense Automatic Addressing System (DAAS) Value

Added Network List ( https://www.transactionservices.dla.mil/daashome/edi-vanlist-dla.asp ).

Offerors should direct questions concerning electronic ordering to the appropriate procuring

organization point of contact below:

DLA Land and Maritime, Helpdesk.EBS.L&M.LTCs@dla.mil

DLA Troop Support, dlaedigroup@dla.mil

*****

Contracting officers shall include procurement note L02 in DIBBS solicitations for indefinitedelivery/indefinite quantity task or delivery order contracts, requirements contracts, and multiple

award federal supply schedule-type contracts.

*****

L02 Electronic Order Transmission (JUN 2020)

Offerors shall select one of the following alternatives for paperless order transmission:

( ) American National Standards Institute (ANSI) X12 Standards through a value added network

(VAN) approved by DLA Transaction Services; or

( ) Electronic mail (email) award notifications containing web links to electronic copies of the

Department of Defense (DD) Form 1155, Order for Supplies or Services.

Offerors must register on the DLA Internet Bid Board System (DIBBS) (
https://www.dibbs.bsm.dla.mil/ ) to receive email notification.

If the offeror elects ANSI/VAN order transmission, DLA will send Electronic Data Interchange (EDI)

transaction sets at time of award. The contractor shall acknowledge receipt of transaction sets with

a functional acknowledgement or order receipt message within 24 hours. If the contractor receives

the award transaction set on a weekend or Federal holiday, the contractor shall acknowledge receipt

on the next business day. This acknowledgement will confirm that the contractor’s interface with the

system is working as needed for contract ordering.

Offerors can obtain information regarding EDI, ANSI X12 transactions, and VANs approved by DLA

Transaction Services at Defense Automatic Addressing System (DAAS) Value Added Network List (

https://www.transactionservices.dla.mil/daashome/edi-vanlist-dla.asp ).

Offerors should direct questions concerning electronic ordering to the appropriate procuring

organization point of contact below:

DLA Land and Maritime, Helpdesk.EBS.L&M.LTCs@dla.mil

DLA Troop Support, dlaedigroup@dla.mil

DLA Aviation, avnprocsysproceddiv@dla.mil, phone # 804-279-4026

*****

SUBPART 4.6 – CONTRACTING REPORTING

(Added October 13, 2020 in accordance with PROCLTR 2020-23)

4.606 Reporting Data.

4.606-90 Source selection process data element.

(a) In accordance with (DPC) Memorandum Reporting Source Selection Process in Federal

Procurement Data System (FPDS) (

https://www.acq.osd.mil/dpap/policy/policyvault/USA000991-20-DPC.pdf ), dated May 21, 2020,

contracting officers shall report the Source Selection Process data element in FPDS using one of the

following codes, unless an exception at 4.606-90(b) applies:

CODES FOR REPORTING “SOURCE SELECTION PROCESS” IN FPDS

Code Short

Description Long Description
LPTA

Lowest Price

Technically

Acceptable

Select this option if contract award used the LPTA source

selection process. LPTA is defined in FAR subpart 15.101-2,

but select this option if the process was used for competitive

procurements conducted in accordance with other subparts

(e.g., 8, 12, 13, 16).

TO Trade-off

Select this option if contract award used any type of best value

trade-off process using price/cost and nonprice/cost factors to

determine the successful offeror award. Trade-off is defined in

FAR subpart 15.101-1, but select this option if the process was

used for competitive procurements conducted in accordance

with other subparts (e.g., 8, 12, 13, 16).

O Other

Select this option if contract award did not use LPTA or a

Trade-off process to determine the successful offeror (e.g.,

price-only, sole-source).

(b) The Source Selection Process data element is not a required data field for blanket purchase

agreements (BPAs) issued using part 13 procedures; task and delivery orders issued using singleaward indefinite-delivery contracts; and call orders issued under single-award BPAs and using FAR

part 8 procedures.

(c) Contracting officers shall not leave the Source Selection Process data field blank.

(d) Contracting officers shall enter—

(1) O for non-competitive awards.

(2) One of the choices in the table at 4.606-90(a) for competitive awards.

(3) LPTA or TO when the contracting officer used a source selection process on awards issued using

FAR section 15.101.

(4) O for fully automated actions. In accordance with the DLA Master Solicitation for Automated

Simplified Acquisitions, the program evaluates all qualified quotations based on price alone and does

not consider quantity price breaks.

(5) TO for automated requirements that are evaluated and awarded manually. In accordance with

the DLA Master Solicitation for Automated Simplified Acquisitions, manual evaluation factors

include price, delivery, and past performance in accordance with the terms in the solicitation.

(6) The code consistent with the evaluation procedures cited in the RFQ/RFP for all manually

solicited requirements, even if only one offeror responded.

(7) TO for all manual solicitations that may include language for a potential best value trade-off (e.g.

use of past performance).
SUBPART 4.7 – CONTRACTOR RECORDS RETENTION

(Revised August 30,2022 through PROCLTR 2022-16)

4.703 Policy.

(a) Contracting officers shall include procurement note C03 in solicitations and awards.

*****

C03 Contractor Retention of Supply Chain Traceability Documentation (JUN 2020)

(1) By submitting a quotation or offer, the contractor, if it is not the manufacturer of the item, is

confirming it currently has, or will obtain before delivery, and shall retain documented evidence

(supply chain traceability documentation), as described in paragraph (2) of this procurement note,

demonstrating the item is from the approved manufacturer and conforms to the technical

requirements.

(2) At a minimum, the supply chain traceability documentation for the item shall include: basic item

description, part number and/or national stock number, manufacturing source, manufacturing

source’s Commercial and Government Entity (CAGE) code, and clear identification of the name and

location of all supply chain intermediaries between the manufacturer to the contractor to item(s)

acceptance by the Government. The documentation should also include, if available, the

manufacturer's batch identification for the item(s), such as date codes, lot codes, or serial numbers.

(3) Contractors can find examples of acceptable supply chain traceability documentation at the

Counterfeit Detection and Avoidance Program (CDAP) Website (

http://www.dla.mil/LandandMaritime/Business/Selling/Counterfeit-Detection-Avoidance-Program/ ).

(4) The contractor shall immediately make documentation available to the contracting officer upon

request. The contracting officer determines the acceptability and sufficiency of documentation. The

contractor shall retain supply chain traceability documentation for six years after final payment

under this contract for audit and other valid government purposes. If the contractor fails to retain or

provide the documentation, or the contracting officer finds the documentation to be unacceptable,

the contracting officer may take corrective action, including, but not limited to, cancellation of

undelivered orders or rejection of delivered supplies.

*****

SUBPART 4.8 – GOVERNMENT CONTRACT FILES

(Revised March 31, 2021 through PROCLTR 2021-08)

4.802 Contract files.

(f) DLR sites shall follow the processes and systems at the Military Services sites.
4.804 Closeout of contract files.

(S-90) Contracting officers shall follow the FAR standard timeframe for closeout. Contracting

officers shall assess the validity of their unliquidated obligations (ULOs) that are 120 calendar days

or more past the contract delivery date in accordance with DLAM 7010.02, Unliquidated Obligations

(ULO) and Undelivered Orders (UDO) Management (

https://issue-p.dla.mil/Published_Issuances/Unliquidated%20Obligations%20(ULO)%20and%20Undel

ivered%20Orders%20(UDO)%20Management.pdf ).

(S-91)(1) Definition.

“Excess funds” means any funding amount remaining obligated on a contract at the time of contract

closeout that is not needed to pay for contract performance or for contract adjustments (see DLAM

7010.02, Encl. 3, Table 1 for valid reasons funds should remain obligated). Excess funds are a subset

of “unliquidated obligation(s).”

(2) Contracting officers shall deobligate excess funds via bilateral or unilateral (see

43.103(b)(S-90)43.103 Types of contract modifications.) contract modification as part of the contract

closeout process. The record of the contract obligation amount is maintained in DLA’s electronic

business system and shall be updated to remove all deobligated excess funds as part of contract

closeout.

4.805 Storage, handling, and contract files.

(a) Procuring organizations shall follow the Records Management Procurement Job Aid for storage

and retrieval of electronic documents.

(1) Procuring organizations shall store all acquisition contract file records in EProcurement

“Records Management,” the official DLA records repository, except as stated in 4.805(b).

(2) Procuring organizations shall upload to Records Management all obligations documents (e.g.

contract awards; and modifications affecting the overall contract obligation, such as those for

equitable adjustments or raising the contract ceiling), to include bilateral signature pages. Follow

the procedures for saving and naming conventions in the Procurement Job Aid entitled Completing

Forms in Document Builder (

https://dlamil.dps.mil/:w:/r/sites/InfoOps/_layouts/15/doc2.aspx?sourcedoc=%7B950AD3EC-CE42-44

4CB2E6-1A3BB848637A%7D&file=Completing%20Forms%20in%20Document%20Builder%20-15%20F

eb%2019.doc&action=default&mobileredirect=true ).

(3) When a condition at 4.805(b) applies, include a reference statement in the Records Management

contract file notifying authorized users of the location of any document or material maintained

outside Records Management.

(b) Procuring organizations shall maintain contents of contract files outside EProcurement Records

Management in accordance with the following:

(1) Maintain documents containing personally identifiable information (PII), legal reviews,

documents marked as contractor proprietary information, and oversized or voluminous documents

as a hard copies or in an electronic, restricted-access location (e.g., eWorkplace Sharepoint site or
local share drive).

(2) Maintain classified documents in hard copy only.

(3) Maintain material that cannot be converted to electronic format (e.g., samples, models) in a

secured, restricted-access location.

(4) Maintain contractor bid or proposal information or any other source selection

information not marked proprietary as hard copies or in an electronic, restricted-access location

until time of award. After award, procuring organizations may upload the documents into Records

Management or maintain them in an electronic, restricted-access location. Procuring organizations

may maintain oversized or voluminous documents as hard copies.

(c) HCAs shall ensure compliance with this policy.

(S-90) Retain Financial Management Regulation records for 10 years in accordance with DLA

Finance Director memorandum dated September 15, 2016, SUBJECT: New DoD Change for

Financial Record Retention in Support of Audit Compliance. This policy applies only to records

necessary to support financial transactions and financial statement balances; and document

evidence of effective internal controls over financial reporting (e.g., reviews and approvals).

SUBPART 4.13 – PERSONAL IDENTITY VERIFICATION

(Revised January 30, 2022 through PROCLTR 2022-04)

4.1302 Acquisition of approved products and services for personal identity

verification.

(c) DLA Information Operations is responsible for determining compliance.

4.1303 Contract clause.

4.1303-90 Personal identity verification of contractor personnel.

The contracting officer shall insert procurement note H14, Contractor Personnel Security

Requirements, in solicitations and contracts that contain FAR 52.204-9, Personal Identity

Verification of Contractor Personnel, when contract performance requires contractor access to

Federally controlled facility and/or access to a Federally controlled information system. Contractors

requiring intermittent access for a period of less than six months shall obtain approval from the

installation security office through the contracting officer.When the contractor employee(s) is/are

required to obtain a Common Access Card (CAC) and DLA will serve as the Trusted Agent, follow the

procedures in DLA SOP J72.001, Contractor Common Access Card (CAC) Issuance and

Accountability Process for DLA Contracts (

https://dlamil.dps.mil/sites/Acquisition/Shared%20Documents/CONTRACTOR%20CAC%20SOP%20J7
2.001.pdf ).

For all contracts where contractor CACs and/or Installation Access Badges will be issued,

contracting officers shall ensure that responsibilities for oversight and retrieval of contractor CACs

and Installation Access Badges are addressed in the COR designation letter. If a COR is not

designated, the contracting officer is responsible for oversight and retrieval of contractor CACs and

Installation Access Badges issued under the contract.

If contract performance is to occur at a non-DLA site and the site has physical site and/or

information technology security requirements, in addition to the DLA CAC requirements, the

contracting officer shall identify those requirements and include them in the solicitation and

subsequent contract.

*****

H14 Contractor Personnel Security Requirements (JAN 2021)

(a) Work to be performed under this contract or task order may, in full or in part, be performed at

the Defense Logistics Agency (DLA) Headquarters (HQ), DLA field activity office(s), or other

Federally-controlled facilities. Prior to beginning work on a contract, DLA requires all contractor

personnel working on the Federally-controlled facility to have, at a minimum, an initiated National

Agency Check with Written Inquiries (NACI) or NACI equivalent and favorable completion of a

Federal Bureau of Investigation (FBI) fingerprint check.

(b) Additionally, in accordance with Department of Defense (DoD) Regulation 5200.2-R, Personnel

Security Programs, and DLA Issuance 4314, Personnel Security Program, all DoD contractor

personnel who have access to Federally-controlled information systems must be assigned to

positions which are designated at one of three information technology (IT) levels, each requiring a

certain level of investigation and clearance, as follows:

(1) IT-I for an IT position requiring a single scope background investigation (SSBI) or SSBI

equivalent;

(2) IT-II for an IT position requiring a National Agency check with Law and Credit (NACLC) or

NACLC equivalent; and

(3) IT-III for an IT position requiring a NACI or equivalent.

Note: IT levels will be designated according to the criteria in DoD 5200.2-R.

(c) Previously completed security investigations may be accepted by the Government in lieu of new

investigations if determined by the DLA Intelligence Personnel Security Office to be essentially

equivalent in scope to the contract requirements. The length of time elapsed since the previous

investigation will also be considered in determining whether a new investigation is warranted. To

assist the Government in making this determination, the contractor must provide the following

information to the respective DLA Intelligence Personnel Security Office immediately upon receipt of

the contract. This information must be provided for each contractor employee who will perform work

on a Federally-controlled facility and/or will require access to Federally-controlled information

systems:

(1) Full name, with middle name, as applicable, with social security number;

(2) Citizenship status with date and place of birth;
(3) Proof of the individual’s favorably adjudicated background investigation or NACI, consisting of

identification of the type of investigation performed, date of the favorable adjudication, name of the

agency that made the favorable adjudication, and name of the agency that performed the

investigation;

(4) Company name, address, phone and fax numbers with email address;

(5) Location of on-site workstation or phone number if off-site (if known by the time of award); and

(6) Delivery order or contract number and expiration date; and name of the contracting officer.

(d) The contracting officer will ensure that the contractor is notified as soon as a determination is

made by the assigned or cognizant DLA Intelligence Personnel Security Office regarding acceptance

of the previous investigation and clearance level.

(1) If a new investigation is deemed necessary, the contractor and contracting officer will be notified

by the respective DLA Personnel Security Office after appropriate checks in DoD databases have

been made.

(2) If the contractor employee requires access to classified information and currently does not have

the appropriate clearance level and/or an active security clearance, the DLA Intelligence Personnel

Security Office will relay this information to the contractor and contracting officer for further action.

Investigations for contractor employees requiring access to classified information must be initiated

by the contractor Facility Security Officer (FSO).

(3) The contracting officer will ensure that the respective DLA Intelligence Personnel Security Office

initiates investigations for contractor employees not requiring access to classified information (i.e.,

IT or unescorted entry).

(4) It is the contractor’s responsibility to ensure that adequate information is provided and that each

contractor employee completes the appropriate paperwork, as required either by the contracting

officer or the DLA Intelligence Personnel Security Office, in order to begin the investigation process

for the required clearance level.

(e) The contractor is responsible for ensuring that each contractor employee assigned to the position

has the appropriate security clearance level.

(f) The contractor shall submit each request for IT access and investigation through the contracting

officer to the assigned or cognizant DLA Intelligence Personnel Security Office. Requests shall

include the following information and/or documentation:

(1) Standard Form (SF) 85, Questionnaire for Non-Sensitive Positions, or the SF 86, Questionnaire

for National Security Positions (see note below);

(2) Proof of citizenship (i.e., an original or a certified copy of a birth certificate, passport, or

naturalization certificate); and

(3) Form FD-258, Fingerprint Card (however, fingerprinting can be performed by the cognizant DLA

Intelligence Personnel Security Office).

(Note to (f)(1) above: An investigation request is facilitated through use of the SF 85 or the SF 86.

These forms with instructions as well as the Optional Form (OF) 306, Declaration for Federal

Employment, which is required with submission of the SF85 or SF 86, are available at the Office of
Personnel Management’s (OPM) system called Electronic – Questionnaires for Investigations

Processing (e-QIP). Hard copies of the SF85 and SF86 are available at OPM’s web-site,

www.opm.gov, but hard copies of the forms are not accepted.)

(g) Required documentation, listed above in paragraphs (f)(1) through (3), must be provided by the

contractor as directed by the contracting officer to the cognizant DLA Intelligence Personnel

Security Office at the time of fingerprinting or prior to the DLA Intelligence Personnel Security

Office releasing the investigation to OPM.

(h) Upon completion of the NACI, NACLC, SSBI, or other sufficient, appropriate investigation, the

results of the investigation will be forwarded by OPM to the appropriate adjudication facility for

eligibility determination or the DLA Intelligence Personnel Security Office for review and

determination regarding the applicant’s suitability to occupy an unescorted entry position in

performance of the DLA contract. Contractor personnel shall not commence work on this effort until

the investigation has been favorably adjudicated or the contractor employee has been waived into

the position pending completion of adjudication. The DLA Intelligence Personnel Security Office will

ensure that results of investigations will be sent by OPM to the Department of Defense, Consolidated

Adjudications Facility (DoDCAF) or DLA Intelligence Personnel Security Office.

(i) A waiver for IT level positions to allow assignment of an individual contractor employee to

commence work prior to completion of the investigation may be granted in emergency situations

when it is determined that a delay would be harmful to national security. A request for waiver will be

considered only after the Government is in receipt of the individual contractor employee’s completed

forms, the background investigation has been initiated, and favorable FBI fingerprint check has been

conducted. The request for a waiver must be approved by the Commander/Director or Deputy

Commander/Director of the site. The cognizant DLA Intelligence Personnel Security Office reserves

the right to determine whether a waiver request will be forwarded for processing. The individual

contractor employee for which the waiver is being requested may not be assigned to a position, that

is, physically work at the Federally-controlled facility and/or be granted access to Federallycontrolled information systems, until the waiver has been approved.

(j) The requirements of this procurement note apply to the prime contractor and any subcontractors

the prime contractor may employ during the course of this contract, as well as any temporary

employees that may be hired by the contractor. The Government retains the right to request removal

of contractor personnel, regardless of prior clearance or adjudication status whose actions, while

assigned to this contract,who are determined by the contracting officer to conflict with the interests

ofthe Government. If such removal occurs, the contractor shall assign qualified personnel, with the

required investigation, to any vacancy.

(k) All contractor personnel who are granted access to Government and/or Federally-controlled

information systems shall observe all local automated information system (AIS) security policies and

procedures. Violations of local AIS security policy, such as password sharing, performing personal

work, file access violations, or browsing files outside the scope of the contract, will result in removal

of the contractor employee from Government property and referral to the contractor for appropriate

disciplinary action. Actions taken by the contractor in response to a violation will be evaluated and

will be reflected in the contractor’s performance assessment for use in making future source

selection decisions. In addition, based on the nature and extent of any violations of AIS security

policy, the Government will consider whether it needs to pursue any other actions under the

contract such as a possible termination.

(l) The contractor may also be required to obtain a Common Access Card (CAC) or Installation

Access Badge for each contractor employee in accordance with procedures established by DLA.
When a CAC is required, the contracting officer will ensure that the contractor follows the

requirements of Homeland Security Presidential Directive 12 and any other CAC-related

requirements in the contract. The contractor shall provide, on a monthly basis, a listing of all

personnel working under the contract that have CACs.

(m) See procurement note H16, Operations Security (OPSEC) For On-site Contractors, for required

OPSEC training.

(n) When a contractor employee who has been granted a clearance is removed from the contract, the

contractor shall provide an appropriately trained substitute who has met or will meet the

investigative requirements of this procurement note. The substitute may not begin work on the

contract without written documentation, signed by the contracting officer, stating that the new

contractor employee has met one of the criteria set forth in paragraphs (c), (d), or (i) of this

procurement note (i.e., acceptance of a previously completed security investigation, satisfactory

completion of a new investigation, or a waiver allowing work to begin pending completion of an

investigation). Contractor individual employees removed from this contract as a result of a violation

of local AIS security policy are removed for the duration of the contract.

(o) The following shall be completed for every employee of the Government contractor working on

this contract upon contract expiration. Additionally, the contractor shall notify the contracting

officer immediately in writing whenever a contractor employee working on this contract resigns, is

reassigned, is terminated, or no longer requires admittance to the Federally-controlled facility or

access to Federally-controlled information systems. When the contractor employee departs, the

contractor will relay departure information to the cognizant DLA Intelligence Personnel Security

Office and the Trusted Agent (TA) that entered the individual into the Trusted Associated

Sponsorship System (TASS), so appropriate databases can be updated. The contractor will ensure

each departed employee has completed the DLA J6 Out-Processing Checklist, when applicable, for

the necessary security briefing, has returned any Government furnished equipment, returned the

DoD CAC and DLA (or equivalent Installation) badge, returned any DoD or DLA vehicle decal, and

requested deletion of local area network account with a prepared Department of Defense (DD) Form

2875. The contractor will be responsible for any costs involved for failure to complete the outprocessing, including recovery of Government property and investigation involved.

(p) These contractor security requirements do not excuse the contractor from meeting the delivery

schedule/performance requirements set forth in the contract, or waive the delivery

schedule/performance requirements in any way. The contractor shall meet the required delivery

schedule/performance requirements unless the contracting officer grants a waiver or extension.

(q) The contractor shall not bill for personnel, who are not working on the contract while that

contractor employee’s clearance investigation is pending.

*****

4.1303-91 Operations Security (OPSEC) For On-site Contractors.

The contracting officer shall insert procurement note H16 in solicitations and contracts when

contract performance requires contractors to have intermittent and/or routine physical access to a

Federally-controlled facility and/or intermittent and/or routine access to a Federally controlled

information system.

*****
H16 Operations Security (OPSEC) For On-site Contractors (DEC 2021)

(1) Contractors shall complete the following courses:

(a) Center for the Development of Security Excellence Operations Security (OPSEC) Awareness;

(b) Unauthorized Disclosure of Classified Information for DoD and Industry;

(c) Insider Threat Awareness; and

(d) Introduction to Information Security courses. These courses are located at Security Awareness

Hub (https://securityawareness.usalearning.gov/index.html).

(2) The courses identified at subparagraph (1) above are required for all contractors that perform

work on-site at a DLA or DoD facility; or for contractors that perform work off-site and access a

Federally-controlled information system.

(3) The contractor shall immediately direct its workforce who are performing services for the

Government to take the training after contract award. The contractor shall provide evidence of this

training to the contracting officer representative or the contracting officer no later than five

business days after contract award or prior to accessing the installation or a Federally-controlled

information system, whichever occurs first.

(4) Annual refresher training is required and consists of re-accomplishing all of the courses listed in

subparagraph (1) above. The contractor shall keep certificates on record for inspection or

submission as required by the Government at the Government’s discretion.

*****

SUBPART 4.16 – UNIQUE PROCUREMENT INSTRUMENT

IDENTIFIERS

(Revised September 9, 2016 through PROCLTR 2016-09)

4.1601 Policy.

(a) This process, for Business Process Analyst use only, is located in the Procurement Job Aid

applicable to PIIN maintenance in EP and ECC:

Supplier Relationship Management (SRM)/EProcurement:

Table Maintenance - Maintaining PIIN Tables (

https://dlamil.dps.mil/sites/InfoOps/Shared%20Documents/Forms/AllItems.aspx?FolderCTID=0x0120

00D3D259D71343A94E992AA17310CB0231&viewid=bb1b25a6%2D56d8%2D4398%2Dac48%2D5f9

87c946cca&id=%2Fsites%2FInfoOps%2FShared%20Documents%2FEBS%20ONLINE%20HELP%2F

ePROCUREMENT%2FTable%20Maintenance )

Table Maintenance - Maintaining Basic Agreement PIIN/SPIIN Tables (

https://dlamil.dps.mil/sites/InfoOps/Shared%20Documents/Forms/AllItems.aspx?FolderCTID=0x0120
00D3D259D71343A94E992AA17310CB0231&viewid=bb1b25a6%2D56d8%2D4398%2Dac48%2D5f9

87c946cca&id=%2Fsites%2FInfoOps%2FShared%20Documents%2FEBS%20ONLINE%20HELP%2F

ePROCUREMENT%2FTable%20Maintenance ).

Enterprise Core Component (ECC):

Table Maintenance - PIIN and Call Number Table Maintenance and Associated Error Workflow

Tables (

https://dlamil.dps.mil/sites/InfoOps/Shared%20Documents/Forms/AllItems.aspx?FolderCTID=0x0120

00D3D259D71343A94E992AA17310CB0231&viewid=bb1b25a6%2D56d8%2D4398%2Dac48%2D5f9

87c946cca&id=%2Fsites%2FInfoOps%2FShared%20Documents%2FEBS%20ONLINE%20HELP%2F

PROCUREMENT%20DOCUMENTS%2FTable%20Maintenance ).

SUBPART 4.71 – UNIFORM CONTRACT LINE ITEM

NUMBERING SYSTEM

4.7103-2 Numbering procedures.

DEVIATION 20-01 authorizes DLA Disposition Services to use a hazardous waste (HW) Profile-Based

CLIN/sub-CLIN numbering structure. This deviation expires on November 17, 2022.

4.7104-2 Numbering procedures.

Reference 4.7103-24.7103-2 Numbering procedures..

SUBPART 4.73 —SAFEGUARDING COVERED DEFENSE

INFORMATION AND CYBER INCIDENT REPORTING

(Revised April 30, 2021 through PROCLTR 2021-10)

4.7301 Definitions.

See 2.101 for definitions of “collaboration folders,” “DLA Export Control Technical Data Access,”

“enhanced validation,” and “JCP Certification.” See DFARS 204.7301 for definitions of “controlled

technical information” and “covered defense information.” See DFARS 252.204-7012, Safeguarding

Covered Defense Information and Cyber Incident Reporting, paragraph (a) for definitions of

“covered defense information,” “operationally critical support,” and “cyber incident.” See DoDD

5230.25, Withholding of Unclassified Technical Data From Public Disclosure, E2.1.2 for definition of

“critical technology.”
4.7303-1 General.

Contracting officers shall follow the guidance at DFARS PGI 204.7303-1(a) and (b), Safeguarding

Covered Defense Information and Cyber Incident Reporting, Procedures, General.

(a) In addition to the requirements at DFARS PGI 204.7303-1(a):

(1) For services and items without a material master that require access to controlled technical data

or information, the requiring activity will provide a performance work statement (PWS) or

performance specification that identifies the need for contractors to access covered defense

information (CDI). Contracting officers shall review the PWS or performance specification and

associated data that the requiring activity determined contains, utilizes, or may result in the

generation of CDI and conditions that may potentially arise after award that may result in the

generation of CDI to confirm the requiring activity identified the need for contractors to access CDI.

(2) For NSN and LSN items that require access to controlled technical data or information, the

product specialist will update the Purchase Order Text (POT) to include Standard Text Objects

(STOs) RD002, Covered Defense Information Applies, or RD003, Covered Defense Information

Potentially Applies; and RQ032, Export Control of Technical Data (see 25.7901-4(S-90). These STOs

constitute notice to contracting officers that the requiring activity expects the solicitation to result in

a contract, task order, or delivery order that will involve controlled technical information.

(b) DLA may require additional contractor qualifications to access controlled technical information.

For export-controlled items, see subpart SUBPART 25.79 – EXPORT CONTROL.

(S-90) The requiring activity may be internal to DLA or external. Contracting officers should

coordinate with the supply planner or other customer-facing personnel to identify the requiring

activity, if unknown. Contracting officers should collaborate with the requiring activity to identify

covered defense information and/or operationally critical support.

4.7303-3 Cyber incident and compromise reporting.

(a)(S-91) If the contracting officer receives notice from the DoD Cyber Crime Center (DC3) and DLA

is the requiring activity—

(i) Following receipt of the DC3 ICF notification of a cyber incident, the DLA requiring activity will—

(A) Communicate directly only with the contracting officer regarding the incident. The contracting

officer is the only individual responsible for all direct communications with the contractor regarding

the cyber incident;

(B) Submit a Special Situation Report (Special SITREP) in accordance with instructions and template

at DLA DTM 17-017, Commander’s Critical Information Requirements (CCIR) Reporting Policy

Changes ( https://dlamil.dps.mil/sites/InfoOps/CCIR/Forms/AllItems.aspx ); and

(C) Contact the Damage Assessment Management Office (DAMO) (OSD Liaison Telephone (410)

694-4380), and request point of contact information if the DAMO has not already initiated contact;

(D) Coordinate with the DAMO to decide whether to submit a request for contractor media in

accordance with the clause at DFARS 252.204-7012, Safeguarding Covered Defense Information and
Cyber Incident Reporting, paragraph (e); and provide notice of the decision with supporting

rationale to the contracting officer; and

(E) Assess and implement appropriate programmatic, technical, and operational actions to mitigate

risks identified in the damage assessment report and update the Program Protection Plan to reflect

any changes resulting from the assessment.

(ii) The DLA Information Operations Cyber Security Team Manager/System Security Engineer, J61,

will—

(A) Provide support to the DLA requiring activity by assisting in the assessment of risk and

mitigation strategy associated with the cyber incident; and

(B) If the requiring activity requests an assessment of contractor compliance with the requirements

of DFARS 252.204-7012, consult with the contracting officer before beginning the assessment.

(S-92) If the contracting officer receives notice from the DC3 and the requiring activity is external to

DLA, the contracting officer shall—

(i) Submit the Special SITREP (see 4.7303-34.7303-3 Cyber incident and compromise reporting.

(a)(S-91)4.7303-3 Cyber incident and compromise reporting. (i)4.7303-3 Cyber incident and

compromise reporting. (B)4.7303-3 Cyber incident and compromise reporting.)); and

(ii) Provide the DC3 notice to the DLA Cyber Emergency Response Team (CERT) (cert@dla.mil).

SUBPART 4.90 – ELECTRONIC MICROCIRCUITS

RESTRICTION

(Revised August 30, 2022 through PROCLTR 2022-11)

4.9000 Policy.

Contracting officers shall include procurement note H17, Restriction on FSC 5962, Electronic

Microcircuits, in solicitations and contracts equal to or under the micro-purchase threshold.

Procurement note H17 applies only to procurements involving Federal Supply Class (FSC) code

5962, Electronic Microcircuits.

4.9001 Definitions.

(a) For the purpose of this section:

(1) “Covered Nation” means

(i) the Democratic People’s Republic of North Korea;

(ii) the People’s Republic of China;

(iii) the Russian Federation; and
(iv) the Islamic Republic of Iran

(2) “Federal Supply Class (FSC) 5962, Electronic Microcircuit” means

(i) a small circuit having a high equivalent circuit element density, which is considered as a single

part composed of interconnected elements placed and/or formed on or within a single substrate to

perform an electronic circuit function. The elements may be formed on or within a semiconductor

material substrate. They may consist of conductive film(s) formed on an insulating substrate or may

be a combination of one or both of these types with discrete elements;

(ii) designed specifically to generate, modify, or process electrical signals included in FSC 5962;

(iii) a supply class identified as being high-risk for counterfeiting; and

(iv) includes Integrated Circuit Devices; Integrated Circuit Modules, Integrated Electronic Devices:

Hybrid, Magnetic, Molecular, Opto-Electronic, and Thin Film.

4.9002 Prohibition.

(a) The offeror shall not propose to deliver FSC 5962, Electronic Microcircuits, from a covered

nation to the Government under any solicitation or resulting contract.

(b) If the contracting officer is unable to determine whether the FSC 5962, Electronic Microcircuits

is from a covered nation based on traceability documentation or other means on the offeror’s

representation, then the award shall not be made to that offeror.

4.9003 Requirements.

(a) The awardee must meet the following requirements:

(i) Provide post award traceability documentation. If the contracting officer is unable to obtain

traceability accounting for 100% of the material, the contracting officer reserves the right to reject

the material based on the prohibition in DLAD 4.9002;

(ii) Obtain written contracting officer approval prior to shipment.

4.9004 Procurement note.

As prescribed in DLAD 4.9000, use procurement note H17 for procurements involving FSC 5962

only that are equal to or under the micro-purchase threshold.

H17 RESTRICTION ON FSC 5962, ELECTRONIC MICROCIRCUITS (MAY 2022)

(a) Application. This procurement note shall apply only to actions at or under the micro-purchase

threshold.

(b) Definitions. As used in this procurement note.

(1) “Covered Nation” means
(i) the Democratic People’s Republic of North Korea;

(ii) the People’s Republic of China;

(iii) the Russian Federation; and

(iv) the Islamic Republic of Iran.

(2) “Federal Supply Class (FSC) 5962, Electronic Microcircuit” means

(i) a small circuit having a high equivalent circuit element density, which is considered as a single

part composed of interconnected elements placed and/or formed on or within a single substrate to

perform an electronic circuit function. The elements may be formed on or within a semiconductor

material substrate. They may consist of conductive 8 film(s) formed on an insulating substrate or

may be a combination of one or both of these types with discrete elements;

(ii) designed specifically to generate, modify, or process electrical signals included in FSC 5962;

(iii) a supply class identified as being high-risk for counterfeiting; and

(iv) includes Integrated Circuit Devices; Integrated Circuit Modules, Integrated Electronic Devices:

Hybrid, Magnetic, Molecular, Opto-Electronic, and Thin Film.

(c) Prohibition. The offeror represents by the submission of its quotation that it shall not propose to

deliver FSC 5962, Electronic Microcircuits from a covered nation to the Government under this

solicitation or any resulting contract. If the contracting officer is unable to determine whether the

FSC 5962, Electronic Microcircuits is from a covered nation based on traceability documentation or

other means on the offeror’s representation, as described above, then the award shall not be made

to that offeror.

(d) Requirements. The awardee must also meet the following requirements:

(i) Provide post award traceability documentation. If the contracting officer is unable to obtain

traceability accounting for 100% of the material, the contracting officer reserves the right to reject

the material based on the above prohibition.

(ii) Obtain written contracting officer approval prior to shipment.