032 RFQ attachment - Statement of Work-final.docx

Translation and Language Verification Services for Cybersecurity Documents

1.0 Background

The cross-border nature of economies makes it critical that NIST considers the global context when it determines priorities and conceptualizes approaches. As a result of widespread international use, there are now multiple translations and adaptations of NIST cybersecurity and privacy resources. This strong foundation is continuing to grow over time as NIST’s impact increases and our opportunities for engagement and collaboration expand. NIST’s international engagement also includes participation in and engagement with Standards Developing Organizations (SDOs) on efforts related to cybersecurity and privacy to promote a standards-based approach to these areas that scale internationally.

NIST’s international engagement on cybersecurity and privacy has been enhanced by the development and sharing of translations of NIST resources. These include the NIST Cybersecurity Framework, which is currently translated into seven international languages. The NIST Privacy Framework, National Initiative for Cybersecurity Education (NICE) Framework, and several NIST IoT cybersecurity guidance documents have been translated into languages such as Spanish, Portuguese, and Indonesian. Other U.S. government partners, including the Department of State, have shared these translations with international partners to achieve objectives in cybersecurity capacity building. These translations have helped enable conversations and information exchanges on these resources that helps NIST achieve its objective of increasing international awareness and alignment of cybersecurity and privacy resources.

To continue these efforts, NIST requires translation services to develop official U.S. government translations and validation of existing translations. NIST also requires the ability to obtain a language verification of NIST resources and unofficial translations, which have been translated by 3rd party sources, and requires validation before publication on NIST websites.

2.0 Objective:

The purpose of this requirement is to procure contractor services to provide translation and language verification services for U.S. Government documents. NIST requires support for the development of official U.S. Government international translations of cybersecurity and privacy resources to share publicly with stakeholders. Specifically, translation services are required to support the development of official U.S. Government translations of NIST cybersecurity and privacy resources to enhance international engagement. Language verification services are required to be performed on unofficial translations of NIST cybersecurity and privacy resources that will result in the development of official U.S. Government translations. Both translation and language verification services may result in documents being made publicly available to enhance international engagement. Translation documents shall be considered official U.S. government translations that NIST can share with partners and make publicly available on an international cybersecurity and privacy resources web site.

Use of Translations:

The translations will be hosted on the NIST International Cybersecurity and Privacy Resources page found here: https://www.nist.gov/cybersecurity/international-cybersecurity-and-privacy-resources

The translations will be made publicly available as a resource for stakeholders. NIST will also offer the translations during information exchanges and dialogues with international partners.

3.0 Scope

The contractor shall provide all support for project oversight, administration, and technical execution of this task order. The Contractor is responsible for maintaining accurate records of project activities. The following tasks are required in support of document translation and language verification services for NIST cybersecurity documents.

4.0 Tasks

The following tasks shall be initiated during the period of performance when the Government provides a document to the contractor that requires translation or verification services. This is a Labor Hour type of contract. Tasks 4.1 and 4.2 are represented as separate Contract Line-Item Numbers (CLINs) that are Labor Hour and will contain negotiated ceiling values that the contractor shall exceed at its own risk.

Task 4.1 (CLIN 0001) Verification of Third-Party Translations of NIST Cybersecurity Publications (Labor Hour) NIST receives unsolicited translations by third parties of NIST cybersecurity publications throughout the year. Before adding these translations to NIST’s website as resources for cybersecurity professionals, NIST requires that these translations be verified by the Contractor.

Over the period of performance, NIST expects to receive approximately 10 such documents totaling approximately 197,000 words. The ceiling price for task 4.1 is $20,000.

As the initial translations are unsolicited, NIST does not know the language that translations might be provided to NIST in. The following is a list of possible languages that NIST might receive for these translations:

Albanian Arabic Bulgarian Burmese Chinese (Mandarin) Croatian Czech Danish Dutch Estonian Finnish French Georgian German Greek Hindi Hungarian Indonesian Italian Japanese Javanese Kazakh Korean Lithuanian Malay Norwegian Polish Portuguese Romanian Serbian Slovak Slovene Swahili Spanish Swedish Tamil Telugu Thai Turkish Ukrainian

The Contractor shall not be required to review translations in languages that are not contained on this list. Prior examples of third party translations of NIST documents similar to this task can be found at the following website: https://www.nist.gov/cybersecurity/translations-nist-cybersecurity-and-privacy-resources

Each translation verification shall be accompanied by a report of any disagreements that the Contractor has with the technical accuracy of the third-party translation.

If requested by NIST, the Contractor’s translator shall participate in an ad-hoc teleconference or web conference, with the Government and the original translator to review disagreements. Such a teleconference or web conference would be no more than 60 minutes. An ad-hoc conference with the original translator shall only be arranged if, and only if, the contractor’s translator has a specific disagreement on an isolated section of the translation with the original translator. The contractor translator shall then be expected to discuss the specific disagreement with the original translator and resolve the disagreement, after which the translation may be approved for linking to a NIST website. Such a conference is anticipated to be rare, occurring no more than three (3) times during the period of performance.

Task 4.2 (CLIN 0002) Translation of NIST Cybersecurity Publications (Labor Hour) The contractor shall be required to translate cybersecurity publications in order to facilitate international commerce.

Over the period of performance, NIST expects to need approximately 10 such document translations totaling approximately 100,000 words. It is possible that the same document may need to be translated into more than one language. The ceiling price of task 4.2 is $25,000.

For the translation of NIST cybersecurity publications, NIST may require translation of a specific document into one or more of the following languages:

Arabic Chinese (Mandarin) French German Hindi Indonesian Italian Japanese Korean Norwegian Polish Portuguese Spanish Swedish Thai Turkish Ukrainian

The Contractor shall not be required to provide translations in languages not contained on this list.

5.0 Deliverables

The following deliverables shall be completed during the period of performance. Each document shall be translated within two weeks of receipt from the NIST Contracting Officer’s Representative (COR). No “rush orders” needing to be delivered earlier than 2 weeks shall be required. All deliverables are subject to clause 52.227-17, Rights in Data—Special Works.

Standards for Acceptance of Deliverables: The COR shall review the deliverables and respond with an acceptance or request for revision email to the Contractor Point of Contact (POC) within 7 calendar days of receipt of deliverable. The Contractor shall make any needed changes to the reports within 7 calendar days from receipt of electronic or written comments from the COR. This section applies to deliverables which must be reviewed and approved for acceptance.

Performance Requirement Surveillance Matrix

Government-Furnished Property, Material, Equipment, or Information (GFP, GFM, GFE, or GFI)

The Government will provide electronic copies of NIST cybersecurity and privacy resources for translations. For language verification tasks, the Government will also provide unofficial translations received from external stakeholders and the English version of the document translated for verification purposes.

All property, data and information provided by the Government in the performance of this task remains the property of the Government and shall be surrendered to the Government upon completion or termination of this requirement. Likewise, all deliverables generated under this requirement remain the property of the Government.

Security

No security requirements necessary. The NIST documents are all public documents, and the translations are intended for publication. The contractor will have no access to NIST information networks or systems.

Travel

No travel will be required or reimbursed by the government.

Special Material Requirements

No special materials required other than the documents for translation or language verification.

Section 508 Accessibility All work performed on this contract shall be in accordance with the applicable accessibility standards and be Section 508 compliant.

Place of Performance

The contract work will be performed at the contractor’s work location.

Period of Performance

The period of performance will be effective for 12 months from the start of the contract, anticipated to be on or around June 1, 2023.

KEY PERSONNEL REQUIREMENTS:

One (1) Project Manager is required as key personnel for this purchase order. The Key Personnel must meet the following minimum qualifications:

· Have managed translation services contracts for U.S. Government Agencies for a minimum of five (5) years.

· Have managed translation services contracts for information technology, computer science or related field publications for a minimum of five (5) years.