PWS_Everbridge rev 2.pdf

DEPARTMENT OF COMMERCE OFFICE – SHARED SERVICES PROCUREMENT OFFICE

PERFORMANCE WORK STATEMENT

1 | P a g e

PERFORMANCE WORK STATEMENT:

ENTERPRISE-WIDE EVERBRIDGE SOLUTIONS

FOR

DEPARTMENT OF COMMERCE

2 | P a g e

1.0 Task Order Overview

This is a non-personal services task order. The Government will not exercise any supervision or control over the task order service providers performing the services herein. Such task order service providers shall be accountable solely to the Contractor who, in turn is responsible to the Government as defined in this Performance Work Statement (PWS). The Contractor shall perform to the standards in this task order.

2.0 Background

The U.S. Department of Commerce (DOC) is a cabinet-level department that promotes job creation, economic growth, sustainable development, and improved standards of living for all Americans. DOC is comprised of the department level offices plus 12 different bureaus with operations across the United States, six U.S. Territories, and more than 70 international offices. DOC works in partnership with businesses, universities, communities, and our nation’s workers to realize its mission to help make American business more innovative at home and more competitive abroad. DOC has a widespread and diverse set of responsibilities within the areas of trade, economic development, weather monitoring and communication, technology, entrepreneurship and business development, and statistical research and analysis. Its operations include gathering economic and demographic data for business and government decision-making, issuing patents and trademarks, helping to set industrial standards, and producing the National Weather Service. DOC employs a particularly varied workforce with over 45,000 employees operating across all seven continents, including a significant number of full-time teleworkers. To actively support its vast mission delivery activities and the daily operations of its workforce, DOC currently operates and manages a vast array of Enterprise Systems and assets in a federated model, with individual ownership and responsibility of environments residing at the enterprise level.

Everbridge products, applications, and services are currently required, and in use, throughout the Department. Demand is expected to remain constant or increase year over year as technological changes occur and the needs for cloud-based applications and platforms continue. As a result, DOC has the need for an ordering vehicle for the acquisition of Everbridge products and services (if applicable) to maximize the leveraging of DOC’s buying power and provide streamlined procurement processes.

2.1 Objective

The Contractor shall provide Everbridge products and services as specified in this PWS and shall be subject to the terms and conditions as stated herein. Everbridge is a system that sends emergency notifications and alerts to people via text, email, and other methods. It's used by public officials and organizations to communicate critical information to the public.

3 | P a g e

This BPA is specifically designed to provide all of DOC, its bureaus and offices, with the ability to purchase enterprise-level licenses, subscriptions, products, and training for identified products, as well as specialized consulting, all while receiving the deepest discounts possible.

This Blanket Purchase Agreement (BPA) includes all current and future Everbridge products and service offerings, if applicable. The BPA provides a discounted product price list, which will inform orders against the agreement.

This BPA does not obligate funds. All funds obligated under this BPA will be through issued task/delivery orders.

For the purposes of this requirement, the required software products have been defined as one or more of the following:

• New perpetual software licenses

• Annual maintenance for existing and new perpetual licenses

• Subscriptions (annual commitment)

• Online / cloud-based services (if applicable)

• All service offerings, including consulting, training and integration (if applicable)

3.0 Requirement

3.1 The Contractor shall provide all Everbridge software products and services, defined below. The contractor shall also be able to offer services in support of customer requirements. Everbridge products and services or alternatives solutions are welcomed and encouraged.

3.2 Product BPA. The Product BPA provides a comprehensive list of all current products and services provided under this agreement. See Appendix A: Products and Services Pricing Tables. Product evolution and list updates may occur throughout the performance period of the agreement. The Contractor shall maintain and provide current product and services lists, pricing and additional information outlined below to the Contracting Officer upon updating.

The product list maintained by the Contractor shall contain the following information:

1. Current SKU

2. All relevant previous SKUs in a current crosswalk

3. Product/service name

4. Product/service name spelled out

5. Product/service features list with brief explanations

6. Product/service alternatives / similar products available based on common functionality

7. Product/service Grouping (application, server, system; support, consulting, etc.)

8. Current GSA Advantage Price

9. DOC’s discounted BPA price

4 | P a g e

10. Price structure (subscription; breakdown cost; for services, price per hour, etc.)

11. Price term (month(s)/year(s))

3.3 Subscription Services. Subscription products may be downloaded on multiple employee devices simultaneously.

3.4 Enterprise License Options. Enterprise Products under an Enterprise Agreement (if applicable) must be licensed on an organization-wide basis and may be ordered as separate products, or in groups. The Government will designate the quantities of users and devices that exist in each Class.

3.5 Utilization Data and Reporting. The Contractor System shall provide increased visibility into purchasing activity, including dynamic/customized reporting and bureau/line office-level tracking of purchases and installation data. Reporting data elements are required to include “raw data” outputs detailing all data elements tracked by the Contractor (for future data mining and ad hoc reporting managed by DOC) and structured reporting of software/service line items, DOC authorized users, type and timing of access made, software downloaded, and other relevant data elements.

The System shall provide utilization data information and customized reporting:

• Order details

• Current and historic order data and pricing trends

• Data on orders and purchase order invoices

• License description and pricing

• Relevant licensing and product notifications

3.6 Streamlined Purchasing. The Contractor shall accept GSA SmartPay Government Purchase Cards (GPC) orders. The Contractor shall provide access to up-to-date pricing and the ability to monitor pricing changes, by providing any updates on a monthly basis.

Provide for electronic verification of orders with two levels of workflow required.

• The Contractor shall accept payment via GPC and/or Purchase Orders

• All purchase orders will be issued by ES-Acquisition (except orders placed by

GPC)

3.7 Web-Based Quote Portal. The Contractor shall coordinate with GSA Advantage for the establishment of a DOC BPA on the GSA Advantage website that is accessible for DOC customers to access and view products, pricing and generate quotes or provide their own web-portal for this purpose.

5 | P a g e

When products are replaced, added, or updated in the master agreement, GSA Advantage shall be updated by the Contractor to reflect such changes. Changes shall be available to customers within one (1) business day of GSA Advantage modification.

Everbridge software products and services Everbridge software products and services

3.8 Customer Service. The Contractor shall leverage OEM(s)’ processes and tools to conduct periodic customer satisfaction surveys, targets, and monitoring, including analysis and reporting on the results of those surveys, action plans to address identified gaps, and shared responsibilities for achieving improvements in customer satisfaction.

Definition and delivery of value-added services (and Advanced Customer Services) shall be provided as part of the overall enterprise agreement as well as dedicated technical resource support for DOC Communities of Interest (“COIs”) and/or other mechanisms by which the DOC seeks to aggregate and disseminate installation, implementation, and usage information and best practices.

4.0 Place of Performance

The Contractor shall deliver ordered products to the location designated in issued orders.

5.0 Period of Performance

The total period of performance of this Agency BPA is 5 years from the date of the award.

6.0 Reports and Deliverables

Reports and Deliverables exist at the contract/BPA level and at the order level. BPA reports and deliverables are listed in this section. Order level reports (if required) and deliverables will be specified in individual orders.

Inspection and acceptance under the BPA and all orders will be performed by the designated technical point of contact (TPOC) stated in the order.

6.1 Monthly Transaction Reporting. The Contractor shall submit a written Monthly Status Report by the tenth (10th) calendar day of each month. If the calendar day falls on a weekend or Federal holiday, the report shall be submitted on the next business day.

The Monthly Status Report shall document BPA activities for the prior month. Within ten

(10) calendar days of the award, the Government will provide the Contractor with a template for use. The first Monthly Status Report will be delivered forty-five (45) calendar days after the award.

The Contractor shall furnish Monthly Status Reports via e-mail to the appropriate DOC representatives including the CO, COR, Project Manager, and any duly authorized designees.

6 | P a g e

The Monthly Status Report shall include, at a minimum, the following information:

• Federal Award #:

• Bureau:

• Line Office:

• SKU:

• SKU Description:

• Product Category: (Desktop, Prep, Online, Server)

• PoP Begin:

• PoP End:

• Quantity:

• Users:

• License term(s):

• GSA Advantage unit price/labor rate:

• BPA unit price/labor rate:

• POC:

Any pricing errors should be corrected on the awardee’s website, or GSA Advantage, within 14 business days.

6.2 Quarterly Program Management Meetings. The contractor shall lead quarterly reviews with the CO, COR and other Bureau management representatives. The purpose of these meetings will be to discuss overall status, issues, and future opportunities. All components of the Program Management Plan referenced in Section 5.2 shall be presented by the Contractor in these meetings.

Additionally, DOC will provide performance scorecard reviews to the contractor at these meetings.

7.0 Security and Compliance

The Contractor licensing agreement(s) for each EDAV platform shall comply with DOC security policy/guidelines, to include:

1. Federal Information Technology Acquisition Reform Act (FITARA), Making Electronic Government Accountable By Yielding Tangible Efficiencies Act (MEGABYTE Act of 2016), and OMB M-16-12 requirements for Software Management (inventory, track & maintain, analyze usage) by providing asset management and software asset management functionality and features

2. Agency specific security requirements at FISMA moderate level and be assessed at the appropriate level to conform to FIPS 199

3. NIST SP 800-53 Risk Management Framework “Security and Privacy Controls for Federal Information Systems and Organizations”

4. Strong physical security controls, managed access to the virtual environment, and maintain strong separation between virtual workloads and environments

7 | P a g e

5. Statutory compliance measures (audit trails, rules-based policy enforcement, etc.).

6. The capability to encrypt all data, including backed up data

7. Appropriate level of encrypt or cryptography protocols to address Data in Transit between user endpoint and the cloud services. The EDAV platform shall be accessible via Two-Factor Homeland Security Presidential Directive 12 (HSPD-

12) PIV Card authentication to provide integration with Federally- operated services and shall accept Two-Factor or HSPD-12 PIV Card for user authentication

8. Software upgrades and patching coordinated with the Department’s or individual bureau’s IT department and shall be compliant with DOC IT security patch policies

9. Accessibility through both Internet Protocol Version 6 (IPv6) and IPv4. If not already IPv6 compliant, the Contractor shall provide the Government with a statement regarding its plans and timeframe to implement IPv6

10. The creation and maintenance of websites with content and links, shall comply with Section 508 of the Rehabilitation Act

11. Clear segregation of each bureau’s data at the application and storage level

12. Application and operating system logs associated with an incident, as well as a file system timeline for potentially compromised hosts and any additional files referenced during forensic analysis

13. System memory dumps and forensic images of any systems that were possibly compromised

14. Appropriate levels of encrypt or cryptography protocols to address Data at Rest to ensure ongoing confidentiality and integrity of information storage in the cloud

15. The ability to restrict government access to the cloud service from government specified networks, in accordance with the Office of Management and Budget (OMB) Memorandum M-08-05, “Implementation of Trusted Internet Connections (TIC),” and the Department of Homeland Security’s “Trusted Internet Connections (TIC) Reference Architecture Document Version 2.0.” If not currently able to provide this ability, the Contractor shall provide the Government with a statement regarding its plans to have such capability, including timeframe

8.0 Deliverables Summary

ID Deliverable Name Deadline / Frequency

Deliver To Section Reference

1 Monthly Transactions Report

Within 45 days of Award;

monthly

CO, COR 6.1

2 Quarterly Program Management Meeting

Within 90 days of Award;

quarterly

CO, COR 6.2