C - ITIOSS SharePoint Solutions Development Task Order PWS.docx

DOCX document 815 KB Posted

Attached to
Solicitation IT Infrastructure Operations Support Services (ITIOSS) Federal contract opportunity
Solicitation number
16PBGC19R0021
Issued by
Pension Benefit Guaranty Corporation

About this file

This request for information (RFI) from the Pension Benefit Guaranty Corporation (PBGC) seeks feedback on a draft performance work statement for IT infrastructure operations support services. The RFI describes a requirement for multiple award IDIQ contracts to provide a range of IT professional services supporting PBGC's technological environment. Key services include program and process management support, transition planning, and SharePoint solutions development. The SharePoint development work includes maintaining governance, developing and customizing solutions, and provisioning and supporting sites. Responses are requested by May 10, 2019 to help shape the requirement.

PWS Sharepoint

View the file

Other files for this federal contract opportunity

Other files attached to Solicitation IT Infrastructure Operations Support Services (ITIOSS), newest first.
File Type Posted
D_-_ITIOSS__TO1_QASP_SLAs.pdf PDF
QandA_R190021_AMD_4.pdf PDF
C_-_ITIOSS _SharePoint_Solutions_Development_Task_Order_PWS_Amd_004.pdf PDF
G_-_LA~1.XLS XLS spreadsheet
16PBGC19R0021-004__IT_O&M.pdf PDF
B_-_ITIOSS_O&M_and_DM&E_Task_Order_PWS_Amd_004.pdf PDF
16PBGC19R0021_IT_O&M_Final.pdf PDF
M - Reading Room.docx DOCX document
F - Labor Categories Pricing Workbook IT Infrastructure Technical Services —
H - ITIOSS_TO1_Award Fee Plan_SLAs.docx DOCX document
N - Network Overview.vsd VSD drawing
I - ITIOSS_TO2_Award Fee Plan_SLAs.doc DOC document
B - ITIOSS O&M and DM&E Task Order PWS.docx DOCX document
L - TO-2 Supporting and Sample Documentation.zip ZIP file
E - ITIOSS _TO2_QASP_SLAs.docx DOCX document
D - ITIOSS _TO1_QASP_SLAs.docx DOCX document
C - ITIOSS SharePoint Solutions Development Task Order PWS.docx DOCX document
A - ITIOSS2019_IDIQ w Sharepoint PWS.docx DOCX document
G - Labor Categories Pricing Workbook IT Infrastructure SharePoint Solutions Development TO.xlsx XLSX spreadsheet
K- TO-1 Supporting and Sample Documentation.zip ZIP file
K- TO-1 Supporting and Sample Documentation.zip ZIP file
F - Labor Categories Pricing Workbook IT Infrastructure Technical Services —
B - ITIOSS O&M and DM&E Task Order PWS.docx DOCX document
N - Network Overview.vsd VSD drawing
M - Reading Room.docx DOCX document
16PBGC19R0021_ITIOSS__IT_O&M_-_Sharepoint.pdf PDF
L - TO-2 Supporting and Sample Documentation.zip ZIP file
D - ITIOSS _TO1_QASP_SLAs.docx DOCX document
E - ITIOSS _TO2_QASP_SLAs.docx DOCX document
I - ITIOSS_TO2_Award Fee Plan_SLAs.doc DOC document
A - ITIOSS2019_IDIQ w Sharepoint PWS.docx DOCX document
G - Labor Categories Pricing Workbook IT Infrastructure SharePoint Solutions Development TO.xlsx XLSX spreadsheet
H - ITIOSS_TO1_Award Fee Plan_SLAs.docx DOCX document
Supplies_or_Services_and_Prices-Costs.pdf PDF
Attachment_1_-_SSD_TO_Pricing_Workbook.xlsx XLSX spreadsheet
SharePoint_Solutions_Development_(SSD)_PWS_-_Task_Order.pdf PDF
Indefinite_Delivery_Indefinite_Quantity_(IDIQ)_-_PWS.pdf PDF
OM_and_DME_PWS_-_Task_Order.pdf PDF
Attachment_2_-_Ops_and_DME_TO_Pricing_Workbook.xlsx XLSX spreadsheet
Show all 39

On GovTribe

Work with this file on GovTribe

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

ATTACHMENT C: IT Infrastructure Operations Support Services (ITIOSS) SharePoint Solutions Development Task Order Performance Work Statement

Table of Contents

1.Introduction4
2.Background4
3.Technology Overview5
4.Contract Overview8
4.1Period of Performance8
4.2Contract Transition8
4.3SharePoint Solutions Development8
4.4Contract Phase Out8
5.Business Process Support9
5.1Program and Process Management Support9
5.1.1Program and Process Management9
5.1.1.1Overview9
5.1.1.2Objectives9
5.1.1.3Scope of Services Supported9
5.1.1.4Requirements9
5.1.1.5Documentation and Reporting12
5.2Transition12
5.2.1Overview13
5.2.2Scope of Services Supported Under Transition13
5.2.3Requirements13
5.2.4Transition Deliverables14
5.2.5Transition Service Level Agreement16
5.3General Requirements16
5.3.1Location of Documents and Records16
5.3.2Cost Control16
5.3.3Enterprise Architecture Compliance16
5.3.4Audit and POA&M Support16
5.3.4.1Scope of Services Supported16
5.3.4.2Requirements17
5.3.5Inspection by Government Agencies18
5.3.6Third Party Vendor Organizations18
5.4Service Level Agreements (SLAs) and Metrics18
6.IT Infrastructure Technical Services18
6.1General Overview18
6.1.1Scope of Services Supported18
6.1.2Requirements18
6.2SharePoint Solution Development and SharePoint Support Services19
6.2.1Scope of Services Supported19
6.2.2Requirements21
Appendix A - QASP24
Appendix B - Deliverables25
Appendix C - List of Required Meetings and Reports28
Appendix D - References29
Appendix E - IT Service Support Guidelines32
Appendix F - IT Service and Support 2018 Statistical Summary33
Appendix G - IT Infrastructure Tools List34

Introduction This performance work statement (PWS) is for the delivery of professional SharePoint solution delivery services under the PBGC IT Infrastructure Operations Support Services (ITIOSS) IDIQ contract which provides a wide range of IT professional services supporting a diverse technological environment. The service domain for this task order is limited to SharePoint solution delivery. Program management is also necessary to oversee all contracted tasks for this service area. This area is of specific interest as PBGC has recently migrated the majority of its unstructured data to SharePoint on-line.

Background The Pension Benefit Guaranty Corporation (PBGC) protects the retirement income of more than 40 million American workers in nearly 24,000 private-sector defined benefit pension plans. A defined benefit plan provides a specified monthly benefit at retirement, often based on a combination of salary and years of service. PBGC was created by the Employee Retirement Income Security Act (ERISA) of 1974 to encourage the continuation and maintenance of private-sector defined benefit pension plans, provide timely and uninterrupted payment of pension benefits, and keep pension insurance premiums at a minimum. PBGC is not funded by general tax revenues. PBGC collects insurance premiums from employers that sponsor insured pension plans, earns money from investments and receives funds from pension plans it takes over. A department within PBGC’s Office of Information Technology, the IT Infrastructure Operations Department (ITIOD) provides the mission-critical IT foundation for computing services used and procured by PBGC. PBGC cannot accomplish its mission without automated tools and business software. All other PBGC departments depend on this one for their IT support. PBGC’s Common Security Controls under the IT Infrastructure Services General Support Systems (ITISGSS) are also provided by this department. ITIOD is comprised of approximately 40 PBGC FTE and approximately 150 contractors. ITIOD stakeholders include a dedicated PBGC staff of approximately 2,250 government and contracted personnel, 26,000 pension plan sponsors who pay premiums into the PGBC and over 1.5 million trusteed participants who, combined, receive over $5 billion dollars in benefits payments.

Technology Overview

The following information is provided as a high-level overview of PBGC’s IT infrastructure environments and technology. Greater detail is provided in the succeeding SharePoint solution development service domain.

The PBGC currently operates and maintains three separate yet highly interrelated environments within its IT Infrastructure. Additionally, ITIOD provides limited support to the PBGC Office of Inspector General (OIG). These are logically separate infrastructures dedicated for (1) development, (2) testing, (3) production. Each is described below:

· The Common Development Environment (CDE) provides an area for development and interoperability testing that is isolated from production and other environments. The CDE provides the capability to develop major applications and infrastructure solutions, which support PBGC’s changing business needs. The environment allows PBGC to take advantage of emerging technologies and to improve the exchange of data with internal and external customers. The CDE is currently comprised of two separate areas (CDE-T and CDE-I):

· The CDE-T is the “Team-Specific” area, used for code development, COTS configuration and unit testing of development efforts.

· The CDE-I is the “Interoperability” area, used for various phases of testing (functional, system, integration, performance, and deployment) of future integrated releases. The CDE-I is further broken down into two sub-areas – “As Is” and “To Be.” The “As Is” area reflects the current production environment and is used for testing against applications that currently exist in production. This area may be used for supporting production, emergency fixes, and point releases. Currently this area also serves as the training environment for some custom developed PBGC applications. The “To Be” area reflects the future production environment and is used for testing against the applications that will be deployed in the next major software release and limited training purposes.

· The Integration and Testing Center (ITC) environment has been established for deployment verification, development shakedown, system integration verification and, user acceptance testing (UAT). Vulnerability scanning is also conducted for releases in the ITC prior to production release. Training can be performed in ITC when needed. Currently, testing (and training) in the ITC is accessed by physically going to the facility located at 1275 K Street, but over the next 6-12 months this is expected to become a virtual test center and access to it will be achieved entirely using remote desktop connectivity

· The Production environment (PROD) hosts business application and infrastructure operations including replication of software and data to the COOP site with similar hardware.

· The disaster recovery (DR) / COOP environment provides redundancy for the production environment and facilitates the continuation of business activities in the event of a disruption to the production environment. Failover is to PBGC’s servers at Wilmington, DE, which have similar cache boxes and web switches with server health monitoring and failover.

· The DMZ environment provides the infrastructure for public-facing applications and services. The DMZ includes its own Active Directory and has a presence at both the HQW and the COOP sites.

· PBGC also has several applications and infrastructure services that are largely supported externally and hosted off site including cloud and non-cloud managed services The application deployment process is initiated in the CDE by the contract development team. Solutions are then deployed to the ITC, based on a deployment guide prepared by the contract development team. This ITC deployment is a joint effort between the contract development team and the IT Infrastructure O&M team. The contract development team is responsible for the communication and coordination effort associated with the CDE, ITC and production deployments.

PBGC has more than 2,500 physical Windows workstations (desktops, laptops, and tablets) and more than 500 virtual desktops all of which run Windows 10. PBGC is moving towards portable hardware, e.g. MS Surface Pro 4, Latitude 5290 2-in-1, etc. PBGC also has approximately 1,000 GFE iPhone 6s devices managed using InTune and providing users with access to PBGC’s Microsoft Office 365 tenant including email. PBGC plans to upgrade these phones to the iPhone 8 plus model by the end of the 2018 calendar year. PBGC has established a significant SharePoint capability and Office 365 (Government Community Cloud E3 plan) as an enterprise collaboration tool. The majority of PBGC’s unstructured data resides on Office 365.

In support of all environments, ITIOD leverages a Hewlett-Packard (HP) blade server infrastructure, using VMWare for most systems. ITIOD takes a “virtualize first” approach whenever possible. Current server operating systems are a mix of Windows, Redhat Linux, and Solaris (physical Sun servers).

The PBGC applications and databases are a mixture of custom, COTS and highly customized COTS. Further, they have been designed, deployed and supported by multiple contractor teams, contracted for by multiple PBGC front-line business areas. PBGC primarily uses Oracle and MS SQL databases and is considering shifting its primary relational database services to MS SQL Server and other Microsoft Azure cloud database offerings, over a timeline yet to be determined. Furthermore, PBGC is considering shifting its many of its application middle-tier services from Oracle WebLogic and IIS to Azure and Dynamics cloud-based services, also over a timeline yet to be determined.

PBGC maintains Storage Area Network (SAN) infrastructure to provide high volume and high-performance data storage. PBGC primarily uses Brocade SAN switches connecting Hitachi storage arrays. PBGC also uses Veritas NetBackup and Oracle Recovery Manager (RMAN) for backup and recovery services.

ITIOD supports PBGC business functions through a number of core business applications, both custom and COTS, Microsoft Office 365 E3 including SharePoint online, and numerous supporting applications for office productivity including word processing, spreadsheet, graphics, email, collaboration, browser, communications connectivity, etc.

Core business applications presently use a mix of Web-based thin client World Wide Web Consortium (W3C)-compliant browser-based n-tier applications, client/server and service-based architectures. All current EA-compliant development is service- oriented with browser-based user interfaces.

PBGC supports secure remote access to networked resources via VPN on GFE devices. For non-GFE or devices, PBGC also offers an RDP web proxy service using Pulse Secure.

PBGC uses ServiceNow for IT Service Desk interactions, incident management, problem management, change management, asset management, configuration management and discovery. HP Service Manager 9 service request and service catalog software is used to manage service and access requests. PBGC plans to migrate these capabilities to the Service Now platform by the end of September 2019. SailPoint Identity IQ suite will also be leveraged to fulfill access requests for applications that are not Active Directory-integrated or federated to the extent possible.

PBGC uses HP Business Service Management (BSM) and HP Business Availability Center (BAC), Sitescope, Real User Monitor (RUM), and Network Node Manager (NNMi) for monitoring the availability and performance of IT infrastructure systems and applications.

PBGC uses the Microsoft Project On-line (referred to in PBGC as P3M) and Oracle/Primavera Project, Program and Portfolio Management (PPM) system as a central repository for tracking and reporting project data. Enterprise Architecture (EA) information is in the custom- developed EA Repository (EAR).

PBGC has selected Azure as its default IaaS and PaaS CSP and expects to shift more and more services to this over the next several years.

Contract Overview In addition to other requirements, this contract will also include following objectives:

1. The performance of the contractor will be measured and evaluated based on Service Level Agreements (SLAs) comprised of a set of service level metrics with clearly defined acceptable levels of quality (AQL), which will be reviewed and adjusted as required quarterly.

2. The contractor shall be required to continuously identify, recommend, achieve, and report on measurable results for on-going service delivery and shall specifically provide before and after measurements that can quantify achievement of development results.

Period of Performance The estimated period of performance is:

Base period: 11/1/2019 to 10/31/2020.

Option Periods: Four (4) 12-month performance periods subject to exercise by PBGC Contract Transition Upon Government approval of the Transition Plan, the Contractor will assume responsibility for the development of SharePoint solutions under the purview of ITIOD, including any development activities currently underway at the time of transition. This phase will incorporate any adjustments to SharePoint-relevant aspects of PBGC’s IT environment and associated tool set, as deemed necessary by the PBGC and the Contractor to begin services under the new contract. The overarching objective of this phase is a low risk and low impact (to end-users) transition as the Contractor assumes responsibilities under the new ITIOSS program. Contract transition activities will include those activities defined in the Transition section.

SharePoint Solutions Development This phase consists of the on-going development of SharePoint solutions after contract startup and transition activities have been completed. In this phase, the service objectives and requirements as defined in the Performance Work Statement (PWS) will be used to guide performance and ensure compliance with the agreed upon requirements. Service Level Agreements (SLAs) will take effect and on-going performance monitoring will be in place.

Contract Phase Out The Contractor shall provide transition phase-out support and various activities to transition support to the Federal Government or a third-party service provider at contract end-of-life. Contract phase-out activities will include those activities defined in the Contract Phase-out deliverable due 90 days before the end of any awarded period of the contract.

Business Process Support This section of the PWS outlines those services and requirements that relate to the ancillary yet critical business process that support ITIOD’s core mission, the provision of IT infrastructure services and tools.

5.1 Program and Process Management Support

The sections below describe the overview, objectives, scope, requirements, deliverables and SLAs of the Program and Process Management Support services that the Contractor shall provide under this solicitation.

Program and Process Management Overview The Contractor shall provide sufficient management to ensure that activities on the contract are performed efficiently, accurately, on time, and in compliance with requirements of the contract. Specifically, the Contractor shall designate key personnel to supervise staff assigned to this contract. The Contractor shall ensure that appropriate performance reports are submitted outlining progress, status, and any problems/issues encountered in the performance of the contract. The Contractor shall require all subcontractors to furnish performance report data where there are critical or significant tasks related to the prime contract.

Objectives The contractor shall consider the following objectives when providing program and process management services:

1) Ensure all SharePoint development services are provided timely, accurately, and in a quality manner, in full compliance with all service level objectives and metrics

2) Cost of services are controlled

3) SharePoint solution development projects are executed within initial cost and schedule baselines, and are fully responsive to documented user and system requirements

4) Provide transparency to customers on service cost, performance, and satisfaction Scope of Services Supported The Contractor will perform program management to include overall management, planning, accounting, tracking, reporting, and administrative support necessary to support SharePoint development services. The Contractor's program management staff will work in cooperation with PBGC management to ensure processes and practices are defined, implemented, and evaluated on a regular basis in line with industry standard project management and service delivery models.

Requirements The Contractor shall perform the following services for the Program and Process Management services under this solicitation:

Reference (PM-PM-xx) Requirement

PM-PM-01
Contractor shall be responsible for all technical training of Contractor staff, unless otherwise directed by the Government. The Contractor shall provide technical staffing proficient in the tools and technologies utilized, supported, planned, and targeted under this contract. The contractor shall develop a set of experience and skills required for each role, position, and function on the contract. The set of experience and skills required for each role, position, and function on the contract shall be reviewed and approved/accepted by the government prior to the experience and skill definition to be considered as official for the services, roles, functions, and support provided and performed on the contract

The Contractor shall establish a Technical Skill and Competency Maintenance Framework and Plan for:

· Equipping contractor staff with requested technology and related skills and competencies

· Identifying current technology, technology changing, and technology standards

· Addressing deficiencies in skills and competencies in contractor staff

· Managing technical risks to the contract due to insufficient technical skills and technical staff

· Addressing issues reported by the government with regards to technical skill deficiencies and technology deficiencies

PM-PM-02
Contractor shall attend a Contract kickoff meeting within five (5) calendar days after award. At this meeting the Contractor shall solicit government comments on all draft deliverables submitted as part of the proposal and discuss any other contractual and/or programmatic topics.
PM-PM-03
Contractor shall develop a Program Management Plan (PMP) with Government approval that will be used to manage, track and evaluate the Contractor’s performance. The Program Management Plan shall consist of risk mitigation, control policies and procedures in accordance with standard industry practices for project administration, execution and tracking. The Program Management Plan (PMP) shall be presented as part of the original proposal. Modifications to the original PMP shall be made after the initial project meetings, timelines, and tasks are finalized. This revised PMP shall be considered the first deliverable and will serve as a baseline for the program. The revised PMP shall be due thirty (30) calendar days after the Contract Kick-off meeting. Updates or additions to specific tasks that affect the scope of the plan shall be brought to the attention of the COR or Program Manager for ITIOSS. The Contractor shall prepare and maintain the Integrated Master Schedule, track Schedule Variance, and provide on-going updates to the Government. In addition, the Contractor shall lead various meetings with key project stakeholders to review performance.
PM-PM-04
Contractor shall report all identified risks whether under contractor or Government control using PMI Risk Management standards. The Contractor will track and mitigate risks associated with activities under the Contractor’s control and risks that the Government directs the Contractor to monitor. The Contractor will define and document a risk management approach for identifying, assessing (i.e., determining the impact), mitigating, and monitoring risks and risk response actions no later than the end of the Transition phase. The Risk Management Plan will be included in the Contractor’s PMP.
PM-PM-05
Contractor shall evaluate, recommend and support a Government approved change management approach that describes the policies, processes, products, roles and responsibilities, reviews, and reports necessary for controlling and managing proposed changes. The change management approach will include or address the following content: requirements management, infrastructure management, configuration management, incident management, and contract management. During Transition, the Contractor will observe, interface with, and work with the incumbent and the Government to gain in-depth knowledge of the ITIOSS Program change management processes and requirements. The Contractor’s Change Management Plan will be based on the Contractor’s change management approach and tailored to reflect the Contractor’s in-depth knowledge of the ITIOSS Program change management processes and requirements. The approach shall include use of supporting automated systems (tools) already in existence at PBGC. The Contractor’s Change Management Plan will establish the Contractor’s processes, work products and deliverables for documenting and controlling changes to the ITIOSS Program. The change control process will consider risk, cost, schedule and quality impacts. The Change Management Plan will be included in the Contractor’s PMP.
PM-PM-06
All Project Managers assigned by the Contractor to this contract shall be Project Management Institute (PMI) certified
PM-PM-07
As appropriate for each document, the Contractor will include the Government in the conceptual planning of documents (e.g., purpose, objectives, audience, preliminary outline, content, etc.), prepare draft versions of documents, seek and incorporate Government’s comments on all versions of the document, and produce, disseminate, and track the initial release and subsequent versions of the document. The Contractor shall work collaboratively with the Government to ensure that all deliverables and work products meet Government requirements.

The Contractor shall:

· Support, adhere to and make recommendations for improvement on the PBGC Project Management Methodology in accordance with PMI and other industry standards.

PM-PM-08
PBGC considers effective and productive communications essential to a collaborative relationship and to the success of the ITIOSS Program. Expectations on technical, cost, schedule, performance and progress towards established expectations (or variances from), must be communicated clearly and without ambiguity or delay. To this end, the Contractor shall establish and maintain effective communication with the Government. The Contractor will structure its ITIOSS support in a manner that ensures that the Contractor’s goals and objectives are aligned with those of the Government and reflect the attributes of a partnership through an open, customer-oriented effort.

The Contractor shall communicate with the Government during all phases of the contract and, at a minimum, take steps to understand the Government’s business and technical issues, provide insight into issues and problems, recommend solutions for issues, and recommend actions to maintain cost, schedule, quality, and technical baselines. The Contractor shall have effective communications processes and plans to identify, prepare, review, incorporate review comments, disseminate, and track appropriate communication items (i.e., deliverables, work products, correspondence, etc.) for the ITIOSS Program.

Documentation and Reporting The Contractor shall be responsive to the development of reports and other document deliverables on a regular and ad-hoc basis to assist in oversight, quality assurance and transition of developed solutions to production, regarding SharePoint solution development. Reports shall be made available online to PBGC staff, as needed, in agreed to formats and timeframes as outlined in the RFP.

Documentation services are the activities associated with developing, revising, maintaining, reproducing, and distributing up-to-date information in hard copy and/or electronic form for the SharePoint solution development service area. across all service areas. The Contractor shall at a minimum:

· Provide documentation in agreed format to support activities throughout the life cycle of services.

· Follow PBGC’s Record Management policies and procedures.

· Maintain a system to centrally store, organize and distribute documentation.

· Document all required design and development artifacts such as requirements and resulting solution design.

· Document training materials, if needed, relevant to all SharePoint solutions developed.

· Document all information relevant to the proper use and maintenance of the developed SharePoint solutions in the PBGC production environment.

· Document Meeting Minutes/Agendas: This document will be used to capture meeting agendas, attendees, meeting highlights, meeting outcomes and meeting action items.

· Develop, maintain, and update all documentation on a regular basis Refer to Appendix B – Deliverables and Appendix C- List of Required Meetings and Reports Transition The sections below describe the overview, objectives, scope, requirements, deliverables and SLAs of the Transition services that the Contractor shall provide under this solicitation.

Overview The Contractor shall submit a comprehensive Transition Plan in accordance with the PWS that shall contain a detailed description of tasks, resources, schedule, assumptions, dependencies, risks and risk mitigation plans associated with the transition.

Upon Government approval of the Transition Plan, the Contractor will accept any SharePoint development projects currently underway. The overarching objective of this phase is a low risk and low impact (to end-users) transition as the Awarded Contractor assumes responsibilities under the ITIOSS program. Objectives The Contractor shall perform all services, tasks, and any other support activities required to transition from the current version of the ITIOSS contract. The existing services under this contract are vital to PBGC’s mission and must continue without interruption. The Contractor agrees to exercise best efforts and cooperation to affect an orderly and efficient transition phase after award.

PBGC has identified the following key service objectives for transition in the table below:

Transition Objectives
Description
Minimize End-User Concerns and Impact
Promote the benefits of the contract to the PBGC user community, and ensure customers receive information about the transition. Ensure customer requirements regarding cost, schedule and functionality will be met and that customers’ experience with transition will be as seamless as possible.
Integrity & Accuracy
Demonstrate end-to-end integrity and accuracy in conversion approaches prior to execution. Leverage best practices and tools to migrate cleanly assets, data, resources, and services to the new contract.
Adaptive Communication
Adapt the Contractor’s transition approach to PBGC requirements through the establishment of an adaptive communication strategy and plan proper execution.
Institute Partnership Expectations and Collaboration
Define and establish multi-level review and assessment meetings with PBGC leadership to collaborate and ensure clear customer expectations inclusive of published information, schedules, and progress reports.

Scope of Services Supported Under Transition The Contractor shall provide all required personnel, management oversight, tools, processes, and other necessary resources to support fully support the transition from the current contractor. The Contractor will provide support in the SharePoint development service area.

Requirements A startup transition period not to exceed thirty (30) days shall be required after final contract award for the Contractor to conduct transition services. During the transition period, the Contractor shall implement all activities necessary to effectively began development of SharePoint solutions not already implemented and to take over those already underway. Phase-in activities include the finalization and formal adoption of ITIOSS contract SLAs, and presentation of a Transition Readiness Review (TRR) in which specific readiness criteria and status are presented. The Contractor’s transition readiness includes satisfaction of a number of specific criteria including the establishment of:

1) Detailed transition plan, process and schedules coordinated with PBGC and incumbent contractors for providing an orderly transition with following objectives:

a. Minimize the impacts on continuity of operations

b. Maintain communication with staff and affected communities

c. Identify key issues

d. Overcome barriers to transition

e. Perform due diligence to ensure that all transition activities are identified, negotiated and completed during the Transition

f. Establish a transition management team capable of providing overall management and logistical support of all transition activities

2) Contractor transition management team leaders on-board immediately after the award.

3) Required operational interface agreements (e.g., OLAs, Memoranda of Agreement (MOA)) with incumbents prepared, reviewed, and signed.

4) Appropriate subcontractor and supplier agreements in place.

5) Qualified personnel identified, processed, and available at specific incremental turnover dates.

6) Applicable contractor management systems and support tools in place.

7) Status reporting requirements established, including applicable performance measurement reporting requirements

8) PBGC and contractor agreement on existing systems, plans, procedures, forms, and instructions to be used after transition.

9) Institutionalized knowledge of PBGC operations and technical requirements.

10) Transfer of requirements for all SharePoint solutions currently under development, including not only most recent list of requirement but also all relevant initial solution documentation.

11) Transfer of properly documented source code.

12) Transfer of all relevant assets and IP, such as design files, pilot or test solutions and the like.

13) Assistance with request for proper credentials necessary to develop SharePoint solutions.

14) If SharePoint solutions have been deployed to PBGC production environment, a discussion and documentation of the prior Contractor’s experiences with the deployment procedures.

15) Any other technical information relevant to the project that should be included into the onboarding

Transition Deliverables Under this contract, the following Transition deliverables are required:

Deliverable Name
Description/Details
Transition Plan
Phasing in a new contract involves a number of activities. The transition plan provides a method of identifying and tracking progress on each of the activities associated with transition. As required in Sections L and M of the Solicitation, the Contractor shall provide its high-level approach for transition (Draft Transition Plan) with its proposal. After contract award, the Contractor shall collaborate with the Government to further develop, deliver, and implement a final transition plan. The transition plan shall, at minimum, include following requirements. The Contractor may include additional requirements for improving the transition plan.

Transition Plan shall include:

· Identifying functions, tasks, systems, and facilities required to establish transition priorities and sequence.

· Determining specific functions and tasks that constitute “clean” transition increments, resulting in clear contractor accountability.

· Aligning and integrating the schedules across teams to preclude any impacts to primary mission requirements.

· Clearly defining and documenting each party’s responsibilities.

· Developing definitive transition readiness criteria for review with PBGC.

· Establishing new contractor support systems and applications.

· Providing tasks, data, and schedules to PBGC that can be used for issuing applicable direction to the incumbent contractors for phase-down, coordination, and funding considerations.

· Providing customer orientation and communication on solutions under development.

· Importing of historical data to contractor and/or Government systems (if applicable).

· Implementing a detailed communication plan.

· Transferring all necessary business and/or technical documentation.

· Completing all required deliverables and SLA definitions.

Transition Plan Review and Approval
No later than 5 calendar days after award, the Contractor shall attend a post-award conference with the CO, COR, other representatives of PBGC and the incumbent contractor to discuss a plan for orderly transition from the incumbent contractor to the new contractor to assume control and administration of services. The Contractor shall amend/update the draft transition plan (submitted with its proposal) based on the results of the post-award conference and discovery activities, no later than 3 business days after post award conference. The COR will review and approve the amended transition plan no later than 3 business days after its submission by the Contractor.
Awarded Contractor Transition Out Plan
At the end of the period of performance for the awarded contract, the Contractor shall assist the Government with planning and implementing a complete transition of its current duties to the incoming support provider. This shall include formal coordination with the Government and incoming provider staff and management and shall include the delivery of copies of existing policies, procedures, documentation, hardware (if applicable), software (if applicable) and required metrics and statistics. As part of this RFP response, the Contractor shall provide an Outgoing Transition Plan. The COR will notify the contractor when the transition period is scheduled to begin.

Transition Service Level Agreement The Contractor shall propose a set of SLAs for transition period. These SLAs shall be aligned with transition requirements, transition readiness and transition objectives identified in this section.

General Requirements The Contractor shall meet the following set of General Requirements under this solicitation.

Location of Documents and Records The Contractor shall publish all deliverables, reports, SOPs, Work Instructions and other required documents on PBGC’s instance of SharePoint on-line according to applicable ITIOD processes and procedures.

Cost Control The Contractor shall use the PBGC project management tool, P3M, for cost control and cost management and promote accurate program IT cost accounting, cost reporting and budgeting, and facilitate cost-effective service provision.

Enterprise Architecture Compliance The Contractor shall adhere to and comply with the PBGC’s Enterprise Target Architecture (ETA) and EA Standards. The Contractor shall also adhere to process and procedures for PBGC’s Technical Review Board (TRB), (copy will be available in reading room) Product/Technology Selection.

Audit and POA&M Support Scope of Services Supported The Contractor shall participate in audits of the PBGC systems. Participation consists of making available data or artifacts related to SharePoint solution development, should any be requested for analysis by the auditors. Requests will generally have an assigned federal team lead who will provide the Contractor with any clarifications required. The overall effort will be led by ITIOD’s Security Program Management Office federal lead who will provide the Contractor with all information regarding the adequate performance and workload requirements to perform all audit activities. Clarifications regarding any issues during the audit shall be raised to the ITIOD Security Program Management Office federal lead. The Contractor shall not send any official correspondence or transmit information relating to any audits or Congressional inquiries without federal approval.

The Contractor shall participate in efforts to address IT security control deficiencies related to services the Contractor provides, tracked through a Plans of Action and Milestones (POA&Ms). The IT security control deficiencies may be identified through an audit, control assessment, or by ITIOD staff during the course of normal operations or internal control review. Participation consists of attending meetings, reviewing control requirements, identifying gaps, identifying steps to address control deficiencies, taking steps to address control deficiencies, and producing artifacts demonstrating the proper functioning of an IT security control. POA&Ms will generally have an assigned federal team lead who will provide the Contractor with any clarifications required. The overall effort will be led by ITIOD’s Security Program Management Office.

Additionally, the Contractor shall develop, modernize or enhance SharePoint-based tools used by ITIOD in the management of the audit response process. It is expected that, prior to and during audit season, generally from March to July of each year, such work will take precedence.

During the FY18 audit cycle, ITIOD received and process more than 240 data and meeting requests from the auditors. In calendar year 2018, ITIOD worked on a total of 9 POA&Ms, completing and closing 2 POA&Ms and 63 POA&M milestones covering control families such as: Access Control, Configuration Management, Identification and Authentication, Risk Assessment, System and Services Acquisition.

Requirements The Contractor shall perform the following services for the Audit and POA&M Support services under this solicitation:

Reference (PM-AP-xx) Requirement

PM-AP-01
Contractor shall provide timely support for security audit-related data calls, reporting, and presentations. Contractor will general have 1 week to complete an assigned request.
PM-AP-02
Contractor shall provide support for POA&Ms and POA&M milestones including attending meetings, reviewing control requirements, identifying gaps, identifying steps to address control deficiencies, taking steps to address control deficiencies, and producing artifacts demonstrating the proper functioning of an IT security control.
PM-AP-03
Contractor shall complete assigned POA&M milestones on time. See SLA section for details on existing SLA measures, which define acceptable quality levels.
PM-AP-04
Contractor shall develop, modernize or enhance SharePoint-based tools used in support of the audit response management process, based on prioritization provided by the Government.

Inspection by Government Agencies The Contractor shall provide access to and cooperate with Government personnel conducting official inspections and surveys. Inspections will be made by agency representatives from, but shall not be limited to, Property Inspectors, the Inspector General (IG), the Office of the Director, other offices in PBGC such as the Workplace Solutions Department, as well as other Federal Government agencies such as the Occupational Safety and Health Administration (OSHA), Environmental Protection Agency (EPA), Government Accountability Office (GAO), and General Services Administration (GSA). For all correspondence assistance relating to any audits and all Congressional inquiries, the Contractor shall not actually draft any response. Input may be provided but the drafting of such responses will be done by the Government. Additionally, the Contractor shall only communicate with other government agencies through the COR.

Third Party Vendor Organizations contract cost and not implement these changes until receiving approval from the COR.

Service Level Agreements (SLAs) and Metrics Refer to Appendix A- QASP for list all SLAs for this PWS.

IT Infrastructure Technical Services General Overview Scope of Services Supported PBGC operates and maintains an enterprise network that supports logical access for approximately 2,250 users and provides connectivity between its Headquarters in Washington and several remote sites including: the Kingstowne, VA alternate work site and call center site, the Wilmington, DE Continuity of Operations (COOP) site, Field Benefit Administrator (FBA) and Plan Valuation Administration (PVA) sites, and Actuarial sites, and to the State Street Corporation, PBGC’s current benefit paying agent.

This section and the sections that follow describe the scope and requirements that the Contractor shall provide under this solicitation which includes:

· SharePoint Solution Development Services See Appendix F – IT Service and Support 2018 Statistical Summary for IT Service Desk interactions, tier 2 incidents, requests for information (RFIs), service/access requests, requests for change (RFCs), and RFC tasks processed in calendar year 2018 for these services.

Requirements The contractor shall comply with all general requirements outlined in the following table:

Reference (General-xx) Requirement

GENERAL-01
Contractor shall be in full compliance with and support the enforcement of all Federal and PBGC policies and security controls
GENERAL-02
Contractor shall ensure that all work performed meets or exceeds acceptable quality levels defined and shall provide evidence of having attained those levels of service. See SLA section for details on existing SLA measures, which define acceptable quality levels.
GENERAL-03
Contractor shall regularly sample, review, and document Information Technology Service Management (ITSM) interaction, incident, and change quality levels and take appropriate action, e.g. training, to rectify any deficiencies in ticket quality and service delivery including failure to meet target performance metrics
GENERAL-04
Contractor shall ensure knowledge base articles (KBAs) or work instructions (WIs) are established and maintained for common activities associated with interactions, incidents, and changes and these are updated/certified no less than annually including federal approval
GENERAL-05
Contractor shall create Requests for Change (RFCs) and associated tasks and maintain approved RFCs and associated tasks through their lifecycle in compliance with PBGC IT Change Management Policies and Procedures including obtaining written approval from an Application/Service Owner prior to implementing any change. Contractor shall also ensure RFCs and RFC tasks are associated with the appropriate CIs.
GENERAL-06
Contractor shall adhere to the NIST 800 series of special publications. Contractor shall employ operational and technical NIST 800-53 controls for ensuring the confidentiality, integrity and availability of PBGC information systems and networks
GENERAL-07
Ensure all SLAs are met and reported as directed in this PWS

SharePoint Solution Development and SharePoint Support Services The sections below describe the scope and requirements of the SharePoint solution development and support services that the Contractor shall provide under this solicitation. Providing current, vendor-supported, optimally performing, highly available, and compliant systems and service is critical to enable the accomplishment of the agency mission and as such, are critical to excellent performance under this contract. The Contractor shall provide SharePoint Online Content Development and support services as detailed.

Scope of Services Supported The Contractor shall:

Provide tier 2 support for incidents relating to the SharePoint On-line platform on PBGC’s Microsoft Office 365 E3 government community cloud (GCC) tenant. Provide fulfillment for service requests including new and enhancement to existing SharePoint Solution development requests. Typical SharePoint Online (SPO) solution development and support activities include:

· Develop and maintain SPO governance, taxonomies utilizing the term store and ConceptSearch suite in conjunction with PBGC business area representatives, quality standards, and presentation standards for PBGC's SharePoint-based collaboration solutions

· Collect requirements and then develop new or enhance existing solutions on the SPO platform including, but not limited to:

· Documenting solution requirements

· Documenting user stories

· Documenting Level of Effort documentation and high-level designs

· Developing mockups for forms, workflow, access and privacy controls, etc.

· Documenting the proposed data model

· Collaborating with and presenting to customers on the development of new and enhancements to existing SPO solutions

· Development, testing, and delivery of new SPO solutions, enhancements, and defect fixes

· Provision SharePoint site collections, subsites, lists, and libraries and associated Active Directory Security groups and maintain a site registry detailing all sites and their associated URL, business function, and points of contact See Appendix E - IT Service Support Guidelines for impact, urgency, and prioritization guidelines associated with IT service and support. See Appendix F - IT Service and Support 2018 Statistical Summary for tier 2 incidents, requests for information (RFIs), service/access requests, requests for change (RFCs), and RFC tasks processed in calendar year 2018 for these services. See Appendix G - IT Infrastructure Tools List for the software utilized to provides these services.

PBGC’s SharePoint Online (SPO) environment, as of March 2019, consists of more than 225 site collections consuming more than 17 TBs of storage. These site collections contain approximately 2,000 sites including:

· Team Sites

· Intranet Sites

· Program Sites

· Community Sites

· Case Management Sites

· Application Solution Sites The following table provides the count for EnableIT service requests processed in Calendar Year 2018:

Service Request Category
Total Requests
SharePoint Online: New Site
204
SharePoint Online: Solution and Solution Enhancement Request
139 Total

-28 Defect Fixes -79 Enhancements -32 New Solutions

SharePoint Online: Set Unique Permissions
130

Requirements The contractor shall provide ongoing SharePoint on-line content development and support services as outlined in the following table:

Reference (ME-SP-xx) Requirement

ME-SP-01
Contractor shall identify a lead for the SharePoint on-line content development and support services area. This lead is required to serve as the primary point of contact for all SharePoint on-line content development and support related issues.
ME-SP-02
Contractor shall support and maintain a fully functional, optimally performing on-premise infrastructure supporting SPO, e.g. Concept Search suite, and infrastructure services that support connectivity and integration with the cloud-based Office 365. This shall include, but is not limited to:

· Identifying and addressing performance bottlenecks

· Using monitoring tools and Microsoft-provided health reports to proactively plan and manage infrastructure resources to maximize system and service availability

· Performing preventative and remedial maintenance of components

· Coordinating performance of work by vendors as required and in accordance with PBGC Security policies, vendor warranties and maintenance contracts

ME-SP-03
Contractor shall fully implement, manage, and support all incident management activities regarding SharePoint solution development and support services according to PBGC policies. By using ITIL best practices, this should include, but shall not be limited to:

· Provide support for SharePoint online

· Provide support for PBGC’s on-premise Concept Search suite

See SLA section for details on associated SLA measures.

ME-SP-04
Contractor shall fully implement, manage, and support all change management activities regarding SharePoint on-line services according to PBGC policies. By using ITIL best practices, this should include, but shall not be limited to:

· Provide integration with and configuration of SharePoint on-line component of Microsoft Office 365 E3 tenant

· Provide configuration for PBGC’s on-premise Concept Search suite

· Apply necessary configuration changes to achieve SharePoint on-line development and support service objectives including compliance with PBGC policies and procedures as well as to achieve desired operational configuration and user experience and align with industry best practices

See SLA section for details on associated SLA measures.

ME-SP-05
Contractor shall fulfill all approved service requests for IT infrastructure resource and services (in EnableIT) in accordance with PBGC procedures and timelines for the following:

· New SharePoint site

· New SharePoint library with unique permissions

· New SharePoint solution development

· Existing SharePoint content enhancement and defect fixes

See SLA section for details on associated SLA measures.

ME-SP-06
Contractor shall maintain and administer the SharePoint on-line component of PBGC’s Microsoft Office 365 E3 tenant SPO including, but not limited to:

· Performing litigation holds and sensitive data collection requests

· Updating content organizer rules in support of business requirements

ME-SP-07
Contractor shall maintain and administer PBGC’s on-premise Concept Search Suite including, but not limited to:

· Process taxonomy change requests in support of business requirements

· Examine and act on improper PII postings quarantined by Concept Search in accordance with PBGC policy and procedures

ME-SP-08
Contractor shall maintain an on-line site registry detailing all SPO sites and their associated URL, business function, and points of contact
ME-SP-09
Contractor shall manage requests for new SPO solutions, enhancements to existing SPO solutions, and resolve reported defects to SPO solutions including, but not limited to:

· Documenting requirements utilizing detailed, unambiguous user stories

· Developing design summaries for new SPO solutions and enhancements including, but not limited to:

· mockups for forms, workflow diagrams, access and privacy controls, etc.

· proposed data model

· level of complexity and effort and SPO technologies to be utilized, e.g. InfoPath forms, workflow, lists, libraries, webparts, etc.

· Manage, track, and publish progress on development efforts through agile sprints and present updates to customer no less than monthly

ME-SP-10

This is the start of the file's text. The full file is on GovTribe.

File details come from the government source that posted it. Updated .