19AQMM20R0167 - Revised - 06-12-2020 (JAS).pdf

SOLICITATION, OFFER, AND AWARD

1. THIS CONTRACT IS A RATED ORDER UNDER DPAS (15 CFR

700)

RATING

2. CONTRACT NUMBER 3. SOLICITATION NUMBER

19AQMM20R0167 SEALED BID (IFB)

X NEGOTIATED (RFP)

4. TYPE OF SOLICITATION 5. DATE ISSUED

06/02/2020

6. REQUISITION/PURCHASE NUMBER

CODE: LMAQM

OFFICE OF ACQUISITION MANAGEMENT (A/LM/AQM)

PO BOX 9115, ROSSLYN STATION

US DEPARTMENT OF STATE

ARLINGTON, VA 22219

7. ISSUED BY 8. ADDRESS OFFER TO (If other than Item 7)

NOTE: In sealed bid solicitations "offer" and "offeror" mean "bid" and "bidder".

SOLICITATION

CAUTION - LATE Submissions, Modifications, and Withdrawals: See Section L, Provision No. 52.214-7 or 52.215-1. All offers are subject to all terms and conditions contained in this solicitation.

9. Sealed offers in original and __1__ copies for furnishing the supplies or services in the Schedule will be received at the place specified in item 8, or if handcarried, in the depository located in ____ until __14:00:00__ local time __06/30/2020 __

10. FOR

INFORMATION

E-MAIL:

A. NAME

JoAnn Stewart 703-875-6646

B. TELEPHONE (NO COLLECT

CALLS)

C. E-MAIL ADDRESS

stewartj@state.gov

11. TABLE OF CONTENTS (See Table of Contents on page 2)

(X) SEC. DESCRIPTION PAGE(S) (X) SEC. DESCRIPTION PAGE(S)

PART I - SCHEDULE PART II - CONTRACT CLAUSES

X A SOLICITATION/CONTRACT FORM 1 X I CONTRACT CLAUSES 31-51

X B SUPPLIES OR SERVICES AND PRICES/COSTS 2-8 PART III - LIST OF DOCUMENTS, EXHIBITS AND OTHER ATTACHMENTS

X C DESCRIPTION/SPECS./WORK STATEMENT 8-25 X J LIST OF ATTACHMENTS 51-53

X D PACKAGING AND MARKING 25 PART IV - REPRESENTATIONS AND INSTRUCTIONS

X E INSPECTION AND ACCEPTANCE 25-26 X K REPRESENTATIONS CERTIFICATIONS AND OTHER

STATEMENTS OF OFFERORS

53-61

X F DELIVERIES OR PERFORMANCE 26-27

X L INSTRS., CONDS., AND NOTICES TO OFFERORS 61-66X G CONTRACT ADMINISTRATION DATA 27-29

X M EVALUATION FACTORS FOR AWARD 66-68X H SPECIAL CONTRACT REQUIREMENTS 29-31

OFFER (Must be fully completed by offeror)

NOTE: Item 12 does not apply if the solicitation includes the provisions at 52.214-16, Minimum Bid Acceptance Period.

In compliance with the above, the undersigned agrees, if this offer is accepted within __________ calendar days (60 calendar days unless a different period is inserted by the offeror) from the date for receipt of offers specified above, to furnish any or all items upon which prices are offered at the price set opposite each item, delivered at the designated point(s), within the time specified in the schedule.

12.

13. DISCOUNT FOR PROMPT PAYMENT (See Section I, Clause No.

52.232-8)

10 CALENDAR DAYS(%)

0.00 %

20 CALENDAR DAYS(%)

0.00 %

30 CALENDAR DAYS(%)

0.00 %

0 CALENDER DAYS(%)

0.00 %

14. ACKNOWLEDGEMENT OF AMENDMENTS (The offeror acknowledges receipt of amendments to the SOLICITATION for offerors and related documents numbered and dated):

AMENDMENT NO. DATE AMENDMENT NO. DATE

15A. NAME AND

ADDRESS OF

OFFEROR

CONTACT: DUNS: 16. NAME AND TITLE OF PERSON AUTHORIZED TO SIGN OFFER (Type or Print)

15B. TELEPHONE NUMBER

15C. CHECK IF REMITTANCE ADDRESS IS DIFFERENT FROM

ABOVE - ENTER SUCH ADDRESS IN SCHEDULE.

17. SIGNATURE 18. OFFER DATE

AWARD (To be completed by Government)

19. ACCEPTED AS TO ITEMS NUMBERED 20. AMOUNT 21. ACCOUNTING AND APPROPRIATION

10 U.S.C. 2304(c) ( ) 41 U.S.C. 253(c) ( )

22. AUTHORITY FOR USING OTHER THAN FULL AND OPEN COMPETITION: 23. SUBMIT INVOICES TO ADDRESS SHOWN IN (4 copies unless otherwise specified)

ITEM

CODE:24. ADMINISTERED BY (if other than Item 7) CODE: RMGFO

GLOBAL FINANCIAL SERVICES CENTER, CHARLESTON, SOUTH CAROLINA

PO BOX 150008; Fax To: 1-866-483-3436

ATTN: OFFICE OF CLAIMS

CHARLESTON, SC 29415-5008

25. PAYMENT WILL BE MADE BY

26. NAME OF CONTRACTING OFFICER (Type or print)

Reaver Clements

(Signature of Contracting Officer)

27. UNITED STATES OF AMERICA 28. DATE

IMPORTANT - Award will be made on this Form, or on Standard Form 26, or by other authorized official written notice.

AUTHORIZED FOR LOCAL REPRODUCTION

Previous edition is unusable

STANDARD FORM 33 (REV. 9-97)

Prescribed by GSA - FAR (48 CFR) 53.214(c)

19AQMM20R0167

001 0.00 EA

Type of Contract Pricing:

Doc Ref No:

Delivery Date FOB:

Identifier Title Date Number of Pages

B-010 TYPE OF CONTRACT

This is a Firm Fixed Price type contractwith cost reimbursement travel. (end of clause)

PRICES/COSTS

TASK 1: Project Development Plan and Implementation Timeline for FSOT TASK 2: FSOT Registration System TASK 3: FSOT Data TASK 4: FSOT Administration at Test Centers and Training TASK 5: Scoring and Reports TASK 6: Results Reporting and Oral Assessment Scheduling TASK 7: Compliance with System Requirements for Information Technology Resources TASK 8: Travel TASK 9: Services for Administration of the Consular Fellows Program (CFP) and Information Management Specialist (IMS) Online Tests TASK 10: Services for Administration of the OMST and HROT (Contingent on funding and timeline is to be determined)

PERIOD OF PERFORMANCE: BASE YEAR

CLIN 0001 TASK 1 Project Development Plan and Implementation Timeline for

FSOT

Total Estimated Cost

CLIN 0002 TASK 2 FSOT Registration System

Total Estimated Cost

CLIN 0003 TASK 3 FSOT Data

Total Estimated Cost

CLIN 0004 TASK 4 FSOT Administration at Test Centers and Training

Total Estimated Cost

CLIN 0005 TASK 5 Scoring and Reports

Total Estimated Cost

19AQMM20R0167

Line Item Summary

Solicitation Number:

19AQMM20R0167

Contract Number: Title: Administration of Foreign Service Selection Test

Date of Solicitation:

06/02/2020

Line Item No. Description Quantity Unit Unit Price Total Cost

CLIN 0006 TASK 6 Scoring and ReportsScoring and Reports

Total Estimated Cost

CLIN 0007 TASK 7 Compliance with System Re-quirements for Information Technology Resources

Total Estimated Cost

CLIN 0008 TASK 8 Travel

Total Estimated Cost (ODC) $7,000.00

CLIN 0009 TASK 9 Services for Administration of the Consular Fellows Program (CFP) and Information Man-agement Specialist (IMS) On-line Tests

Total Estimated Cost

CLIN 0010 TASK 10 Services for Administration of the OMST and HROT (Contingent on funding and timeline is to be determined)

Total Estimated Cost

PERIOD OF PERFORMANCE: OPTION YEAR ONE

CLIN 1001 TASK 1 Project Development Plan and Implementation Timeline for

FSOT

Total Estimated Cost

CLIN 1002 TASK 2 FSOT Registration System

Total Estimated Cost

CLIN 1003 TASK 3 FSOT Data

Total Estimated Cost

CLIN 1004 TASK 4 FSOT Administration at Test Centers and Training

Total Estimated Cost

CLIN 1005 TASK 5 Scoring and Reports

Total Estimated Cost

CLIN 1006 TASK 6 Scoring and Reports

Total Estimated Cost

CLIN 1007 TASK 7 Compliance with System Re-quirements for Information Technology Resources

Total Estimated Cost

CLIN 1008 TASK 8 Travel

Total Estimated Cost (ODC) $7,000.00

CLIN 1009 TASK 9 Services for Administration of the Consular Fellows Program (CFP) and Information Man-agement Specialist (IMS) On-line Tests

Total Estimated Cost

CLIN 1010 TASK 10 Services for Administration of the OMST and HROT (Contingent on funding and timeline is to be determined)

Total Estimated Cost

PERIOD OF PERFORMANCE: OPTION YEAR TWO

CLIN 2001 TASK 1 Project Development Plan and Implementation Timeline for

FSOT

Total Estimated Cost

CLIN 2002 TASK 2 FSOT Registration System

Total Estimated Cost

CLIN 2003 TASK 3 FSOT Data

Total Estimated Cost

CLIN 2004 TASK 4 FSOT Administration at Test Centers and Training

Total Estimated Cost

CLIN 2005 TASK 5 Scoring and Reports

Total Estimated Cost

CLIN 2006 TASK 6 Scoring and Reports

CLIN 2007 TASK 7 Compliance with System Re-quirements for Information Technology Resources

Total Estimated Cost

CLIN 2008 TASK 8 Travel

Total Estimated Cost (ODC) $7,000.00

CLIN 2009 TASK 9 Services for Administration of the Consular Fellows Program (CFP) and Information Man-agement Specialist (IMS) On-line Tests

Total Estimated Cost

CLIN 2010 TASK 10 Services for Administration of the OMST and HROT (Contingent on funding and timeline is to be determined)

Total Estimated Cost

PERIOD OF PERFORMANCE: OPTION YEAR THREE

CLIN 3001 TASK 1 Project Development Plan and Implementation Timeline for

FSOT

Total Estimated Cost

CLIN 3002 TASK 2 FSOT Registration System

Total Estimated Cost

CLIN 3003 TASK 3 FSOT Data

Total Estimated Cost

CLIN 3004 TASK 4 FSOT Administration at Test Centers and Training

Total Estimated Cost

CLIN 3005 TASK 5 Scoring and Reports

Total Estimated Cost

CLIN 3006 TASK 6 Scoring and Reports

Total Estimated Cost

CLIN 3007 TASK 7 Compliance with System Re-quirements for Information Technology Resources

Total Estimated Cost

CLIN 3008 TASK 8 Travel

Total Estimated Cost (ODC) $7,000.00

CLIN 3009 TASK 9 Services for Administration of the Consular Fellows Program (CFP) and Information Man-agement Specialist (IMS) On-line Tests

Total Estimated Cost

CLIN 3010 TASK 10 Services for Administration of the OMST and HROT (Contingent on funding and timeline is to be determined)

Total Estimated Cost

PERIOD OF PERFORMANCE: OPTION YEAR FOUR

CLIN 4001 TASK 1 Project Development Plan and Implementation Timeline for

FSOT

Total Estimated Cost

CLIN 4002 TASK 2 FSOT Registration System

Total Estimated Cost

CLIN 4003 TASK 3 FSOT Data

Total Estimated Cost

CLIN 4004 TASK 4 FSOT Administration at Test Centers and Training

Total Estimated Cost

CLIN 4005 TASK 5 Scoring and Reports

Total Estimated Cost

CLIN 4006 TASK 6 Scoring and Reports

Total Estimated Cost

CLIN 4007 TASK 7 Compliance with System Re-quirements for Information

Technology Resources

CLIN 4008 TASK 8 Travel

Total Estimated Cost (ODC) $7,000.00

CLIN 4009 TASK 9 Services for Administration of the Consular Fellows Program (CFP) and Information Man-agement Specialist (IMS) On-line Tests

Total Estimated Cost

CLIN 4010 TASK 10 Services for Administration of the OMST and HROT (Contingent on funding and timeline is to be determined)

Total Estimated Cost

OPTION YEAR TOTALS

BASE YEAR TOTAL: $__________________

OPTION YEAR ONE TOTAL: $__________________

OPTION YEAR TWO TOTAL: $__________________

OPTION YEAR THREE TOTAL: $__________________

OPTION YEAR FOUR TOTAL: $__________________

FIVE YEAR TOTAL: $__________________

B-015 TRAVEL COSTS (Cost-Reimbursement)

(a) Except as otherwise provided herein, the Contractor shall be reimbursed for its reasonable actual travel costs in accordance with its usual accounting practices consistent with FAR Subpart 31.2, specifically FAR31.205-46. Travel must be directly related to and re-quired for performance of this contract, and authorized in advance and in writing by the Contracting Officer's Representative (COR).

In no event shall costs associated with employee commuting be reimbursable as a direct cost under this contract.

(b) The Contractor shall include a breakout of all authorized travel expenses as an attachment to its invoices.

(c) Administrative support (coordination of travel arrangements, etc.) will be the responsibility of the Contractor.

(d) Should any Contractor personnel be requested to perform in any area which has been determined by the Department of State to be a hazardous duty area, hazardous duty premium pay may be payable at the same rate as would be given to Department of State direct-hire employees pursuant to Chapter 650 of the U.S. Department of State Standardized Regulations (Government Civilians, Foreign Areas). Each employee will be notified upon arrival at any hazardous duty area of the applicable rates, terms and conditions at the time of performance. Hazardous duty premium pay shall not be burdened with any indirect costs (e.g., overhead, G and A) or fee/ profit.

(e) When local travel between the Contractor employee's regular place of performance and other locations is specifically authorized by the COR, transportation expenses shall be allowable costs under this contract. For the purposes of this clause, local travel means travel within a 50 mile radius of the Contractor employee's regular place of performance and does not include daily commuting or as-sociated costs.

(f) For travel where use of a personal automobile has been specifically authorized by the COR, reimbursement shall be computed on the basis of actual miles traveled from stat starting point to destination. Other related miscellaneous expenses, such as tolls and park-ing fees, incurred in the performance of tasks authorized under this contract, will be reimbursed. Car rentals require advance approval by the COR and will be authorized only when consistent with good business practice. Allowable costs shall not exceed the actual cost of renting a compact automobile (a maximum of one for four Contractor personnel), unless extenuating circumstances (e.g., excess baggage) require other arrangements and subsequent COR approval is obtained.

(g) The Government will reimburse the Contractor for Contractor employee's travel time to or from other authorized work locations, except that for labor categories which are exempt from the Fair Labor Standards Act (FSLA),, a reimbursement will be allowed only for travel during the employee's regular working hours. The Contractor will not be reimbursed for time spent in stand down or tempor-ary layovers by FLSA exempt contractor employees for the convenience of the Contractor except as authorized by the Federal Travel Regulations.

(h) The Contractor shall be responsible for ensuring that all personnel who will be required to travel outside the United States have current and valid passports. The Contractor shall also be responsible for obtaining any visas required for travel to foreign countries un-der this contract. The Contractor shall make no direct labor charges for obtaining/maintaining passports and/or visas.

(end of clause)

C-1 PERFORMANCE WORK STATEMENT

Services for Administration of Foreign Service Selection Process

PERFORMANCE WORK STATEMENT

C.l – Background

The Department of State (DOS), Bureau of Human Resources (HR), Office of Recruitment, Examinations and Employment (HR/REE) requires the administration of legally and professionally validated written examinations to be the initial screening in the se-lection process to identify qualified candidates for Foreign Service employment (Foreign Service Officer and Foreign Service Special-ist).

HR/REE requires administering and delivering the Foreign Service Officer (FSOT), the Consular Fellows Program Test (CFPT), the Information Management Specialist Test (IMST) and the Office Management Specialist Test (OMST) and potentially—contingent on funding with no specified timeline—the Human Resources Officer Test (HROT) and any other instruments developed at test centers in the United States, at overseas locations and military bases.

The work requires the design, management, and administration, for fully accessible (i.e., conformant with the requirements of GSA Section 508) and secure Internet web-based candidate registration, administration of a computer-based test delivery, a test results noti-fication system, a scheduling system for successful candidates for Oral Assessment appointments, and reporting. For the on-demand tests to include the Consular Fellows Program Test (CFPT) and the Information Management Specialist Test (IMST) and poten-tially—contingent upon funding—the Office Management Specialist Test (OMST), the Human Resources Officer Test (HROT), and other selection processes requested by the State Department, the contractor will provide the following work: management, administra-tion, and report generation for fully accessible (i.e., conformant with the requirements of GSA Section 508) and secure Internet web-based candidate registration, administration of a computer-based, on-demand test, a test results notification system, and a scheduling system for successful candidates for Oral Assessment appointments.

C.2 Statement of Objectives

The intention is to develop, administer, maintain, refine, evaluate and validate a secure computer-based testing instruments known as the Foreign Service Officer Test (FSOT), the Consular Fellows Program Test (CFPT) and the Information Management Specialist Test (IMST) and potentially—contingent on funding with no specified timeline—the Office Management Specialist Test (OMST) and the Human Resources Officer Test (HROT) for identifying candidates with the greatest probability of success in the Foreign Service.

HR/REE requires a Contractor to develop, maintain, upgrade, and implement fully accessible and secure electronic delivery of com-ponent parts of the tests. This shall include the following tasks:

1. Provide a management and timeline plan for the registration process and scoring and reporting; Develop, maintain, and revise as needed a web-based registration system for registering candidates for the tests and scheduling can-didates for all test seat appointments;

2. Input dates and hours into web-based systems for all oral assessments;

3. Administer, manage and provide training for domestic, overseas and military testing centers that will deliver the tests;

4. Score tests and produce reports (standard and ad hoc) and perform data reconciliation as needed;

5. Maintain and/or upgrade web-based systems to notify candidates of selection process results, and to schedule suc-cessful candidates for the Oral Assessments;

6. Provide evidence that Contractor is in compliance with all Information Assurance guidelines and requirements, in-cluding but not limited to the Federal Information Security Management Act of 2002 (FISMA) and its related stand-ards and guidelines issued by both the Office of Management and Budget (OMB) and the National Institute of Stand-ards and Technology (NIST), and GSA Section 508; and

7. Travel.

For purposes of this Agreement, “Base Year” means June 01, 2020 to May 31, 2021; “Option Year One” means June 01, 2021 to May 31, 2022; “Option Year Two” means June 01, 2022 to May 31, 2023; “Option Year Three” means June 01, 2023 to November 30, 2024; and “Option Year Four” means June 01, 2024 to November 30, 2025.

C.3 Task Descriptions

C.3.1 TASK 1: Project Development Plan and Implementation Timeline for FSOT

Description - The Web-based registration for the FSOT will occur five (5) weeks prior to each FSOT administration or as prescribed by client and approved by the contractor (for scheduling purposes). The FSOT will be offered three times annually, currently in the months of February, June and October, during 8-day test windows selected by the DOS. The management plan shall provide a project development plan and timeline of mileposts, and implementation descriptions and timeline for each essential operation, consultation and/or action for the registration and administration of the FSOT. The plan shall include level of effort, work schedule, and a sample-reporting instrument to record monthly progress on execution of the contract requirements.

C.3.2 TASK 2: FSOT Registration System

Description - Develop, update as needed, and maintain a secure web-based registration system, except for scheduled downtimes, and provide customer support for candidates' submission of the registration form, working closely with the Board of Examiners (BEX), alerting them of system issues that arise promptly Develop, maintain, and provide needed candidate support for the test seat appoint-ment scheduling system. Specifically, provide the following elements of the registration process:

a) Host a web-based registration system that allows clients to create a user account with login and password protections.

b) Incorporate DOS data or information privacy policies and/or other required notices or requirements on the registration and test-ing web site, as directed by the Department.

c) Incorporate candidate eligibility verification of self-reported age, citizenship, and verification that the candidate has not taken the FSOT within the past 11 months.

d) Develop, update on an annual basis or as needed, and maintain the application form, DS-1998 Foreign Service Officer Test Ap-plication Form. The program functionality will enable candidates to save information and return as often as needed to complete the form prior to submission. They will also have the ability to print the form, which will be archived in the candidates’ accounts. The form will consist of several parts, including:

1. Welcome and User Account Creation

2. Eligibility and Conduct Affirmations and Privacy Act Notices

3. Application that gathers education, work experience and other information from the candidate

4. Change in account status indicating to candidates’ successful submission of the form

e) Provide functionality to allow candidates to amend a limited number of fields in their accounts online. Exceptions to this func-tionality include the candidate’s social security number, birth date, name and contractor-issued ID number. Candidates will be re-quired to contact the contractor to provide documents to substantiate the need for changes to these fields. Candidates can update in-formation at any time. The contractor will export whatever is in system at time of export.

f) Receive and verify for completeness and record in database all registration form data;

g) Maintain candidate registration and test history data in database until DOS decides data are no longer needed;

h) Provide and staff a toll-free customer service telephone line and online chat to resolve registration problems;

i) Provide candidates requesting accommodations pursuant to the Rehabilitation Act information on additional documentation to be submitted via a link on the landing page;

j) Vet all requests for accommodations and provide special arrangements as approved by the DOS for taking the FSOT;

Once the eligibility verification and applications forms have been successfully submitted, provide software functionality to immedi-ately change the candidate’s status so the candidate may select a seat.

a) Test seat appointments will be limited per test scheduling window by seat availability (approximately 3,000 – 6,000 appoint-ments per test administration, including overseas);

b) The seat selection window will be open for approximately five weeks prior to the testing window for all testing locations;

c) Provide system functionality to verify candidate's eligibility, candidate does not owe an outstanding "no-show" fee, candidate has not taken FSOT within last 10 months, and candidate will remain self-reported age eligible during the period of registration valid-ity;

d) Develop system functionality to permit candidates to cancel or reschedule test appointments up to 48 hours (2 business days) prior to the date of the scheduled appointment without a fee charge;

e) Collect credit/debit card information to complete the test seat scheduling process, and provide candidates information on why the information is being requested. The system will involve collecting credit/debit card information and charging those with valid credit/ debit card information a nominal seat registration fee. Candidates who sit for the test will be refunded the nominal fee; candidates who do not sit for the test will be charged the remainder of the seat fee for failure to show up for the test or to timely cancel the appoint-ment;

f) Provide email notification confirmation letters to candidates to confirm the appointment date, time, location, and directions to the test center and store this information in candidate accounts.

g) Develop and implement a program to schedule oral assessments for the Foreign Service Specialist Appointment System (FSSAS). This program will use the contractor’s standard registration and scheduling system for candidates to deliver an oral assess-ment and will not use the application processing system used by FSOT and FSOA.

C.3.3 TASK 3: FSOT Data

Data Files

Description – Develop and deliver to DOS files in Triple Pipe format to provide data on candidates who take the exam, and are suc-cessful and unsuccessful on the FSOT. Deliver the RNO files to the COR every two weeks during open registration via secure file transfer protocol method.

All applications data shall be deemed the property of the Government per Section H.20 of this Contract and FAR 52.227-14, shall be used by the Contractor only for the performance of this contract, and shall be transferred to the Government in usable electronic form if requested at the expiration or termination of the Contract. Any conversion or other expenses that would be required to transfer the application database from the Contractor's systems to another system shall be identified prior to proceeding with any solution to this Task involving such expenses.

C.3.4 TASK 4: FSOT Administration at Test Centers and Training

Description - Provide domestic test centers capable of secure computer-based delivery of the FSOT to approximately 3,000-6,000 test takers per test window, and manage and provide training for staff at all domestic and overseas test centers. The Contractor shall make provisions for the FSOT to be delivered at a minimum of 225 test centers domestically (including Puerto Rico), ensuring that maxim-um travel for 90% of all test takers is no more than 60 miles. Test centers shall provide a secure, professional, quiet test environment for candidates taking the FSOT. Ideally, each site should be easily accessible, located near public transportation. Total seat time will be approximately 3 hours, including preparation time. The Contractor will also collect a "no-show" fee equal to the amount of the test seat from candidates who fail to appear for the test. The Contractor shall:

a) Develop a web-based system to schedule candidates to take the FSOT at any domestic or overseas testing center; the system must maintain applications in an active status only for the period of the registration and testing windows and expire at the close of the testing window.

b) Coordinate, liaise, manage, and supervise the administration of the FSOT at up to 250 U.S. Embassies, Consulates, or other USG entities identified and authorized by the DOS;

c) Provide comparable services at international commercial sites approved by DOS.

d) Prepare and put into operation a tutorial for candidates on the FSOT test program prior to launching the computer-based test;

e) Prepare and provide a test procedures manual to train test center administrators, proctors, and IT specialists involved in adminis-tering the test domestically and overseas;

f) Approve or deny requests for accommodations under the Rehabilitation Act in consultation with DOS, and if approved, provide those accommodations;

g) Make periodic on-site audits at domestic test centers;

h) Provide telephone technical support to test centers during local business hours each testing day;

i) Review Incident Reports and provide a report to the COR of unusual occurrences at test sites. The report also will include resol-utions;

j) Provide test takers a report upon completion of the FSOT to document successful completion of the test, the date and location of the test center;

k) Establish a system to collect a "no-show" fee set DOS. The system will involve collecting credit/debit card information and charging those with valid credit/debit card information a nominal seat registration fee. Candidates who sit for the test will be refunded the nominal fee; candidates who fail to appear for the test or who fail to reschedule their test more than 48 hours prior to the scheduled test appointment will be charged the remainder of the seat fee. The contractor will not be responsible for fees for candidates who provide credit/debit card information that becomes invalid after the initial information is submitted.

l) Provide test takers information on the next steps and approximate time frames for next steps at test center upon completion of the FSOT.

All data prepared in accomplishing this task shall be deemed the property of the Government per Section H.20 of this Contract and FAR 52.227-14, shall be used by the Contractor only for the performance of this contract, and shall be transferred to the Government in usable electronic form if requested at the expiration or termination of the Contract. Any conversion or other expenses that would be required to transfer the administration database from the Contractor's systems to another system shall be identified prior to proceeding with any solution to this Task involving such expenses.

C.3.5 TASK 5: Scoring and Reports

Description - The Job Knowledge, English Expression, and Situational Judgment /non-cognitive components of the FSOT shall be in a multiple-choice format. The Contractor shall score these components at a high level of accuracy that the Contractor shall define in the contract offer. HR/REE will advise the Contractor of the passing score for each test window for the multiple-choice section. It is anti-cipated that the pass score generally will be at a point that results in about half of the total number of tested candidates achieving the passing score. The scoring process involves converting a candidate's raw scores on each multiple-choice section to a scaled score us-ing the scoring method defined by the Government.

With regards to reporting, the Contractor shall provide a secure data transfer file of all information from the candidates' application form, as well as raw test scores, final scores and essay response text, DOS within the agreed upon number of business days of the clos-ing of the test window. Other reporting requirements include:

a) Final item and test statistics after each test window;

b) Complete data file containing complete registration data, FSOT data, FSOT scores, QEP results (which will be provided by the DOS), and Oral Assessment scheduling information within one week of the conclusion of the Oral Assessment scheduling window as-sociated with each test administration.

Develop a reporting tool (dashboard) for BEX to use that has real time information. This tool should be able to access the number of FSOT and Specialist applicants and the number of passers. This tool should also be able to provide demographic reports. For ex-ample, it should have the ability to report the number of male applicants versus the number of female applicants; the number of Afric-an American applicants versus the number of Asian applicants, etc. This reporting tool should be able to pull reports using all demo-graphic information provided by FSOT and Specialist candidates on their application.

All data prepared in accomplishing this task shall be deemed the property of the Government per Section H.20 of this Contract and FAR 52.227-14, shall be used by the Contractor only for the performance of this contract, and shall be transferred to the Government in usable electronic form if requested at the expiration or termination of the Contract. Any conversion or other expenses that would be required to transfer the scoring and reports database from the Contractor's systems to another system shall be identified prior to pro-ceeding with any solution to this Task involving such expenses.

C.3.6 TASK 6: Results Reporting and Oral Assessment Scheduling

Description - Maintain web-based system to notify candidates by email that FSOT results are available in their accounts and schedule successful candidates for the Oral Assessment (see Appendix A). The Contractor shall:

a) inform candidates of FSOT test results within 21 calendar days of the closure of the test window;

b) inform candidates of results of the QEP at a mutually agreed upon time.

c) notify selected candidates to schedule the Oral Assessment;

d) schedule oral assessments during an agreed upon time period for each test administration according to information provided by DOS regarding dates, times, locations, and number of appointments available;

e) within three business days of the close of the Oral Assessment scheduling period, provide spreadsheet of candidate data and dates of Oral Assessments.

All data prepared in accomplishing this task shall be deemed the property of the Government per Section H.20 of this Contract and FAR 52.227-14, shall be used by the Contractor only for the performance of this contract, and shall be transferred to the Government in usable electronic form if requested at the expiration or termination of the Contract. Any conversion or other expenses that would be required to transfer the database produced under this task from the Contractor's systems to another system shall be identified prior to proceeding with any solution to this Task involving such expenses.

C.3.7 TASK 7: Compliance with System Requirements for Information Technology Resources

Description - Provide web-based secure registration and test delivery systems that meet DOS standard operating procedures and Fed-eral IT security standards, including:

a) Information Assurance Certification &Accreditation Procedures

b) Federal Information Security Management Act of 2002 (FISMA) Standards (http://csrc.nist.gov/groups/SMA/fisma/index.html) (Appendix B)

c) Federal Acquisition Regulation (FAR) (http://www.acqnet.gov/FAR/)

d) Managing State Projects (MSP)

e) Section 508 of the Rehabilitation Act (http://www.section508.gov/) (Appendix C): Government Product Accessibility Template

(GPAT)

f) Department of State Privacy Impact Assessment (PIA)

g) Department of State Statement of Records Notice (SORN)

h) Any operations not covered by these documents should follow ISO 9000 standards, or best industry practices.

C.3.8 TASK 8: Travel

Description – A travel expenses CLIN is included in the table for travel expenses. This CLIN contains a not-to-exceed amount estab-lished by DOS. The contractor shall not change this amount. The amount may be adjusted, if needed, during the performance of the contract.

C.3.9 TASK 9: Services for Administration of the Consular Fellows Program (CFP) and Information Management Specialist (IMS) Online Tests

Description – Provide services related to the on-demand administration of the Consular Fellows Program Test (CFPT) and Informa-tion Management Specialist (IMS) Online Tests.

a) The contractor shall offer web-based registration and testing systems for the CFP and IMS on-demand. The contractor shall meet by phone with DOS every two weeks to discuss progress and shall provide monthly progress reports.

b) The contractor shall develop, update, and maintain a secure web-based registration system that will be available, as directed by DOS, except for scheduled downtimes. Its functionality will be similar to that of the FSOT. Ongoing activities will include: (i) cus-tomer support for the candidate’s submission of the registration form, (ii) web-based test scheduling services for eligible candidates,

(iii) emailing confirmations to candidates after they schedule their tests, (iv) candidate support for those using the test seat appoint-ment scheduling system, and (v) technical support. For CFP and IMS, the contractor shall provide data files to DOS files in XML format. The files will provide data on candidates who register for, take, and are successful and unsuccessful on the CFP and IMS tests in accordance with the tabular reporting requirements.

c) The contractor shall provide domestic and overseas test centers (with trained staff) capable of secure computer-based delivery of the CFP and IMS. The contractor shall provide a system set up for computer-based test administration and delivery to up to 4,000 can-didates per year, as well as program management support. The contractor shall also provide accommodations including but not limited to extra time accommodations. The contractor shall use standard payment processing and secure payment data storage infrastructure.

d) HR/REE will provide the passing score for each test window for the multiple-choice section. The contractor shall design the re-porting system to include (i) providing results to the DOS for the multiple-choice portions of the CFP and IMS, (ii) providing candid-ate data and results data to the DOS through provider access, (iii) notifying candidates of the availability of their score reports, (iv) no-tifying candidates who pass the CFP and IMS that their file is being passed to the Qualification Evaluation Panel (QEP), and (v) noti-fying candidates who pass QEP that they may schedule their Oral Assessment.

e) The contractor shall use the current system and process used for FSOT. The datasets, infrastructures, and security all will be the same. Thus, there are no new controls to be tested for as part of this work.

C.3.10 TASK 10: Services for Administration of the OMST and HROT (Contingent on funding and timeline is to be determ-ined)

Description – Provide services related to the on-demand administration of the OMST and HROT

a) The contractor shall offer web-based registration and testing systems for the on-demand Specialist tests. The contractor shall meet by phone with DOS every two weeks to discuss progress and shall provide monthly progress reports.

b) The contractor shall configure and implement an application processing system, which will include: (a) developing a web-based candidate registration system, (b) conducting normal updates and maintenance of a web-based candidate registration system, and (c) developing a system to notify candidates to schedule their tests. The contractor shall incorporate the following features:

• customer support for the candidate’s submission of the registration form,

• web and call center based test scheduling services for eligible candidates,

• email confirmations to candidates after they schedule their tests,

• customer support for candidates using the test seat appointment scheduling system, and

• ongoing technical support.

The registration system will involve having the Personal Narrative (PN) portion of the selection system up front as part of candidate registration. The OMST and HROT will be independent programs under the DOS Candidate Portal. This means that candidates can have a “work flow” or applications at DOS programs simultaneously. The system should include three forms to mirror the CFPT and

IMST:

1. Eligibility,

2. Application, and

3. Personal Narratives.

This may include minor verbiage changes to application questions and small changes to drop down responses. Candidate portal mes-saging will be the same as CFPT and IMST but will incorporate the new program name. Candidate application forms will be good for six months after which they will expire (same as CFPT). Roll-out of the OMST is projected for Fiscal Year 2021; Roll-out of the HROT is projected for Fiscal Year 2022.

c) The contractor shall provide domestic, international and military test centers (with trained staff) capable of secure computer-based delivery of the tests. The contractor shall provide a system set up for computer-based test administration and delivery to up to 4,000 OMS candidates per year and 1,000 HRO candidates per year as well as program management support. The contractor shall also provide accommodations including but not limited to extra time accommodations. The contractor shall use standard payment pro-cessing and secure payment data storage infrastructure.

d) HR/REE will provide the passing score for each test window for the multiple-choice section. The contractor shall design the re-porting system to include (i) providing results to the DOS for the multiple-choice portions of the tests, (ii) providing candidate data and results data to the DOS through provider access, (iii) notifying candidates of the availability of their score reports, (iv) notifying candidates who pass the tests that their file is being passed to HR/REE, and (v) notifying candidates when they may schedule their Or-al Assessment.

e) The contractor shall use the current system and process used for FSOT, CFPT, and IMST. The dataset, infrastructure, and secur-ity all will be the same. Thus, there are no new controls to be tested for as part of this work.

C.4. HR Standard Contractor Owned, Contractor Operated (COCO) Contract Security Requirements

C.4.1 SUMMARY:

HR ISSO team will work with the service provider/business users to make the final determination on system categorization. Items be-low are required prior to meeting with the ISSO team to assist with the determination.

i. List of data elements involved

ii. Details about the hosting environment

iii. Any system connections

iv. A basic business process diagram

v. Preliminary data sharing process/procedures

Section 1.2 describes the type of applicable security requirements for each categorization. Detailed requirements and deliverables are located in Section 1.3, 1.4, and 1.5.

C.4.2 COCO Security Prerequisites

1) Minimum System Security Requirement: COCO systems supporting HR shall meet FISMA or FedRAMP {Low/Moderate/High} Security Impact Level security controls

2) OMB Circular A-130: COCO systems dealing with Personally Identifiable Information (PII) on behalf of HR must abide and comply with OMB Circular A-130, Appendix I, Responsibilities for management of Personally Identifiable Information (PII).

3) Binding Operational Directives (BODs) - COCO systems collecting, processing, storing, or transmitting information on behalf of HR must abide by and comply with all BODs that apply to the system/service.

4) Alt-ISSO: Vendor must train and appoint an Alternate Information Systems Security Officer (Alt-ISSO) who will be the primary POC for all security related services/communications.

5) NIST SP 800-171 –COCO systems must implement the security control tailoring guidelines in NIST SP 800-171 (latest final re-vision) if the system processes, stores, or transmits Controlled Unclassified Information (CUI).

6) Supply Chain/Subcontractor Security: Vendor must ensure that any/all sub-contractors adhere to these security protocols;

vendor must ensure that the system supply chain meets the security controls applicable to the system.

7) Notification of Management and Foreign Ownership: Vendor must include information about management officers (org chart), ownership, as well as for subs. Vendor must notify DoS of any changes to management/ownership, as well as for subs.

8) FISMA - COCO systems that are not FedRAMP authorized shall have or will attain:

a) an Authority to Operate (ATO) granted by a federal agency

b) a security assessment conducted by an independent 3rd Party Assessor (3PAO).

c) Provide HR with a list of all organizational values applied to the control implementation and abide by Department of State, HR values if there are any discrepancies.

9) FedRAMP – COCO Cloud Service Provider (CSP) shall have a Provisional Authority to Operate (P-ATO).

a) Cloud Services – Any underlying cloud service provider’s (CSP) leveraged must be/in the process of getting - FedRAMP certi-fied.

b) HR Cloud Security Control Responsibility – COCO shall provide the HR/ISSO team with a customer responsibility matrix from the cloud service provider.

c) Organizational-defined values - Provide HR with a list of all organizational values applied to the control implementation and abide by FedRAMP defined or Department of State, HR values if there are any discrepancies

10) High Value Asset (HVA)

a) Given the nature of the data involved, HR may require that a COCO system implement the HVA Overlay controls or a subset of the HVA Controls overlay from the Department of Homeland Security (DHS). The vendor will provide HR with an option to exercise the implementation of the HVA Overlay controls. If a decision is made by HR to require the implementation of the HVA Overlay con-trols, HR will:

1. notify the vendor in writing of the requirement to implement HVA Overlay controls.

2. specify which HVA Overlay controls are required.

3. Specify the organizational values that apply to the HVA Overlay controls.

4. Allow the vendor a minimum of 90 days to apply the HVA Overlay controls or create a Plan of Action & Milestones (POA&Ms) for controls that cannot be implemented within 90 days.

b) If the COCO has a MOA/MOU/ISA related to a data sharing or a system interconnection, a requirement for implementing addi-tional security controls may be required.

11) Personnel Clearance:

a) Given the nature of the data involved, HR may require that a COCO system implement additional personnel/facility security clearance requirements. The vendor will provide HR with an option to exercise the implementation of additional personnel/facility se-curity clearance requirements. If a decision is made by HR to require the implementation of the HVA Overlay controls, HR will:

1. notify the vendor in writing of the requirement to implement additional personnel/facility security.

2. Provide the vendor with a DD-254 which will specify the full personnel/facility security requirements.

3. Allow the vendor a minimum of 18 months to fulfill the additional personnel/facility security requirements.

C.4.3 Compliance with System Requirements for Information Technology Resources

The systems must meet Department of State standard operating procedures and Federal IT security standards, including but not lim-ited to:

a) The Risk Management Framework (RMF) and Cyber Security Assessment and Authorization Procedures.

b) Federal Information Security Management Act of 2002 (FISMA) Standards (http://csrc.nist.gov/groups/SMA/fisma/index.html) (Appendix B).

c) Federal Acquisition Regulation (FAR) (http://www.acqnet.gov/FAR/).

d) Forbid the use of HR Production data in Non-Production environments except as specifically agreed to by the Department of State, Bureau of Human resources.

e) Section 508 of the Rehabilitation Act (http://www.section508.gov/) (Appendix C): Government Product Accessibility Template

(GPAT).

f) Maintain data privacy in accordance with the Privacy act of 1974 and Department of State Privacy Impact Assessment (PIA).

g) Department of State Statement of Records Notice (SORN).

h) 5 FAH-11 H400 System Authorization of Non-Department Systems).

i) DOSAR 652.239-71, Security Requirements for Unclassified Information Technology Resources, ht-tp://farsite.hill.af.mil/reghtml/regs/other/dosar/652.htm#P1005_87215.

j) DOSAR 652.239-70, Information Technology Security Plan and Accreditation, ht-tp://farsite.hill.af.mil/reghtml/regs/other/dosar/652.htm#P996_86723.

k) Contractor must adhere to the Personnel Clearance Procedure detailed in Appendix A.

l) The contractor shall provide FIPS 140.2 approved/compliant data encryption mechanisms to encrypt data in use, in transit, and at rest.

m) The contractor shall abide by the DoS policies regarding Government Access, Security Breach and Data Loss, and Classified In-formation Spillage, including having an incidence response plan with formal reporting requirements and procedures documented and provided to State.

n) Adhere to the regulations pertaining to Controlled Unclassified Information (CUI) in the National Archives and Records Adminis-tration (NARA) 32 CFR 2002

o) Any operations not covered by these documents should follow ISO 9000 standards, or NIST 800-53 Rev. 4 (or later).

C.4.4 Appendix A: Deliverable Schedule

In fulfillment of this effort, the Contractor shall agree to the following deliverables schedule, subject to timely input and participation from designated DoS personnel. All deliverables shall be submitted to the COR, unless otherwise agreed upon.

Milestones/Deliverables Completion Date Service Level Agreement (SLA) 30 workdays following contract award Information Systems Contingency Plan Test Results

- for systems with a high-water mark categorization of moderate or above, a func-tional test is required

Annually (due every fiscal year)

Information System Contingency Plan Annually (due every fiscal year) System Security Plan,

- export of all control implementation statements to template provided by HR

- export of the system boundary, data flow, and network diagrams

- export of system hardware/software inventory to template provided by HR

- export of system ports, protocols, and services to template provided by HR

- export of user roles/groups to template provided by HR

- export of system data sharing interfaces to template provided by HR

- export of all organizational defined values used in the security control imple-mentation statements

Annually, or as specified by HR ISSO

System Authorization Report (ATOR) completed by Independent Assessor Every three years, or as specified by HR ISSO Annual Controls Assessment

- exported to template provided by HR

- export of all organizational defined values used in the security control imple-mentation statements

Annually (due every fiscal year)

Incident Response Plan & Procedures Annually (due every fiscal year) Notification of Management and Foreign Ownership Annually or within 5 days of a change Privacy Impact Assessment Every three years or as directed by HR ISSO Security Assessment Report Plan of Action Milestone (POA&M) Report Quarterly or as directed by HR ISSO Vulnerability Report Monthly Data Sharing Agreement (Refer to HR Data Sharing Policy) Prior to System Going Live Appoint an Alt-ISSO and inform HR in writing Prior to System Going Live, or NLT 90 days after contract award Server and Application Log Weekly Notification of Change/Planned Change Comparative Analysis Prior to implementing a major change into Production Proof of FIPS 140.2 encryption of data at rest and in-transit Prior to System Going Live, or NLT 120 days after contract award Employee Roster Report (See detail in the employee roster table below) Monthly

Steps Employee Roster Report Task

By Whom To Whom Frequency

Step 1 Submit Roster of Personnel working on DOS COCO sys-tems with the following in-formation:

Vendor COR

HR-

EX-ESD-contracts@state.gov

ISSO

HR-

EX-ESD-ISSO@state.gov

Monthly

First Name Last Name Clearance Level Adjudication Date Roles and Responsibilities Step 2 Acknowledge receipt of

Roster and review/audit Roster

ISSO Vendor Monthly

Step 3 Request a sampling of Per-sonnel Clearance Information from Facility Security Officer

(FSO)

ISSO Vendor’s Facility Clearance Officer

Quarterly

Step 4 Verify and validate Personnel clearance status against clear-ance information submitted by FSO in trackable spread-sheet

ISSO Quarterly

C.4.5 Appendix C: Data Sharing Agreement

Data sharing detail must be included no later than 120 days after contract signing and must include data sharing method and fre-quency, data sharing elements, and restrictions on data shared.

C.5. SYSTEMS OF RECORDS ON INDIVIDUALS (02/96)

This contract requires the design, development or operation of one or more Systems of Records on Individuals subject to the Privacy Act of 1974.