Attach_I_277-15-0429__STOP_Act_RTC_SOW.docx

RFP No. 277-15-0429 Attachment 1

STATEMENT OF WORK

Secretary of Health and Human Services Report to Congress on Preventing Underage Drinking (STOP Act).

A. Background Information

In December 2006, Congress passed the Sober Truth on Preventing Underage Drinking (STOP) Act, Public Law 109-422, popularly known as the STOP Act. The Act states, “A multi-faceted effort is needed to more successfully address the problem of underage drinking in the United States. A coordinated approach to prevention, intervention, treatment, enforcement, and research is key to making progress. This Act recognizes the need for a focused national effort, and addresses particulars of the federal portion of that effort as well as federal support for state activities.” The STOP Act requires the Secretary of Health and Human Services (HHS) in collaboration with other federal officials enumerated in the Act, to “formally establish and enhance the efforts of the Interagency Coordinating Committee for Preventing Underage Drinking (ICCPUD) that began operating in 2004.”

The STOP Act calls for the HHS Secretary to provide data and information on the enforcement of drinking laws, to develop steps to reduce alcohol’s availability to teenagers, to increased research on underage drinking, and provide resources for local community efforts. Additionally, the Act requires the development of an adult-oriented media campaign to improve monitoring of the alcohol advertising reaching youth. The overall goal of this contract is to provide Congress, the ICCPUD, the HHS Secretary, and the public with current (not historical), detailed, and authoritative information as called for in the STOP Act. This contract will fulfill the requirements for the data analysis and the development of papers/reports.

The Substance Abuse and Mental Health Services Administration (SAMHSA) was created in 1992 to work in collaboration with states to improve prevention, treatment, and rehabilitation services for individuals with mental and/or substance use disorders. Its vision is to provide leadership and devote its resources toward helping the nation act on the knowledge that: behavioral health is essential for health, prevention works, treatment is effective and people recover from mental and substance use disorders.

SAMHSA’s Center for Substance Abuse Prevention (CSAP) works with federal, state, public, and private organizations to develop comprehensive prevention systems by:

· Providing national leadership in the development of policies, programs, and services to prevent the onset of illegal drug use, prescription drug misuse and abuse, alcohol misuse and abuse, and underage alcohol and tobacco use; and,

· Promoting effective substance abuse prevention practices that enable states, communities, and other organizations to apply prevention knowledge in an effective manner.

SAMHSA/CSAP has made prevention of underage drinking a priority through SAMHSA’s Strategic Initiative #1 – Prevention of Substance Abuse and Mental Illness specifically Goal 1.2 – Prevent and reduce underage drinking and young adult problem drinking because of the potential impact on the health and well-being of young people and their communities. Although current rates of underage drinking have seen promising declines during the past several years, there are still more than 9 million underage drinkers in the United States. Alcohol remains the drug of choice among America’s adolescents, and it is used by more young people than tobacco or illicit drugs. Furthermore, alcohol abuse among college students remains unacceptably high.

B. Objectives

The purpose of this contract is to fulfill a Congressional mandate, via the STOP Act, to produce an annual report on the national efforts to reduce underage drinking, and an annual state-by-state report on prevention and enforcement activities related to underage drinking. This contract continues SAMHSA’s efforts to support the HHS Secretary as required by the STOP Act, and supports the work of the ICCPUD. This contract will produce and update both of these reports specifically in the areas of data, scientific and legal research, policy development, and survey and electronic questionnaire development and maintenance. In developing the report, the Contractor shall be expected to provide workshops/briefings to the federal prevention staff, convene small meetings, focus groups, and coordinate work with other expert consultants to fulfill the requirements of the STOP Act.

In addition to overall direction on the contract, the Contractor shall provide briefings and/or workshops that assist the federal prevention workforce in developing communication products derived from the Report to Congress and State Reports to support the delivery of quality technical assistance services to states and communities. SAMHSA/CSAP staff will provide guidance with regard to SAMHSA priorities and policy, data collection, intra and interagency information gathering and clearance, including the collection of information regarding federal programs and communication products for technical assistance.

To the extent possible, the development of the above-mentioned questionnaire and the State Reports will draw on information already available from the National Institute on Alcohol Abuse and Alcoholism (NIAAA) Alcohol Policy Information System (APIS).

C. Services to be performed

This contract will contain one (1) Base year with four (4) Option years:

GENERAL REQUIREMENTS

· Independently, and not as an agent of the government, the Contractor shall furnish the necessary personnel, labor, equipment, software, services, materials, and supplies, except as otherwise noted specifically herein to perform the work set forth below.

· All work under this contract will be monitored by the Contracting Officer’s Representative (COR).

· SAMHSA/DIVISION OF TECHNOLOGY MANAGEMENT (DTM) GUIDELINES: The Contractor shall use software that meets SAMHSA Guidelines. Specifically, the system(s) must be PC compatible, operate in a Windows environment, and use Microsoft Office Suite (Word; Excel; PowerPoint; and Access), .Net, Java or other software; Oracle or SQL server databases, as well as web applications services such as IIS and Oracle AS or other software consistent with SAMHSA/DTM standards. The Contractor shall at all times maintain compliance with current DTM standards, which may change over the duration of this contract. Any deviation from the SAMHSA standards should be negotiated with SAMHSA prior to contract award.

· IT Plan: The Contractor shall prepare an IT Plan that will include the Design, Development, Implementation, and Maintenance for all IT Applications. The IT Plan should include functional requirements (e.g., data, workloads, user interface, reliability, security, and maintenance), technical requirements (e.g., hardware, software, and telecommunications) and operational and other requirements. It should also include major IT milestones and implementation dates of the project. The draft and final IT Plan [i.e. “Electronic Version” and “Hard Copy”] shall be submitted as a deliverable to the COR and the DTM [through the COR] for review and approval. Full acceptance of the Contractor’s IT Plan is required and contingent upon the review and approval of the DTM.

· SECURITY AND PRIVACY REQUIREMENTS FOR SAMHSA OWNED CONTRACTOR MANAGED SYSTEMS

1. Adherence to security and privacy policy. The Contractor shall comply with all federal and Department of Health and Human Services (HHS) security and privacy guidelines in effect at the time of the award of this contract. A list of applicable United States (U.S.) laws, Office of Management and Budget (OMB) requirements, HHS policies, standards and guidance, and federal Government Computer Security guidelines can be located on the Secure One HHS website. The Contractor shall perform periodic reviews to ensure compliance with existing information security and privacy requirements. The Contractor reviews should revalidate compliance with previous requirements as well as any new requirements since the last review. The Contractor shall make all system information and documentation produced in support of the contract available to the agency and agency auditors upon request. All questions concerning IT security should be directed to the IT Security Team at infosecurity@samhsa.hhs.gov.

1. Perimeter defense and notification. The Contractor shall ensure that the system and the information it contains are secured using appropriate perimeter defense technologies and that these technologies are monitored for anomalous traffic behavior. The Contractor shall immediately report any unauthorized system access to the agency Contracting Officer Representative and/or System Owner.

1. Protection of sensitive information. The Contractor shall ensure that sensitive information is protected by information security and privacy controls commensurate with the risk associated with the potential loss or compromise of the information. For purposes of this contract, information is sensitive if the loss of confidentiality or integrity could be expected to have a serious, severe, or catastrophic adverse effect on organizational operations, organizational assets, or individuals.[footnoteRef:1][1] Further, the loss of sensitive information confidentiality or integrity could: (i) cause a significant or severe degradation in mission capability to an extent and duration that the organization is unable to perform its primary functions or the effectiveness of the functions is significantly reduced; (ii) result in significant or major damage to organizational assets; (iii) result in significant or major financial loss; or (iv) result in significant, severe or catastrophic harm to individuals. [1: [1] Federal Information Processing Standard (FIPS) 1999, Standards for Security Categorization of Federal Information and Information Systems, February 2004.]

Personally identifiable information (PII) is a subset of sensitive information and is defined as data which can potentially be used to identify, locate, or contact an individual, or potentially reveal the activities, characteristics, or other details about a person.[footnoteRef:2][2] PII shall receive a level of protection commensurate with the risk associated with the loss or compromise of sensitive information. [2: [2] HHS Rules of Behavior, February 12, 2008.]

1. Sensitive information on public systems. The Contractor shall ensure that sensitive information is not stored, processed or transmitted on a publicly-available system (via the Internet) without the appropriate controls in place and specific authorization from the SAMHSA Chief Information Officer (CIO)and/or Chief Information Security Officer (CISO).

1. Privacy requirements. The Contractor shall conduct and maintain a Privacy Impact Assessment (PIA) as defined by Section 208 of the E-Government Act of 2002 and Federal Acquisition Regulation (FAR) Clause 52-239-1, and required by HHS policy. The PIA shall be completed in accordance with HHS PIA guidance. Periodic reviews shall be conducted to determine if a major change to the system has occurred, and if a PIA update is subsequently required. If it is determined that an update is necessary, the Contractor shall make the necessary changes to the PIA. Questions or assistance required for PIA completion should be directed to James Walters (james.walters@samhsa.hhs.gov)

The Contractor shall abide by all requirements of the Privacy Act of 1974 and FAR Clause 52-239-1. Pursuant to those requirements, the Contractor shall create and publish a System of Records Notice (SORN) in the Federal Register when required and shall publish an updated SORN following a major change to the system, as directed by OMB Memorandum (M) 03-22, OMB Guidance for Implementing the Privacy Provisions of the E-Government Act of 2002, or subsequent replacement guidance.

1. Website Privacy Policy: The Contractor shall assure each page of the website, including the home page, includes a link to SAMHSA's website Privacy Policy (found at http://www.samhsa.gov/privacy.aspx). DHHS and SAMHSA policy does not allow for persistent cookies on any SAMHSA or SAMHSA funded websites. In addition, any forms on the site which will ask users to enter personal information must first be approved through SAMHSA channels and the DTM. Questions or assistance required for SAMHSA websites should be directed to the SAMHSA webmaster (webmaster@samhsa.hhs.gov).

1. Information System Security Plan (ISSP): The Contractor shall develop, submit and maintain an information system security plan compliant with National Institute of Standards and Technology (NIST) Special Publication (SP) 800-18 Revision 1, Guide for Developing Security Plans for Information Technology Systems, standards and must be consistent with the HHS and SAMHSA policy, as applicable to the contract’s statement of work. The Contractor’s draft information system security plan shall be submitted [no later than 90 calendar days after the contract effective date (CED)] to the COR with the proposal for approval. The draft and final IT Security Plan [i.e. “Electronic Versions” and “Hard Copies”] shall be submitted as a deliverable to the COR and the DTM [Through the COR]. Full acceptance of the Contractor’s ISSP [IT Security Plan] is required and contingent upon the review and approval of the DTM.

Information System Security Plan requirements:

1. Each of the 17 NIST control families prescribed in NIST Special Publication (SP) 800-53, Recommended Security Controls for Federal Information Systems, and the specific ways in which those controls are implemented must be addressed, if applicable, in the ISSP and pertinent to the function the system is designed to provide.

1. The system security plan must be reviewed on at least an annual basis.

1. The completion date of the ISSP should be revised to record when the plan is has been reviewed and update completed.

1. Version numbers must be employed and revised to record when changes are made to the document.

Following approval of the draft ISSP, the Contractor shall update and resubmit its ISSP to the COR every three years or when a major modification has been made, as determined by the contracting officer. The Contractor shall use the current ISSP template in Appendix A of NIST SP 800-18 Revision 1, (http://csrc.nist.gov/publications/nistpubs/800-18-Rev1/sp800-18-Rev1-final.pdf) to complete the ISSP. The information contained in the Contractor’s IT Security Plan shall be commensurate with the System Categorization indicated by the IT Security Officer.

Subcontracts: The Contractor shall include information consistent with this contract language in any subcontractor for performance under the SOW, whenever the submission of an IT Security Plan is required.

1. System Authorization. The Contractor shall certify and accredit all systems developed for support of the contract in conformance with the standards set forth by the Federal Information Security Management Act (FISMA) and NIST SP800-37, Guide for the Security Certification and Accreditation of Federal Information Systems, prior to the system becoming operational, or within 90 days after system completion with approval from the SAMHSA CIO or CISO. This activity shall be performed in conjunction with the initial development of the system, updated when a major change occurs to the system, and renewed no less than every three years. All system certification and accreditation (C&A) packages shall be compliant with all Public Law (PL)-107-347, OMB mandates, FIPS, and additional applicable NIST guidance. This guidance includes, but is not limited to FIPS 199, FIPS 200, NIST SP 800-18, NIST SP 800-30, NIST SP 800-37, NIST SP 800-53, NIST SP 800-53A, and NIST SP 800-60. All NIST and FIPS documentation can be found at the NIST website.

SAMHSA has created a C&A checklist to facilitate compliance with the OMB-mandated C&A process. The SAMHSA C&A Checklist will be provided to the Contractor after contract award and upon request to DTM through the SAMHSA COR.

Annual requirements. The Contractor shall be responsible for meeting ongoing information security and privacy system requirements. These include, but are not limited to, performing annual system testing, completing an annual system self-assessment, and supporting quarterly and annual SAMHSA FISMA reporting. Additionally, SAMHSA reserves the right to test or review the system security and privacy controls at any time. All annual requirements will be administered by SAMHSA IT security and privacy team.

1. Security and privacy training. All Contractors shall receive general awareness training and role-based training, commensurate with the responsibilities required to perform the work articulated in the terms and conditions of the Contract.

The Contractor shall be responsible for ensuring each contractor employee has completed the SAMHSA Security Awareness Training as required by the agency prior to performing any contract work or accessing any system, and on an annual basis thereafter, throughout the period of performance of the contract. The Contractor shall maintain a list of all individuals who have completed this training and shall submit this list to the Contracting Officer Representative upon request. As a part of this training, the Contractor shall ensure that all staff read, agree to, and sign the HHS Rules of Behavior.

1. Clearances. The Contractor shall ensure all staff have the required level of security clearance commensurate with the sensitivity of the information being stored, processed, transmitted or otherwise handled by the System or required to perform the work stipulated by the contract. At the minimum, all Contractor staff shall be subjected to a Public Trust background check and be granted a Public Trust clearance before access to the System or other HHS resources is granted.

1. Non-Disclosure. The Contractor shall not release, publish, or disclose agency information to unauthorized personnel, and shall protect such information in accordance with the provisions of the following laws and any other pertinent laws and regulations governing the confidentiality of sensitive information:

-18 U.S.C. 641 (Criminal Code: Public Money, Property, or Records) -18 U.S.C. 1905 (Criminal Code: Disclosure of Confidential Information)

- PL 96-511 (Paperwork Reduction Act)

1. Mobile device encryption. The Contractor shall: (a) encrypt all laptop computers, mobile devices and portable media which store or process, or may store or process, sensitive information using FIPS 140-2 compliant encryption technology; (b) verify that encryption products have been validated under the Cryptographic Module Validation Program to confirm compliance with FIPS 140-2; (c) establish key recovery mechanisms to ensure the ability to decrypt and recover sensitive information by authorized personnel; and (d) generate and manage encryption keys securely to prevent unauthorized decryption of information. For more information, reference the HHS Encryption Standard for Mobile Devices and Portable Media.

1. Maintenance. The Contractor shall ensure that the system, once operational, is properly maintained and monitored, to include immediate response to critical security patches, routine maintenance windows to allow for system updates, and compliance with a defined configuration management process. All patches and system updates shall be properly tested in a development environment before being implemented in the production environment.

References

1. Policy for Department-wide Information Security

2. HHS IRM Information Security Program Policy

3. HHS Personnel Security/Suitability Handbook

4. NIST SP 800-18, Rev. 1, Guide for Developing Security Plans for Information Technology Systems

5. NIST SP 800-37, Guide for Security Certification and Accreditation of Federal Information Systems:

6. NIST SP 800-53, Recommended Security Controls for a Federal Information System

7. NIST SP 800-60, Guide for Mapping Types of Information and Information Systems to Security Categories, Volume I

8. NIST SP 800-60, Guide for Mapping Types of Information and Information Systems to Security Categories, Volume II

9. NIST SP 800-64, Security Considerations in the Information System Development Life Cycle

10. FIPS 199, Standards for Security Categorization of Federal Information and Information Systems

11. Federal Information Processing Standards, Minimum Security, Requirements for a Federal Information System Cryptographic Module Validation Program

6. SECTION 508 COMPLIANCE:

1—Section 508 of the Rehabilitation Act, requires agencies and their Contractors to buy Electronic and Information Technology (EIT) that is accessible to people with disabilities.

2—On June 25, 2001, accessibility requirements for Federal Electronic and Information Technology took effect under Section 508 of the Rehabilitation Act. This law requires that such technology be accessible according to standards developed by the Access Board, which are now part of the federal government's procurement regulations (Ref. to the Section 508 Federal Acquisition Regulations (FAR) Final Rule published on April, 2001 in the Federal Register).

3—These standards, as issued by the Board, cover a variety of products, including computer hardware and software, Websites, phone systems, fax machines, copiers, and similar technologies. Provisions in the standards spell out what makes these products accessible to people with disabilities, including those with vision, hearing, and mobility impairments. The Board included both technical criteria specific to various types of technologies and performance-based requirements, which focus on a product's functional capabilities.

4—The law relies strongly on the procurement process to ensure compliance with the new standards. Compliance with the standards is required except where it would pose an "undue burden" (as defined in the standards) or where no complying product is commercially available.

5—To be considered eligible for award, offerors must propose goods and/or services that meet the applicable provisions of the Access Board's standards as identified by the agency. Alternatively, offerors may propose goods or services that provide equivalent facilitation. Such offers will be considered to have met the provisions of the Access Board's standards for the feature or component providing equivalent facilitation.

6—In instances in which deliverables and other artifacts generated by the contractor are intended for distribution via the Web, deliverables must comply with Section 508 requirements. Additional online resources, including the Section 508 compliance standards are available for reference (http://www.section508.gov/index.cfm?FuseAction=Content&ID=12).

7. SAMHSA/OFFICE OF COMMUNICATIONS (OC) REQUIREMENTS

A. Branding – The contractor shall adhere to the branding guidelines outlined in the SAMHSA Identity Guide. SAMHSA is the only entity that will be branded in content, services, and products developed through this contract (including products, Web pages, program descriptions, etc.). Communications products and promotion activities developed through this contract will position and brand SAMHSA as the leading source for behavioral health expertise and innovation in the Nation.

B. Communications Products - The COR shall not direct the Contractor to expend funds on the development of any specific communications product until the SAMHSA Office of Communications has issued a concept clearance or other commensurate approval for the product including specific law or description in strategic initiative communications plan. The COR working with the Contractor shall ensure that SAMHSA products reflect SAMHSA's Strategic Initiatives and priorities and are produced with appropriate participation from all SAMHSA Centers and other relevant external agencies. Recommendations from an annual communication product planning meeting and Executive Leadership Team decisions will determine the final communication products to be produced. As a cost reimbursable contract, SAMHSA maintains the right to stop work, cancel future work, or change the level of effort of work on any communications products within this contract. This includes, but is not limited to, the revising, repurposing, producing, finalizing, or disseminating of products. Changes that incur a significant reduction or incretion of effort may require a contract modification depending on the level of effort and cost implications. Any decision by SAMHSA to change the purpose, direction, production, completion, or dissemination of a product does not negatively reflect the performance of the Contractor. The Contractor will be reimbursed for any product development up to the date of request by the COR to end work on the product(s) or a change in direction on the product(s). All products are the property of the Government and shall be turned over to the COR if the decision is made to stop work on the product(s).

In accordance with the Executive Order on Promoting Efficient Spending (EO 13589) products produced under this contract shall be developed for electronic and web-based distribution only unless SAMHSA exercises the right to produce/print hard copies. The duplication of print copies/DVDs/CDs will be the exception and will require prior approval. Recommendations from an annual communication product planning meeting and Executive Leadership Team decisions will determine the final communication products to be produced in hard copy. In addition, all products prepared under this contract will follow the “plain English” guidelines and will strive to maintain the national level of suggested reading levels for the appropriate audiences. All products prepared under this contract will be written and edited in accordance with the Government Printing Office Style Manual and SAMHSA style guidelines. All materials will be printed by the Government Printing Office (GPO) or approved entity such as through SAMHSA’s PEP, still meeting GPO printing guidelines.

C. Public Engagement Platform (PEP) and Marketing Support - Use of and close collaboration with the COR and SAMHSA’s OC for the services provided by PEP and OC is a requirement of this contract. This contract shall not reproduce or budget for any of the services that are available through SAMHSA’s OC. See below for details on the distribution services and Marketing Support that SAMHSA already has available:

· Contact center – 1-877-SAMHSA-7 which responds to public inquiries.

· Warehouse – full warehouse functions of receiving, maintaining, shipping, and managing the entire SAMHSA print and audiovisual library.

· Communications Products Pages – provides online presence for products, including “shopping cart” functionality to order/download products, tagging with the SAMHSA taxonomy, and other related content.

· Reports – provides inventory management information, (e.g. remaining inventory, monthly distribution, and reprint recommendations) and data analytics on the electronic consumption of SAMHSA communications products. Analyzing the product inventory reports is a requirement of this contract. The Contractor shall work with the COR in obtaining these reports from the OC.

· Press releases, News bulletins – these are more traditional forms of information dissemination. They are typically distributed to other news outlets.

· Conference Exhibit Program – Provides a SAMHSA presence at meetings that are aligned with the Agency’s strategic initiatives. Provides publications, programmatic information, promotional materials, etc.

· eBlasts – Internet-based email marketing and current awareness tool that allows subscribers to create profiles and select to receive updates on topics of interest to them, including, but not limited to upcoming awareness campaigns, funding opportunities, and new publications.

· Social Media – SAMHSA utilizes various social media tools (Facebook, Twitter, Flickr, YouTube) with a strong presence and following.

· SAMHSA Newsletter – SAMHSA News, the Agency’s newsletter, disseminates information to behavioral health service providers, consumers, and the general public from all SAMHSA program divisions and offices.

D. Adherence to SAMHSA Internet/Web Policy: The Contractor shall follow all SAMHSA Internet/Website Policy. Any development and production of Internet/Web applications, including Intranets and Extranets shall comply with SAMHSA policy and procedures. These policies and procedures cover Websites, Web page linkages, and Web development; and agency programmatic, concept, and technical clearances. All new contracts or modifications to existing contracts involving Internet/Websites will require Programmatic and Concept Clearance from the Office of Communications and IT Clearance from the DTM. The SAMHSA Website is the only authorized Website. No new Websites will be created without prior written approval of the COR, in collaboration with appropriate agency Website officials. Any new Websites created by the Contractor will become part of the SAMHSA Website. Applications development may be accomplished on the Contractor's server. Productions versions must reside on the SAMHSA/DTM server.

i. Content Development and Management Plan - Within 60 days after the CED, the Contractor shall submit “Electronic Versions” and “Hard Copies” of the Content Development and Management Plan to the DTM and OC [through the COR] for review and approval. Full acceptance of the Contractor’s Content Development and Management Plan is required and contingent upon the review and approval of the DTM—for IT Technical Issues; and the OC—for Content and New Media Issues. This plan must include any information on the Web Content that is being prepared for SAMHSA site. The plan must also include, but is not limited to:

· Social Media. Details on any channels of social media that are planned to be used, either external (e.g., Facebook, Twitter, etc.) or internal to the content with justification for their use.

· E-mail. Details on mass e-mail distribution, or other Internet-based communication methods, with justification for their use.

· Processes. Descriptions of the processes for the review, approval, and clearance (if applicable) for the Web content (inclusive of social media, e-mail, etc.) for both initial posting and ongoing maintenance. Multiple/variable processes for different classes of content is suggested if applicable.

· Disposition. The management plan shall also include a plan for management or disposition of the content after the contract ends.

· Hosting. If there is a plan to physically host the content outside of SAMHSA.gov, details and a justification shall be provided.

· Content Management System Standards. Details how the contractor plans to provide updates compatible with or directly through SAMHSA’s Web Content Management System.

· Metrics Standards. Provides information on how the contractor plans to place “code” on each page of web content to allow it to be discovered and counted by SAMHSA metrics tools.

· Data Standards. Details how all data that is produced or incorporated as part of this contract and that is cleared for public distribution shall be made available in an open data format, compatible with Federal raw data and/or geodata standards at data.gov.

· Web Content Integration. If this contract includes assuming responsibility for a legacy site or content, the management plan shall include a plan for integrating that legacy site or content into SAMHSA.gov. This plan shall be coordinated with the agency plans for SAMHSA.gov, and may require multiple phases or steps for integration.

The COR, Office of Management, Technology and Operations (OMTO), and OC will have 30 days to review and provide comments.

ii. Digital Engagement – The preferred approach to digital engagement focuses on the empowerment of trained federal staff as the agent of engagement. However, there will be instances where contractors are responsible for engagement activities. Digital engagement activities should be included as part of the Content Development and Management Plan and should, as closely as possible, adhere to the following principles:

· Transparency is essential to effective engagement

· Digital engagement should encourage building and sustaining communities and work to establish long-term relationships

· Engaging in a way that allows for timely responses should be the default

· Establishing an emergency mitigation strategy should be included as part of all planning activities

· Documenting where engagement activities have occurred is mandatory

· Measuring and reporting on mission-based outcomes is essential

iii. Web Content Approval - No later than three (3) weeks prior to initially posting a Web-only document, the Contractor shall submit the Content to the COR for review and approval. This document should be consistent with Federal policy and have all other signatures obtained for any other clearances (as needed) prior to submission. Depending on the document and the level of review necessary, SAMHSA will review and post the Content onto the SAMHSA site or on the appropriately determined SAMHSA social media platform. Development of new social media accounts is limited on a case-by-case basis based on criteria set by the SAMHSA Communications Governance Council (CGC).

iv. Web Content Migration Plan - The Contractor shall plan for, facilitate and expedite the migration of all production (as opposed to development) Web content from the Contractor’s website to the SAMHSA website. The Contractor shall prepare a plan that includes the Design, Development, Implementation, Public Production and Maintenance. The Content Migration Plan should include functional requirements, technical requirements and other operational requirements. It should also include major milestones and implementation dates of the project, including the migration phase. The draft and final Content Migration Plan shall be submitted as a deliverable to the COR and the OMTO [through the COR] for review and approval. Any new content proposed by the Contractor for the Internet will become part of the SAMHSA Website. It is not the intent to have the Contractor house SAMHSA-funded content for this project unless evidence is presented that it is more efficient to do so and approval is received from OC. Any new Web development must be focused on content that is logically integrated into the SAMHSA.gov organization, design and existing content. Content shall be developed in a manner that provides smooth and efficient integration into the SAMHSA.gov site. Web content is any materials (HTML files, XML files, PDF files, video, audio, etc.) with an expectation of being distributed via the Web or similar Internet system.

v. Contractor shall submit quarterly reports of actual Web-related IT costs to the COR. It is the responsibility of the COR to submit the quarterly report to OC and DTM. A reporting template shall be provided to the Contractor upon award of contract.

vi. Staff members from both OC and DTM shall be included in the initial contract kick-off meeting at the start of the contract as well as any required annual meetings.

E. HHS and SAMHSA Strategic Clearance Platforms are designed for the COR, their Contractors and field partners to create a consistent approach for planning communication activities for communications products or for ongoing operation of a program or organization as well as to determine the appropriate level of clearance required for the product. The HHS and SAMHSA platforms include the key elements in communications planning and execution:

· Field Analysis - identifying what the field needs, what is already available to meet these needs, and potential collaborators.

· Goal - how meeting these needs shall support SAMHSA’s mission.

· Objectives - ways in which particular communications and marketing activities shall achieve this goal.

· Target Audiences - specific target audiences that need to be reached to achieve these objectives.

· Program, Product or Service - what shall be delivered to these target audiences in order to reach the identified objectives.

· Formatting - how messages about these deliverables shall be formatted to reach the identified objectives.

· Creative Mix of Tactics and Message Products -Advertising, Promotion, Events, Public Relations and Personal Communications approaches that shall be combined with electronic or print message products to help achieve the identified objectives, timed against a projected product life expectancy.

· Dissemination - implementation of this creative mix to reach identified objectives.

· Evaluation and Quality Improvement - data gathering needed to improve contract/task performance, and justify public investment in activities supporting SAMHSA’s mission.

Use of the HHS and/or SAMHSA clearance platforms is required for the creation, promotion, dissemination, and evaluation of communications products developed through this contract.

Specific Requirements

The STOP Act requires the HHS Secretary, on behalf of the ICCPUD, to annually submit a report to the Congress on the prevention of underage drinking [hereafter referred to as the Report to Congress (RTC)]. In addition, the STOP Act requires the “Secretary of Health and Human Services… [to] annually issue a report on each state’s performance in enacting, enforcing, and creating laws, regulations, and programs to prevent or reduce underage drinking [hereafter referred to as the State Report (SR)].”

In order to accomplish the tasks set forth in the STOP Act, SAMHSA/CSAP requires the use of specific experts. With regard to the RTC, this requires access to data and research experts with national expertise in the prevention and enforcement of underage drinking policy and research. For example, there will be a need for individuals with expertise in designing, developing, assembling, analyzing, and presenting data from federal surveys.

With regard to development of the SR, this task specifically requires building on the NIAAA’s Alcohol Policy Information System (APIS), conducting legal research on those topics not covered by APIS, and surveying the states to provide requisite information that is not available in the public domain. With this in mind, it is essential that the Contractor have familiarity and ready access to NIAAA’s APIS system. In addition, the Contractor shall at a minimum be responsible, either themselves or through experts identified in consultation with the Contract Officer Representative (COR), for assembling state-level data from federal data sets, for canvassing the states for additional information as needed, and for writing the SR.

The overall goal is to provide the Congress, SAMHSA, the ICCPUD, and the public with current (not historical), detailed, and authoritative information as called for in the STOP Act. The COR will provide the Contractor with requirements for the data analysis, reports, papers, or documents such as topics, purpose of document, intended audience and use, style/format, and length.

Unless otherwise noted herein, all materials created in this Contract will be produced by the Government Printing Office (GPO) at no cost to the Contractor. The Contractor will be responsible for the graphic design and content of all products produced under this contract.

SAMHSA will provide the use of its teleconference and web-based conference services at no cost, for weekly calls and the production of training teleconferences that include the teleconference services (e.g., number, operated assisted, taping, archiving) and the web-based services (e.g., posting PowerPoint presentations for viewing).

Services required under this Contract include, but are not limited to the following tasks and deliverables with regard to the RTC and the SR.

NOTE TO OFFEROR: The Contractor should review the Sober Truth on Preventing Underage Drinking (STOP) Act, Public Law 109-422, section (c) for specific requirements for producing the RTC and the SR.

The Contractor shall provide support in areas of specific importance to SAMHSA/CSAP including, but not limited to, the following tasks:

Task 1: Contract Management (All Years):

Task Description:

The Contractor shall provide expert advice to the COR and SAMHSA on areas of data, scientific, legal research, policy development, content and management in order to support the Health and Human Services Secretary’s requirement to produce the Annual Report to Congress in a proactive and collaborative manner.

Subtask (s):

1.1 Kick-off Meeting. Within two (2) weeks of the contract effective date (CED), the Contractor will meet with the COR and CO, or a designated representative, to discuss the project and to review SAMHSA’s expectations of the contract, lines of communication, and reporting procedures. The Contractor shall also use this opportunity to discuss the contract transition plan.

1.2 Weekly Project Meetings. The COR will monitor all work under this contract. Meetings shall be held between the Contractor and the COR to monitor progress and address issues and concerns weekly, or on a reoccurring basis, and no less than once a month at the COR’s discretion. Meetings with the APIS contractor may also be required. These meetings shall be held at SAMHSA, another mutually agreeable location, or by telephone conference at the discretion of the COR. Other government, contract staff, or other expert consultants may be asked to participate as appropriate. At least two (2) business days in advance of each meeting, the Contractor shall provide to the COR a written (email) outline of the agenda for the upcoming meeting. Within three (3) business days following each meeting, the Contractor shall provide to the COR a written (email) summary of discussions at the last meeting, including documentation of any decisions made at the meeting.

Task 2. Reporting Requirements:

Task Description:

The Contractor shall prepare and submit written draft and final Monthly Reports, Annual Reports, and a Final Project Report. One (1) copy of each report should be submitted to the Contracting Officer’s Representative and one (1) copy to the Contracting Officer. Reports submitted under this contract shall reference and cite the contract number in addition to identifying SAMHSA/CSAP as the sponsoring agency.

Subtask(s):

2.1 Monthly Report: This report shall be divided by individual work order task, and include information on the overall activities performed during the reporting period, difficulties encountered during the reporting period, remedial action taken, and a statement of activity anticipated during the subsequent reporting period. The report also shall include any changes of personnel concerned with the project. This report shall be due on or before the tenth calendar day of the following month. The report shall be submitted electronically and the length is not to exceed five pages.

2.2 Annual Report: The Annual Report shall include the results of the contract work during the reporting period for the respective year. This report shall include a summation of the work performed and results obtained over the year. This report shall be in sufficient detail to describe comprehensively the results achieved. A draft report shall be submitted electronically within 45 day with final report electronically within 30 calendar days before the end of the period of performance.

2.3 Final Project Report: The Final Report shall include a summation of the work performed and results obtained over the entire contract period of performance. This report shall be in sufficient detail to describe comprehensively the results achieved. A draft report shall be submitted electronically within calendar 45 days, with a final report electronically within 30 calendar days before termination of the contract performance period.

Task 3: Prepare and Submit an Office of Management and Budget (OMB) Clearance Package:

Task Description:

If necessary, the Contractor shall perform all tasks associated with preparation and revision of the Federal Register Notice and necessary OMB clearance packages in accordance with the Paperwork Reduction Act of 1995 and 5 CFR 1320. The Contractor shall include a timeline for activities that incorporates at least five (5) months for review and approval of the evaluation plan by the Office of Management and Budget (OMB), as required by the Paperwork Reduction Act. Under no circumstances shall primary data be collected from more than nine (9) respondents without prior approval from OMB. The contractor shall provide a drafts of the plan within 45 calendar days of CED, and a final no later than 90 calendar days after CED.

NOTE TO OFFEROR: The current OMB package for Survey of State Underage Drinking Prevention Policies and Practices (OMB No. 0930-0316) expires on 2/29/16. The Contractor will need to follow up and complete the submitted OMB package.

Subtask(s):

3.1 Review Current Requirements and Policies with SAMHSA OMB Clearance Officer within two (2) weeks of approval of the Evaluation Plan and prior to initiating work on the OMB clearance package, the Contractor shall contact the SAMHSA OMB Clearance Officer (OCO) to review current requirements and policies and to obtain a copy of SAMHSA Instructions on How to Write and Submit Requests for OMB Approval under the Paperwork Reduction Act and 5 CFR 1320. The Contractor shall contact the OCO, through the COR, on an as-needed basis to clarify answers to any questions they have about the OMB clearance process and requirements.

Drafts are due 45 calendar days of CED, Final due no later than 90 calendar days after CED.

3.2 OMB Clearance Package: The Contractor shall produce and submit to the COR for review and approval a complete draft OMB clearance package within 21 days of approval of the Evaluation Plan, and a final OMB Clearance Package within seven (7) calendar days following initial draft submission. The package must include a Supporting Statement, burden estimates, and complete set of exhibits, including the instruments and measures to be used.

3.3 60 Day Federal Register Notice: The Contractor shall produce and submit to the COR a draft and final 60 day Federal Register Notice (FRN) that indicates the need for a new data collection, and associated materials. The Draft 60 day Federal Register Notice (FRN) shall be submitted within 28 days of approval of the Evaluation Plan, and the final 60-day FRN within seven (7) calendar days following initial draft submission.

3.4 30 Day Federal Register Notice (FRN): The Contractor shall produce and submit to the COR a draft and final 30 day Federal Register Notice, and associated materials. The Draft 30 day Federal Register Notice shall be submitted within 45 days of the 60-day FRN, with final 30 day FRN submitted within seven (7) calendar days following initial draft submission.

3.5 The Contractor shall provide the Final OMB Clearance Package within 30 days after the end of the 60-day FRN comment period, the Contractor shall produce and submit the final complete OMB clearance package. The Contractor will provide additional clarification in response to comments from OMB. The Contractor should allow at least five (5) months for the complete review and approval process by OMB.

NOTE TO OFFEROR - OMB packages are currently taking up to nine (9) months to process.

Task 4.Annual Report to Congress on National Efforts to Reduce Underage Drinking, State Reports on the Prevention and Enforcement of Underage Drinking Activities, and the Sober Truth on Preventing (STOP) Underage Drinking Act-- Public Law 109-422s:

Task Description:

This Task is inclusive of certain activities specified in Section (c) of the STOP Act to include primarily: the development of the Annual Report to Congress on the Prevention and Reduction of Underage Drinking and the Reports on State Underage Drinking Prevention and Enforcement Activities. Draft annual Report to Congress and State Reports are due 90 days prior to estimated publish date.

Subtask(s):

4.1 The Contractor shall review the prior year’s RTC, and the prior year’s SRs and make or recommend changes as appropriate, following consultation with the COR and interested parties. After formats for the RTC and SRs have been approved by the COR, the Contractor shall immediately begin preparing for and writing the next year’s reports ensuring the currency and accuracy of the data and information contained therein. The ICCPUD data committee and the ICCPUD agencies will assist in this task. The Contractor should assume one (1) format per year for the RTC and deliver one (1) final RTC plus drafts for review. Contractor should also assume one (1) format per year for the SRs and deliver 51 (one each for every state and the District Columbia) final SRs plus drafts for review.

4.2 As part of the development of the annual RTC the Contractor, with guidance and approval from the COR, shall develop an Executive Summary that is severable. Contractor shall deliver One (1) final and drafts for review as needed.

4.3 The contractor shall develop and revise the Report to Congress as needed during the clearance process, as well as providing professional copyediting of the report, and ensuring it is 508 compliant. If directed to do so by the COR, the Contractor shall be prepared to use the same process for updating the format and the content of the report in subsequent years. Contractor shall deliver One (1) final RTC and drafts for review as needed.

4.4 As identified by the STOP Act and prioritized by the COR, the Contractor shall provide accurate and detailed information for the SRs on specific and current (not historical) alcohol-related statutes and policies adopted by the states, using their APIS expertise and appropriate electronic and other resources that are publicly available; information for this report shall be assembled for each state and territory individually. Contractor shall deliver 51 final SRs and drafts for review as needed.

4.5 To the extent possible, the information for the SRs will be drawn from…