Statement of Work VBA Access System.docx

Statement of Work Access Control, CCTV System for St. Louis Regional Benefits Office

1.0 INTRODUCTION

The St. Louis Regional Benefits Office requires an upgrade to CCure software to version 2.8 or 2.9 for the USAccess PIV cards, this includes a new Innometriks Enrollment and FICAM High Assurance Authentication Software with new CCure Server PC and Innometriks ID Server PC to be acquired and installed at the St. Louis Regional Benefits Office, 9700 Page Avenue, St. Louis, MO 63132.

2.0 TECHNICAL SPECIFICATIONS

· CCure server PC and CCure software version 2.8 or 2.9

· Innometriks Enrollment ID Server PC and software

· FICAM High Assurance Authentication Software

· XE3 Optiplex, small form factor (SFF)

· Intel core i5-8500 processor, 4.1Ghz

· 16GB DDR4, 2666 MT/s

· M.2 256GB SATA Class 20 Solid State Drive

· Integrated Gigabit NIC

· NVIDIA Quadro P620 Graphics Card, 2GB GDDR5, 4x mini Display Port outputs with mDP adaptors to HDMI

· DVD-ROM

· USB Keyboard and Mouse

· Integrated Audio

· Windows 10 Professional, 64-bit

3.0 SCOPE OF WORK

The Contractor shall furnish and install the new Innometriks Enrollment and FICAM High Assurance Authentication Software and upgrade CCure to version 2.8 or 2.9, includes new CCure Server PC and Innometriks ID Server PC. Current System Serial # = 9-17923. New system is required to be compatible with the USAccess PIV Cards. Conversion to the new system will require all cardholders to be re-enrolled. VA to provide a new Enrollment Workstation computer meeting or exceeding the technical specifications. Enrollment workstation hardware to have all upgrades to current requirements and ready for software installation. New and existing hardware will need to be live on the network during the upgrade process. IP addressing will need to be changed after testing to put the new system into production. New ID server will require Internet access for High Assurance verification. Assistance from VA OIT staff will be required during deployment.

4.0 CONTRACTOR SHALL PROVIDE THE FOLLOWING

· Innometriks ID Server Software for FICAM High Assurance, Linux

· Innometriks High Assurance Software

· CCure Server and ID Server, Dell

· Software House Professional Services, On Site

· Software Professional Services, After Hours

· Software Professional Services, TAM Meetings/Documentation

· Prepare, stage, set up, configure, program, and test the system.

· Training preparation and documentation for VA, with 2-hour training session on updated program.

· Provide meetings, follow up/issue resolution for VA

· Provide monthly Windows updates

5.0 GOVERNMENT RESPONSIBILITIES

· Provide Enrollment Workstation hardware to be furnished and prepped.

· Provide utilization of the VA network. Routing, firewall, bandwidth, and other network issues outside of contractor control are assumed to be corrected within two hours per system. Issue resolution taking longer than 2 hours per system will result in Time and Material billing for all additional time.

· Provide regular backups of the systems configuration and cardholder database. Recovering or rebuilding lost data regardless of cause is considered a billable item.

· Provide all network connectivity and support as required.

· Provide all system power as required.

· Provide protection for PCs utilized under this contract with virus and firewall protection. Any service calls made as a result of a virus, worm, hacking or other disruption shall be considered billable.

6.0 WARRANTY

The Contractor shall activate all provided equipment warranties, commencing on the date of acceptance and shall warrant all workmanship for one year from the date of award. In addition, all Contractor supplied equipment shall be warranted for one year from award.

7.0 WORK HOURS

Normal Work Hours: St. Louis Regional Benefits Office hours of operation are 0800-1600 hrs. The Contractor may find it necessary to deviate from the normal base hours of operation, to ensure timely completion of work under this SOW at no additional cost to the government. The service schedule will be developed between the contractor and Contractor’s Representative (COR) prior to any service being performed.

Holidays: If these holidays fall on Saturday, the preceding Friday will be observed. If these holidays fall on Sunday, the following Monday will be observed. If a holiday falls on a scheduled service day, the Contractor will be responsible for rescheduling services for the first day post the holiday observance.

New Year’s Day - 1 January Martin Luther King Day - 3rd Monday in January Washington’s Birthday - 3rd Monday in February Memorial Day - last Monday in May Independence Day - 4 July Labor Day - 1st Monday in September Columbus Day - 2nd Monday in October Veteran’s Day - 11 November Thanksgiving Day - 4th Thursday in November Christmas Day - 25 December

8.0 GENERAL INFORMATION

Traffic Laws. The Contractor and its employees shall comply with federal, local and VA traffic regulations.

Weapons, Firearms, and Ammunition. Contractor employees are prohibited from possessing weapons, firearms, or ammunition, on themselves or within their Contractor-owned or privately-owned vehicle while on VASNHS.

Physical Security. The Contractor shall be responsible for safeguarding all government property and controlled forms provided for Contractor use. At the end of each work period, all government facilities, equipment, and materials shall be secured.

Parking Policy. It is the responsibility of Contractor personnel to park only in designated parking areas. Parking information is available from the VA Police. The VA will not validate or make reimbursement for parking violations of the Contractor’s personnel under any circumstances.

Smoking Policy. Smoking is permitted only in designated areas on VA grounds and is strictly prohibited within VA buildings.

9.0 TRAINING

All contractor employees and subcontractor employees requiring access to VA information and VA information systems shall complete the following before being granted access to VA information and its systems:

(a) Sign and acknowledge (either manually or electronically) understanding of and responsibilities for compliance with the Contractor Rules of Behavior, Appendix E relating to access to VA information and information systems

(b) Successfully complete the VA Cyber Security Awareness and Rules of Behavior training and annually complete required security training

(c) Successfully complete the appropriate VA privacy training and annually complete required privacy training; and

(d) Successfully complete any additional cyber security or privacy training, as required for VA personnel with equivalent information system access.

1. The contractor shall provide to the contracting officer and/or the COTR a copy of the training certificates and certification of signing the Contractor Rules of Behavior for each applicable employee within 1 week of the initiation of the contract and annually thereafter, as required.

(e) Failure to complete the mandatory annual training and sign the Rules of Behavior annually, within the timeframe required, is grounds for suspension or termination of all physical or electronic access privileges and removal from work on the contract until such time as the training and documents are complete.