00 Solicitation Amendment 47PM0024R0003_0001 2024 02 13.pdf

Offers must acknowledge receipt of this amendment prior to the hour and date specified in the solicitation or as amended, by one of the following methods:

(a) By completing items 8 and 15, and returning or (c) By separate letter or electronic communication which includes a reference to the solicitation and amendment numbers. FAILURE OF YOUR ACKNOWLEDGMENT TO BE RECEIVED AT THE PLACE DESIGNATED FOR THE RECEIPT OF OFFERS PRIOR TO THE HOUR AND DATE SPECIFIED MAY RESULT IN REJECTION OF YOUR OFFER. If by virtue of this amendment you desire to change an offer already submitted, such change may be made by letter or electronic communication, provided each letter or electronic communication makes reference to the solicitation and this amendment, and is received prior to the opening hour and date specified.

E. IMPORTANT: Contractor is not is required to sign this document and return copies to the issuing office.

AMENDMENT OF SOLICITATION/MODIFICATION OF CONTRACT 1. CONTRACT ID CODE

2. AMENDMENT/MODIFICATION NUMBER 3. EFFECTIVE DATE 4. REQUISITION/PURCHASE REQUISITION NUMBER 5. PROJECT NUMBER (If applicable)

7. ADMINISTERED BY (If other than Item 6) CODE

STANDARD FORM 30 (REV. 11/2016)

Prescribed by GSA FAR (48 CFR) 53.243

FACILITY CODE

9A. AMENDMENT OF SOLICITATION NUMBER

9B. DATED (SEE ITEM 11)

10A. MODIFICATION OF CONTRACT/ORDER NUMBER

10B. DATED (SEE ITEM 13)

11. THIS ITEM ONLY APPLIES TO AMENDMENTS OF SOLICITATIONS

The above numbered solicitation is amended as set forth in Item 14. The hour and date specified for receipt of Offers is extended. is not extended.

12. ACCOUNTING AND APPROPRIATION DATA (If required) copies of the amendment; (b) By acknowledging receipt of this amendment on each copy of the offer submitted;

13. THIS ITEM APPLIES ONLY TO MODIFICATIONS OF CONTRACTS/ORDERS.

IT MODIFIES THE CONTRACT/ORDER NUMBER AS DESCRIBED IN ITEM 14.

CHECK ONE A. THIS CHANGE ORDER IS ISSUED PURSUANT TO: (Specify authority) THE CHANGES SET FORTH IN ITEM 14 ARE MADE IN THE CONTRACT ORDER

NUMBER IN ITEM 10A.

B. THE ABOVE NUMBERED CONTRACT/ORDER IS MODIFIED TO REFLECT THE ADMINISTRATIVE CHANGES (such as changes in paying office, appropriation data, etc.) SET FORTH IN ITEM 14, PURSUANT TO THE AUTHORITY OF FAR 43.103(b).

C. THIS SUPPLEMENTAL AGREEMENT IS ENTERED INTO PURSUANT TO AUTHORITY OF:

D. OTHER (Specify type of modification and authority)

Except as provided herein, all terms and conditions of the document referenced in Item 9A or 10A, as heretofore changed, remains unchanged and in full force and effect.

15C. DATE SIGNED

15A. NAME AND TITLE OF SIGNER (Type or print)

16C. DATE SIGNED

16A. NAME AND TITLE OF CONTRACTING OFFICER (Type or print)

14. DESCRIPTION OF AMENDMENT/MODIFICATION (Organized by UCF section headings, including solicitation/contract subject matter where feasible.)

PAGE OF PAGES

6. ISSUED BY CODE

8. NAME AND ADDRESS OF CONTRACTOR (Number, street, county, State and ZIP Code) (X)

CODE

15B. CONTRACTOR/OFFEROR

(Signature of person authorized to sign)

16B. UNITED STATES OF AMERICA

(Signature of Contracting Officer)

Previous edition unusable

WPH1D

Ericka Wilson, Contracting Officer

A. The amended solicitation is attached. Changes to the document are marked in red with a side line indicating where a change was made.

--C.3.1.1.e changes “Setpoints” to “Zone Temperature Setpoints” --C.3.1.1.e deletes the last sentence referring to future applications --C.4.1.3 is changed to include a copy of the GSA Control Tailoring Workbook...

[See Description of Modification Continuation Page]

GSA, PBS R11 Office of Acquisition Special Programs Division (SPD) 1800 F St. NW, 4th Floor Washington, DC 20405 USA

GSA, PBS R11 Office of Acquisition Special Programs Division (SPD) 1800 F St. NW, 4th Floor

EQPMH-24-0001

47PM0024R0003

1 2

2/13/2024

1/25/2024

Description of Modification Continuation Page

--C.4.7.1 fixes a typo, a missed space --H.3.0 adds clarification information regarding FAR 52.217-8 stating that prices evaluated during the initial award will be used for any contract extensions --Section J - SOO attachment "17 GSA Control Tailoring Workbook 2023 07 11" was added --L.5.1.d.i - language regarding the Government's participation was deleted --L.6.4 - CLIN x007 was deleted --M.3 added clarification on FAR 52.217-8 B. Attachment "17 GSA Control Tailoring Workbook 2023 07 11" has been added as part of this amendment.

C. The Final RFP Questions and Answers have been attached to this amendment. Questions that were submitted past the deadline have not been included in this attachment.

D. The PreProposal Conference and Notes were uploaded in a separate SAM announcement.

There will be an extension to March 05, 2024, 7:59AM ET deadline.

47PM0024R0003/0001

SOLICITATION, OFFER AND AWARD

2. CONTRACT NUMBER

PAGE OF PAGES

1 74

6. REQUISITION/PURCHASE NUMBER

7. ISSUED BY CODE 8. ADDRESS OFFER TO (If other than item 7)

GSA, PBS R11 Office of Acquisition Special Programs Division (SPD) 1800 F St. NW, 4th Floor Washington, DC 20405 USA

NOTE: In sealed bid solicitations "offer" and "offeror" mean "bid" and "bidder".

SOLICITATION

9. Sealed offers in original and 1 copies for furnishings the supplies or services in the Schedule will be received at the place specified in item 8, or if hand carried, in the depository located in until 8:00 AM local time 2/26/2024 (Hour) (Date)

CAUTION - LATE Submissions, Modifications, and Withdrawals: See Section L, Provision No. 52.214-7 or 52.215-1. All offers are subject to all terms and conditions contained in this solicitation.

10. FOR

INFORMATION

CALL:

A. NAME

Ericka Wilson

B. TELEPHONE (NO COLLECT CALLS) C. E-MAIL ADDRESS

ericka.wilson@gsa.gov

AREA CODE

NUMBER

2162830

EXTENSION

11. TABLE OF CONTENTS

(X) SEC. DESCRIPTION PAGE(S) (X) SEC. DESCRIPTION PAGE(S)

PART I - THE SCHEDULE PART II - CONTRACT CLAUSES

A SOLICITATION/CONTRACT FORM 1 I CONTRACT CLAUSES 39

B SUPPLIES OR SERVICES AND PRICES/COSTS 4 PART III - LIST OF DOCUMENTS, EXHIBITS AND OTHER ATTACH.

C DESCRIPTION/SPECS./WORK STATEMENT 8 J LIST OF ATTACHMENTS 49

D PACKAGING AND MARKING PART IV - REPRESENTATIONS AND INSTRUCTIONS

E INSPECTION AND ACCEPTANCE

K REPRESENTATIONS, CERTIFICATIONS AND OTHER

STATEMENTS OF OFFERORS 51

F DELIVERIES OR PERFORMANCE

G CONTRACT ADMINISTRATION DATA L INSTRUCTIONS, CONDITIONS, AND NOTICES TO OFFERORS 59

H SPECIAL CONTRACT REQUIREMENTS 35 M EVALUATION FACTORS FOR AWARD 68

OFFER (Must be fully completed by offeror) NOTE: Item 12 does not apply if the solicitation includes the provisions at 52.214-16, Minimum Bid Acceptance Period.

12. In compliance with the above, the undersigned agrees, if this offer is accepted within 120 calendar days (60 calendar days unless a different period is inserted by the offeror) from the date for receipt of offers specified above, to furnish any or all items upon which prices are offered at the set opposite each item, delivered at the designated point(s), within the time specified in the schedule.

13. DISCOUNT FOR PROMPT PAYMENT

(See Section I, Clause No. 52.232-8)

10 CALENDAR DAYS (%) 20 CALENDAR DAYS (%) 30 CALENDAR DAYS (%) CALENDAR DAYS(%)

14. ACKNOWLEDGMENT OF AMENDMENTS

(The offeror acknowledges receipt of amendments to the SOLICITATION for offerors and related documents numbered and dated):

AMENDMENT NO. DATE AMENDMENT NO. DATE

15A. NAME AND

ADDRESS

OF OFFER-

OR

CODE FACILITY 16. NAME AND THE TITLE OF PERSON AUTHORIZED TO SIGN OFFER

(Type or print)

15B. TELEPHONE NUMBER 15C. CHECK IF REMITTANCE ADDRESS IS

DIFFERENT FROM ABOVE - ENTER SUCH

ADDRESS IN SCHEDULE.

17. SIGNATURE 18. OFFER DATE

AREA CODE NUMBER EXTENSION

AWARD (To be completed by Government)

19. ACCEPTED AS TO ITEMS NUMBERED 20. AMOUNT 21. ACCOUNTING AND APPROPRIATION

22. AUTHORITY FOR USING OTHER THAN FULL OPEN COMPETITION:

10 U.S.C. 2304 (c) 41 U.S.C. 3304(a) ( )

23. SUBMIT INVOICES TO ADDRESS SHOWN IN ITEM

(4 copies unless otherwise specified)

24. ADMINISTERED BY (If other than Item 7) 25. PAYMENT WILL BE MADE BY CODE

26. NAME OF CONTRACTING OFFICER (Type or print) 27. UNITED STATES OF AMERICA

(Signature of Contracting Officer)

28. AWARD DATE

IMPORTANT - Award will be made on this Form, or on Standard Form 26, or by other authorized official written notice.

AUTHORIZED FOR LOCAL REPRODUCTION

Previous edition is unusable STANDARD FORM 33 (REV. 6/2014)

Prescribed by GSA - FAR (48 CFR) 53.214 (c)

WPH1D

5. DATE ISSUED

1/22/2024

4. TYPE OF SOLICITATION

SEALED BID (IFB)

NEGOTIATED (RFP)

3. SOLICITATION NUMBER

47PM0024R0003

RATING 1. THIS CONTRACT IS A RATED ORDER

UNDER DPAS (15 CFR 700)

mailto:ericka.wilson@gsa.gov

47PM0024R0003 - Unified User Interface

47PM0024R0003 - UNIFIED USER INTERFACE (UUI)

2/74

TABLE OF CONTENTS

SECTION B - CLIN SCHEDULE

B.1 Services to be provided

B.2 CONTRACT LINE-ITEM NUMBERS (CLIN) & PRICING SCHEDULE

SECTION C - Description/Specifications/Statement of Objectives C.1 Purpose and Background C.2 Scope

C.2.1 Period of Performance C.3 Objectives

C.3.1 Business Objectives C.3.2 Technical Objectives

C.3.3 Training C.4 Constraints

C.4.1 Security Requirements C.4.2 IT Requirements C.4.3 HSPD-12 Compliance C.4.4 Government Furnished Equipment/Government Furnished Information C.4.5 NonDisclosure Agreements C.4.6 Data and Deliverables C.4.7 Confidentiality, Security, and Privacy C.4.8 Unauthorized Commitments C.4.9 Agile Program & Project Management Methodologies C.4.10 Other Direct Costs (ODC) C.4.11 Invoicing

SECTION D - Packaging and Marking - RESERVED SECTION E - Inspections and Acceptance - RESERVED SECTION F - Deliveries or Performance - RESERVED SECTION G - Contract Administration Data - RESERVED SECTION H - Special Contract Requirements

H.1.0 KEY PERSONNEL

H.2.0 INFORM

H.3.0 OPTIONS (Additional Buildings and Enhancements)

SECTION I - Contract Clauses SECTION J - List of Attachments SECTION K - Representations, Certifications, and Other Statements of Offerors or Respondents SECTION L - Instructions to Contractors

L.0 Provisions L.1 Questions Submission L.2 Proposal Submission

3/74

L.3 Cover Page L.4 Volume 1: Past Performance (no page limitation) L.5 Volume 2: Technical (100 page limitation, excluding Small Business Participation, Subcontracting Plan, and Key Personnel Resumes) L.6 Volume 3: Price (no page limitation) L.7 Proposal Organization

SECTION M - Evaluation Criteria M.0 Provisions M.1 Past Performance Volume 1 M.2 Technical Volume 2 M.2.1 Technical Approach M.3 Price Volume 3

4/74

SECTION B - CLIN SCHEDULE

B.1 Services to be provided

The principal purpose of this performance-based contract is to provide a ‘Single Pane of Glass’, otherwise known as ‘Unified User Interface’, able to highlight pertinent data from facility management systems to help bring to the surface information for a bigger picture view. The users will still be able to ‘deep dive’ into individual systems, but this tool provides the opportunity to streamline the experience and get a high-level overview of performance.

B.2 CONTRACT LINE-ITEM NUMBERS (CLIN) & PRICING SCHEDULE

Each performance milestone will be paid a Firm Fixed Price (FFP) price upon completion of each task. Other than recurring maintenance, invoice payments are performance-based payments tied to negotiated milestones.

GSA is required to track spending for the emerging and sustainable technologies appropriation it received under the Inflation Reduction Act of 2022 (IRA).

BASE PERIOD XX JULY 2024 to XX JULY 2025

CLIN Description of Supplies or Services QT Y

UNIT UNIT

PRICE

AMOUNT

0001 IRA Emerging & Sustainable (E&S) Technologies - performance based-payment per milestone schedule

1 LOT

0002 IRA Emerging & Sustainable (E&S) Technologies - on demand training modules

1 LOT

0003 IRA Emerging & Sustainable (E&S) Technologies - Maintenance and support

- software updates, platform, and server health

2 MO

0005 DATA (Not Separately Priced) NOT SEPARATELY PRICED

Total Base Year XX JULY 2024 to XX JULY 2025

5/74

OPTION PERIOD ONE XX JULY 2025 to XX JULY 2026

CLIN Description of Supplies or Services QTY UNIT UNIT

PRICE

AMOUNT

1001 IRA Emerging & Sustainable (E&S) Technologies - performance based-payment per milestone schedule

1 LOT

1002 IRA Emerging & Sustainable (E&S) Technologies - on demand training modules

1 LOT

1003 IRA Emerging & Sustainable (E&S) Technologies Maintenance and support -software updates, platform, and server health

12 MO

1004 IRA Emerging & Sustainable (E&S) Technologies Other Direct Costs (Travel)

NOT TO EXCEED

(NTE)

$20,000.00

1005 DATA (Not Separately Priced) NOT SEPARATELY PRICED

1006 OPTIONAL SERVICE: Additional sites (additional buildings) Prepriced: loaded price per integration hour (NTE)

1 LOT NTE Completed before final

RFP

release

Total Option Year One XX JULY 2025 to XX JULY 2026

OPTION PERIOD TWO XX JULY 2026 to XX JULY 2027

PRICE

AMOUNT

2001 IRA Emerging & Sustainable (E&S) Technologies - performance based-payment per milestone schedule

1 LOT

2002 IRA Emerging & Sustainable (E&S) Technologies - on demand training modules

1 LOT

2003 IRA Emerging & Sustainable (E&S) Technologies Maintenance and support -software updates, platform, and server health

12 MO

6/74

2004 IRA Emerging & Sustainable (E&S) Technologies Other Direct Costs (Travel)

NOT TO EXCEED $20,000.00

2005 DATA (Not Separately Priced) NOT SEPARATELY PRICED

2006 OPTIONAL SERVICE: Additional sites (additional buildings) Prepriced: loaded price per integration hour (NTE)

1 LOT NTE Completed before final

RFP

Total Option Year Two XX JULY 2026 to XX JULY 2027

OPTION PERIOD THREE XX JULY 2027 to XX JULY 2028

PRICE

AMOUNT

3001 Performance based-payment per milestone schedule

1 LOT

3002 On-Demand training modules 1 LOT

3003 Maintenance and support - software updates, platform, and server health

12 MO

3004 Other Direct Costs (Travel) NOT TO EXCEED $20,000.00

3005 DATA (Not Separately Priced) NOT SEPARATELY PRICED

3006 OPTIONAL SERVICE: Additional sites (additional buildings) Prepriced: loaded price per integration hour (NTE)

1 LOT NTE Completed before final

RFP

Total Option Year Three XX JULY 2027 to XX JULY 2028

OPTION PERIOD FOUR XX JULY 2028 to XX JULY 2029

PRICE

AMOUNT

4001 Performance based-payment per milestone schedule

1 LOT

4002 On-Demand training modules 1 LOT

7/74

4003 Maintenance and support - software updates, platform, and server health

12 MO

4004 Other Direct Costs (Travel) NOT TO EXCEED $20,000.00

4005 DATA (Not Separately Priced) NOT SEPARATELY PRICED

4006 OPTIONAL SERVICE: Additional sites (additional buildings) Prepriced: loaded price per integration hour (NTE)

1 LOT NTE Completed before final

RFP

Total Option Year Four XX JULY 2028 to XX JULY 2029

TOTAL CONTRACT PRICE (BASE PLUS FOUR (4) OPTION YEARS):

8/74

SECTION C - Description/Specifications/Statement of Objectives

C.1 Purpose and Background In order to improve asset management, increase operational efficiencies, and reduce energy waste, the General Services Administration (GSA), in support of the Public Buildings Service, Office of Facility Management (OFM), is seeking a Unified User Interface (UUI) solution to integrate, converge, and view data from various operational technologies (OT) for remote control and monitoring of facility equipment and systems.

Traditionally, various building OT systems (e.g. access control, building automation system (BAS), lighting, computerized maintenance management system (CMMS), energy management, metering, etc.) have been siloed from each other. GSA is seeking to unify aspects of these building OT systems by integrating them to a centralized platform to orchestrate integrated sequences of operation (ISOO).

ISOOs allow data in one system or platform to permit an action to occur in another. This Use Case is to develop a platform that pulls the data from the disparate OT systems and enterprise solutions, improving the ease with which facility members are able to access information and make data-driven decisions. The integration and convergence of various systems and ISOOs improves the efficiency and experience of the building. A UUI will be implemented for the monitoring, supervision, and OT control from a centralized location without a dependency on the end user knowing the disparate system(s) nuances.

Example Capabilities:

● Allow technicians to train on a singular building management and control graphics platform

● Act as an orchestration engine between disparate OT systems

● Streamline the most important and influential insights from various operational and enterprise solutions into one platform.

● Preference will be placed on a UUI solution that will enable users with elevated rights to independently self-configure reports, Key Performance Indicators (KPIs), trends, graphics, etc. without the need for additional custom programming or heavy involvement or licensing requirements from the vendor or provider.

The purpose of this work is to install and construct IRA-funded emerging and sustainable technology (E&ST) scope items. IRA-funded E&ST scope items shall be constructed, installed, and certified as complete and operable.

C.2 Scope The contractor shall provide an on-premise, government site-hosted, enterprise-wide unified user interface solution for operational technologies and all support for the configuration, implementation, operation, maintenance and performance of the solution.

The solution should begin with the contractor's industry-tested commercial-off-the-shelf (COTS) product to minimize costs and schedule risks associated with developmental work. The vendor solution shall meet performance standards and availability described in the vendor’s quote, shall be integrated with other Information Technology (IT) systems, shall be operated and maintained in accordance with industry best practices

9/74 and Federal guidelines, and shall include a Service Level Agreement (SLA).

The contractor shall coordinate all technical implementation tasks with Government-designated support teams including server, application, network and/or security teams. This task includes the technical support, changes and architectural expertise to maintain the application in compliance with all existing GSA policies and guidelines. Issues that may be discovered through scan, reviews and audits shall be resolved in the timeframes defined by GSA policy. The scope of the resulting task order shall include all products and support services required to deploy, host, license, configure, integrate, enhance, and support as well as train end-users.

No additional onsite hardware or network bridge is to be required to deploy, implement, or operate the UUI solution. Proprietary protocols and naming conventions will also not be acceptable.

C.2.1 Period of Performance

C.2.1.1 The base period of performance is for one year from contract award with four, one-year option periods.

C.2.1.2 The Government envisions three execution phases:

a. Phase 1: Obtain all security approvals to deploy a fully operational, secure, on-premise, unifying platform in GSA with all required connections to source-systems, graphics and views, as well as user administration, training and support for a to-be-agreed-upon initial number of sites within the GSALink portfolio.

b. Phase 2: Iteratively enhance and extend views, functionality, training & support through balance of GSALink sites (approximately 150 sites as of January 2024).

c. Phase 3: Operate & Maintain a high-quality enterprise solution, fully configured, compliant, licensed, and integrated, with tier 1 through tier 3 level support. The contractor is responsible for implementing and managing extension and enhancement of the solution as required by the GSA.

C.3 Objectives

C.3.1 Business Objectives

C.3.1.1 Empower building operator efficiencies with the ability to monitor actionable and key performance insights relevant to their role from disparate operational technologies through a single user interface.

a. The UUI shall serve as the front end and be built upon the existing smart building’s OT solutions and will provide a centralized platform for GSA OT operations and business systems.

b. The OT solution currently includes, but is not limited to : GSALink (SkyFoundry’s

SkySpark) as the database and analytics engine for interval point data, National Computer Maintenance Management System or NCMMS (IBM Maximo), Building Automation Systems (BAS), Advanced Metering Systems (IBM Envizi), Smart

10/74

Sensor platforms, and Project management systems (Kahua). The UUI solution will also provide flexibility to connect to future platforms as required by the Government.

c. The UUI provider shall be responsible for enhancements as goals evolve over the life of the support contract. Enhancements do not include configuration changes, technology changes, security or application patches or actions required to ensure the application remains operational (e.g. maintaining already implemented API connections). As new business needs develop, GSA will seek to leverage the existing platform(s) to meet those needs. GSA will provide detailed plans of how to implement these enhancements for review and approval of the contractor. Once agreement is reached, the contractor shall be responsible for implementing the enhancement(s). The contractor’s design approval is critical as they are responsible for the GSALink platform health and availability.

d. UUI views, rights, and insights are to be relevant to the role of the user.

There are approximately 500 active users in GSAlink, all of which will require access to the UUI solution. The GSA estimates a minimum of five (5) user roles with distinct reporting needs, system rights, and privileges defined by their portfolio scope. Contract awardee shall refine these in collaboration with GSA upon successful award and provide flexibility to add additional roles needed. The initial proposed user roles are:

- Facility Manager - site level role

- Operations and Maintenance - site level role

- Regional Director

- Energy Manager

- Superuser

- Additional roles as needed, not yet defined

Example insights that shall be required, as source systems are available and identified by the Government, include:

- Capability to monitor equipment schedules

- Occupancy density

- Environmental metrics (energy usage intensity, greenhouse gas emissions)

- Digital signage content

- Planned and corrective work order SLAs, schedules, and requirements

- OFM KPIs

e. Portfolio, building, and/or equipment level graphics on the UUI shall be interactive to support editing of content (e.g. write back to BAS schedule or update a work order from within the UUI ) on a case-by-case basis and have redirect capability to the source system(s) of record (e.g. the BAS or NCMMS).

Typical BAS systems across the national portfolio include, but are not limited to :

Niagara, Johnson Controls, Siemens, Honeywell, others. At a minimum, provide write capability from the UUI for:

- BAS (read and write)

1. Schedules

2. Zone Temperature Setpoints

11/74

3. Overrides

- NCMMS (read and write capability) - Update work order from UUI (e.g.

reassign a work order, edit date, add log comment, change priority)

- Additional future applications as needed (read and write capability)

f. UUI shall enable hoteling and/or third party event-based scheduling software to push (write) individual occupancy schedules down to BAS controllers to provide appropriate space conditioning as needed (e.g. meeting room schedule maintained in Google Calendar can provide current schedules at a more granular level than global building level schedule maintained in the BAS).

C.3.1.2 Equip building operators and managers with insights supportive of GSA goals for energy savings, emission reductions, and the extension of useful life of mechanical assets.

a. Beyond KPI summaries, the UUI shall visually indicate elevated priority of opportunities for corrective measures that support GSA-wide operational goals.

Example of such insights to visually emphasize might be:

- Display equipment summaries identifying zones impacting primary equipment, such as identifying which air handling units (AHUs) drive chiller operation or which zones drive AHU operation.

- To alert a site-level user when time, temperature, and equipment status are approaching those observed during past peak kW demand with correlations to Energy Usage Intensity (EUI) and GreenHouse Gas (GHG) emission impacts.

C.3.1.3 Provide facility operations and management teams standardized view(s) of mechanical and energy systems including statuses, settings, faults and alarms.

a. Equipment graphics are to be standardized. Equipment graphics should include digital video recorder (DVR)-style replay of BAS graphics utilizing fault detection and diagnostics (FDD) trend historian data to visualize heating ventilation and air conditioning (HVAC) equipment status, temperatures, setpoints, damper and valve positions during alarms and faults. Enable floor plan level replay for identifying zones driving larger primary equipment. Equipment graphics shall provide “chalkboard” capability for operators to communicate current equipment status and challenges (Note: drive in hand, waiting on variable frequency drive

(VFD).

C.3.1.4 Identify opportunities for improved tenant comfort levels and indoor environmental quality (IEQ).

a. The UUI shall utilize thermographic floor plans. These graphics will visually identify zones with heating and cooling setpoints outside acceptable ranges.

Zones unable to meet heating or cooling setpoints, especially zones farthest from the desired temperature, should be visually prioritized. The capability for visual alerts of high CO2, high humidity, high volatile organic compounds

12/74

(VOCs), or particulate matter are required where the requisite sensing is available. Parent/child relationship to avoid overwhelming the summaries with constant alerts from a single sensor or zone is strongly desired.

C.3.2 Technical Objectives

The following are existing enterprise solutions required for integration and the minimum requirements contractors must expand upon in their contractor provided Performance Work Statement (PWS):

C.3.2.1 Existing Enterprise Solutions

a. FDD Analytics – GSALink (SkyFoundry’s SkySpark)

- Total Estimated Cost Impacts

- Comfort Tracking

- Autocorrection Monitoring

- High Performance Sequences

- Equipment Demand Events

- Weather

b. BAS - Standardized Equipment Graphics, Schedules, Alarms – 80 plus building monitoring and control systems (BMC)

- Equipment Lockouts

- Operating Hours

- Setpoints

- Thermographic Floor Plans

c. NCMMS - Work Orders & Program Management Asset Attributes Key

Performance Indicators (KPIs) – IBM Maximo (current NCMMS application)

- Approaching SLAs Work Plan

- PM Dates/Demand

- Equipment metadata

d. Metering Utilities Sustainability Energy (MUSE) - Meter Status, Demand

Events, and Utility Trends – source is IBM Envizi EMIS

- Meter Connectivity

- Peaks

- Billing

- Profile

- Electric Vehicle Supply Equipment (EVSE) Chargers

e. Construction Management Software (Kahua) - Tracking design and construction projects

- Milestone Dates

13/74

C.3.2.2 Initial UUI Work Breakdown Structure (WBS) - (chart below)

C.3.2.3 UUI Work Breakdown Structure Dataflow - (chart below)

14/74

C.3.2.4 : Existing Technology Architecture (chart below)

C.3.3 Training

C.3.3.1 User Acceptance Training (UAT) The contractor shall provide ongoing demos, training, and support throughout the configuration process to enable GSA team members and designated testers to fully test the system and configurations.

C.3.3.2 Training Plan The contractor shall also provide a training plan detailing the materials, resources, and timeline to deliver Go-Live Training to GSA team members and user support contractors. All training is expected to be virtual and include live training, on-demand recordings, and provide accessible material and resources.

C.3.3.3 Go-Live Training & Train-the-Trainer Go-Live Training will cover the initial launch of the solution, offered in a minimum of 3 sessions and will provide a format that allows for the submission of questions and answers. The Train-the-Trainer will be a separate training for GSA subject matter experts (SMEs) to develop in-house training to provide training for those new to the UUI solution. The contractor shall plan for a minimum of three (3) Train-the-Trainer sessions that will be available to 3-5 individuals from each of GSA’s 11 regions.

15/74

C.4 Constraints This section lists laws, rules, regulations, standards, technology limitations, and other constraints that the service and/or service provider must adhere to or work under.

C.4.1 Security Requirements The contractor shall comply with all GSA IT security requirements.

C.4.1.1 The contractor shall comply with GSA on-premise security for an on-premise solution hosted by GSA. Internal on-premise information systems reside in GSA facilities and may connect to the GSA network. Internal systems are operated on behalf of GSA. Please reference IT Security Requirements for on-premise solutions in the UUI Security Requirements-Mobile document attached.

C.4.1.2 The contractor shall comply with Mobile application requirements if a mobile application solution is being proposed. A mobile application, most commonly referred to as a mobile app, is a type of application software designed to run on a mobile device, such as a smartphone or tablet computer. GSA IT Security Requirements for Mobile Applications are contained in the UUI Security Requirements-Mobile document attached.

C.4.1.3 The solution is expected to meet moderate security requirements.

GSA Tailoring of NIST 800-53 Controls. The GSA Control Tailoring Workbook contains GSA defined values for NIST SP 800-53 Security and Privacy Controls. The workbook is attached in Section J. not publicly available; contact the contracting officer who will coordinate with the GSA Office of the Chief Information Security Officer to determine if it can be made available. However, tThe NIST 800-53 control information can be referenced here: https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final.

C.4.2 IT Requirements

The contractor shall propose and adhere to industry standard level of support services including proposing response rates to GSA requests.

C.4.2.1 The contractor shall ensure all software is fully supported through the lifecycle of the proposed solution and is listed on the GSA Enterprise Architecture IT Standards List. This list is internal to the GSA network and vendors will not be able to access it until after award. The requirements are listed below:

a. The contractor shall identify and track all software components and associated end-of-life dates, including third-party software, used with the proposed solution as part of the system inventory.

b. As soon as the end-of-life upgrade is identified, the contractor shall notify the government of hotfixes or end-of-life dates to the operating system, middleware, https://docs.google.com/document/d/15vro-zdtMyn-shcf7UL3oHQhupDVjEUbkYujQBPbZp4/edit#heading%3Dh.32hioqz https://docs.google.com/document/d/15vro-zdtMyn-shcf7UL3oHQhupDVjEUbkYujQBPbZp4/edit#heading%3Dh.2fk6b3p https://docs.google.com/document/d/15vro-zdtMyn-shcf7UL3oHQhupDVjEUbkYujQBPbZp4/edit#heading%3Dh.2fk6b3p https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final

16/74 database, third-party components or technical platforms (including patches) that impact the security posture or usability of the application.

c. The contractor shall replace or upgrade unsupported information system components prior to the end-of-life date or provide documented justification for the continued use of supported components.

d. The contractor shall ensure all software used is approved via the GSA Enterprise Architecture IT Standard.

The IT Standards program is governed by GSA’s policy. The GSA Office of the Chief Technology Officer (OCTO) manages the process and review of IT Standards and approves changes to the IT Standards Profile and approves any software used to process, store, or transmit GSA's data. Proposed technologies must go through the Software Approval Process, which begins with a security and accessibility assessments at a minimum, and is then reviewed by the OCTO for alignment with Federal Information Technology Reform Act (FITARA) and GSA's Digital Strategy. The Building Technologies Technical Reference Guide (BTTRG) references the approval process and other information applicable to this requirement. PBS’ Technology Policy is also applicable to this requirement.

C.4.2.2 The contractor shall follow the Public Building Information Technology Services (PB-ITS) Enterprise Quality Program (EQP) and all GSA IT Security Policies.

This includes assessing vendor-developed code against requirements, validating code quality, and providing the necessary artifacts and deliverables when submitting application releases.

a. See (https://www.it-cisq.org/standards/code-quality-standards/) for guidance on how to measure, evaluate and improve software. Particular areas of importance are Performance Efficiency, Reliability, Maintainability, and Security.

b. PB-ITS reviews software code quality for security and resilience. PB-ITS references the Consortium for IT Software Quality (CISQ) (https://www.it-cisq.org/standards/code-quality-standards/) for guidance on how to measure, evaluate and improve software. Particular areas of importance are Performance Efficiency, Reliability, Maintainability and Security. PB-ITS currently uses CAST Application Intelligence Platform (AIP) and CAST Highlight to evaluate code quality for on premise non-COTS solutions.

C.4.2.3 The Contractor shall use GSA’s provided release management software, which is currently Jira.

C.4.2.4 The Contractor shall manage all releases through the DevSecOps process and shall follow the GSA DevSecOps Guide and all other PB-ITS and GSA policies, procedures, and guidance for releases. The contractor shall adhere to industry best practice-defined by DevSecOps processes using PB-ITS tools.

https://www.gsa.gov/about-us/newsroom/congressional-testimony/the-federal-information-technology-reform-acts-fitara-role-in-reducing-it-acquisition-risk-part-ii-measuring-agencies-fitara-implementation https://www.gsa.gov/technology/government-it-initiatives/digital-strategy https://www.it-cisq.org/standards/code-quality-standards/ https://www.it-cisq.org/standards/code-quality-standards/ https://tech.gsa.gov/guides/dev_sec_ops_guide/

17/74

a. The contractor shall be responsible for providing its own development environment.

b. PB-ITS Applications Operations provides two lower environments for on-premise solutions, Integration (INT) and Test (TST), and one Production (PRD) environment. Contractor can upload and manage code to INT. GSA’s PB-ITS Applications Operations team manages the TST and PRD environments; no elevated contractor access is permitted.

c. Contractors shall submit code to a lower, non-production environment (INT) for scheduled testing and security scanning. The government PM reviews testing to determine acceptance. PB-ITS Application Operations pushes code to test environments, then production environments.

d. PB-ITS has implemented DevOps processes and tools for the automation of application installations. This solution is a collection of open source and standards-based tools currently using Jira as the front end for project managers and developers with Jenkins and Ansible for automation. The current tool set includes Jira, Jenkins, Ansible, Gitlab, Docker, Invicti, Artifactory, and Alfresco.

The level of access of these tools will vary. PB-ITS is the admin of the tools and will be responsible for certain pieces/processes as a part of the deployment process. There is an access request process for these tools and vendors will be granted access with the appropriate level of access.

Note: Database = DB, Operating System = OS

18/74

e. The contractor shall provide artifacts to ensure a compliant build. Those currently include Source Code, Executables and Build and TestScripts. All build scripts must be supported by Ansible, Bash or Powershell.

f. The contractor shall provide installation instructions, documentation, and data dictionary updates.

C.4.2.5 The contractor shall ensure all systems, software, equipment or their replacements are supported by Internet Protocol Version 6 (IPv6) by the year 2025 as mandated in the Office of Management and Budget (OMB) memorandum, M-21-07, “Completing the Transition to Internet Protocol Version 6 (IPv6),” dated November 19, 2020.

C.4.2.6 The contractor shall propose dedicated support for Tier II and Tier III support and provide industry-standard SLAs.

C.4.2.7 The contractor shall use GSA’s single-sign on and multi-factor authentication (MFA) protocols to securely access the UUI solution.

a. The contractor shall support configurable integrations with GSA operated, and government-wide operated, identity and authentication / single sign on services.

The contractor shall support Security Assertion Markup Language (SAML) 2.0 and/or OpenID Connect integrations. GSA will identify and provide the service(s) upon award.

b. The contractor shall support multi-factor authentication for GSA administrator users (privileged/administrative users) through integrations with a GSA managed identity and authentication service. The contractor shall support SAML 2.0 and/or OpenID Connect integrations. GSA will identify and provide the service(s) upon award.

c. The contractor shall support SCIM (System for Cross-domain Identity Management) or a vendor secured representational state transfer application programming interface RESTful (API) for GSA to create and manage GSA end user accounts. This includes creation, assignment of roles, and termination.

d. The contractor information system/IT solution shall support role-based access controls to distinguish between end users needing access to different levels of data (e.g., end users only needing access to non-sensitive data and end users needing access to sensitive data).

C.4.2.8 The contractor shall use human-centered design practices to create a product that is easy for the government to use. This contract requires the delivery of functional products in a manner that enhances our end-users’ experience. The contractor shall:

a. Provide expert guidance and direction on user experience (UX) strategy, research, and design.

https://www.whitehouse.gov/wp-content/uploads/2020/11/M-21-07.pdf https://www.whitehouse.gov/wp-content/uploads/2020/11/M-21-07.pdf https://www.whitehouse.gov/wp-content/uploads/2020/11/M-21-07.pdf

19/74

b. Articulate a user-centered vision for the future of the product, and establish mechanisms to measure progress.

c. Optimize products for mobile-first operation, with all solutions being equally usable on mobile and desktop.

d. Incorporate robust accessibility principles into design, and testing for all products to deliver high-quality digital experiences to users of assistive devices.

e. Follow plain language content guidelines (https://www.plainlanguage.gov/).

f. Ensure content has been optimized for Search Engine Optimization (SEO) to make information easier to find.

g. Use data and analytics along with user research to drive product decisions.

h. Create and maintain documentation for all activities, recommendations, and decisions that captures value to users as defined by them from user feedback.

i. At the start of work on a new or existing product/project, the contractor shall participate in and conduct a product kick-off meeting with GSA’s Public Building Service / Office of Facility Management / Facility Technology and Innovation / Smart Building personnel and other designated stakeholders.

j. Facilitate discovery activities, such as research with business stakeholders, an assessment of current related features, a content review, an information architecture review, an accessibility review, a business process review; and collection of any available data and analytics.

k. Conduct periodic user research to understand customers’ and users’ goals, needs, journeys, and pain points with respect to the product.

l. Conduct frequent user research to validate and iterate on all aspects of the product. This may include usability testing, content-focused testing, card sorting, tree testing, observations, etc.

m. For public-facing websites, leverage Digital Analytics Program (DAP) data in determining user goals, needs, and behaviors, or, if not available, include DAP code in the product.

n. Create a User Research Plan and Finding Summary for each study, which shall include a documentation of research questions, hypotheses, methodology, recruiting needs, synthesis, and next steps, and where applicable house findings with the code base.

o. Apply research insights to define product functionality and to continually improve content, information architecture, design, functionality, and accessibility.

p. Align with GSA’s style guide for content. This may include developing relationships with GSA subject matter experts, creating a governance and approvals process, maintaining content style guide, planning for iteratively testing content with customers and users.

q. Write and edit content using plain language best practices. Includes labeling, form questions, short guidance, long-form guidance, etc. Collaborate with GSA subject matter experts to translate complex language into user-friendly language.

https://www.plainlanguage.gov/

20/74

r. Design interfaces such as page layout, content design, menus and navigation, information architecture, and user flows; mobile and desktop wireframes and high-fidelity interactive prototypes.

s. Create designs that use the U.S. Web Design System and, when applicable, align with GSA’s design system.

t. Conduct usability and user acceptance testing on new designs, features, content, navigational elements, etc. to ensure a quality end-user experience.

u. Employ inclusive design, accessibility, and user experience best practices with all research, content, and design activities to foster a quality experience for customers and users.

v. Create a plan for continuous user research and validation that can continue to guide product direction post-contract.

C.4.2.9 Inclusive Design/Accessibility/Section 508 Compliance: The contractor shall ensure that the product is designed to serve a diverse user population. This includes, but is not limited to, users with physical and cognitive disabilities (who may use a variety of assistive technology), low English proficiency, low English literacy, different cultural backgrounds, a lack of access to fast internet connection, and/or whose primary access is with a mobile device. The contractor shall comply with Section 508 of the Rehabilitation Act of 1973 (29 U.S.C. 794d). In accordance with Federal Register, 25 APR 01, FAC 97-27, Executive Order 12866, Part 2.101, FAR Part 7.103, FAR Part 10.001, FAR Part 11.002, FAR Part 12.202, FAR Part 39.000 & 39.2, access to electronic and information technology (EIT) by individuals with disabilities must be compliant with the accessibility standards at 36 CFR 1194, unless it falls under one of the exceptions noted in FAR 39.204. Additional information and requirements related to 508 Compliance can be located http://www.section508.gov.

The contractor shall conduct automated and manual accessibility tests using common screen readers and diagnostic tools; GSA may need access to these tests to ensure full 508 compliance. At a minimum, this should be done before each launch, major update, or new release. The contractor shall also create and maintain documentation for all related activities, recommendations, and decisions.

C.4.2.10 Integration/Data The contractor shall integrate their proposed UUI solution with BAS, GSALink (SkyFoundry’s SkySpark), NCMMS (IBM Maximo), Muse (IBM Envizi) and Kahua. (see UUI Work Breakdown Structure Dataflow image above)

Capabilities of Existing Systems BAS Kahua GSALink NCMMS MUSE

Connectors ✔ ✔ ✔ ✔ ✔ http://www.section508.gov/

21/74

Flexible Connection

✔ N/A ✔ ✔ N/A

Bulk Data Transfer ✔ ✔ ✔ ✔ ✔

Bi-directional Data Feed

Synchronous Communication

✔ Unknown ✔ ✔ N/A

Asynchronous Communication

✔ Unknown ✔ ✔ N/A

Monitor Transactions

✔ ✔ ✔ ✔ N/A

Send Task N/A ✔ ✔ ✔ N/A

Receive Tasks TBD ✔ ✔ ✔ N/A

a. Building Automation System (BAS) is a diverse set of inventory.

- Currently integrates with GSALink (via SkySpark); sparks are event triggers to identify equipment operating outside of expected thresholds

- Connectors: flexible (open system)

b. Kahua is a construction management software solution

- Dashboards and reporting capability

- Workflow system capable of understanding tasks; Automation is built-in which enables workflows to be completed

- Transaction Monitoring: capable as automation is built-in

- System Limitation: push and pull data via API, no ETL integration capabilities at this time

c. GSALink is a fault detection and diagnostic platform

- It integrates building automation systems (BAS) data via Skyspark

- If something breaks a rule, it sets off a “spark” and a notification is sent to the building manager through NCMMS

- GSALink uses Skyspark for Analytics (data capture, trending rules) and NCMMS is used for reporting

- When faults are detected in GSALink they come through NCMMS

- Connectors: flexible; open system/BACnet

- GSALink leverages IBM Maximo to establish a connection with NCMMS via

REST API

- Capable of synchronous/asynchronous communication and monitoring transactions

22/74

d. NCMMS (IBM Maximo) is a computerized maintenance management system

(CMMS),

- Hosted on vendor managed Amazon Web Services (AWS) but accessible through GSA Firewall

- Transaction Monitoring: system is capable of performing preventative actions+listener+auto generating tickets

- Connectors: manual when not API; automatic orchestration possible

- Flexibility of Connectors: capability exists to add connectors however not implemented

- Synchronous Communication: capable but may need additional assessment;

- Asynchronous Communication: extract, transform, and load (ETL) translator for 2-way communication capable; ability to initiate workflows, can integrate with MUSE

- Send Task or Work Orders w/ building information modeling (BIM) : future integration

- Bulk Data Transfer: data ingested via web services call, comma separated values (CSV) format, ETL, REST Interfaces

e. MUSE (IBM ENVZI) is SaaS reporting and analytics dashboard; it only ingests data and analyzes the data

- Connectors: application programming interface / secure file transfer protocol

(API/SFTP)

- Information is received every 15 min from utilities and daily for other systems outside GSA

- Data push via API, data pull via SFTP, no other connectors supported

- Business intelligence (BI) connection is only to share information with users getting reports from BI

- Fully cloud service

- Internal GSA users only, no external users

f. Additional Platforms as GSA needs evolve (see Phase 3 requirements above)

C.4.3 HSPD-12 Compliance The contractor shall comply with agency personal identity verification procedures identified in the contract that implement Homeland Security Presidential Directive 12 (HSPD-12), Office of Management and Budget (OMB) guidance M-05-24, and Federal Information Processing Standards Publication (FIPS PUB) Number 201.

For any contractor personnel performing work under this contract who will require access to GSA IT applications, systems or data, the contractor shall comply with the HSPD-12 security clearance process. This means first obtaining a fingerprint clearance, which typically takes 3-4 weeks. At that point, the Authorizing Official (AO) can grant limited access on a case-by-case basis. Next, a preliminary favorable adjudication of their Tier 2S clearance level must be received. This process can take 1 to 2 months.

Only when a full Tier 2S adjudication is received will full access be granted. This process usually takes 4 to 8 months, though it could take as many as 12 months. Higher levels of clearance may also be required depending on the level of trust required to perform specific duties or perform a specific task.

23/74

Contractors shall not be granted access to a GSA facility or to any GSA IT system prior to a favorable response to the fingerprint portion of this background investigation. An individual contractor’s failure to return satisfactory results from the background investigation shall result in immediate removal of that contractor.

The Contracting Officer, through the Contracting Officer’s Representative (COR) or GSA Program Manager (PM) will ensure that a completed Contractor Information Worksheet (CIW) for each Applicant is forwarded to the Federal Protective Service (FPS) in accordance with the Personnel Security Contractor Fitness Fact Sheet and ADM 2181.1 Homeland Security Presidential Directive-12 Personal Identity Verification (PIV) and Credentialing Policy, and Background Investigations for Contractor Employees dated March 18, 2020. FPS will then contact each Applicant with instructions for completing required forms and releases for the particular type of personnel investigation requested.

Applicants will not be reinvestigated if a prior favorable adjudication is on file with FPS or GSA, there has been less than a one-year break in service, and the position is identified at the same or lower risk level.

Once a favorable FBI Criminal History Check (Fingerprint Check) has been returned, Applicants may receive a GSA identity credential, a PIV card, (if required) and initial access to GSA information systems. The HSPD-12 Handbook contains procedures for obtaining identity credentials and access to GSA information systems as well as procedures to be followed in case of unfavorable adjudications.

The contractor shall be required to fund their employees’ security clearance and background investigation processes. The Government will not provide funding for these requirements.

HSPD-12 requirements do not apply to contractor IT applications, systems or data.

HSPD-12 applies to all GSA IT systems owned or operated on behalf of GSA.

C.4.4 Government Furnished Equipment/Government Furnished Information Government Furnished Equipment (GFE) including PIV cards or Government Furnished Information (GFI) may be provided to the contractor during the period of performance of the contract, under the following conditions (see CIO 2160.4A Provisioning IT resources policy described below):

C.4.4.1 Use of the GFE and GFI is for the sole purpose of completing the requirements of this contract.

C.4.4.