MAS - Ctis, Inc. - 47QTCA20D008E

Proven Solutions. Improved Results.

www.ctisinc.com | Tel: (301) 948-3033 | Fax: (301) 948-2242 Page 1 of 61

GENERAL SERVICES ADMINISTRATION

Federal Supply Service

Authorized Federal Supply Schedule Price List

On-line access to contract ordering information, terms and conditions, up-to-date pricing, and the option to create an electronic delivery order are available through GSA Advantage! ®, a menu-driven database system. The INTERNET address GSA Advantage! ® is: GSAAdvantage.gov.

SCHEDULE TITLE: Multiple Award Schedule FSC: MAS

SPECIAL ITEM NUMER 518210C - CLOUD AND CLOUD-RELATED IT PROFESSIONAL SERVICES

FSC/PSC Class D305 IT Cloud Computing Services

SPECIAL ITEM NUMBER 54151S - INFORMATION TECHNOLOGY (IT) PROFESSIONAL SERVICES

FPDS Code D301 IT Facility Operation and Maintenance FPDS Code D302 IT Systems Development Services FPDS Code D306 IT Systems Analysis Services FPDS Code D307 Automated Information Systems Design and Integration Services FPDS Code D308 Programming Services FPDS Code D310 IT Backup and Security Services FPDS Code D311 IT Data Conversion Services FPDS Code D313 Computer Aided Design/Computer Aided Manufacturing (CAD/CAM) Services FPDS Code D316 IT Network Management Services FPDS Code D317 Creation/Retrieval of IT Related Automated News Services, Data Services, or Other Information Services (All other information services belong under Schedule 76) FPDS Code D399 Other Information Technology Services, Not Elsewhere Classified

SPECIAL ITEM NUMBER 54151HEAL – HEALTH INFORMATION TECHNOLOGY (IT) SERVICES

FSC/PSC Class D399 IT AND TELECOM Other Data Transmission Services, Not elsewhere classified

SPECIAL ITEM NUMBER OLM – ORDER-LEVEL MATERIALS (OLMs)

Contract Number: 47QTCA20D008E Contract Period: 4/2/2020-4/1/2030

For more information on ordering from Federal Supply Schedules click on the FSS Schedules button at www.fss.gsa.gov

Price list current as of Modification #PO-0015 effective April 2, 2025

CTIS, Inc.

One Research Court, Suite 200

Rockville, MD 20850 Tel: 301‐948‐3033 Fax: 301‐948‐2242 www.ctisinc.com Business size: Small Business http://www.fss.gsa.gov/ http://www.ctisinc.com/ www.ctisinc.com | Tel: (301) 948-3033 | Fax: (301) 948-2242 Page 2 of 61

TABLE OF CONTENTS

INFORMATION FOR ORDERING OFFICES APPLICABLE TO ALL SPECIAL ITEM NUMBERS

TERMS AND CONDITIONS APPLICABLE TO INFORMATION TECHNOLOGY (IT) PROFESSIONAL SERVICES

(SPECIAL ITEM NUMBER 54151S)

TERMS AND CONDITIONS APPLICABLE TO HEALTH INFORMATION TECHNOLOGY (IT) SERVICES (SPECIAL

ITEM NUMBER 54151HEAL)

TERMS AND CONDITIONS APPLICABLE TO CLOUD COMPUTING PRODUCTS AND CLOUD RELATED IT

PROFESSIONAL SERVICES (SPECIAL ITEM NUMBER 518210C)

LABOR CATEGORY DESCRIPTIONS FOR INFORMATION TECHNOLOGY PROFESSIONAL SERVICES (SPECIAL

ITEM NUMBER 54151S)

LABOR CATEGORY DESCRIPTIONS FOR HEALTH INFORMATION TECHNOLOGY SERVICES (SPECIAL ITEM

NUMBER 54151HEAL)

LABOR CATEGORY DESCRIPTIONS FOR CLOUD RELATED IT PROFESSIONAL SERVICES (SPECIAL ITEM

NUMBER 518210C)

LABOR CATEGORY RATES FOR INFORMATION TECHNOLOGY PROFESSIONAL SERVICES (SPECIAL ITEM

NUMBER 54151S)

LABOR CATEGORY RATES FOR HEALTH INFORMATION TECHNOLOGY SERVICES (SPECIAL ITEM NUMBER

54151HEAL)

LABOR CATEGORY RATES FOR CLOUD RELATED IT PROFESSIONAL SERVICES (SPECIAL ITEM NUMBER 518210C)

PRICE LIST FOR CLOUD SERVICES (SPECIAL ITEM NUMBER 518210C)

www.ctisinc.com | Tel: (301) 948-3033 | Fax: (301) 948-2242 Page 3 of 61

CUSTOMER INFORMATION

1a. Awarded Special Item Numbers (SIN):

SIN Description 54151S Information Technology Professional Services

54151HEAL Health Information Technology Services 518210C Cloud and Cloud-Related IT Professional Services

OLM Order-Level Materials (OLMs)

1b. Lowest Priced Model Number and Price: Approved GSA Pricing

1c. Contractor hourly rates, a description of all corresponding commercial job titles, experience, functional responsibility and education for those types of employees or subcontractors:

Refer to page 19 for IT Professional Services Labor Category Descriptions and page 56 for hourly rates Refer to page 35 for Health IT Services Labor Category Descriptions and page 58 for hourly rates Refer to page 49 for Cloud IT Professional Services Labor Category Descriptions and page 60 for hourly rates

2. Maximum Order: $500,000.00

3. Minimum Order: $100.00

4. Geographic Coverage (delivery Area): Domestic, within 50 United States and U.S territories

5. Point(s) of production (city, county, and state or foreign country): Maryland

6. Discount from list prices or statement of net price: Prices shown are NET Prices; Basic Discounts have been deducted. CTIS reserves the right to offer additional discounts in cases where the value of an order exceeds the Maximum Order Limit or when business conditions warrant

7. Quantity discounts: None

8. Prompt payment terms: Net 30 days

9a. Notification that Government purchase cards are accepted up to the micro-purchase threshold: Yes

9b. Notification whether Government purchase cards are accepted or not accepted above the micro-purchase threshold: Yes

10. Foreign items (list items by country of origin): Not applicable

11a. Time of Delivery (Contractor insert number of days): As negotiated on the task order level.

11b. Expedited Delivery: As negotiated on the task order level.

11c. Overnight and 2-day delivery: As negotiated on the task order level.

11d. Urgent Requirements: As negotiated on the task order level.

INFORMATION FOR ORDERING OFFICES APPLICABLE TO ALL

SPECIAL ITEM NUMBERS

www.ctisinc.com | Tel: (301) 948-3033 | Fax: (301) 948-2242 Page 4 of 61

12. F.O.B Points(s): Destination

13a. Ordering Address(es):

FOR MAILED ORDERS: FOR FAXED ORDERS:

GSA Sales Administrator GSA Sales Administrator CTIS, Inc. CTIS, Inc.

One Research Court, Suite 200 (301) 948-2242 Rockville, MD 20850

13b. Ordering procedures: For supplies and services, the ordering procedures, information on Blanket Purchase

Agreements (BPA’s) are found in Federal Acquisition Regulation (FAR) 8.405-3.

14. Payment address(es):

Accounts Receivable CTIS, Inc.

One Research Court, Suite 200 Rockville, MD 20850

15. Warranty provision.: Contractor’s standard commercial warranty.

16. Export Packing Charges (if applicable): N/A

17. Terms and conditions of Government purchase card acceptance (any thresholds above the micro-purchase level): Contact Contractor

18. Terms and conditions of rental, maintenance, and repair (if applicable): N/A

19. Terms and conditions of installation (if applicable): N/A

20. Terms and conditions of repair parts indicating date of parts price lists and any discounts from list prices (if applicable): N/A

20a. Terms and conditions for any other services (if applicable): N/A

21. List of service and distribution points (if applicable): N/A

22. List of participating dealers (if applicable): N/A

23. Preventive maintenance (if applicable): N/A

24a. Environmental attributes, e.g., recycled content, energy efficiency, and/or reduced pollutants: N/A

24b. If applicable, indicate that Section 508 compliance information is available on Electronic and Information

Technology (EIT) supplies and services and show where full details can be found (e.g. contactor’s website or other location.) The EIT standards can be found at: www.Section508.gov/.

25. Data Universal Numbering System (DUNS) number: 606270015 , UEI #JKR6NFJ3BX37

26. Notification regarding registration in the System for Award Management (SAM) Database: Registered www.ctisinc.com | Tel: (301) 948-3033 | Fax: (301) 948-2242 Page 5 of 61

1. SCOPE

a. The prices, terms and conditions stated under Special Item Number 54151S Information Technology Professional Services apply exclusively to IT Professional Services within the scope of this Information Technology Schedule.

b. The Contractor shall provide services at the Contractor’s facility and/or at the ordering activity location, as agreed to by the Contractor and the ordering activity.

2. PERFORMANCE INCENTIVES I-FSS-60 Performance Incentives (April 2000)

a. Performance incentives may be agreed upon between the Contractor and the ordering activity on individual fixed price orders or Blanket Purchase Agreements under this contract.

b. The ordering activity must establish a maximum performance incentive price for these services and/or total solutions on individual orders or Blanket Purchase Agreements.

c. Incentives should be designed to relate results achieved by the contractor to specified targets. To the maximum extent practicable, ordering activities shall consider establishing incentives where performance is critical to the ordering activity’s mission and incentives are likely to motivate the contractor. Incentives shall be based on objectively measurable tasks.

3. ORDER

a. Agencies may use written orders, EDI orders, blanket purchase agreements, individual purchase orders, or task orders for ordering services under this contract. Blanket Purchase Agreements shall not extend beyond the end of the contract period; all services and delivery shall be made, and the contract terms and conditions shall continue in effect until the completion of the order. Orders for tasks which extend beyond the fiscal year for which funds are available shall include FAR 52.232-19 (Deviation – May 2003) Availability of Funds for the Next Fiscal Year. The purchase order shall specify the availability of funds and the period for which funds are available.

b. All task orders are subject to the terms and conditions of the contract. In the event of conflict between a task order and the contract, the contract will take precedence.

4. PERFORMANCE OF SERVICES

a. The Contractor shall commence performance of services on the date agreed to by the Contractor and the ordering activity.

b. The Contractor agrees to render services only during normal working hours, unless otherwise agreed to by the Contractor and the ordering activity.

c. The ordering activity should include the criteria for satisfactory completion for each task in the Statement of Work or Delivery Order. Services shall be completed in a good and workmanlike manner.

d. Any Contractor travel required in the performance of IT Services must comply with the Federal Travel Regulation or Joint Travel Regulations, as applicable, in effect on the date(s) the travel is performed.

Established Federal Government per diem rates will apply to all Contractor travel. Contractors cannot use GSA city pair contracts.

5. STOP-WORK ORDER (FAR 52.242-15) (AUG 1989)

(a) The Contracting Officer may, at any time, by written order to the Contractor, require the Contractor to stop all, or any part, of the work called for by this contract for a period of 90 days after the order is delivered to the Contractor, and for any further period to which the parties may agree. The order shall be specifically identified as a stop-work order issued under this clause. Upon receipt of the order, the Contractor shall

TERMS AND CONDITIONS APPLICABLE TO INFORMATION TECHNOLOGY (IT) PROFESSIONAL SERVICES

(SPECIAL ITEM NUMBER 54151S)

www.ctisinc.com | Tel: (301) 948-3033 | Fax: (301) 948-2242 Page 6 of 61 immediately comply with its terms and take all reasonable steps to minimize the incurrence of costs allocable to the work covered by the order during the period of work stoppage. Within a period of 90 days after a stop-work is delivered to the Contractor, or within any extension of that period to which the parties shall have agreed, the Contracting Officer shall either-

(1) Cancel the stop-work order; or

(2) Terminate the work covered by the order as provided in the Default, or the Termination for Convenience of the Government, clause of this contract.

(b) If a stop-work order issued under this clause is canceled or the period of the order or any extension thereof expires, the Contractor shall resume work. The Contracting Officer shall make an equitable adjustment in the delivery schedule or contract price, or both, and the contract shall be modified, in writing, accordingly, if-

(1) The stop-work order results in an increase in the time required for, or in the Contractor's cost properly allocable to, the performance of any part of this contract; and

(2) The Contractor asserts its right to the adjustment within 30 days after the end of the period of work stoppage; provided, that, if the Contracting Officer decides the facts justify the action, the Contracting Officer may receive and act upon the claim submitted at any time before final payment under this contract.

(c) If a stop-work order is not canceled and the work covered by the order is terminated for the convenience of the Government, the Contracting Officer shall allow reasonable costs resulting from the stop-work order in arriving at the termination settlement.

(d) If a stop-work order is not canceled and the work covered by the order is terminated for default, the Contracting Officer shall allow, by equitable adjustment or otherwise, reasonable costs resulting from the stop-work order.

6. INSPECTION OF SERVICES

The Inspection of Services–Fixed Price (AUG 1996) (Deviation – May 2003) clause at FAR 52.246-4 applies to firm-fixed price orders placed under this contract. The Inspection–Time-and-Materials and Labor-Hour (MAY 2001) (Deviation – May 2003) clause at FAR 52.246-6 applies to time-and-materials and labor-hour orders placed under this contract.

7. RESPONSIBILITIES OF THE CONTRACTOR

The Contractor shall comply with all laws, ordinances, and regulations (Federal, State, City, or otherwise) covering work of this character. If the end product of a task order is software, then FAR 52.227-14 (Dec 2007) Rights in Data – General, may apply.

8. RESPONSIBILITIES OF THE ORDERING ACTIVITY

Subject to security regulations, the ordering activity shall permit Contractor access to all facilities necessary to perform the requisite IT Professional Services.

9. INDEPENDENT CONTRACTOR

All IT Professional Services performed by the Contractor under the terms of this contract shall be as an independent Contractor, and not as an agent or employee of the ordering activity.

10. ORGANIZATIONAL CONFLICTS OF INTEREST

a. Definitions.

“Contractor” means the person, firm, unincorporated association, joint venture, partnership, or corporation that is a party to this contract.

www.ctisinc.com | Tel: (301) 948-3033 | Fax: (301) 948-2242 Page 7 of 61

“Contractor and its affiliates” and “Contractor or its affiliates” refers to the Contractor, its chief executives, directors, officers, subsidiaries, affiliates, subcontractors at any tier, and consultants and any joint venture involving the Contractor, any entity into or with which the Contractor subsequently merges or affiliates, or any other successor or assignee of the Contractor.

An “Organizational conflict of interest” exists when the nature of the work to be performed under a proposed ordering activity contract, without some restriction on ordering activities by the Contractor and its affiliates, may either (i) result in an unfair competitive advantage to the Contractor or its affiliates or (ii) impair the Contractor’s or its affiliates’ objectivity in performing contract work.

b. To avoid an organizational or financial conflict of interest and to avoid prejudicing the best interests of the ordering activity, ordering activities may place restrictions on the Contractors, its affiliates, chief executives, directors, subsidiaries, and subcontractors at any tier when placing orders against schedule contracts. Such restrictions shall be consistent with FAR 9.505 and shall be designed to avoid, neutralize, or mitigate organizational conflicts of interest that might otherwise exist in situations related to individual orders placed against the schedule contract. Examples of situations, which may require restrictions, are provided at FAR 9.508.

11. INVOICES

The Contractor, upon completion of the work ordered, shall submit invoices for IT Professional services.

Progress payments may be authorized by the ordering activity on individual orders if appropriate. Progress payments shall be based upon completion of defined milestones or interim products. Invoices shall be submitted monthly for recurring services performed during the preceding month.

12. PAYMENTS

For firm-fixed price orders the ordering activity shall pay the Contractor, upon submission of proper invoices or vouchers, the prices stipulated in this contract for service rendered and accepted. Progress payments shall be made only when authorized by the order. For time-and-materials orders, the Payments under Time-and-Materials and Labor-Hour Contracts at FAR 52.212-4 (MAR 2009) (ALTERNATE I – OCT 2008) (DEVIATION I – FEB 2007) applies to time-and-materials orders placed under this contract. For labor-hour orders, the Payment under Time-and-Materials and Labor-Hour Contracts at FAR 52.212-4 (MAR 2009) (ALTERNATE I – OCT 2008) (DEVIATION I – FEB 2007) applies to labor-hour orders placed under this contract.

52.216-31(Feb 2007) Time-and-Materials/Labor-Hour Proposal Requirements—Commercial Item Acquisition.

As prescribed in 16.601(e)(3), insert the following provision:

(a) The Government contemplates award of a Time-and-Materials or Labor-Hour type of contract resulting from this solicitation.

(b) The offeror must specify fixed hourly rates in its offer that include wages, overhead, general, and administrative expenses, and profit. The offeror must specify whether the fixed hourly rate for each labor category applies to labor performed by—

(1) The offeror;

(2) Subcontractors; and/or

(3) Divisions, subsidiaries, or affiliates of the offeror under a common control.

13. RESUMES

Resumes shall be provided to the GSA Contracting Officer or the user ordering activity upon request.

14. INCIDENTAL SUPPORT COSTS

Incidental support costs are available outside the scope of this contract. The costs will be negotiated separately with the ordering activity in accordance with the guidelines set forth in the FAR.

www.ctisinc.com | Tel: (301) 948-3033 | Fax: (301) 948-2242 Page 8 of 61

15. APPROVAL OF SUBCONTRACTS

The ordering activity may require that the Contractor receive, from the ordering activity's Contracting Officer, written consent before placing any subcontract for furnishing any of the work called for in a task order.

16. DESCRIPTION OF IT PROFESSIONAL SERVICES AND PRICING

See page 19 for SIN 54151S Labor Category Descriptions and page 56 for Labor Category Rates

17. EDUCATION SUBSTITUTION LANGUAGE

Degree may be substituted as follows:

ASSOCIATE DEGREE = 2 YEARS EXPERIENCE

BACHELORS DEGREE = 4 YEARS EXPERIENCE

MASTERS DEGREE = 6 YEARS EXPERIENCE

PHD = 8 YEARS EXPERIENCE

Education may be substituted as follows:

2 YEARS EXPERIENCE = ASSOCIATE DEGREE

4 YEARS EXPERIENCE = BACHELORS DEGREE

6 YEARS EXPERIENCE = MASTERS DEGREE

8 YEARS EXPERIENCE = PHD

www.ctisinc.com | Tel: (301) 948-3033 | Fax: (301) 948-2242 Page 9 of 61

a. The labor categories, prices, terms and conditions stated under Special Item Number 54151HEAL Health Information Technology Services apply exclusively to Health IT Services within the scope of this Information Technology Schedule.

b. This SIN is limited to Health IT Services only. Software and hardware products are out of scope. Hardware and software can be acquired through different Special Item Numbers on GSA MAS (e.g. 511210).

c. This SIN provides ordering activities with access to Health IT services.

d. Health IT Services provided under this SIN shall comply with all Healthcare certifications and industry standards as applicable at the task order level.

e. The Contractor shall provide services at the Contractor’s facility and/or at the ordering activity location, as agreed to by the Contractor and the ordering activity.

2. ORDER

a. Agencies may use written orders, Electronic Data Interchange (EDI) orders, Blanket Purchase Agreements, individual purchase orders, or task orders for ordering services under this contract. Blanket Purchase Agreements shall not extend beyond the end of the contract period; all services and delivery shall be made, and the contract terms and conditions shall continue in effect until the completion of the order. Orders for tasks which extend beyond the fiscal year for which funds are available shall include FAR 52.232-19 (Deviation – May 2003) Availability of Funds for the Next Fiscal Year. The purchase order shall specify the availability of funds and the period for which funds are available.

b. All task orders are subject to the terms and conditions of the contract. In the event of conflict between a task order and the contract, the contract will take precedence.

3. PERFORMANCE OF SERVICES

a. The Contractor shall commence performance of services on the date agreed to by the Contractor and the ordering activity. All Contracts will be fully funded.

b. The Contractor agrees to render services only during normal working hours, unless otherwise agreed to by the Contractor and the ordering activity.

c. The ordering activity should include the criteria for satisfactory completion for each task in the Statement of Work or Delivery Order. Services shall be completed in a good and workmanlike manner.

d. Any Contractor travel required in the performance of Health IT Services must comply with the Federal Travel Regulation or Joint Travel Regulations, as applicable, in effect on the date(s) the travel is performed.

Established Federal Government per diem rates will apply to all Contractor travel. Contractors cannot use GSA city pair contracts. All travel will be agreed upon with the client prior to the Contractor’s travel.

4. INSPECTION OF SERVICES

In accordance 552.212-4 CONTRACT TERMS AND CONDITIONS–COMMERCIAL ITEMS (JAN 2017) (DEVIATION – FEB 2007)(DEVIATION - FEB 2018) for Firm-Fixed Price orders; or GSAR 552.212-4 CONTRACT TERMS AND CONDITIONS- COMMERCIAL ITEMS (JAN 2017) (DEVIATION - FEB 2018) (ALTERNATE I - JAN 2017) (DEVIATION -FEB 2007) for Time-and-Materials and Labor-Hour Contracts orders placed under this contract.

RESPONSIBILITIES OF THE CONTRACTOR

TERMS AND CONDITIONS APPLICABLE TO HEALTH INFORMATION TECHNOLOGY (IT) SERVICES

(SPECIAL ITEM NUMBER 54151HEAL)

www.ctisinc.com | Tel: (301) 948-3033 | Fax: (301) 948-2242 Page 10 of 61

The Contractor shall comply with all laws, ordinances, and regulations (Federal, State, City, or otherwise) covering work of this character. If the end product of a task order is software, then FAR 52.227-14 (Dec 2007) Rights in Data

– General, may apply.

5. RESPONSIBILITIES OF THE ORDERING ACTIVITY

Subject to security regulations, the ordering activity shall permit Contractor access to all facilities necessary to perform the requisite Health IT Services.

6. INDEPENDENT CONTRACTOR

All Health IT Services performed by the Contractor under the terms of this contract shall be as an independent Contractor, and not as an agent or employee of the ordering activity.

7. ORGANIZATIONAL CONFLICTS OF INTEREST

a. Definitions.

“Contractor” means the person, firm, unincorporated association, joint venture, partnership, or corporation that is a party to this contract.

“Contractor and its affiliates” and “Contractor or its affiliates” refers to the Contractor, its chief executives, directors, officers, subsidiaries, affiliates, subcontractors at any tier, and consultants and any joint venture involving the Contractor, any entity into or with which the Contractor subsequently merges or affiliates, or any other successor or assignee of the Contractor.

An “Organizational conflict of interest” exists when the nature of the work to be performed under a proposed ordering activity contract, without some restriction on ordering activities by the Contractor and its affiliates, may either (i) result in an unfair competitive advantage to the Contractor or its affiliates or

(ii) impair the Contractor’s or its affiliates’ objectivity in performing contract work.

b. To avoid an organizational or financial conflict of interest and to avoid prejudicing the best interests of the ordering activity, ordering activities may place restrictions on the Contractors, its affiliates, chief executives, directors, subsidiaries and subcontractors at any tier when placing orders against schedule contracts. Such restrictions shall be consistent with FAR 9.505 and shall be designed to avoid, neutralize, or mitigate organizational conflicts of interest that might otherwise exist in situations related to individual orders placed against the schedule contract. Examples of situations, which may require restrictions, are provided at FAR 9.508.

8. INVOICES

The Contractor, upon completion of the work ordered, shall submit invoices for Health IT Professional services.

Progress payments may be authorized by the ordering activity on individual orders if appropriate. Progress payments shall be based upon completion of defined milestones or interim products. Invoices shall be submitted monthly for recurring services performed during the preceding month.

9. RESUMES

Resumes shall be provided to the GSA Contracting Officer or the user ordering activity upon request.

10. INCIDENTAL SUPPORT COSTS

Incidental support costs are not considered part of the scope of this contract. The costs will be negotiated separately with the ordering activity in accordance with the guidelines set forth in the FAR.

11. APPROVAL OF SUBCONTRACTS

The ordering activity may require that the Contractor receive, from the ordering activity's Contracting Officer, written consent before placing any subcontract for furnishing any of the work called for in a task order.

12. DESCRIPTION OF HEALTH IT SERVICES AND PRICING

See page 35 for SIN 54151HEAL Labor Category Descriptions and page 58 for Labor Category Rates www.ctisinc.com | Tel: (301) 948-3033 | Fax: (301) 948-2242 Page 11 of 61

13. EDUCATION SUBSTITUTION LANGUAGE

Degree may be substituted as follows:

ASSOCIATE DEGREE = 2 YEARS EXPERIENCE

BACHELORS DEGREE = 4 YEARS EXPERIENCE

4 YEARS EXPERIENCE = BACHELORS DEGREE

www.ctisinc.com | Tel: (301) 948-3033 | Fax: (301) 948-2242 Page 12 of 61

The prices, terms and conditions stated under Special Item Number (SIN) 518210C Cloud Computing Services apply exclusively to Cloud Computing Services within the scope of this Information Technology Schedule.

This SIN provides ordering activities with access to technical services that run in cloud environments and meet the NIST Definition of Cloud Computing Essential Characteristics. Services relating to or impinging on cloud that do not meet all NIST essential characteristics should be listed in other SINs.

The scope of this SIN is limited to cloud capabilities provided entirely as a service. Hardware, software and other artifacts supporting the physical construction of a private or other cloud are out of scope for this SIN. Currently, an Ordering Activity can procure the hardware and software needed to build on premise cloud functionality, through combining different services on other GSA MAS SINs (e.g. 54151S).

2. DESCRIPTION OF CLOUD COMPUTING SERVICES

CTIS managed Cloud IaaS & PaaS Solution is a custom solution that is built on industry Cloud service providers including AWS Gov, AWS, Azure etc. CTIS has the technical expertise and experience to provision managed IaaS/PaaS solutions/environments for government customers. In addition, CTIS also promotes a hybrid solution that takes advantages of the best combination of security and cost for provisioning, managing, and funding IaaS/PaaS solutions. Our solutions, designs and governance models focus on a high availability, high reliability, multi-tiered and modular solutions. CTIS implements and follows comprehensive support of Disaster Recovery and COOP services to its clients through implementation of Server, System and Application Virtualization services. CTIS implements a continuous monitoring program to monitor the established security controls and detect deviations.

Preventive maintenance processes are key to avoiding unplanned outages. CTIS provides system image backup solutions that provide point-in-time backup and recovery options possible while providing a consistent and predictable Disaster Recovery. The monitoring capability was designed across dashboards that ranged from Telecom, Network, IT Security, Systems (windows/non-windows), storage, etc. Highly available virtual infrastructure allows for automatic failover to alternate resources when failures are detected, thereby providing the ability for rapid and unassisted site-level disaster recoveries to meet the business requirements at a lower total cost of ownership. Systematic updates, cycling and servicing of hardware and applications is key to successful infrastructure. CTIS provide application hosting services in virtualized environment with redundant power and cooling infrastructure to ensure 99.99% uptime. CTIS' services provides excellent value in Hybrid environments -on-premise and cloud together with cost optimization, license compliance, and FISMA compliance. See page 60 for Price List of CTIS Cloud Services.

3. RESPONSIBILITIES OF THE CONTRACTOR

The Contractor shall comply with all laws, ordinances, and regulations (Federal, State, City, or otherwise) covering work of this character.

a. Acceptance Testing

Any required Acceptance Test Plans and Procedures shall be negotiated by the Ordering Activity at task order level.

The Contractor shall perform acceptance testing of the systems for Ordering Activity approval in accordance with the approved test procedures.

b. Training

If training is provided commercially the Contractor shall provide normal commercial installation, operation, maintenance, and engineering interface training on the system. Contractor is responsible for indicating if there are separate training charges.

c. Information Assurance/Security Requirements

TERMS AND CONDITIONS APPLICABLE TO CLOUD COMPUTING PRODUCTS AND CLOUD RELATED IT

PROFESSIONAL SERVICES (SPECIAL ITEM NUMBER 518210C)

www.ctisinc.com | Tel: (301) 948-3033 | Fax: (301) 948-2242 Page 13 of 61

The contractor shall meet information assurance/security requirements in accordance with the Ordering Activity requirements at the Task Order level.

d. Related Professional Services

The Contractor is responsible for working with the Ordering Activity to identify related professional services and any other services available on other SINs that may be associated with deploying a complete cloud solution. Any additional substantial and ongoing professional services related to the offering such as integration, migration, and other cloud professional services are out of scope for this SIN.

e. Performance of Cloud Computing Services

The Contractor shall respond to Ordering Activity requirements at the Task Order level with proposed capabilities to Ordering Activity performance specifications or indicate that only standard specifications are offered. In all cases the Contractor shall clearly indicate standard service levels, performance and scale capabilities. The Contractor shall provide appropriate cloud computing services on the date and to the extent and scope agreed to by the Contractor and the Ordering Activity.

f. Reporting

The Contractor shall respond to Ordering Activity requirements and specify general reporting capabilities available for the Ordering Activity to verify performance, cost and availability. In accordance with commercial practices, the Contractor may furnish the Ordering Activity/user with a monthly summary Ordering Activity report.

4. RESPONSIBILITIES OF THE ORDERING ACTIVITY

The Ordering Activity is responsible for indicating the cloud computing services requirements unique to the Ordering Activity. Additional requirements should not contradict existing SIN or GSA MAS Terms and Conditions.

Ordering Activities should include (as applicable) Terms & Conditions to address Pricing, Security, Data Ownership, Geographic Restrictions, Privacy, SLAs, etc.

Cloud services typically operate under a shared responsibility model, with some responsibilities assigned to the Cloud Service Provider (CSP), some assigned to the Ordering Activity, and others shared between the two. The distribution of responsibilities will vary between providers and across service models. Ordering activities should engage with CSPs to fully understand and evaluate the shared responsibility model proposed. Federal Risk and Authorization Management Program (FedRAMP) documentation will be helpful regarding the security aspects of shared responsibilities, but operational aspects may require additional discussion with the provider.

a. Ordering Activity Information Assurance/Security Requirements Guidance

i. The Ordering Activity is responsible for ensuring to the maximum extent practicable that each requirement issued is in compliance with the Federal Information Security Management Act (FISMA) as applicable.

ii. The Ordering Activity shall assign a required impact level for confidentiality, integrity and availability (CIA) prior to issuing the initial statement of work.2 The Contractor must be capable of meeting at least the minimum security requirements assigned against a low‐impact information system in each CIA assessment area (per FIPS 200) and must detail the FISMA capabilities of the system in each of CIA assessment area.

iii. Agency level FISMA certification, accreditation, and evaluation activities are the responsibility of the Ordering Activity. The Ordering Activity reserves the right to independently evaluate, audit, and verify the FISMA compliance for any proposed or awarded Cloud Computing Services. Per Federal Information Processing Standards Publication 199 & 200 (FIPS 199, “Standards for Security Categorization of Federal Information and Information Systems”) (FIPS 200, “Minimum Security Requirements for Federal Information and Information Systems”)

iv. The Ordering Activity has final responsibility for assessing the FedRAMP status of the service, complying with and making a risk‐based decision to grant an Authorization to Operate (ATO) for the cloud computing service, and continuous monitoring. A memorandum issued by the Office of Management www.ctisinc.com | Tel: (301) 948-3033 | Fax: (301) 948-2242 Page 14 of 61 and Budget (OMB) on Dec 8, 2011 outlines the responsibilities of Executive departments and agencies in the context of FedRAMP compliance.

v. Ordering activities are responsible for determining any additional information assurance and security related requirements based on the nature of the application and relevant mandates.

b. Deployment Model

If a particular deployment model (Private, Public, Community, or Hybrid) is desired, Ordering Activities are responsible for identifying the desired model(s). Alternately, Ordering Activities could identify requirements and assess Contractor responses to determine the most appropriate deployment model(s).

c. Delivery Schedule

The Ordering Activity shall specify the delivery schedule as part of the initial requirement. The Delivery Schedule options are found in Information for Ordering Activities Applicable to All Special Item Numbers.

d. Interoperability

Ordering Activities are responsible for identifying interoperability requirements. Ordering Activities should clearly delineate requirements for API implementation and standards conformance.

e. Performance of Cloud Computing Services

The Ordering Activity should clearly indicate any custom minimum service levels, performance and scale requirements as part of the initial requirement.

f. Reporting

The Ordering Activity should clearly indicate any cost, performance or availability reporting as part of the initial requirement.

g. Privacy

The Ordering Activity should specify the privacy characteristics of their service and engage with the Contractor to determine if the cloud service is capable of meeting Ordering Activity requirements. For example, a requirement could be requiring assurance that the service is capable of safeguarding Personally Identifiable Information (PII), in accordance with NIST SP 800‐1224 and OMB memos M‐06‐165 and M‐3 MEMORANDUM FOR CHIEF INFORMATION OFFICERS: Security Authorization of Information Systems in Cloud Computing Environments.

December 8, 2011. 4 NIST SP 800‐122, “Guide to Protecting the Confidentiality of Personally Identifiable Information (PII)” 5 OMB memo M‐06‐16: Protection of Sensitive Agency Information http://www.whitehouse.gov/sites/default/files/omb/memoranda/fy2006/m06‐16.pdf

An Ordering Activity will determine what data elements constitute PII according to OMB Policy, NIST Guidance and Ordering Activity policy.

h. Accessibility

The Ordering Activity should specify the accessibility characteristics of their service and engage with the Contractor to determine the cloud service is capable of meeting Ordering Activity requirements. For example, a requirement could require assurance that the service is capable of providing accessibility based on Section 508 of the Rehabilitation Act of 1973 (29 U.S.C. 794d).

i. Geographic Requirements

Ordering activities are responsible for specifying any geographic requirements and engaging with the Contractor to determine that the cloud services offered have the capabilities to meet geographic requirements for all anticipated task orders. Common geographic concerns could include whether service data, processes and related artifacts can be confined on request to the United States and its territories, or the continental United States (CONUS).

j. Data Ownership and Retrieval and Intellectual Property www.ctisinc.com | Tel: (301) 948-3033 | Fax: (301) 948-2242 Page 15 of 61

Intellectual property rights are not typically transferred in a cloud model. In general, CSPs retain ownership of the Intellectual Property (IP) underlying their services and the customer retains ownership of its intellectual property.

The CSP gives the customer a license to use the cloud services for the duration of the contract without transferring rights. The government retains ownership of the IP and data they bring to the customized use of the service as spelled out in the FAR and related materials.

General considerations of data ownership and retrieval are covered under the terms of GSA MAS and the FAR and other laws, ordinances, and regulations (Federal, State, City, or otherwise). Because of considerations arising from cloud shared responsibility models, ordering activities should engage with the Contractor to develop more cloud‐ specific understandings of the boundaries between data owned by the government and that owned by the cloud service provider, and the specific terms of data retrieval.

In all cases, the Ordering Activity should enter into an agreement with a clear and enforceable understanding of the boundaries between government and cloud service provider data, and the form, format and mode of delivery for each kind of data belonging to the government.

The Ordering Activity should expect that the Contractor shall transfer data to the government at the government's request at any time, and in all cases when the service or order is terminated for any reason, by means, in formats and within a scope clearly understood at the initiation of the service. Example cases that might require clarification include status and mode of delivery for:

• Configuration information created by the government and affecting the government’s use of the cloud provider’s service.

• Virtual machine configurations created by the government but operating on the cloud provider’s service.

6 OMB Memo M‐07‐16: Safeguarding Against and Responding to the Breach of Personally Identifiable Information http://www.whitehouse.gov/sites/default/files/omb/memoranda/fy2007/m07‐ 16.pdf

• Profile, configuration and other metadata used to configure SaaS application services or PaaS platform services.

The key is to determine in advance the ownership of classes of data and the means by which Government owned data can be returned to the Government.

k. Service Location Distribution

The Ordering Activity should determine requirements for continuity of operations and performance and engage with the Contractor to ensure that cloud services have adequate service location distribution to meet anticipated requirements. Typical concerns include ensuring that: • Physical locations underlying the cloud are numerous enough to provide continuity of operations and geographically separate enough to avoid an anticipated single point of failure within the scope of anticipated emergency events. • Service endpoints for the cloud are able to meet anticipated performance requirements in terms of geographic proximity to service requestors.

Note that cloud providers may address concerns in the form of minimum distance between service locations, general regions where service locations are available, etc.

l. Related Professional Services

Ordering activities should engage with Contractors to discuss the availability of limited assistance with initial setup, training and access to the services that may be available through this SIN.

Any additional substantial and ongoing professional services related to the offering such as integration, migration, and other cloud professional services are out of scope for this SIN. Ordering activities should consult the appropriate GSA professional services schedule.

5. GUIDANCE FOR CONTRACTORS

Contractor-specific definitions of cloud computing characteristics and models or significant variances from the NIST essential characteristics or models are discouraged and will not be considered in the scope of this SIN or accepted in response to Factors for Evaluation. The only applicable cloud characteristics, service model/subcategories and deployment models for this SIN will be drawn from the NIST 800-145 special publication. Services qualifying for www.ctisinc.com | Tel: (301) 948-3033 | Fax: (301) 948-2242 Page 16 of 61 listing as cloud computing services (i.e. IaaS, etc.) under this SIN must substantially satisfy the essential characteristics of cloud computing as documented in the NIST Definition of Cloud Computing SP 800-1457.

Contractors must select deployment models corresponding to each way the service can be deployed. Multiple deployment model designations for a single cloud service are permitted but at least one deployment model must be selected.

6. INFORMATION PERTAINING TO CLOUD RELATED IT PROFESSIONAL SERVICES

CTIS is offering both Cloud Services (i.e. IaaS, etc.) and Cloud Related IT Professional Services under this SIN.

a. SCOPE OF 518210C Cloud Related IT Professional Services

(1) The labor categories, prices, terms and conditions stated under Special Item Numbers 518210C Cloud Services and Related IT Professional Services apply exclusively to this SIN within the scope of this Information Technology Schedule. It is anticipated that the relevant IT Professional Services for this SIN (518210C) are related to the following: assessing cloud solutions, preparing for cloud solutions, refactoring legacy solutions for cloud migration, migrating legacy or other systems to cloud solutions, DevOps, developing new cloud based applications and providing management/governance for cloud solutions. Contractors may propose other types of relevant professional services as long as they are specifically designed to work within and/or support the types of cloud product services described in SIN 518210C.

(2) Cloud Related IT Professional Services provided under this SIN shall comply with all certifications and industry standards as applicable pertaining to the type of services as specified by ordering agency.

(3) The Contractor shall provide Cloud Related IT Professional Services at the Contractor’s facility and/or at the ordering activity location, as agreed to by the Contractor and the ordering activity.

b. ORDER

(1) Agencies may use written orders, Electronic Data Interchange (EDI) orders, Blanket Purchase Agreements, individual purchase orders, or task orders for ordering services under this contract. Blanket Purchase Agreements shall not extend beyond the end of the contract period; all services and delivery shall be made, and the contract terms and conditions shall continue in effect until the completion of the order.

Orders for tasks which extend beyond the fiscal year for which funds are available shall include FAR 52.232-19 (Deviation – May 2003) Availability of Funds for the Next Fiscal Year. The order shall specify the availability of funds and the period for which funds are available.

(2) All task orders are subject to the terms and conditions of the contract. In the event of conflict between a task order and the contract, the contract will take precedence.

c. PERFORMANCE OF SERVICES

(1) The Contractor shall commence performance of Cloud Related IT Professional Services on the date agreed to by the Contractor and the ordering activity.

(2) The Contractor agrees to render Cloud Related IT Professional Services during normal working hours, unless otherwise agreed to by the Contractor and the ordering activity.

(3) The ordering activity should include the criteria for satisfactory completion for each task in the Statement of Work or Delivery Order. Cloud Related IT Professional Services shall be completed in a good and workmanlike manner.

(4) Any Contractor travel required in the performance of Cloud Related IT Professional Services must comply with the Federal Travel Regulation or Joint Travel Regulations, as applicable, in effect on the date(s) the travel is performed. Established Federal Government per diem rates will apply to all Contractor travel.

Contractors cannot use GSA city pair contracts. All travel will be agreed upon with the client prior to the Contractor’s travel.

www.ctisinc.com | Tel: (301) 948-3033 | Fax: (301) 948-2242 Page 17 of 61

d. INSPECTION OF SERVICES

Inspection of services is in accordance with 552.212-4 CONTRACT TERMS AND CONDITIONS–COMMERCIAL ITEMS (JAN 2017) (DEVIATION – FEB 2007) (DEVIATION - FEB 2018) for Firm-Fixed Price orders; or GSAR 552.212-4 CONTRACT TERMS AND CONDITIONS-COMMERCIAL ITEMS (JAN 2017) (DEVIATION - FEB 2018) (ALTERNATE I - JAN 2017) (DEVIATION - FEB 2007) for Time-and-Materials and Labor- Hour Contracts orders placed under this contract.

e. RESPONSIBILITIES OF THE CONTRACTOR

The Contractor shall comply with all laws, ordinances, and regulations (Federal, State, City, or otherwise) covering work of this character. If the end product of a task order is software, then FAR 52.227-14 (MAY 2014) Rights in Data – General, may apply.

The Contractor shall comply with contract clause (52.204-21) to the Federal Acquisition Regulation (FAR) for the basic safeguarding of contractor information systems that process, store, or transmit Federal data received by the contract in performance of the contract. This includes contract documents and all information generated in the performance of the contract.

f. RESPONSIBILITIES OF THE ORDERING ACTIVITY

Subject to the ordering activity’s security regulations, the ordering activity shall permit Contractor access to all facilities necessary to perform the requisite Cloud Computing IT Professional Services.

g. INDEPENDENT CONTRACTOR

All Cloud Computing IT Professional Services performed by the Contractor under the terms of this contract shall be as an independent Contractor, and not as an agent or employee of the ordering activity.

h. ORGANIZATIONAL CONFLICTS OF INTEREST

(1) Definitions.

“Contractor” means the person, firm, unincorporated association, joint venture, partnership, or corporation that is a party to this contract.

“Contractor and its affiliates” and “Contractor or its affiliates” refers to the Contractor, its chief executives, directors, officers, subsidiaries, affiliates, subcontractors at any tier, and consultants and any joint venture involving the Contractor, any entity into or with which the Contractor subsequently merges or affiliates, or any other successor or assignee of the Contractor.

An “Organizational conflict of interest” exists when the nature of the work to be performed under a proposed ordering activity contract, without some restriction on ordering activities by the Contractor and its affiliates, may either (i) result in an unfair competitive advantage to the Contractor or its affiliates or (ii) impair the Contractor’s or its affiliates’ objectivity in performing contract work.

To avoid an organizational or financial conflict of interest and to avoid prejudicing the best interests of the ordering activity, ordering activities may place restrictions on the Contractors, its affiliates, chief executives, directors, subsidiaries and subcontractors at any tier when placing orders against schedule contracts. Such restrictions shall be consistent with FAR 9.505 and shall be designed to avoid, neutralize, or mitigate organizational conflicts of interest that might otherwise exist in situations related to individual orders placed against the schedule contract. Examples of situations, which may require restrictions, are provided at FAR 9.508.

i. INVOICES

The Contractor, upon completion of the work ordered, shall submit invoices for Cloud Computing IT Professional Services. Progress payments may be authorized by the ordering activity on individual orders if appropriate.

Progress payments shall be based upon completion of defined milestones or interim products. Invoices shall be submitted monthly for recurring IT professional services performed during the preceding month.

j. PAYMENTS www.ctisinc.com | Tel: (301) 948-3033 | Fax: (301) 948-2242 Page 18 of 61

The ordering activity shall pay the Contractor upon submission of proper invoices or vouchers, the prices stipulated in this contract for service rendered and accepted. Progress payments shall be made only when authorized by the order. Payments shall be made in accordance with:

For orders that are NOT time-and-materials/labor hours (fixed price applicable).

• GSAR 552.212-4 CONTRACT TERMS AND CONDITIONS–COMMERCIAL ITEMS (JAN 2017) (DEVIATION – FEB

2007) (DEVIATION - FEB 2018)

For orders that are time-and-materials/labor hours.

• GSAR 552.212-4 CONTRACT TERMS AND CONDITIONS-COMMERCIAL ITEMS (JAN 2017) (DEVIATION - FEB

2018) (ALTERNATE I - JAN 2017) (DEVIATION - FEB 2007)

FAR 52.216-31 (Feb 2007) Time-and Materials/Labor-Hour Proposal Requirements— Commercial Item Acquisition.

As prescribed in 16.601(f)(3), insert the following provision:

(1) The Government…