70RTAC24R00000006 Solicitation 021424.pdf

Draft NOSC NCCS Request for Proposal 70RTAC24R00000006

Request for Proposal (RFP) Number 70RTAC24R00000006 for

The Department of Homeland Security (DHS) Headquarters

Office of the Chief Information Officer (OCIO)

DHS Network Operations Security Center (NOSC)

Network, Cloud, and Cyber Services (NCCS)

Office of Procurement Operations

Information Technology Acquisition Center

Part I – The Schedule

Section A: Solicitation/Contract Form

See Solicitation Standard Form 1449.

(End of Section A)

Section B: Supplies or Services and Prices/Costs

B.1 Objective

The objective of this acquisition is to establish a single award, Indefinite Delivery Indefinite Quantity

(IDIQ) contract for the “DHS Network Operations Security Center (NOSC) Network, Cloud, and Cyber

Services (NCCS); however, the Government reserves the right to award more than one IDIQ if the

Government determines it is in its best interest to do so.” The purpose of the NOSC NCCS IDIQ contract is to procure the full range of cybersecurity, network operations, management, and other professional support services described herein for the DHS Headquarters (HQ) Office of the Chief Information Officer

(OCIO), Federal Law Enforcement Training Center (FLETC), and U.S. Customs and Border Protection

(CBP). These services will enable DHS to provide network, cloud platform, system, application, and cybersecurity monitoring and analysis, incident management and coordination, and alert and notification functions in support of the broader DHS information enterprise and to provide other related cybersecurity services. This acquisition seeks to acquire Contractor support that is able to provide qualified, skilled personnel to monitor network health and stability, detect network intrusions, scan networks and systems for vulnerabilities, analyze and assess external threats, detect and eliminate insider threats, respond to cybersecurity incidents, manage and remediate incidents, detect and reverse engineer malware, perform network penetration testing, and assess and disseminate cyber threat intelligence. Contractors shall also provide personnel capable of installing, customizing, integrating, operating, and maintaining cybersecurity and network software tools essential for the successful NOSC and Chief Information

Security Officer Directorate (CISOD) infrastructure and cybersecurity operations. In addition to technical skills, Contractor support must be able to provide personnel with the requisite security clearances (i.e., Secret, Top Secret (TS), Top Secret (TS) Sensitive Compartmented Information (SCI)) when required. The Task Orders issued hereunder will be designed to acquire a broad range of services and solutions, under various contract types, to fulfill the Department’s cybersecurity mission, which is: to prevent, detect, contain, and eradicate cyber threats through monitoring, intrusion detection, and protective security services to DHS information systems including, but not limited to, Trusted Internet

Connections (TICs) to the Internet, Homeland Security Enterprise Network (HSEN) circuits, Points of

Presence or Policy Enforcement Points where HQ and Component networks connect to the HSEN, and subscriber systems and networks. The scope of services under DHS NOSC NCCS is defined in Section

C, Statement of Work. Specific in-scope, requirements will be identified and defined at the Task Order level.

B.2 Task Orders

(a) The contractor shall provide all management, supervision, labor, and materials necessary to perform the DHS NOSC NCCS requirements in accordance with issued task orders. Task Orders may be issued on a Firm Fixed-Price (FFP), Labor-Hour (LH), or Time-and-Materials (T&M) basis, or any combination thereof in accordance with Federal Acquisition Regulation (FAR) Subpart 16.5. Travel may be reimbursed at cost (Cost Reimbursement), in accordance with the Federal Travel Regulations (FTR).

(b) All Task Orders shall be priced in accordance with the pricing set forth in the Government provided Attachment J-2, Pricing Schedule.

(c) The Contractor is not precluded from offering discounts from the prices found in the

Attachment J-2, Pricing Schedule, when preparing its proposals in response to Task Order Requests for

Proposal. Proposed rates for Task Orders shall not exceed the rates established in the IDIQ contract.

B.3 Cost

Contractor personnel may be required to travel to support the requirements of this contract and as stated in individual Task Orders. The Contractor shall, to the maximum extent practicable, minimize overall travel costs by taking advantage of discounted airfare rates available through advance purchase. Charges associated with itinerary changes, and cancellations under nonrefundable airline tickets are reimbursable as long as the changes are driven by the work requirement.

All travel will be reimbursed at cost in accordance with the FTR. The Contractor shall seek written

Government approval (Contracting Officer (CO) or Contracting Officer’s Representative (COR)) at least two (2) weeks in advance of the travel, prior to incurring any costs associated with non-local travel.

The Contractor shall use the federal lodging and per diem allowances in accordance with FAR 31.205-46 and the applicable FTR governing the travel performed directly referable to this contract. The

Government will not reimburse transportation costs in excess of coach class commercially-scheduled air or ground transportation by the most expeditious route.

B.4 Contract Line Item Number (CLIN) Structure

For the purposes of the IDIQ contract, the CLINs are as follows:

CLIN 0001 – Labor (Base Ordering Period)

CLIN 0002 – Materials (Base Ordering Period)

CLIN 0003 – Travel (Base Ordering Period)

CLIN 1001 – Labor (Optional Ordering Period 1)

CLIN 1002 – Materials (Optional Ordering Period 1)

CLIN 1003 – Travel (Optional Ordering Period 1)

CLIN 2001 – Labor (Optional Ordering Period 2)

CLIN 2002 – Materials (Optional Ordering Period 2)

CLIN 2003 – Travel (Optional Ordering Period 2)

CLIN 3001 – Labor (Optional Ordering Period 3)

CLIN 3002 – Materials (Optional Ordering Period 3)

CLIN 3003 – Travel (Optional Ordering Period 3)

CLIN 4001 – Labor (Optional Ordering Period 4)

CLIN 4002 – Materials (Optional Ordering Period 4)

CLIN 4003 – Travel (Optional Ordering Period 4)

The CLIN structure for each Task Order issued under the contract will be established at the time of issuance of the Task Order.

B.5 Minimum Guaranteed Amount/Maximum Ordering Value

The minimum guaranteed award amount for this IDIQ contract is $10,000.00 which will be satisfied at time of contract award. The minimum guaranteed award amount is currently an estimate and subject to change prior to final solicitation release. The Government has no obligation to issue Task Orders to the

Contractor beyond the minimum guaranteed amount. The exercise of any optional ordering period does not re-establish the contract minimum guaranteed amount.

Task Orders may order vastly differing quantities, under a wide variety of services in accordance with

Section C, Statement of Work, in terms of Tasks (see Section 3) and Attachment J-3, Labor Category

Descriptions, but in no event will the cumulative dollar ceiling value of all Task Orders issued exceed

$594,300,044.00 for all years. The cumulative dollar ceiling value is currently an estimate and subject to change prior to final solicitation release.

B.6 Term of Contract

The term of this IDIQ contract will consist of a 12-month base ordering period, with four (4) 12-month optional ordering periods.

Task Orders may be issued with periods of performance of up to 12-months, with up to four (4) 12-month option periods or up to 12-months past the IDIQ contract ordering period, whichever comes first.

B.7 Contract Pricing

All Task Orders issued will be priced in accordance with the Attachment J-2, Pricing Schedule of this contract. The labor rates set forth herein are fully burdened ceiling rates. The fully burdened labor rates include all direct, indirect, and general and administrative costs, and profit (or fee) with providing the required performance at Government and Contractor sites. All hourly rates are based on the Contractor’s

Cost Accounting Standards (CAS) disclosure statement or, if there is no disclosure statement, the

Contractor’s established standard accounting practices. The use of uncompensated overtime is not encouraged. All hourly rates are based on a 40-hour workweek per annum, or in accordance with the

Contractor’s CAS Disclosure Statement.

B.8 Labor Rates

Attachment J-2, Pricing Schedule provides labor categories and fixed hourly labor rates (fully burdened) to be used for Task Orders awarded under this IDIQ contract for labor at Government site(s) and

Contractor site(s) and represents the maximum rates allowable.

B.8.1 Additional Labor Categories

Additional labor categories under Attachment J-2, Pricing Schedule are not anticipated. However, given the nature of IT and in particular cybersecurity, and the duration of this DHS NOSC NCCS contract, emergency or unforeseen circumstances may necessitate the addition of labor categories throughout the ordering period of this IDIQ contract. Additional labor categories may be proposed by the Contractor during the contract performance and shall be determined to be reasonable and necessary to perform the work required and all associated labor rates will be determined to be fair and reasonable by the DHS

NOSC NCCS Contracting Officer (CO) at the IDIQ contract level. The CO shall also perform a scope determination to ensure that the additional labor categories are within the scope of this IDIQ contract before modifying the contract to include those additional labor categories. The addition or deletion of labor categories will be performed on an annual basis on the anniversary date of the IDIQ award.

Additional labor categories may not be added at the Task Order level. Any labor rates invoiced or otherwise charged by the contractor that are not in accordance with the agreed upon labor rates of Section

B of the IDIQ contract may be subject to rejection, at the Task Order level CO’s discretion.

B.9 Labor-Hour and Time-and-Materials Task Orders

The quantity of hours ordered from each labor category will be specified as hours billable at the ceiling rates specified in Attachment J-2, Pricing Schedule, unless lower rates are proposed and negotiated for individual Task Orders. Materials will be estimated for each Task Order and may include applicable indirect costs computed in accordance with the Contractor’s established accounting practices. Consistent with the definition in FAR 52.232-7(b)(1)(ii), “materials” include direct materials (including supplies transferred between divisions, subsidiaries, or affiliates of the Contractor under a common control);

subcontracts for supplies and incidental services for which there is no labor category specified in the contract; other direct costs; and travel.

*NOTE: The Government will not reimburse the Contractor for any costs incurred above the T&M ceiling price, set forth in applicable Task Orders.

B.9.1 Materials

Materials are defined in FAR 52.232-7, Payments under Time-and-Materials and Labor-Hour Contracts.

The costs of general-purpose items required for the conduct of the Contractor’s normal business operations are not allowable materials in the performance of Task Orders issued under this contract. (See

Sections G and H for additional limitations on materials and required support documentation.)

*NOTE: Labor dollars will not be used to pay for Other Direct Costs (ODCs), nor will ODC dollars be used to pay for labor without a Task Order modification.

B.10 Fixed Labor Rates

The labor rates are fixed for the life of the IDIQ contract. However, the Contractor may (at any time during the life of this contract) submit a proposal reducing the fixed hourly labor rates or offer a discount when submitting a Task Order proposal. The Government will review the proposal(s)/discount(s) and determine whether the revised rates are fair and reasonable and in the best interests of the Government.

The labor rates of this IDIQ contract may be re-negotiated in very rare circumstances, and where allowable by law, when they are the result of external market factors. If the labor rates are accepted, the

Government will incorporate the new rates into the contract via a modification.

B.11 Authorized Users

Ordering Officers for this IDIQ contract shall be limited to only DHS Office of Procurement Operations

(OPO) Warranted Contracting Officers. All resulting requirements anticipated for execution under this

IDIQ Contract shall be coordinated through the Office of the Chief Information Officer (OCIO), Information Technology (IT) Operations.

All Task Order solicitations must be sent to the IDIQ contract COR at the same time they are sent to the

Contractor. The Contractor shall not provide a response to any Task Order solicitation that the IDIQ contract COR was not copied on.

B.12 Labor Category Descriptions

Attachment J-3, Labor Category Descriptions, provides a detailed description of each Labor Category that may be used under this IDIQ contract.

(End of Section B)

Section C: Description/Specifications/Statement of Work

See Attachment J-1

(End of Section C)

Section D: Packaging and Marking

D.1 Packaging and Marking

Unless otherwise specified, packaging and marking of all deliverables must conform to normal commercial packing standards to assure safe delivery at destination. Clauses and other requirements regarding packaging and marking shall be designated at the Task Order level.

D.2 Shipment and Marking

All deliverables submitted to the Contracting Officer (CO) and the Contracting Officer’s Representative

(COR) shall be in accordance with the instructions provided in the DHS NOSC NCCS IDIQ contract and

Task Orders. Deliverables shall be sent to the address(es) as set forth in the DHS NOSC NCCS IDIQ contract and applicable Task Orders.

All deliverables submitted shall be accompanied by a packing list or other suitable shipping documentation that shall clearly indicate the following:

(a) Contract number;

(b) TO number;

(c) Name and address of the consignor;

(d) Name and address of the consignee;

(e) Government bill of lading number covering the shipment (if any); and

(f) Description of the item/material shipped, including item number, quantity, number of containers, and package number (if any).

Specific or unique marking requirements may be addressed in individual Task Orders.

D.3 Branding

Use of the Department of Homeland Security Seal

In accordance with DHS Management Directive 123-06, 18 U.S.C. § 506, 18 U.S.C. § 701, 18 U.S.C.

§ 1017 and 28 U.S.C. § 1733(b), the usage of the DHS seal shall be requested by completing DHS Form 0030

(12/08).

Request shall be submitted to the Contracting Officer, who will be responsible for submitting the form for review by the DHS Office of Public Affairs.

DHS must be acknowledged in any presentation (oral or written) of work that is a direct result of contractor’s support work to DHS. Any presentation that contractor makes that relates to work conducted by or funded by or for DHS must be provided to the Task Order COR with a courtesy copy to the Task Order CO for review prior to presentation. The Contractor must obtain Task Order COR or CO guidance and permission prior to development of presentation or acceptance of invitation to make presentation.

The Contractor is not permitted to present DHS work or their participation in DHS work for business promotional purposes, prior to Task Order COR and CO permission.

Any questions, comments, or concerns on presentations shall be addressed to the respective Task Order

COR and CO.

(End of Section D)

Section E: Inspection and Acceptance

E.1. Inspection and Acceptance

a. Unless otherwise specified in the contract or applicable Task Order, inspection and acceptance of all work and services performed will be in accordance with the FAR clauses incorporated at

Section E.1, Clauses Incorporated by Reference, as applicable.

b. Final acceptance of all deliverables and or services performed as specified under each task order will be made in writing, by the Task Order Contracting Officer’s Representative (COR), or as detailed in individual Task Orders.

E.2. Scope of Inspection

a. All deliverables will be inspected for content, completeness, accuracy, and conformance to applicable contract or task order requirements by the COR or Task Order COR or as detailed in individual task orders. Inspection may include validation of information or software through the use of automated tools and/or testing of the deliverables, as specified in the contract or Task Order. The scope and nature of this testing must be negotiated prior to Task

Order award and will be sufficiently comprehensive to ensure the completeness, quality and adequacy of all deliverables.

b. Unless otherwise agreed to by the parties, the Government requires a period not to exceed thirty (30) calendar days after receipt of final deliverable items for inspection and acceptance/rejection, unless otherwise specified in the Task Order. For periods exceeding thirty (30) calendar days, it is the responsibility of the contractor to confirm receipt and acceptance of the deliverable(s).

E.3. Basis of Acceptance

a. The basis for acceptance shall be compliance with the requirements set forth in the Statement of Work, the Contractor’s proposal, the terms and conditions of the IDIQ contract or Task

Order, as applicable. Deliverable items rejected shall be corrected in accordance with the applicable clauses (e.g., FAR 52.246-2 Inspection of Supplies – Fixed Price (AUG 1996), FAR

52.246-4 Inspection of Services – Fixed Price (AUG 1996), FAR 52.246-6 Inspection of Services –

Time-and-Material or Labor-Hour (MAY 2001), and/or their respective alternates) and direction found at the IDIQ contract or Task Order level.

b. Custom services and cost reimbursable items such as travel and Other Direct Costs (ODCs) will be accepted upon receipt of proper documentation as specified in the contract or task order. If custom services are provided as part of a Firm-Fixed-Price Task Order, acceptance will be as specified for the milestone with which they are associated. If custom services are for software development, the final acceptance of the software program will occur when all discrepancies, errors or other deficiencies identified in writing by the Government have been resolved, either through documentation updates, program correction, or other mutually agreeable methods.

c. Reports, documents and narrative type deliverables will be accepted when all discrepancies, errors or other deficiencies identified in writing by the Government have been corrected.

d. Non-conforming products or services will be rejected. Unless otherwise agreed by the parties, deficiencies will be corrected within fifteen (15) calendar days of the rejection notice. If the deficiencies cannot be corrected within fifteen (15) calendar days, the Contractor will immediately notify the IDIQ CO or TO CO of the reason for the delay and provide a proposed corrective action plan within ten (10) calendar days.

e. Acceptance Criteria: The following are the DHS quality guidelines for all DHS NOSC

NCCS products and services.

1. Accuracy. Work products shall be accurate in presentation, technical content and adherence to accepted elements of style.

2. Clarity. Work products shall be clear and concise; engineering terms shall be used, as appropriate. All diagrams shall be easy to understand and be relevant to the supporting narrative.

3. Conformance to Requirements. All work products shall satisfy the requirements of the contract or order. The product shall adhere to DHS System Lifecycle (SLC) and DHS-based templates, standards and directives.

4. File Editing. All text and diagrammatic files shall be editable by the Government.

5. Format. Work products shall be submitted in Microsoft format or other media defined at the IDIQ contract or Task Order level. The work product format may change from subtask to subtask. Hard copy formats shall follow DHS Directives and shall be consistent with similar efforts.

6. Timeliness. Work products shall be submitted on or before the due date specified in the

IDIQ contract or Task Order.

7. General. All work products shall be presented in a legible format, written in a professional manner, and free of spelling, punctuation, and grammatical errors.

E.4. Review of Deliverables

a. The Government will provide written acceptance, comments and/or change requests, if any, within thirty (30) calendar days from receipt by the Government of the initial deliverable, or as specified in individual Task Orders. For periods exceeding thirty (30) calendar days, it is the responsibility of the contractor to confirm receipt and acceptance of the deliverable(s).

b. Upon receipt of the Government comments, the Contractor shall have fifteen (15) calendar days to incorporate the Government's comments and/or change requests and to resubmit the deliverable in its final form.

c. If written acceptance, comments and/or change requests are not issued by the Government within thirty (30) calendar days of submission, or as specified in individual Task Orders, it is the responsibility of the contractor to confirm receipt and acceptance/rejection of the deliverable(s).

(End of Section E)

Section F: Deliveries or Performance

F.1 Place of Performance

The services to be provided under this contract shall be accomplished at the locations identified in the

Task Orders. The place of performance will be a combination of DHS, Contractor, and remote work locations depending on the classification and access levels of the work and facilities in question. DHS locations include any DHS facilities located in the Washington, DC metropolitan area; Stennis, Mississippi; Chandler, Arizona; and other potential Contiguous United States (CONUS) DHS locations

(to be identified).

Telework may be authorized for Sensitive But Unclassified (SBU) tasks at the discretion of the

Government. Some mission requirements may require a full-time on-site presence. Classified system and resource monitoring can occur only from an appropriately accredited Sensitive Compartmented

Information Facility (SCIF). The Contractor requires access to both classified and unclassified information/materials. Contractors will only be required to access classified information/materials at

DHS SCIFs or an accredited contractor SCIF. Staff performing classified resource monitoring must be physically present inside the SCIF while performing those duties. The Contractor may access unclassified materials at DHS SCIFs or an accredited contractor SCIF. The Contractor may also access SBU / unclassified information when outside of SCIFs in properly secured areas. Specific functions may be performed entirely from Contractor or remote locations and will be identified in advance on a case-by-case basis.

Performance may be required at alternate DHS facilities as directed under the terms of this contract.

Other work locations include, but are not limited to, the Contractor’s facility, telework/telecommute location, and other sites as identified in the DHS and Contractor’s Continuity of Operations Plans

(COOP) and at the direction of the Enterprise Operations Division Chief and/or NOSC Branch Chief.

The primary place of performance for Field Engineering Technical Support Services will be at DHS facilities and/or contractor sites located throughout the CONUS from which personnel will be dispatched to provide hands-on IT support and troubleshooting where needed. These locations will be identified at the Task Order level.

F.2 Ordering Period of Performance

This contract shall consist of an initial 12-month Base Ordering Period. The contract may have up to four (4) 12-month Optional Ordering Periods, which will be exercised in accordance with FAR

52.217-9, Option to Extend the Term of the Contact.

Ordering Period Duration Date*

Base Ordering Period 12-months TBD

Optional Ordering Period 1 12-months TBD

Optional Ordering Period 2 12-months TBD

Optional Ordering Period 3 12-months TBD

Optional Ordering Period 4 12-months TBD

* Actual dates will be completed at award.

a. In the event the Government exercises all Optional Ordering Periods, the total Ordering

Period shall not exceed sixty (60) months (unless the Government invokes its right to extend the term of the contract pursuant to FAR clause 52.217-8). If the contract is extended via the exercise of FAR 52.217-8, the ordering period shall not exceed sixty-six (66) months.

b. The period of performance for each task order awarded under the NOSC NCCS contract shall be specified in the task order. Task orders must be solicited and awarded prior to the expiration of the NOSC NCCS IDIQ contract (including optional ordering periods, if exercised). The period of performance of each task order may extend up to 1 year (12 months) after the contract term (including any options exercised) has expired. TOs shall be priced using the rates provided in Section B, Supplies or Services and Price/Costs, that will be applicable to the Task Order’s anticipated period of performance.

c. After the NOSC NCCS IDIQ contract term expires, the NOSC NCCS IDIQ contract will remain an active contract until the final task order is closed-out and shall govern the terms and conditions with respect to active task orders to the same extent as if they were completed during the NOSC NCCS contract term.

F.3 Small Business Utilization Reporting

On a bi-annual basis the Contractor shall provide a periodic report detailing its small business subcontracting goals. This report shall include, at a minimum, a discussion of the total number of task orders received, their obligated amount, and the amount subcontracted to small businesses by type. The report shall also include a cumulative amount for the entire NOSC NCCS contract obligated amount and amount subcontracted to small business. At the end of each year the

Contractor shall provide an aggregate yearly amount in the Individual Subcontracting Report.

If the Small Business subcontracting amount for any category is less than what is specified in

Section G.7 the Contractor shall detail any reason why the Task Orders were not suitable for subcontracting to small business, the steps taken to determine this, or the attempts made to subcontract with small business, and what steps the Contractor plans to take to meet the goal in the future.

The Contractor shall comply with the Contractor’s Subcontracting Plan to ensure that small business, small disadvantage business (SDB), women-owned business (WOSB), Historically

Under-utilized Business Zones small business (HUBZone), and service-disabled veteran-owned small business (SDVOSB), are provided the maximum practicable opportunity to participate as

Subcontractors.

F.4 Transition Planning

Transition-in and Transition out services may be required under any task order issued hereunder.

Accordingly, FAR clause 52.237-3, Continuity of Services, is incorporated by reference in Section

I.

F.5 Performance Standards

Performance standards, including Service Level Objectives (SLOs), Service Level Agreements

(SLAs), Quality Assurance Surveillance Plans (QASPs), etc. will be established at the task order

F.6 Deliverables

a. IDIQ contract deliverables are listed and described in Section C, Attachment J-1, Statement of Work.

b. All applicable IDIQ contract and Task Order level deliverables, their required delivery dates, destination of delivery, and schedule for completion of work to be performed will be specified in TOs issued under this contract, as applicable.

c. For purposes of delivery, all deliverables shall be made by 4:30 P.M. EST (Washington, DC) at destination, Monday through Friday, unless stated otherwise in the Task Order.

d. All deliverables submitted in electronic format shall be free of any known computer viruses or defects. If a virus or defect is found, the initial deliverable will not be accepted. The replacement file shall be provided within two (2) business days after notification of the presence of a virus.

e. Each contract-level and Task Order-level deliverable shall be accompanied by a cover letter from the Contractor.

f. In the event the Contractor anticipates difficulty in complying with any contract-level delivery schedule, the Contractor shall immediately provide written notice to the contract-level CO and COR. For difficulty in complying with any Task Order level delivery schedule, the Contractor shall provide written notification immediately to the Task Order CO and Task

Order COR. Each notification shall give pertinent details, including the date by which the

Contractor expects to make delivery; provided that this data shall be informational only in character and that receipt thereof shall not be construed as a waiver by the Government of any IDIQ contract or Task Order level delivery schedule, or any rights or remedies provided by law or under this IDIQ contract or any Task Order.

g. In the event that a Contractor is non-compliant in the submission of deliverables, the

Government will reflect the non-compliance in the Contractor’s Performance Assessment

Reporting System (CPARs) evaluation report.

(End of Section F)

Section G: Contract Administration Data

G.1. Background

This section provides roles, responsibilities, and contract administration requirements for the

NOSC NCCS IDIQ contract and each Task Order placed under this IDIQ contract. Additional clauses and other requirements regarding contract administration may be designated at the Task

Order level.

G.2. Accounting and Appropriation Data

Accounting and appropriation data for obligations under this contract will be set forth in individual

Task Orders.

G.3. Primary Government Roles and Responsibilities

G.3.1 NOSC NCCS Contracting Officer – IDIQ Contract

A warranted Contracting Officer is the only person authorized to issue modifications to the NOSC

NCCS IDIQ Contract and Task Orders, approve changes in any of the requirements and specifications, or obligate funds. Notwithstanding any clause/provision contained elsewhere in this

NOSC NCCS IDIQ contract, the authority to modify the contract remains solely with the

Contracting Officer. If the Contractor makes any NOSC NCCS changes at the direction of any person other than the Contracting Officer, the change will be considered to have been made without authority and no adjustment will be made in the Contract to cover any increases in charges that may result. The Contracting Officer has the authority to perform any and all post-award functions in administering and enforcing the NOSC NCCS Contract in accordance with its terms and conditions. The designated Contracting Officer for the NOSC NCCS Contract is:

Name: Gregory Clark

Address: Department of Homeland Security

245 Murray Lane SW

Mailstop MS0100

Washington, DC 20528

Phone: TO BE COMPLETED AT TIME OF AWARD

Email: Gregory.Clark@hq.dhs.gov

Services will be ordered via Task Orders issued by Task Order level Contracting Officers and will follow the ordering procedures set forth in Section G.4, Ordering Procedures. Task Order

Contracting Officers will be specified in individual task orders.

mailto:Gregory.Clark@hq.dhs.gov

G.3.2 Contracting Officer’s Representative (COR)

The Contracting Officer will designate a NOSC NCCS IDIQ contract COR to assist in monitoring the work under this contract. The NOSC NCCS Contract COR is responsible for the technical administration of the NOSC NCCS Contract and will be the technical liaison with the Contractor.

The NOSC NCCS Contract COR IS NOT authorized to change the scope of work or specifications as stated in the NOSC NCCS Contract or any contract Task Order, to make any commitments or otherwise obligate the Government or authorize any changes which affect the task order price, delivery schedule, period of performance or other terms or conditions.

The Contracting Officer is the only individual who can legally commit or obligate the

Government for the expenditure of public funds. The technical administration of this NOSC

NCCS Contract shall not be construed to authorize the revision of the terms and conditions of the Contract. Any such revision shall be authorized in writing by the Contracting Officer. The

NOSC NCCS COR is:

Name: TO BE COMPLETED AT TIME OF AWARD

Address: TO BE COMPLETED AT TIME OF AWARD

Phone: TO BE COMPLETED AT TIME OF AWARD

Email: TO BE COMPLETED AT TIME OF AWARD

The Contracting Officer will also designate a Task Order COR for each awarded Task Order. The

Task Order COR is responsible for the day-to-day administration and oversight of the Task Order.

The Task Order COR will represent the CO in the administration of technical details within the scope of the Task Order. The Task Order COR is also responsible for the final inspection and acceptance of all Task Order deliverables and reports, and such other responsibilities as may be specified. The Task Order COR is not otherwise authorized to make any representations or commitments of any kind on behalf of the CO or the Government. The Task Order COR does not have authority to alter the Contractor’s obligations or to change the Task Order scope of work, specifications, price, terms, or conditions. If, as a result of technical discussions, it is desirable to modify the Task Order scope of work, obligations, or the specification, changes will be issued through the issuance of a task order modification.

G.4. Ordering Procedures

G.4.1 General Information

All task orders under the NOSC NCCS Contract must:

1. Be solicited and awarded by an authorized, warranted CO within the DHS Office of

Procurement Operations;

2. Be within the scope of Section C and all other terms and conditions of the NOSC

NCCS contract;

3. Identify the NOSC NCCS Labor Categories that will perform the Task Order work;

4. Comply with the ordering procedures in FAR Subpart 16.505, Ordering, and other applicable agency specific regulatory supplements.

All costs associated with the preparation, presentation, and discussion of the Contractor’s proposal in response to a task order solicitation will be at the Contractor’s sole and exclusive expense. The

Contractor shall generally be given ten (10) business days to respond to a Task Order Request for

Proposal (TORP) or Task Order Request for Quotation (RFQ). However, in emergency situations this time frame may be greatly reduced. The Task Order Proposal shall include a response to all sections of the TORP/RFQ, as laid out in the TORP instructions.

The contractor shall identify a person and/or dedicated email address to receive Task Order

Requests for Proposal/Quote. This person shall be available during regular business hours and shall designate a backup during periods of extended absence, which is generally more than two (2) business days in a row.

G.4.2 Task Ordering Procedures

The following ordering guidelines shall be followed when placing a Task Order against the IDIQ contract:

Step 1: Task Order Requirement Package Development – the Government requiring activity shall prepare the Task Order Purchase Request (PR) documents and forward them to the Task Order

Contracting Officer within the Office of Procurement Operations (OPO), in accordance with all

DHS, Homeland Security Acquisition Regulations (HSAR), Homeland Security Acquisition

Manual (HSAM), Office of Procurement Operations Acquisition Manual (OPOAM) policies. The

Task Order PR shall include, at a minimum, a cost estimate and a statement of requirements, as well as any other documents required by DHS OPO acquisition policy.

Step 2: TORP Preparation – The Task Order CO shall review the Task Order PR documentation and prepare a TORP or RFQ, to be forwarded to the NOSC NCCS IDIQ contractor. The Task

Order CO must tailor all optional clauses, provisions, and other applicable terms and conditions specific to the task order solicitation and award (See Section I). If additional labor categories are required, the Task Order CO shall send a request to the IDIQ Contract CO, in accordance with

Section B.8.1.

Each solicitation shall include, at a minimum, the following information:

(a) RFP number;

(b) End user customer component;

(c) Statement of Objectives (SOO), Statement of Work (SOW), or Performance Work

Statement (PWS) with applicable Section I clauses requiring fill in by TO CO and identification of any IDIQ contract clauses that are not applicable;

(d) All applicable clauses shall be noted in the TORP, including whether any of the following clauses are applicable: the SAFETY Act (SOW Section H.20); Safeguarding of Controlled Unclassified Information (SOW Section H.16); or Information Technology

Security Awareness Training (SOW Section H.16);

(e) Instructions for submission of the technical and price proposal;

(f) Evaluation criteria and relative order of importance (if applicable);

(g) Anticipated contract type;

(h) Contracting organization POC including name, phone number, and email address for the

Contracting Officer and Contract Specialist;

(i) Proposal due date and time; and

(j) Organizational Conflict of Interest certification instructions (if applicable).

The amount of time allowed for a TORP response is typically ten (10) business days, but may be extended by the Task Order CO based upon the scope/complexity of the requirement or reduced by the Task Order CO based upon the urgent needs of the customer (such as national emergencies or natural disasters).

Step 3: Issuance of the TORP– The Task Order CO issues the TORP to the NOSC NCCS IDIQ contractor via the established solicitation email address, to be identified by the contractor.

Step 4: Submission of TORP Response – The Contractor shall submit a response to the TORP within the deadline specified. All responses shall be sent to the email address specified in the

TORP and contain documents that are readable by Microsoft Office.

Step 5: Proposal Evaluation – The Task Order CO shall evaluate the proposal in accordance with the TORP evaluation procedures. Technical and cost/price evaluations shall be conducted by the

Government evaluation team. Negotiations may take place as needed.

Step 6: Congressional Notification – In accordance with HSAM 3005.303-70, Congressional

Notification is not required for Task Orders placed under this single award IDIQ that are within the dollar value of the originally reported IDIQ contract.

Step 7: Award – The Task Order CO shall prepare the award in accordance with all Department acquisition regulations, including required reviews. The CO shall forward all award documents, including the Standard Form with Task Order number and value, and SOO/SOW/PWS to the

NOSC NCCS contractor email address identified, the NOSC NCCS IDIQ Contract CO/CS, and the

NOSC NCCS IDIQ Contract COR.

G.4.3 Non-Core Task Ordering Procedures

Task Orders placed under this NOSC NCCS IDIQ Contract for Non-Core Tasks may be placed using Authorization to Proceed, in accordance with Homeland Security Acquisition Manual

(HSAM) 3043.7002-1(a)(1), or oral notice from the designated Task Order level CO, in accordance with the FAR and DHS policy and procedure.

G.5. Contract Administration Requirements

G.5.1 Task Order Data Spreadsheet

The Contractor shall report all task order award data to the IDIQ Contract CO within thirty (30) calendar days of award via the Task Order Data Spreadsheet, which shall be provided by the

Government at the Post Award Conference.

Regardless of contract type, all task order award data shall include the following:

1. NOSC NCCS IDIQ Contract Number

2. Task Order Solicitation Number

3. Task Order Award Number

4. Brief Task Order Description

5. Place of Performance address and label as either Government-site, Contractor-site, or both

6. Predominant Contract Type (e.g. FFP, T&M, or LH)

7. Task Order CO Name, Phone Number, and Email Address

8. Customer Agency Name and Full Address

9. Initial Period of Performance and any optional Periods of Performance

10. Award Date

11. Task Order value

12. Current obligated funding amount

13. An electronic copy of the complete task order awarded by the Task Order CO.

G.5.2 Task Order Modification Data

The Contractor shall report all Task Order modification data within thirty (30) calendar days of receiving a signed copy of the modification via the Task Order Data Spreadsheet to the IDIQ contract CO. Modification data shall include:

1. NOSC NCCS IDIQ Contract Number

2. Task Order Award Number (NOT the Solicitation Number)

3. Modification Number

4. Brief Modification Description (e.g., Incremental Funding, Exercise Option, Change Order, etc.)

5. Task Order CO Point of Contact (Name, Phone Number, E-mail Address)

6. Modification Period of Performance (Do NOT change the initial start date of the task order)

7. Modification Date

8. Modification Obligated funded amount

9. Task Order value

10. An electronic copy of the complete modification awarded by a Task Order CO.

G.5.3 Quarterly Task Order Data

Not later than ten (10) calendar days after the start of the Quarter (defined by the Government

Fiscal Calendar) the contractor shall submit a complete list of Task Orders placed under the NOSC

NCCS IDIQ Contract via the Task Order Data Spreadsheet to the IDIQ contract CO.

This list shall include the following data:

1. Task Order Award Number

2. Modification Number

3. Description

4. Task Order Period of Performance

5. Task Order Value

6. Task Order obligated amount

7. Task Order CO Point of Contact information

8. DHS Office or Component

G.5.4 Task Order Closeout Data

The Contractor shall submit Task Order close-out data within thirty (30) calendar days following the expiration of a task order via the Task Order Data Spreadsheet to the IDIQ contract CO. This shall be accomplished for each and every task order. This data shall include:

1. Task Order Number

2. Final Task Order Modification

3. Description

4. Final Task Order Dollar Value

5. Cumulative Invoiced Amount

6. Final Invoice Paid (Yes or No)

7. Release of Claims Date

8. Pending Actions Preventing Close-out

G.5.5 Contractor Performance Assessment Reporting System (CPARS)

Past performance information is relevant information, for future source selection purposes, regarding a Contractor’s performance under previously awarded contracts. It includes, for example, the Contractor’s record of conforming to contract requirements and to standards of good workmanship; record of forecasting and controlling costs; adherence to contract schedules, including the administrative aspects of performance; history of reasonable and cooperative behavior and commitment to customer satisfaction; reporting into required databases; record of integrity and business ethics; and business-like concern for the interest of the customer.

The DHS Office of Procurement Operations requires use of the Contractor Performance

Assessment Reporting System (CPARS) modules as the secure, confidential, information management tool to facilitate the performance evaluation process for both the NOSC NCCS IDIQ

Contract and the task orders awarded under this Contract.

The Contractor’s IDIQ Program Manager (PM) will serve as a primary point of contact (POC) and will be authorized access to the CPARs evaluation(s) for review and comment for the NOSC

NCCS IDIQ Contract and for Task Orders awarded under this Contract. The PM shall respond promptly to CPARs evaluations as documented by the Task Order CO at the Task Order level and the NOSC NCCS IDIQ Contract CO at the Contract level.

In addition, the PM will be required to identify an alternate contact that will be responsible for notifying the NOSC NCCS IDIQ Contract CO in the event the PM is unavailable to process evaluations within the required 30-day time frame.

G.5.6 Mergers, Acquisitions, Novations, and Change-Of-Name Agreements

If a Contractor merges, is acquired, or recognizes a successor in interest to Government contracts when Contractor assets are transferred; or recognizes a change in a Contractor’s name; or executes novation agreements and change-of-name agreements by a CO other than the NOSC NCCS IDIQ

Contract CO, the Contractor must notify the NOSC NCCS IDIQ Contract CO and provide a copy of the novation or other any other agreement that changes the status of the Contractor. Any successor must be in full compliance with all terms and conditions of this contract. All of the foregoing shall be done in accordance with FAR clause 42.12, Novation and Change-of-Name

Agreements, and other applicable Federal and DHS regulations and policies.

G.6. Contractor Accounting System

For Time-and-Materials type task orders, contractors shall maintain an adequate accounting system to substantiate vouchers (including any subcontractor hours reimbursed at the hourly rate in the schedule) by evidence of actual payment and by:

(a) Individual daily job timekeeping records;

(b) Records that verify the employees meet the qualifications for the labor categories specified in the contract; or

(c) Other substantiation approved by the Contracting Officer.

The Contractor shall present evidence of an adequate accounting system before award of a Time-and-

Materials/Labor Hours Task Order to the IDIQ contract CO.

G.7. Small Business Classification

For purposes of this solicitation and each resultant task order, the applicable NAICS codes are as follows:

• 541513, “Computer Facilities Management Services” (size standard - $37M)

• 541519, “Other Computer Related Services” (size standard - $34M)

• 541990, “All Other Professional, Scientific, and Technical Services.” (size standard

$19.5M)

541519 is the predominant NAICS and shall be used for most Task Orders. Subcontracted work shall be classified under the NAICS code appropriate for the type of work. The DHS small business subcontracting goals for Fiscal Year 2024 are listed below:

Small Business Subcontracting Goals

SB Category SB Goal

Small Business 35.5%

SDB 17.9%

HUBZone 3.0%

SDVOSB 3.0%

WOSB 5%

G.8. Unauthorized Work

The Contractor is not authorized at any time to commence Task Order performance prior to issuance of a signed Task Order or other written approval provided by the Task Order CO to begin work.

G.9. Modification of Orders

Established pricing for each Task Order may not be changed except when authorized by a modification to the Task Order.

G.10. Invoice Preparation and Submission

(a) Invoice instructions will be specified at the individual Task Order level. Unless otherwise stated in the Task Order, the Contractor shall submit invoices in accordance with FAR Clause, 52.212-

4(g), Contract Terms and Conditions - Commercial Products and Commercial Services.

(b) The Contractor shall submit an original invoice and three copies (or electronic invoice, if authorized) to the address designated in the contract to receive invoices. Each invoice submission shall include at a minimum, the following:

(1) Name and address of the Contractor;

(2) Invoice date and number;

(3) Contract number, line item number and, if applicable, the order number;

(4) Description, quantity, unit of measure, unit price and extended price of the items delivered;

(5) Shipping number and date of shipment, including the bill of lading number and weight of shipment if shipped on Government bill of lading;

(6) Terms of any discount for prompt payment offered;

(7) Name and address of official to whom payment is to be sent;

(8) Name, title, and phone number of person to notify in event of defective invoice;

and

(9) Taxpayer Identification Number (TIN). The Contractor shall include its TIN on the invoice only if required elsewhere in this contract.

(10) Electronic funds transfer (EFT) banking information.

(c) Invoices for a T&M or L-H task order shall be billed and processed in accordance with FAR

52.212-4, Alternate I (Nov 2021).

(d) To ensure timely processing of payment, an original and three (3) copies of T&M, L-H, and

Cost Reimbursement (CR) for Travel vouchers shall be forwarded simultaneously to the addresses specified in the Task Order as follows:

(1) Original to the cognizant audit office for administrative review, provisional approval and forwarding to the Finance Office listed below;

(2) Copy to the Finance Office;

(3) Copy to the Task Order CO; and

(4) Copy to the Task Order COR.

(e) To ensure timely processing of the Contractor’s invoices, an original and two (2) copies of FFP vouchers shall be forwarded simultaneously to the addresses specified in the Task Order as follows (they do not have to be submitted through the cognizant audit office):

(1) The Finance Office;

(2) The Task Order CO; and

(3) The Task Order COR.

(f) All invoices submitted to the Government shall delineate cost by:

(1) Contract and Task Order number;

(2) Funding document/order billing item or contract line item number (FFP, L-H, T&M, and CR for Travel Task Orders); and

(3) Any additional information required by specific payment clauses.

(g) The customer will forward a copy of the certified voucher to the cognizant finance office for payment.

G.11. Teaming Partners and Subcontractors

The Contractor shall obtain approval from the IDIQ contract CO before adding teaming partners or subcontractors. All teaming partners and subcontractors must be identified at the IDIQ contract level before they are available to perform on specific Task Orders. When submitting the request to add teaming partners or subcontractors, the Contractor shall include rationale for the addition, and a description of any cost implications. The IDIQ contract CO has the ultimate authority to approve or reject the proposed teaming partner or subcontractor, in accordance with Federal and

Department regulations and policies.

(End of Section G)

Section H: Special Contract Requirements

H.1 Hours of Operation

The IDIQ contract shall include shift work, 24/7 staffing requirements, and other non-traditional hours of operation. Specific hours of operations shall be identified at the individual Task Order level.

H.2 Security Clearance

The contractor shall possess, at time of proposal submission and throughout the entire contract performance, a Top Secret facility security clearance. This is a material condition of this contract and may be grounds for termination for default.

All personnel providing services under the NOSC NCCS Contract are required to pass a DHS Suitability

(at a…