Attachment 1 SOR Hardware IDIQ Amd 3.docx

70US0924R70094621, Forensic Hardware IDIQ Amd 3, Revised 7/2/2024, see track changes

ATTACHMENT 1

UNITED STATES SECRET SERVICE

Forensic Hardware (Brand Name or Equal) Statement of Work (SOW)

The purpose of this Statement of Requirements (SOR) is to acquire commercial forensic hardware (workstations and other computer components) brand name or equal, on an as needed basis in support of the United States Secret Service (USSS) National Computer Forensics Institute (NCFI).

1. Background

The USSS was established as a law enforcement agency in 1865. While most people associate the USSS with Presidential protection, our original mandate was to investigate the counterfeiting of U.S. currency--which we still do. Today, our primary investigative mission is to safeguard the payment and financial systems of the United States. This has been historically accomplished through the enforcement of the counterfeiting statutes to preserve the integrity of United States currency, coin, and financial obligations. Since 1984, our investigative responsibilities have expanded to include crimes that involve financial institution fraud, computer and telecommunications fraud, false identification documents, access device fraud, advance fee fraud, electronic funds transfers, and money laundering as it relates to our core violations. Today’s high-tech environment presents new challenges to law enforcement as cyber criminals and others increasingly exploit computers and the internet to threaten our banking, financial, and critical infrastructures.

The NCFI provides training to state/local law enforcement, prosecutors, and judges in many areas of digital forensics and cyber investigations. To assist in investigating and prosecuting Law Enforcement cases, the USSS NCFI requires commercial forensic hardware products to support its Congressional mandate. All items are to be brand name or equal.

This is a commercial Indefinite Delivery Indefinite Quantity (IDIQ) contract to acquire commercial forensic hardware, on an as needed basis, in support of the NCFI. This IDIQ has a 5-year ordering period.

2. Scope

The contractor shall deliver the following commercial forensic hardware products, brand name or equal, to the NCFI located in Hoover, Alabama:

1. Dell Mobile Precision Workstation 7680 Laptop

2. Dell Mobile Precision Workstation 3490 Laptop

3. Dell Precision 3280 Workstation

4. FCI Forensic Workstation

5. Synology DS1823xs with drives

6. Mission Darkness Blackbox Lab XL

7. FCI TX1 Ultimate Kit

8. FCI NVME 10GbE NAS (Asustor Flashstor 126 Pro (FS6712X)

9. 27” Monitor

10. 40” Dell UltraSharp Curved Thunderbolt Hub Monitor

11. Apple MacBook Air

12. APC by Schneider Electric BR1500G 120V Backup System

Please see the table below for more detailed specifications. Each piece of hardware shall contain the required, brand name or equal items (as appropriate) as listed within the tables in Section 3 of this document. During the course of the contract, ifIf substitutes “or equals” are offered, due to changes in technology, the contractor shall notify the government COR and Contract Specialist in writing via email by providing manufacturer specification sheet(s) for government evaluation and agreement the “or equal” offered is equivalent to the brand name items requested (see paragraph 4.2 for further details regarding this process).

3. Requirements: Products/Services

In accordance with the ordering procedures, the contractor shall provide the following products, as defined in this SOR, as orders are placed on the IDIQ.

· Processor: Intel Core i9-13950HX (36MB Cache, 32 Threads, 24 Cores (8P+16E) up to 5.5GHz)

· RAM: 32GB, 2x16GB 5600MT/s SODIMM, Non-ECC

· Storage: 1TB M.2 PCle NVMe Gen 4 2280 SSD

· Additional 2TB M.2 PCle NVMe Gen 4 2280 SSD

· Graphics Card: NVIDIA RTXZ A1000 6GB, GDDR6

· SERI Guide (ENG/FR/Multi)

· Smartcard Reader Only

· EPEAT 2018 Registered (Gold)

· SERI Guide (ENG/FR/Multi)

· ENGERGY STAR Qualified

· Intel Core i9 vPro Enterprise Label

· Full HD+ 1920x1200 Antiglare Display

· Intel Rapid Storage Technology Driver

· E5 Power Cord (1M US)

· 83 Wh, 6 Cell, Lithium Ion Polymer

· 180W Power Adapter

· Intel AX211 Wi-Fi 6/6E with Bluetooth Wireless

· Intel AX211 WLAN Driver

· English US Backlit Keyboard with Numeric Keypad (99 Key)

· Windows 11 Pro, English, Spanish, French, Brazilian Portuguese

· Intel vPro Enterprise Technology Enabled

· Foxit PDF Editor v12

· Dell Limited Hardware Warranty Plus Service

· ProSupport Flex Client: 7x24 Technical Support Assistance, 3 Years

· ProSupport Flex: Next Business Day Onsite, 3 Years

· Keep Your Hard Drive, 3 Years

· Contacted Smartcard Only

· Custom Configuration

· 16" FHD+ 1920x1200, WVA, 60Hz, Anti-Glare, Non-Touch, 45% NTSC, 250 Nits, No Camera, with Mic

· Office Home and Business 2021

· FoxIt Phantom PDF Business Edition

· Dell Additional Software

· Processor: Intel Core Ultra 7 165H vPro Enterprise (24 MB Cache, 16 Cores, 22 Threads, up to 5.0 GHz, 45W)

· RAM: 16 GB: 2x8 GB, DDR5, 5600 MT/s, non-ECC

· English US Non-Backlit AI Hotkey Keyboard, 79-Key

· Intel Integrated Graphics

· Intel AX211 WLAN Driver

· 512GB, M.2 2230, Gen4 TLC PCIe NVMe, SSD, Class 35

· Windows 11 Pro, English, Brazilian Portuguese PT-BR, French, Spanish

· 3 Cell, 42WHr, Standard Battery

· ENERGY STAR Qualified

· Intel AX211, 2x2 MIMO, 2400 Mbps, 2.4/5/6 GHz, Wi-Fi 6/6E, Bluetooth

· E4 Power Cord 1M for US

· EPEAT 2018 Registered (Gold)

· SERI Guide (ENG/FR/Multi)

· ProSupport Flex Client: 7x24 Technical Support Assistance, 3 Years

· ProSupport Flex: Next Business Day Onsite, 3 Years

· Keep Your Hard Drive, 3 Years

· Dell Limited Hardware Warranty Plus Service

· Intel vPro Enterprise Technology Enabled

· Single Pointing, Smart Card Reader

· Intel Connectivity Performance Suite for Evo/vPro

· Intel Core Ultra 7 165H Processor with vPro and Intel Integrated Graphics

· Bottom Cover for Intel H 28W CPUs

· FHD HDR RGB Camera, TNR, Camera Shutter, Microphone

· Packaging for Integrated Graphics

· Custom Configuration

· Intel Rapid Storage Technology Driver

· Intel Core Ultra vPro Enterprise Label

· 14" FHD 1920x1080, 60Hz, 250 Nits, Non-Touch, FHD HDR RGB Camera, Mic, WLAN

· Office Home & Business 2021 for Bundle

· Foxit PDF Editor Pro with AI Assistant for Bundle

· Dell Additional Software

· Processor: Intel Core i9 14th Gen 14900 (36 MB Cache, 24 Cores, 32 Threads, 2.0 GHz to 5.8 GHz, 65W)

· RAM: 32 GB: 2x16 GB, DDR5, 5600MT/s, SO-DIMM, non-ECC

· Thermal Pad for 64GB Memory

· Dell KB216 Wired Keyboard English

· Graphics Card: NVIDIA T400 4GB, 4 GB GDDR6, 3 mDP

· WLAN Intel AX211 Wireless Card Driver

· 512 GB, M.2 2280, Gen 4 PCIe NVMe, SSD

· Integrated Intel SATA Controller

· Windows 11 Pro, English, Spanish, French, Brazilian Portuguese

· Dell Optical Mouse - MS116 (Black)

· ENERGY STAR Qualified

· Internal Speaker

· Intel Wi-Fi 6/6E (6GHz) AX211 2x2 Bluetooth 5.3 Wireless Card

· External Wi-Fi Antenna

· Power Cord 1M US

· SERI Guide (English/Spanish)

· Dell Limited Hardware Warranty Plus Service

· ProSupport Plus: 7x24 Technical Support, 4 Years

· ProSupport Plus: Keep Your Hard Drive, 4 Years

· ProSupport Plus: Accidental Damage Service, 4 Years

· ProSupport Plus: Next Business Day Onsite, 4 Years

· Dell Precision TPM

· Watch Dog SRV

· 3280 CFF Riser Bracket for Graphic Card

· Storage Config C2, 1st slot 2280 SSD

· Dell Premier Color 6.2

· Custom Configuration

· Regulatory Label 280W PSU 3280 CFF

· Intel Rapid Storage Technology Driver

· Intel Core i9 Processor Label

· 280W A/C Adapter, EPEAT5, 7.4MM Barrel

· Dell Additional Software

· VESA Mount Bracket

· Case: FCI Custom Case with Hub Access Lock Out

· Power Supply: 1000 Watt 80+ Platinum Modular

· Processor: AMD Ryzen 9 7950X, 16-Core, 4.5GHz

· Motherboard: X670 Workstation-Class

· System Memory: 128GB DDR5 5600

· Integrated LAN: 10Gb ethernet card, RJ45 (20Gbps Full Duplex)

· Video: AMD Radeon RX 6900

· External Drive Bay Configuration

· Bay 1: I/O Panel w/ 2x USB-C, 2x USB 3.0

· Bay 2: Tableau T356789iu

· Bay 3: FCI Drive Cooling Dock

· Bay 4: Read Only Media Reader

· Bay 5: Trayless SATA Assembly

· OS Drive: PCIe Gen 4 NVME SSD 1TB

· CACHE Drive: PCIe Gen 4 NVME SSD 2TB

· CASE Drive: 8TB 3.5” HDD 7200 RPM Enterprise Drive

· Microsoft Windows 11 Pro 64-bit

· Microsoft Office Home and Business 2021

· Foxit PDF Standard

· 3 Year Warranty on Parts and Labor with Lifetime Technical Support

· CPU: AMD Ryzen V1780B

· Memory: 8 GB DDR4 ECC SODIMM

· External Expansion Port (qty 2)

· USB 3.2 Gen 1 External Port (qty 3)

· Lan Ports: 1 1GbE RJ-45 (out-of-band management and data transfer), 2 1GbE RJ-45 (data transfer) and 1 10GbE RJ-45

· Wake on LAN/WAN on 1GbE Ports

· PCIe Expansion

· 5,000m Maximum Operating Altitude

· Synology RAID F1, Basic, JBOD, RAID 0, RAID 1, RAID 5, RAID 6, and RAID 10

· Volume Size: 108 TB/200 TB

· Networking Protocols: SMB, AFP, NFS, FTP, WebDAV, CalDAV, iSCSI, Telnet, SSH, SNMP, and VPN

· Read/Write Cache Support

· Internal Btrfs and ext4 File Systems

· External Btrfs, ext4, ext3, FAT32, NTFS, HFS+, and exFAT File Systems

· Windows Access Control List and Application Privileges

· Shared Folder Encryption

· SMB Encryption

· Connection with Windows AD/LDAP Servers

· Style of Faraday Bags: MDFB-S-NW-M, MDFB-M-NW-M, and MDFB-L-NW

· USB Cable Sets for Internal Connectivity (qty 4)

· USB A/M to A/M Cables (qty 2)

· Ethernet Cables (qty 2)

· AC Power Cable

· Set of Replacement Gloves

· Set of Replacement Foam Seals

· Crystal Clear Acrylic Phone Organizer

· Crystal Clear Acrylic Organizer Shelf

· Stylus Pens (qty 2)

· Unique Serial Number Sticker

· Case Dimensions: 24 x 18 x 16.5 in

· TX1 Forensic Imager

· TX1-S1 Imager Drive Bay

· Power Supply for TX1

· Power Supply TP7 (qty 2)

· Forensic IDE/SATA Bridge

· Forensic USB 3.0 Bridge

· Forensic PCIe Bridge

· PCIe Card SSD Adapter

· PCIe M.2 SSD Adapter

· PCIe Adapter for 2013+ Apple SSD

· PCIe Adapter for 2016+ Apple SSD

· PCIe U.2 SSD Adapter Cable

· PCIe to IDE Adapter

· PCIe Adapter Cable

· TKDA-SATA-IDE-7PC

· USB Media Card Reader

· SATA Signal Flat

· Unified SATA/SAS Signal Power (qty 4)

· USB 3 A to B Cable (qty 2)

· 3M Power to SATA

· 3M Power to Molex

· 8 in IDE Cable

· Cloth

· Velcro Ties

· CPU: Quad-Core 10 nm Intel Celeron N5105

· 6x 12x M.2 NVMe Slots

· 10-Gigabit Ethernet

· 4 GB of DDR4-2933 RAM (Upgradable to 16GB)

· Dual USB 3.2 (Gen 2)

· Six 4TB NVME Drives configured in RAID 5 (Enterprise NAS rated)

· 3 Year Warranty

· At least 1920x1080 Resolution

· At least 5ms Response Time

· VESA Mount Compatible

· Minimum 1 HDMI

· Minimum 1 DVI or Display Port

· At least 5120x2160 Resolution

· At least 5ms Response Time

· VESA Mount Compatible

· Minimum 1 HDMI

· Minimum 1 Display Port

· Processor: M3 Chip

· 8-Core CPU

· 10-Core GPU

· 24GB Unified Memory

· 1TB SSD Storage

· 16-core Neural Engine

· 15.3-inch Liquid Retina display with True Tone

· 1080p FaceTime HD camera

· Two Thunderbolt/USB 4 ports

· Support for up to two external displays

· Magic Keyboard with Touch ID

· Force Touch trackpad

· 25W Dual USB-C Compact Power Adapter

· 10 Outlets (5 Battery Backup, 5 Surge Protection Only

· 1500VA/865W power

· Configure settings with LCD or included software

· AVR corrects utility voltage

· 3-year APC warranty

4. Acceptance:

4.1 *All items shall be packaged in a courier shippable cardboard box with contents labeled on the outside indicating the contents and type of hardware.

4.2 All deliveries are the contractor’s responsibility. The contractor shall coordinate the deliveries with the Contracting Officer’s Representative (COR) or Office Point of Contact (POC) prior to the delivery, specifying the date and time (see paragraph 7 for the POC information). The contractor shall be responsible for off and on loading equipment and materials. Coordination of deliveries shall follow the process noted below:

(a). Vendor shall email a detailed shipment tracking spreadsheet to Michael.Searcy@usss.dhs.gov and Robert.peterson@usss.dhs.gov when items are shipped and when delivery service verifies delivery.

(b). Hardware shall not be shipped until complete. To do otherwise, requires written approval from the COR (Michael Searcy).

(c). As stated in Section 2, prior to procuring and shipping “or equals” or No substitutions, the contractor shall gain prior are allowed without written approval from the COR. The COR approval will be an official email response to the contractor’s request for an “or equal” or substitution.

(d). Contractor shall email a detailed shipment tracking spreadsheet to Michael.Searcy@usss.dhs.gov and Robert.Peterson@usss.dhs.gov when items are shipped and when delivery service verifies delivery.

(e) Vendor shall email a courtesy copy of all invoices uploaded to IPP to Michael.Searcy@usss.dhs.gov and Robert.Peterson@usss.dhs.gov.

4.3 Hardware shall be delivered no later than the dates indicated within each Delivery Order awarded on this contract. Deliveries MUST be scheduled. If the delivery has to be turned away the vendor will incur the cost for return and reshipment to destination. * Hours of Delivery: 0800-1500 CST (-6 UTC)

4.5 Within each delivery order issued on the IDIQ, the contractor will be required to coordinate and work closely with the USSS technical point of contact for the duration of the project.

4.6 The USSS technical point of contact will notify the contractor in writing of the acceptance or rejection of each deliverable. The review time by the Government will vary based on the size and complexity of the deliverable. Rejected deliverables shall be returned and corrected by the contractor within ten (10) working days of return receipt from the USSS technical point of contact. To assure success with resolving issues promptly, the Contractor shall provide the Government with a support process (help desk or other such process). Hours of availability shall be at a minimum of 8:00 am to 4:00 pm CST, Monday through Friday.

5. Contract Type and Ordering Procedures.

5.1 Type of Contract: The Government will award a commercial, single or multi-award, IDIQ with an ultimate completion date of 60 months from the date of contract award. This is a firm-fixed price IDIQ with a 5-year ordering period from date of award through 60 months.

5.2 Contract Attachment 3, Approved Pricing Table: This contract attachment establishes the pricing and anticipated delivery order data (across the ordering periods), for each hardware item. This table shall be used when placing delivery orders as it specifies the approved firm fixed price per line item.

5.3 Ordering Procedures: The complete ordering procedures are contained within Contract Attachment 2, Clauses. As stated above, the FFP price per line item is contained within Attachment 3. The initial delivery order may be executed (awarded) at time of the IDIQ award. When executing subsequent delivery orders the government shall supply the contractor the type of hardware being acquired, the quantity of each being acquired, the required dates of delivery and send the draft order to the contractor for review and agreement. Once agreement is received, the Government will award the delivery order and provide the Contractor with the final approved copy to execute deliveries against.

5.3.1 NCFI operates on a trimester system. Class trimesters are from October through January, February through May, and June through September. The following trimester’s course schedule is announced at the beginning of the proceeding trimester. (e.g., October through January’s course schedule is announced in June; February through May’s course schedule is announced in October, etc.). The NCFI COR will coordinate with the vendor 90 days prior to the course start date, to assure ample quantity of the hardware line items are ordered, delivered, and on hand to support the class start date. The governments’ goal is to provide as much advanced notice as possible.

5.3.2 Note: the Government anticipates procuring a a full complement of each hardware line item to support the NCFI Course Schedule by placing an order every 4 months or three times per year at the start of each trimester, dependent on government funding flow. If funding does not flow in this steady fashion, the government may place large orders (April – September) and a number of smaller orders (October – March) to assure the annual needs are met for the calendar year. All orders will be placed IAW FAR 52.216-19 in Attachment 2 of the contract. Regardless if funds flow in a steady or unsteady state, the NCFI goal is to order enough hardware to assure the vendor has 90 days’ notice to meet the required delivery dates. lacing an order three times a year (every four months) in order to obtain the hardware ninety (90) days in advance of the required need date (course scheduled date). The projected quantity in Contract Attachment 3 (Pricing Sheet), divided by three, will be the quantity the NCFI anticipates procuring within each order. Due to the fact Congressional funding does not always come in a steady flow, there is possibility the first six months of the government fiscal year (October through March) the orders will be smaller and then become larger in the last half of the fiscal year.

5.4 Delivery Requirements: All products/services procured through delivery order shall be delivered in accordance with the delivery schedule contained within the order.

5.5 Technology Refresh: If technology evolves over the course of the contract, technology refresh negotiations may occur every 12 months from time of contract award to assure Government receipt of the latest technology.

6. Period of Performance: The delivery date and period of performance will be annotated within the CLIN Structure and the deliverables table contained within delivery order issued.

7. United States Secret Service Technical Point of Contact

NCFI

Attn: Michael Searcy 2020 Valleydale Rd., Suite 209 Hoover, AL 35244 Michael.searcy@usss.dhs.gov Phone: 404-783-5956

PART 2

DEFINITIONS & ACRONYMS

2. DEFINITIONS AND ACRONYMS:

2.1. DEFINITIONS:

2.1.1. CONTRACTOR. A supplier or vendor awarded a contract to provide specific supplies or service to the Government. The term used in this contract refers to the prime.

2.1.2. CONTRACTING OFFICER (C.O.). A person with authority to enter into, administer, and or terminate contracts, and make related determinations and findings on behalf of the Government. Note: The only individual who can legally bind the Government.

2.1.3. DELIVERABLE. Anything that can be physically delivered, but may include non-manufactured things such as meeting minutes or reports.

2.1.4. KEY PERSONNEL. Contractor personnel that are evaluated in a source selection process and that may be required to be used in the performance of a contract by the Key Personnel listed in the SOW. When key personnel are used as an evaluation factor in best value procurement, an offer can be rejected if it does not have a firm commitment from the persons that are listed in the proposal.

2.1.5. PHYSICAL SECURITY. Actions that prevent the loss or damage of Government property.

2.2. ACRONYMS:

1. Section 508 Requirements

Section 508 of the Rehabilitation Act (classified to 29 U.S.C. § 794d) requires that when Federal agencies develop, procure, maintain, or use information and communications technology (ICT), it shall be accessible to people with disabilities. Federal employees and members of the public with disabilities must be afforded access to and use of information and data comparable to that of Federal employees and members of the public without disabilities.

All products, platforms and services delivered as part of this work statement that, by definition, are deemed ICT shall conform to the revised regulatory implementation of Section 508 Standards, which are located at 36 C.F.R. § 1194.1 & Appendixes A, C & D, and available at https://www.ecfr.gov/cgi-bin/text-idx?SID=e1c6735e25593339a9db63534259d8ec&mc=true&node=pt36.3.1194&rgn=div5. In the revised regulation, ICT replaced the term electronic and information technology (EIT) used in the original 508 standards. ICT includes IT and other equipment.

Exceptions for this work statement have been determined by DHS and only the exceptions described herein may be applied. Any request for additional exceptions shall be sent to the Contracting Officer and a determination will be made according to DHS Directive 139-05, Office of Accessible Systems and Technology, dated November 12, 2018 and DHS Instruction 139-05-001, Managing the Accessible Systems and Technology Program, dated November 20, 2018, or any successor publication.

1.1 Section 508 Requirements for Technology Products (include in the SOW, PWS, or SOO) Section 508 applicability to Information and Communications Technology (ICT): Course Kits

Applicable Exception: N/A Authorization #: N/A

Applicable Functional Performance Criteria: All functional performance criteria in Chapter 3 apply to when using an alternative design or technology that results substantially equivalent or greater accessibility and usability by individuals with disabilities than would be provided by conformance to one or more of the requirements in Chapters 4 and 5 of the Revised 508 Standards, or when Chapters 4 or 5 do not address one or more functions of ICT.

Applicable 508 requirements for electronic content features and components: Does not apply

Applicable 508 requirements for software features and components: Does not apply

Applicable 508 requirements for hardware features and components (including but not limited to Peripheral Equipment (ex. keyboards)): All requirements in Chapter 4 apply

Applicable 508 requirements for support services and documentation: All requirements in Chapter 6 apply

1.3 Section 508 Deliverables (include in the SOW, PWS, or SOO) Section 508 Accessibility Conformance Reports: For each ICT item offered through this contract (including commercially available products, and solutions consisting of ICT that are developed or modified pursuant to this contract), the Offeror shall provide an Accessibility Conformance Report (ACR) to document conformance claims against the applicable Section 508 standards. The ACR shall be based on the Voluntary Product Accessibility Template Version 2.0 508 (or successor versions). The template can be found at https://www.itic.org/policy/accessibility/vpat. Each ACR shall be completed by following all of the instructions provided in the template, including an explanation of the validation method used as a basis for the conformance claims in the report.