70Z03822QM0000014 - Attachment 2 - Statement of Work Ingres Renewal.doc

Attachment 2: STATEMENT OF WORK Ingres Renewal

70Z03822QM0000014

STATEMENT OF WORK

INGRES RENWAL

Prepared by:

United States Coast Guard, Aviation Logistics Center, Information Systems Division 1664 Weeksville Road Building 63 Elizabeth City, NC 27909

Table of Contents

31.0 “Gray-Market” Equipment

32.0 Hardware and Software Requests

33.0 Supply-Chain Transport

44.0 Notifications

45.0 Foreign Equities

1.0 “Gray-Market” Equipment 1.1 The Contractor shall provide only new equipment unless otherwise expressly approved, in writing, by the Department of Homeland Security (DHS) Contracting Officer. The Contractor shall provide only Original Equipment Manufacturer (OEM) parts to the Government. In the event that a shipped OEM part fails, all replacement parts must be OEM parts.

1.2 The Contractor shall be excused from using new OEM (i.e., “gray market”, “previously used”) components only with formal Government approval, in writing, from the DHS Contracting Officer. Such components shall be procured from their original source and shipped only from the manufacturer’s authorized shipment points.

1.3 All equipment obtained by the Contractor on behalf of the Government will need to be provided to the Office of Inspector General (OIG) Office of the Chief Information Officer (OCIO) for review to validate requirements and approved Contractors by DHS.

2.0 Hardware and Software Requests

2.1 The Contractors supply the Government hardware and software will provide the manufacturer’s name, address, state, and/or domain of registration, and the Data Universal Numbering System (DUNS) number of all components comprising the hardware and software. If subcontractors or subcomponents are used, the name, address, state, and/or domain of registration and the DUNS number of those suppliers shall be provided.

2.2 Subcontractors are subject to the same general requirements and standards as prime contractors. Contractors employing subcontractors will perform due diligence to ensure that these standards are met.

2.3 The Government shall be notified when a new contractor/subcontractor is introduced to the supply chain, or when supplies of parts or subcomponents are changed.

2.3.1 For software products, the Contractor shall provide all OEM software updates to correct defects for the life of the product (i.e., until the “End of Life (EoL)”). Software updates and patches shall be either: made available to the Government for all products procured under this Purchase order, replaced upon End of Support (EoS) is reached, or formally waived (in writing) by the DHS Contracting Officer.

3.0 Supply-Chain Transport

3.1 The Contractor shall employ formal and accountable transit, storage, and delivery procedures (i.e., the possession of the component is documented at all times from initial shipping point to final destination, and every transfer of the component from one (1) custodian to another is fully documented and accountable) for all shipments to fulfill Purchase Order obligations with the Government.

3.2 All records pertaining to the transit, storage, and delivery will be maintained and available for inspection for the lessor of the term of the Purchase Order, the period of performance, or one (1) calendar year from the date the activity occurred.

3.3 The transit process shall minimize the number of times in route components undergo a change of custody and make use of tamper-proof or tamper-evident packaging for all shipments. The supplier, at the Government’s request, shall be available to provide shipping status oat any time during transit.

3.4 All records pertaining to the transit, storage, and delivery shall be readily available for inspection by any agent designated by the U.S. Government as having authority to examine them.

3.5 The Contractor is fully liable for all damage, deterioration, or losses incurred during shipping and handling, unless the damage, deterioration, or loss is due to the Government.

3.6 The Contractor shall provide a packing slip which shall accompany each container or package with the information identifying this Purchase Order, a description of the hardware/software enclosed (Manufacturer name, model number, serial number), and the customer point of contact.

3.7 The Contractor shall send a shipping notification to the intended Government recipient, with a copy transmitted via email to the Contracting Officer, or designated representative. The shipping notification shall be sent electronically and will state the Purchase Order number, a description of the hardware/software being shipped (Manufacturer name, model number, serial number), initial shipper, shipping date, and identifying (tracking number).

4.0 Notifications

4.1 The Contractor shall notify the DHS Contracting Officer, Contracting Officer’s Representative (COR), the CIO, and the DHS component CIO through Enterprise Security Operations Center (ESOC) directly at any of the suspected or potential violations of Section 889 of the National Defense Authorization Act (NDAA) for Information Communications Technology (ICT) at NDAA_Incidents@hq.dhs.gov.

5.0 Foreign Equities

5.1 The Contractor shall immediately notify the DHS Contracting Officer and the COR, who will report to the Office of Chief Security Officer (OSCO) or cognizant component personnel security office, regarding any changes to corporate foreign ownership, control, or influence.