Historical Data - SSC PWS.pdf

Attachment J-1

PART III - LIST OF DOCUMENTS, EXHIBITS AND OTHER ATTACHMENTS

ATTACHMENT J-1

INFORMATION TECHNOLOGY SERVICES (ITS)

AT

JOHN C. STENNIS SPACE CENTER

PERFORMANCE WORK STATEMENT

Table of Contents

1 CONTRACT MANAGEMENT

1.1 Project Management

1.2 Financial Management

1.3 Documentation and Records Management

1.4 Property Management (Government Furnished Equipment (GFE), Facilities and Utilities)

1.5 Emergency Management

1.6 Personnel Management

1.7 Safety, Health and Environmental (SHE)

1.8 Quality Assurance and Control

1.9 Information Technology

2 INFORMATION TECHNOLOGY PLANNING, POLICY AND MANAGEMENT SERVICES

2.1 CIO Technical Support

2.2 IT Security Services

2.3 IT Configuration Management

2.4 Help Desk Services

2.5 Records Management and Documentation Control

3 APPLICATION AND SYSTEM SERVICES

3.1 IT System Administration and Data Center Services

3.2 Application and Web Site Services

3.3 End User Systems and Services

4 AUDIO VISUAL / VIDEO SERVICES

4.1 Audio Visual Services

4.2 Video Production Services

4.3 Video Interactive Teleconferencing System (VITS)

4.4 Physical Security/Enterprise Physical Access Control System (EPACS) Support

4.5 Cable Television Services

5 COMMUNICATION SERVICES

5.1 Communications Planning/External Communications/Frequency Management

5.2 Telecommunication Services

5.3 Radio Services

5.4 Cable Infrastructure Services

5.5 Emergency Notification Systems

6 TECHNOLOGY SUPPORT SERVICES

6.1 Product Data and Life-cycle Management (PDLM)

6.2 Center Risk Management Support

6.3 Technology Transfer Support

APPENDIX A REFERENCE LIST

APPENDIX B ACRONYM LIST

The John C. Stennis Space Center (SSC), located in Hancock County, Mississippi, is a field center of the National Aeronautics and Space Administration (NASA). The Center resides on a 22 square mile fee area and serves as the nation’s largest rocket engine testing facility. Additionally, the Center hosts over 30 major Federal, state, academic and private organizations. NASA and tenant organization employees total approximately 5,200 personnel.

This work statement addresses the NASA Information Technology (IT) requirements for SSC. Requirements will include providing systems and services to NASA, Resident organizations, onsite contractors and onsite commercial tenants. The SSC Chief Information Officer (CIO) is responsible for governance of all NASA IT at the SSC. IT services are provided through a combination of Agency IT Infrastructure Integration Program (I3P) contracts and this ITS contract. The ITS Contractor shall serve as the primary provider of IT capabilities through the implementation of the ITS Performance Work Statement (PWS) and coordination of services with I3P service providers. The Contractor shall provide:

Information Technology Planning, Policy and Management Services Application and System Services Audio Visual (AV)/Video Services Communication Services Technology Support Services

The contract type for this PWS is firm fixed price (FFP) and firm fixed price level of effort (LOE). The “Core” firm fixed price component consists of all requirements in Sections 1 through 6 with the exception of Section 3.3 “End User Systems and Services” and Section 5.4.2 “Cable System - Installation, Modification, Removal and Repair (IMRR).” “Estimated Workload Data” and the PWS specifications define the basis for quantity of services and systems in the Core.

The LOE portion of the contract will consist of:

Additive quantities of services and systems above and beyond those defined in PWS Sections 1 through 6 All requirements in Section 3.3 “End User Systems and Services” All requirements in Section 5.4.2 “Cable System – IMRR”

Any specific roles, functions or positions contained within the body of this PWS represent NASA SSC personnel unless specifically stated otherwise.

1 CONTRACT MANAGEMENT

PWS Section 1, Contract Management, identifies the overall management and business administrative duties that are applicable to or related to the performance of the functional areas described in this PWS. The Contractor shall provide a contract management capability to meet the requirements of this PWS and to innovatively and effectively respond to dynamic mission support requirements.

In performance of contract management functions, the Contractor shall:

Designate a single Point of Contact (POC) with contractual obligation authority for all contract administration functions and activities required in performance of this contract. This POC shall have access to all contract administration data and information related to performance of this contract. Additionally, this POC will function as an onsite Program Manager (PM) who shall have authority over all technical, business, personnel, performance, schedule and cost components of Contractor activities in execution of this PWS.

Perform technical, business and safety functions to plan, implement, track, report and deliver the required products and services described in the PWS and contract.

Ensure the implementation of management practices to proactively pursue innovation and technology advancement to enhance customer satisfaction and service delivery.

Ensure the implementation of effective systems engineering, business management and other quality practices to deliver the services in an efficient and integrated manner and at a sustained high level of success.

Implement practices to ensure effective communication of management, technical, quality, financial and customer satisfaction issues that may arise in the performance of this contract.

Support the execution of the Center’s established IT governance model, processes and policies to ensure well-informed strategy, policy, architecture, standards and investment decisions.

Apprise the SSC Contracting Officer (CO), SSC Contracting Officer’s Representative (COR) and CIO immediately of any issues that could have an adverse impact on successful performance of the contract requirements.

1.1 Project Management

The Contractor shall provide technical, financial, schedule and risk management of all ITS functions and tasks in accordance with applicable NASA policies and procedures listed in Appendix A of this PWS. In performance of these functions, the Contractor shall prepare and submit monthly reports of project plans, status, resources and schedules in accordance with all Data Requirements Descriptions (DRDs) specified in Attachment J-2 of this PWS. The Contractor shall:

Plan, document and execute all projects, tasks and operational functions in accordance with NASA program and project management policies and procedures. Refer to Appendix A for a listing of policies and procedures.

Complete requirements of this contract so work performed fully meets the performance objectives of the contract; is performed within the schedule; is accomplished within the contract value and any executed LOE Task Orders; and is accomplished in a safe, professional and high quality manner.

Capture and maintain accurate project and operations requirements.

Maintain project history and modifications requested by the Government.

Provide innovative management ideas, concepts or synergistic solutions that result in operational efficiencies for the Center.

Respond to changing service requirements and prioritize tasks to best accomplish the requirements of the contract to meet

Center and Agency priorities. Prioritization shall be validated with NASA/SSC CO, COR , CIO and Technical Managers.

Collect and report contract metrics data, including all metrics data specified in this PWS and additional metrics identified by the Government. Refer to Attachment J-2 DRDs for additional information on metrics collection and reporting.

Prepare and conduct monthly project/contract management reviews including presentation and discussion of project priorities, project statuses (technical, financial and schedule), significant accomplishments, contract metrics, risk management and problem areas.

1.2 Financial Management

The Contractor shall employ sound financial management practices and systems while utilizing flexible and innovative procedures to the maximum extent practical to ensure compliance with Government cost charging and reporting requirements. The Contractor shall operate within the contract value and each individual LOE task order amount. The Contractor shall be responsible for providing financial services that comply with the NASA financial systems’ requirements outlined in this section of the PWS to satisfy applicable reporting requirements.

The Contractor shall implement, maintain and operate work control and financial systems and processes that are capable of tracking at the applicable level of the PWS in addition to the individual LOE task orders. The work control and financial systems and processes shall:

Collect sufficient data to ensure accurate assessment of cost to NASA and reimbursable funding sources, PWS elements and task order LOE projects.

Track, control and report fixed price and LOE at the individual PWS and task order level.

Process a monthly cost file submission per MF02, Financial Management Report Detail (electronic).

Provide accurate and timely cost estimation for task order LOE projects.

The Contractor’s financial system shall interface with NASA financial systems to provide financial reports to comply with NASA’s financial reporting requirements. The Contractor shall provide a monthly accrual based on these reporting requirements. The NASA Office of the Chief Financial Officer must approve the accrual method including any changes. The Contractor’s system shall provide cost by Customer Code and PWS by fixed price and individual LOE task orders. The Contractor’s system shall provide workforce data by Work Year Equivalent (WYE) and hours at the same level as cost is reported. The detailed cost shall be provided monthly for inclusion in NASA’s financial systems in an electronic flat file format (reference MF02, Financial Management Report Detail (electronic)).

The Contractor shall conduct a monthly financial resources review (reference MF08, Monthly Resources Management Status Review, including example formats) as directed by the NASA CO in coordination with the NASA Deputy Chief Financial Officer of Resources to provide insight into financial performance and utilization of resources.

These reviews shall include, but are not limited to, the following data:

Government Fiscal Year (GFY) phased financial plan – both rate and cumulative for the fixed price PWS applicable level and individual LOE task orders by Customer Code

WYE with associated hours by PWS for Core and each LOE task requirement Actual cost and Accrued cost for each plan provided in the first bullet item listed above Projected GFY End of Year (EOY) estimate and Data Trending analysis Baseline adjustment analysis Variance analysis Contract Year comparison to GFY (Total Contract Level and by PWS) Contract Value Analysis and Trending

The Contractor shall support requests for development of the Government fiscal financial operating budget and other special budget exercises as required.

1.3 Documentation and Records Management

The Contractor shall ensure accurate and complete records (including vital records) of Government business are maintained in accordance with Federal requirements, NPR 1441.1, NASA Records Retention Schedules, and are segregated from company-owned records and from non-record materials. The term “records” is defined in 44 U.S.C. 3301 as “all books, papers, maps, photographs, machine readable materials or other documentary materials, regardless of physical form or characteristics, made or received by an agency of the United States Government under Federal law or in connection with the transaction of public business and preserved or appropriate for preservation by that Agency or its legitimate successor as evidence of the organization, functions, policies, decisions, procedures, operations or other activities of the Government or because of the informational value of data in them. Library and museum material made or acquired and preserved solely for reference or exhibition purposes, extra copies of documents preserved only for convenience of reference and stocks of publications and of processed documents are not included.” All data created for Government-use are Federal records subject to the provisions of 44 U.S.C. Chapters 21, 29, 31 and 33, the Freedom of Information Act (FOIA) as amended and the Privacy Act and must be managed and scheduled for disposition as provided in 36 Code of Federal Regulations (CFR) XII, Subchapter B. The Contractor shall:

Maintain a records management program and submit a records management plan in accordance with DR DM01.

Maintain a master records list and index of files in accordance with DR DM01.

Provide NASA or authorized representatives with access to all Government records. The Government reserves the right to inspect, audit and copy record holdings.

Submit an annual "Inventory of Records Holdings" to the NASA/SSC Records Manager, for which the records are maintained, in accordance with DR DM01.

Manage legacy Federal records (data created for Government use and delivered to, or falling under the legal control of, the

Government) inherited from previous contracts.

Leave all Government-owned records with NASA at the completion or termination of this contract. The Contractor shall deliver or disposition the records as directed by the SSC Records Manager.

Manage NASA-owned/Contractor held records in accordance with the following Agency policies:

‒ NPD 1440.6, NASA Records Management ‒ NPR 1441.1, NASA Records Retention Schedules ‒ NASA-STD-2822, Still and Motion Imagery Metadata Standard ‒ SPR 1400.1, Document Preparation, Numbering and Management ‒ SPR 1440.1, Records Management Program Requirements ‒ Title 36 of the CFR, Chapter XII, National Archives and Records Administration

PWS ITEM TITLE REQUIREMENTS

ESTIMATED

WORKLOAD

DATA

PERFORMANCE

STANDARD

1.3.a Records Management

Accumulate, create, maintain and dispose of Government records, including printed files and electronic media.

As Required Per standards listed above and DR

DM01

1.3.b Final Inventory of Government-owned Records

Deliver to the SSC Records Manager, 90 days prior to contract completion or termination, a final inventory of Government-owned records.

One (1) time at contract completion

DR DM02

1.3.c Volume Report Submit a volume report to accompany the final inventory, indicating the total quantity of records held. The volume shall be listed in cubic feet for hardcopy records and in megabytes for records in electronic formats. The SSC Records Manager will provide guidance on how to calculate the volume of hardcopy records.

One (1) time at contract completion

DR DM02

1.4 Property Management (Government Furnished Equipment (GFE), Facilities and Utilities)

The Contractor shall protect all Government equipment/property against loss or damage and assign individuals to be primary and alternate Equipment Custodians (EC) for items used in support of this contract. The Contractor may be liable for replacement of items lost. The Contractor shall participate in the NASA/SSC inventory reporting program as required in DR LS01. Any failure in contract performance or equipment damage shall be documented by the Contractor and immediately reported to the Government for review.

Refer to Attachment J-7, Government Furnished Property, for a complete listing of items that shall be managed by the ITS Contractor.

The Government will provide Government vehicles for the performance of work under this contract. Refer to Section H.23, Motor Vehicle Management, for additional information. The Contractor shall ensure proper vehicle operator care, inspections, operator maintenance and necessary steps to prevent misuse and damage to vehicles. The Contractor shall ensure that individual vehicle operators are licensed and are briefed on official use, base speed limits and seatbelt policies. Contractor will investigate vehicle incident, accident, misuse and abuse cases that involve their employees and recommend corrective action to the Government.

Contractor will reimburse the Government for any damage to vehicles caused by their employees. The Contractor shall report vehicle malfunctions to site vehicle maintenance and ensure the vehicle is made available for repairs or service. The Contractor may furnish their own vehicle to perform the requirements of this PWS with no liability to the Government.

The Government will provide facilities and utilities to the Contractor as defined in this Contract. Government facilities or portions thereof to be made available to the Contractor are identified in Attachment J-7. The Government will provide all utilities for Government facilities assigned to the Contractor for the performance of services identified in this Contract. The Contractor shall exercise reasonable efforts to conserve energy and comply with the requirements of SPR 8500.2, SSC Environmental Operations and Implementation Program Procedural Requirements, and SPLN-8500-0002, John C. Stennis Space Center Energy-Efficiency and Water Conservation 5-Year Plan.

WORKLOAD

DATA

PERFORMANCE

STANDARD

1.4.a Keep Government- Furnished Facilities in a Clean and Safe Condition and Exercise Reasonable Care, Security and Protection of Same

Government-furnished facilities are identified in Attachment J-7.

When occupied or utilized, comply with all energy and water conservation directives.

Refer to Attachment J-7

No instances of safety violation, fire protection discrepancy or energy or water conservation regulation violation.

1.5 Emergency Management

The Contractor shall establish and implement an Emergency Management Program across all contract functions in compliance with the SPLN-1040-0006, Emergency Management Plan. The Contractor must inform their employees of what actions to take in the event an extreme weather plan is activated. The Contractor shall maintain employee contact information for emergency notification purposes. The Contractor shall provide a list of key employees with associated contact information to the Government and update as changes occur. The Contractor shall establish and maintain work instructions and procedures to ensure adequate protection of IT assets, personnel and continuity of operations during emergencies.

The Contractor’s obligation may include resolution of unusual or emergency situations. The Contractor may be required to assist NASA, within the general scope of work, but in currently unidentified ways, in preparation for or in response to emergencies.

Obligations under this requirement shall only arise when one or more of the criteria at Federal Acquisition Regulation (FAR) 18.001, enabling NASA to utilize “Emergency Acquisition Flexibilities,” are met. If the emergency preparedness and response requirements result in changes to the contract, all contract adjustments will be processed in accordance with the Changes clause of this contract.

1.6 Personnel Management

The Contractor shall comply with requirements set forth in NPR 1600.1, NASA Security Program Procedural Requirements, and SPR 1600.1, SSC Security Requirements Handbook.

The Contractor is required to comply with Agency personal identity verification procedures identified in the contract that implement Homeland Security Presidential Directive-12 (HSPD-12), Office of Management and Budget (OMB) Guidance M-05-24 and Federal Information Processing Standards Publication (FIPS PUB) Number 201 which includes both physical and logical access. See FAR Clause 52.204-9. The Contractor shall provide qualified employees with required clearances. Internal network access is only given to U. S. citizens. A list of key personnel shall be provided in accordance with DR MA01. Contractor shall provide management of its employees and resources. The Contractor shall not employ any persons for work on this contract who are identified to the CO as a potential threat to the health, safety, security, general wellbeing or operational mission of the installation and its population.

Contractor shall establish standards for dress, appearance and conduct of their employees. Government-provided identification badges shall be prominently displayed at all times by Contractor employees while on the installation. Contractor “signature blocks” on e-mail and correspondence shall be structured to indicate that an individual is a Contractor. Employees who have day-to-day, direct customer contact shall be able to read, clearly write, speak and understand English.

Contractor shall provide technically competent personnel certified for the appropriate function. Employees shall be fully qualified to operate and maintain the systems to which they are assigned. The Contractor shall document a local on-the-job qualification and certification program for all employees to ensure that all knowledge standards are met and documented prior to allowing an employee to perform work without supervision.

Normal business hours for ITS support at SSC are 8:00 a.m. to 4:30 p.m., Monday through Friday except Federal holidays unless explicitly defined in sections of this PWS. Some support services will require activity outside of normal business hours to reduce downtime and potential impact to customers. The Contractor shall perform the work under this contract at the John C. Stennis Space Center, Stennis Space Center, Mississippi. Work may be performed at other locations if it is:

Specifically identified in this PWS, or Approved in writing by the CO.

Travel may be required to fulfill the requirements of this PWS. Locations and duration of travel will be specified by NASA technical managers during the execution of the contract. All travel must receive approval from the COR and the CO prior to departure. Refer to Section B for additional information on travel requirements and associated cost.

The Contractor shall use Industry Standards and Federal, state, SSC and local qualifications for licensing or certifications, or as otherwise may be required in specific sections. The Contractor shall ensure all personnel are trained for their assigned positions and that said training is maintained current for activities that require periodic re-training and/or re-certification. Employee shall not be allowed to perform a task for which the certification is not current. Examples of training that will require periodic maintenance are on-site courses associated with Safety and Health Procedures, such as Hearing Conservation, Lockout/Tagout, Asbestos Awareness and other related courses.

WORKLOAD

DATA

PERFORMANCE

STANDARD

1.6.a Furnish a Sufficient Number of Competent and Qualified Personnel to Accomplish PWS Services

Personnel must be properly trained, qualified and certified, if required, to perform the types of work requiring specific knowledge and skills as identified in all functional areas.

Contractor determined

No incident of an unqualified person, lapsed certification or license.

1.6.b Certified System Administrator

All individuals who perform as a System Administrator or have authority to perform functions normally performed by a System Administrator shall be industry certified.

Contractor determined

100% of all System Administrators are industry certified.

Certifications must be acceptable to

Government Program/ Operations Managers.

1.6.c Maintain Personnel Records

Records shall be maintained on certifications and licenses of required personnel as required in DR

RA04.

Contractor determined

Personnel records are accurate, current and complete with no instances of Privacy Act violations.

1.7 Safety, Health and Environmental (SHE)

NASA is strongly committed to the safety and health of the workforce, teamwork and integrity between organizations in order to achieve mission success. Safety requirements are a part of the occupational and environmental health of personnel and activities.

NASA’s commitment is achieved by the following SHE critical elements:

Management leadership and employee involvement System and worksite analysis Hazard prevention and control SHE training Environmental compliance

These elements allow for the establishment of a highly skilled, diverse and motivated workforce committed to achieving mission success. The NASA management team is committed to preventing human injury and ensuring the safety of all operations and products. The Contractor is expected to support these endeavors and demonstrate the same commitment.

SSC Safety and Mission Assurance Directorate (SMA) Technical Authority (TA):

The SSC SMA TA implementation involves the Safety, Quality, Risk Management, Independent Assessment and Mission Success aspects that are expected to function independently of Programs/Projects. This ensures the consideration of alternate views and the opportunity for dissenting opinions to be vetted and acted upon as necessary. On technical matters, the assigned SMA TA provides an organizationally and financially independent voice, equal to programmatic authority. The SMA TA resides in an SMA organization; is matrixed to support the program or project; and coordinates the SMA activities. Contractor workforce individuals will exercise technical consciousness by raising technical issues that have safety implications to their direct supervision and to the designated project/systems technical authorities.

The NASA SMA is the office of primary responsibility for the implementation and conduct of SMA TA across NASA. The Center Director is the final TA. The SSC Center Director has delegated specific responsibilities to the NASA SSC SMA Director as implemented in SPLN-1200-0003, SSC SMA Technical Authority Implementation Plan. All SSC NASA organizations, including supporting contractors, are expected to support this technical authority model.

The Contractor shall implement, operate and maintain a SHE Program in accordance with:

NPR 1800.1, NASA Occupational Health Program Procedure NPR 8621.1, NASA Procedural Requirements for Mishap and Close Call Reporting, Investigating and Recordkeeping NPR 8715.1, NASA Occupational Safety and Health Programs NPR 8715.3, NASA General Safety Program Requirements SPR 1280.1, John C. Stennis Space Center Management System Requirements SPR 7120.1, John C. Stennis Space Center Risk Management Procedural Requirements SPR 8500.2, John C. Stennis Space Center Environmental Operations and Implementation Program Procedural Requirements SPR 8715.1, John C. Stennis Space Center Safety and Health Program Requirements SSP-8715-0001, John C. Stennis Space Center Safety and Health Handbook SCWI-8500-0004-ENV, John C. Stennis Space Center Hazardous Material, Hazardous Waste and Solid Waste Plan SCWI-8500-0019-ENV, John C. Stennis Space Center Asbestos Hazard Control Plan SCWI-8715-0003, John C. Stennis Space Center Fall Protection Program SCWI-8715-0004, John C. Stennis Space Center Confined Space Entry Program SCWI-8715-0005, John C. Stennis Space Center Safety, Health, Housekeeping and Essential Item Inspections SCWI-8715-0016, John C. Stennis Space Center Close Call Reporting System (CCRS) SCWI-8830-0001, John C. Stennis Space Center Facility Manager Program Handbook SPLN-1200-0003, SSC Safety and Mission Assurance Technical Authority Implementation Plan SPLN-8500-0002, John C. Stennis Space Center Energy-Efficiency and Water Conservation 5-Year Plan SPLN-8621-0003, John C. Stennis Space Center Mishap Preparedness and Contingency Plan

Occupational Safety and Health Administration (OSHA), Environmental Protection Agency (EPA) and other Government safety and health regulations and industry standards, as applicable.

The Contractor shall operate Government-owned facilities and equipment in a safe manner according to OSHA guidelines, SSC’s Environmental Management System (EMS) and International Organization for Standardization (ISO) 14001 Standards. The Contractor shall prevent the unnecessary waste of resources. Contractor shall ensure that personal work areas present a clean, professional appearance at all times, and do not pose safety or security risks. Contractor will correct safety, security and resource discrepancies immediately, or report the discrepancy to the Government if unable to make the correction. Contractors will assist the Government in investigating safety or security deviations when related to Contractor functions or personnel.

The Contractor shall participate in the Facility Manager Program in accordance with SCWI-8830-0001, John C. Stennis Space Center Facility Manager Program Handbook. The program helps to ensure a safe, healthy and efficient workplace for all NASA SSC building occupants and provides for centralized reporting of facility issues. When requested by NASA, the Contractor shall appoint a Facility Manager for the buildings which are occupied by its employees.

SSC has been established as an OSHA-recognized Voluntary Protection Program (VPP) Star Site. The Contractor shall provide a Safety Program that is certified by OSHA VPP within 18 months after contract start.

The Contractor shall perform an annual SHE self-assessment of the Contractor’s SHE Program in accordance with DR SA02, Contractor Safety and Environmental Health Program Annual Self-Evaluation Report.

The Contractor shall ensure risks are managed through the systematic identification, assessment and control of hazards and their associated risks. The Contractor shall address Risk Management Planning as part of DR SA01, Safety and Health Plan. The Contractor shall use the NASA provided Integrated Risk Management Application (IRMA) database in accordance with SPR 7120.1, John C. Stennis Space Center Risk Management Procedural Requirements.

The Contractor shall develop, maintain and ensure the following deliverables are accurate and timely as defined in the specific DRs listed below:

DR SA01, Safety and Health Plan DR SA02, Contractor Safety and Environmental Health Program Annual Self-Evaluation Report DR SA03, Mishap and Safety Statistics Monthly Report

DR SA04, Mishap and Close Call Notification

WORKLOAD

DATA

PERFORMANCE

STANDARD

1.7.a Conduct Mishap Notification, Investigation and Corrective Action Reporting

The Contractor shall use the NASA Mishap Information System (NMIS) to record and track to closure all close calls and mishaps, as required in DR SA04. The Contractor shall conduct and provide support for close calls and mishap investigations, including any required followup to safety technical issues in accordance with NPR 8621.1, NASA Procedural Requirements for Mishap and Close Call Reporting, Investigating and Recordkeeping, and SPLN-8621-0003, John C. Stennis Space Center Mishap Preparedness and Contingency Plan. Notify the NASA SMA of all mishaps (including close calls) immediately.

Per Event

Compliance with NPR 8621.1 and

SPLN-8621-0003.

1.7.b

Develop Safety and Health Plan in Compliance with OSHA and VPP Requirements

The Safety and Health Plan must define the type, levels and inter-relationships of the documentation that defines the safety system as required in DR SA01.

One (1) Safety Plan Operations are in compliance with

SPR 8715.1.

1.8 Quality Assurance and Control

The Contractor shall submit a Quality Assurance Management Plan (QAMP) in accordance with DR RA01 that specifies the Contractor’s approach to assuring delivery of quality products, material and services. The Contractor shall also submit a QAMP Quarterly Summary Report in accordance with DR RA02.

The Contractor shall ensure all personnel performing work are properly trained, certified and qualified for assigned work requirements, to include recognition of job hazards for any equipment used.

The Contractor shall participate in the Government-Industry Data Exchange Program (GIDEP) and NASA Advisory Program in accordance with NPR 8735.1, Procedures for Exchanging Parts, Materials, Software and Safety Problem Data Utilizing the GIDEP and NASA Advisories, and SWI-8735-0001, John C. Stennis Space Center Government Industry Data Exchange Program (GIDEP)/NASA ALERTS Implementation. When assigned by the SSC NASA/GIDEP Coordinator, the Contractor shall evaluate the GIDEP and NASA Advisory documents for applicability and take appropriate action per program requirements. The Contractor shall input site specific information into the GIDEP System. When requested by the Government, the Contractor shall provide information on the usage of the GIDEP. When applicable, the Contractor shall establish and implement a parts management program for ensuring the integrity of all mechanical and electrical, electronic and electro- mechanical (EEE) parts in accordance with NPD 8730.2, NASA Parts Policy, and SPR 8730.2, John C. Stennis Space Center NASA/SSC Parts and Control.

The Contractor shall implement, operate and maintain a Quality Management System in accordance with NPD 8730.5, NASA Quality Assurance Program Policy; SPR 1280.1, John C. Stennis Space Center Management System Requirements; and American National Standards Institute (ANSI) American Society for Quality (ASQ) ANSI/ISO/ASQ Q9001, Quality Management Systems Requirements Standard, and the following:

NPD 1280.1, NASA Integrated Management System Policy NPD 8730.2, NASA Parts Policy NPD 8730.5, NASA Quality Assurance Program Policy NPR 8735.1, Procedures for Exchanging Parts, Materials, Software and Safety Problem Data Utilizing the GIDEP and NASA

Advisories SPR 1280.1, John C. Stennis Space Center Management System Requirements SPR 8730.2, John C. Stennis Space Center NASA/SSC Parts Control Program SCWI-8710-0004, John C. Stennis Space Center Internal Audit Process SCWI-8730-0002, John C. Stennis Space Center Corrective Action, Preventive Action and Continual Improvement SCWI-8730-0004, Instructions to Initiate and Process Form SSC 715- CPI Report SWI-8735-0001, John C. Stennis Space Center Government Industry Data Exchange Program (GIDEP)/NASA ALERTS

Implementation

The Contractor will record all performance/surveillance observations in writing. When an observation indicates defective performance, the Contractor shall identify the deficiency in writing to NASA. The written response shall contain the action taken to correct the deficiency, the action taken to prevent future occurrences and identify why the Contractor’s Quality Control program failed to detect and fix the deficiency. NASA may require a meeting with the Contractor to discuss quality assurance issues. Written minutes of any such meetings shall be recorded in the contract files and acknowledged by the Contractor. If the Contractor does not concur with any portion of the minutes, such non-concurrence shall be provided in writing to the CO within ten (10) working days.

The Contractor shall develop, maintain and ensure the following deliverables are accurate and timely as defined in the specific DRs listed below:

DR RA01, Quality Assurance Management Plan DR RA02, Quality Assurance Management Plan (QAMP) Quarterly Summary Report

WORKLOAD

DATA

PERFORMANCE

STANDARD

1.8.a

Develop QAMP that defines the Contractor’s Quality Management System. The Plan shall be in Compliance with

NPD 8730.5, SPR

1280.1 and ANSI/

ISO/ASQ Q9001

The Quality Plan must define the type, levels and inter-relationships of the documentation that defines the organization quality system. A “tree” diagram showing various types of policies, plans, procedures and work instructions related to one another could be used.

One (1) Quality Plan

No instance of non-compliance.

1.8.b Conduct and Support Compliance Audits

The Contractor shall conduct internal compliance audits and provide support during audits or surveys performed by the Government or by third parties to include data entry into the NASA provided database. The Contractor shall record

Conduct internal audits per Contractor’s plan

Support three (3) -

No instance of non-compliance.

and track audit findings to closure in accordance with SCWI-8710-0004. The Contractor shall also track to closure all quality corrective action requests assigned to the Contractor through the NASA Corrective Action System by NASA SMA and the SMA Support Contractor.

five (5) Government or third party audits annually

1.9 Information Technology

This portion of the PWS addresses the Contractor’s requirements for utilization of IT resources in the execution of the contract.

Requirements for IT systems and services delivered to the Government are defined in Sections 2 through 6 of this PWS.

The Government will provide to the Contractor computers, telecommunications, network connectivity and related services required in the performance of services covered by this Contract. All requests shall be submitted to the Office of the Chief Information Officer (OCIO) for guidance and approval. The Contractor shall use SPD 2800.1, Provision of Institutionally Funded IT Resources and Services, for guidance.

The Government will not provide computer services required for the Contractor’s internal operations such as corporate accounting or other Contract accounting. Development, implementation, maintenance and use of equipment, supplies, software and hardware systems shall be in compliance with NASA IT policies.

The Contractor shall adhere to all Agency and Center IT policies and procedures and any approved modifications to these policies and procedures to include:

NPD 2540.1, Personal Use of Government Office Equipment Including Information Technology NPD 2800.1, Managing Information Technology NPD 2810.1, NASA Information Security Policy NPR 2800.2, Electronic and Information Technology Accessibility NPR 2810.1, Security of Information Technology NPR 2841.1, Identity, Credential and Access Management NPR 7120.7, NASA Information Technology and Institutional Infrastructure Program and Project Management Requirements NPR 7150.2, NASA Software Engineering Requirements

SPD 2800.1, John C. Stennis Space Center Provision of Institutionally Funded IT Resources And Services SPD 2800.4, John C. Stennis Space Center Policy Directive Information Technology Project Management SPD 2810.1, John C. Stennis Space Center Policy Directive Information Technology (IT) Network Security NASA-STD-2804, Minimum Interoperability Software Suite NASA-STD-2805, Minimum Hardware Configurations

IT Security: The Contractor shall ensure its employees, in performance of the contract, complete annual NASA IT security training by the designated due date. The Contractor shall use System for Administration, Training and Educational Resources for NASA (SATERN) or the current NASA training system to meet this requirement. The Contractor shall ensure its employees adhere to NASA IT Security policies, procedures, computer ethics and best practices.

Security of the Contractor’s IT resources (including personnel) shall be in adherence to NASA Agency and the respective Center’s IT Security standards as outlined in NPR 2810.1 and SPD 2810.1. The Contractor shall implement and provide an Information Security Management Plan as specified in DR IT01 for all personnel and Contractor owned, maintained or operated IT components.

NASA IT security personnel will have the authority to conduct security reviews at all Contractor locations that possess or use NASA data or that operate, use or have access to NASA information systems. NASA data is defined as any data which is collected, generated, maintained or controlled on behalf of NASA. This includes any methods used in the generation of said data. There should be no expectation of privacy when utilizing the Center’s networks. These responsibilities shall extend to equipment that is acquired by the Contractor in support of the performance of the contract. All computer systems operated by the Contractor in the performance of this contract shall have virus protection and regular vulnerability scanning utilizing the Agency or Center identified tools. IT security vulnerabilities shall be appropriately identified and remediated. IT security incidents shall be reported in accordance with NPR 2810.1 and all applicable Center policies and procedures. The Contractor shall assist the Government in maintaining a level of security that minimizes the threat of unauthorized access to IT resources and the destruction of NASA data.

The Contractor shall develop, maintain and ensure accurate and timely delivery of all requirements specified in DR IT01, Information Security Management Plan.

Communication Systems: Handheld ultra-high frequency (UHF) radio, desktop telephone and mobile telephone communication capabilities will be provided to the Contractor by the Government to support ITS tasks. The type and quantity of equipment is determined by the OCIO. The Government will provide encrypted radios for required functions. Any new systems requiring use of radio frequencies must be authorized by the SSC Spectrum Manager.

Desktop and Mobile Computer Hardware/Software: The Government will provide appropriate hardware and software as specified in NASA’s Basic Interoperability Standards: NASA-STD-2804 and NASA-STD-2805. The ITS Contractor shall provide access to Government provided IT resources as needed for repair, inventory control and/or configuration management (CM).

Hosting/System Administration: Hosting and system administration responsibilities for data generated and/or maintained for the execution of this contract are based on the following categorizations:

NASA Data: NASA data is defined as any data which is collected, generated, maintained or controlled on behalf of NASA.

This includes any methods used in the generation of said data. Any system, database, spreadsheet or other file that contains NASA data must reside in the Stennis Data Center (SDC). The Government may at any time access systems and review any information contained therein. NASA data, including all changes made under this contract, is Government property and is for the exclusive use of the Government. This data may not be transferred to another location, in any form, without the written consent of the Government. This data may not be used by the Contractor for any purpose other than work required in the performance of this Contract.

Corporate Data: The Contractor is required to furnish all hardware and software necessary to meet contract requirements that are not provided by the Government such as: human resources, corporate purchasing, corporate accounting or other contract accounting functions necessary to execute the scope of the ITS contract. The Contractor is not permitted to operate systems on a NASA network that are not required to execute the scope of the ITS contract. The Contractor shall be responsible for ensuring that corporate systems residing on a NASA network comply with all NASA IT security policies and are covered under an IT System Security Plan. The Contractor is responsible for the administration and management of corporate systems.

2 INFORMATION TECHNOLOGY PLANNING, POLICY AND MANAGEMENT SERVICES

2.1 CIO Technical Support

The Contractor shall provide technical support to the functions and services associated with the SSC OCIO. Support includes researching new technologies and commercial off the shelf (COTS) products for possible application and improvements. The Contractor shall analyze the benefits of the technology to include potential process improvements and cost reductions. Additionally, the Contractor shall provide Rough Order of Magnitude (ROM) estimates to accomplish the proposed solutions. The Contractor shall also provide support for the Center provided IT services. Technical support shall be provided for the following areas:

2.1.1 Strategic Planning Support Services: The contractor shall provide near and long term information technology strategic planning support to the SSC OCIO. Support includes:

Assisting in the development and revision of the SSC OCIO strategic plan to ensure that NASA, Agency OCIO and SSC strategic plan objectives are met.

Assisting in the assessment of new information technology capabilities including: conducting market research, developing cost benefit analyses, conducting feasibility studies and developing implementation options/plans.

Research, analysis and planning support for the adoption of Agency and Center IT initiatives.

Coordinating with the OCIO, SSC Program POCs and subject matter experts.

2.1.2 IT Governance: The contactor shall provide support in the development and implementation of IT governance and management structures, processes and related tools. Support includes:

Assisting in the development of applicable IT Policies and procedures.

Providing support to establish and manage organizational structures, such as boards and committees, in support of CIO activities.

OCIO risk management support including identification and tracking of SSC IT risks.

Capital Planning and Investment Control (CPIC) support.

2.1.3 Outreach: Perform outreach activities such as developing OCIO outreach material, interfacing with NASA SSC IT customers and coordinating the annual OCIO IT Expo. The Contractor shall work with designated IT Center representatives to support outreach activities and provide recommendations on the implementation of new IT-related business practices. Additionally, outreach activities shall promote awareness and educate the user community of SSC OCIO IT services.

2.1.4 IT Service Management: The Contractor shall review IT service requests (SRs) for validity, correctness and track orders until completion. This includes coordinating orders and forwarding to the appropriate organizations for processing and implementation. On a monthly basis, the Contractor shall provide metrics pertaining to the processing of IT SRs and ad-hoc reports as requested by the OCIO. The Contractor shall use government provided seat and service request systems for IT service management functions.

The contractor shall:

Initiate and/or assist in the initiation and processing of seat move, add, change and delete (MACD) requests for: telephone, radio, cable television, LAN, software and desktop.

Conduct daily service reviews with all aforementioned seat service providers to resolve issues, status MACD orders and establish daily and future seat schedules/plans.

Maintain cost centers and cost center approvers.

Provide informal training for end users and cost center approvers.

Provide monthly seat cost processing/allocation for the following seats: telephone, radio, cable television and LAN.

Provide seat reconciliation services for SSC and Agency (I3P) seat management systems.

Coordinate with service providers/technical teams and SSC seat customers to ensure that all IT service management tasks are completed within specified metrics.

2.1.5 Enterprise Architecture (EA) Support: The contractor shall provide EA support to the SSC OCIO.

The contractor shall:

Assist in review of EA documentation, policies and procedures Participate in Agency EA teams / activities Assist in development of EA data call responses.

2.1.6 IT Policies and Procedures Support: Develop policies, procedures, work instructions and related documentation as required to support Center and IT requirements.

WORKLOAD

DATA

PERFORMANCE

STANDARD

2.1.a IT Governance Support NASA in the establishment and management of IT governance structures such as boards and committees in support of CIO activities.

SSC CIO Executive Board (or equivalent) Meetings: three (3) per year or as

Presentation materials, meeting minutes and related documentation are accurate and timely.

determined by the board chair.

SSC IT Project & Services Management Board (or equivalent) Meetings:

quarterly or as determined by the board chair.

2.1.b Outreach Develop OCIO outreach materials and interface with NASA SSC IT customers. Coordinate and support the SSC OCIO IT Expo.

OCIO IT Expo – Annually

Outreach Materials as required

Accurate and timely data.

2.1.c IT Service Management

Review IT SRs for validity, correctness and track orders until completion.

12,000 orders processed annually.

Accurate and timely data.

2.1.d IT Service Management

Provide metrics report pertaining to the processing of IT SRs and ad-hoc reports as requested by the OCIO as required in DR IT03.

See 2.1.c Accurate and timely data.

2.1.e IT Service Management

Provide seat MACD SR support. See 2.1.c Single end user (all seats assigned to user) orders submitted within two (2) hours of receipt.

Group orders (multiple end users) submitted within one (1) business day of receipt or per contractor/ customer agreement.

2.1.f Enterprise Architecture Services

Participate in Agency meetings and provide SSC data as required.

Bi-weekly teleconference.

Bi-annual meetings.

Data accurate and timely.

2.1.g Documentation Preparation

Documents are written in accordance with NASA Standards listed in Appendix A.

Approximately one

(1) document per month

Accurate and timely.

2.2 IT Security Services

The Contractor shall provide IT Security Services for all SSC managed resources. The Contractor shall provide IT Security Program Support, IT Security Risk Management, Intrusion Detection (ID)/Incident Response (IR) and IT Security Systems Engineering/ Design/Implementation in accordance with the latest NASA, National Institute of Standards and Technology (NIST) and Federal Information Security Management Act (FISMA) requirements. NASA encourages innovation and welcomes new approaches to solve IT Security problems performed in collaboration with the Government.

2.2.1 NASA IT Security Program: The Contractor shall support the NASA/SSC Center Chief Information Security Officer (CISO) in implementing and managing the NASA IT Security Program in accordance with NPR 2810.1, Security of Information Technology. The CISO’s role is to develop Center-wide IT Security policies and guidance, to provide computer security awareness and training, to maintain an IR capability and to document, review and report the status of the Center IT Security Program. The CISO’s responsibilities are further defined in NPR 2810.1. The Contractor shall provide the following support elements:

Provide primary IT Security POC to support the Government on all issues and functions related to IT Security.

Staying current on information technologies and/or products.

Provide updates for maintaining the NASA/SSC IT Security Program Official Web page.

Participate in Agency IT Security…