CSS_-_Hitachi_Appliance_Maintenace_and_Support_HItachi_Storage_Platform.docx

NARA – 88310319Q00118 Hitachi Appliances Maintenance and Support This is a combined synopsis/solicitation for commercial items prepared in accordance with the format in FAR Subpart 12.6, Streamlined Procedures for Evaluation and Solicitation for Commercial Items as supplemented with additional information included in this notice. This announcement constitutes the only solicitation; quotations are being requested and a written solicitation will not be issued. The solicitation number is 88310319Q00118 and is issued as a Request for Quotation (RFQ). The solicitation document and incorporated provisions and clauses are those in effect through Federal Acquisition Circular 2019-03 effective July 12, 2019. This is a Brand Name RFQ under NAICS code 541519, Other Computer Related Services. CONTRACT LINE ITEM NUMBER(S): See Attachment 1, Schedule of Prices. REQUIREMENT: The National Archives and Records Administration (NARA) has a requirement to obtain a Hitachi Appliance Maintenance, Support, and Licensing for Hitachi Storage Platform. See Attachment 2 through Attachment 6, Requirements. PERIOD OF PERFORMANCE: The period of performance is August 16, 2019 through August 15, 2020. Delivery and acceptance are via the software; not a physical location. The following Federal Acquisition Regulation (FAR) clauses are incorporated and are to remain in full force in any resultant purchase order. FAR provisions will be removed prior to award. FAR provision 52.212-1, Instructions to Offerors - Commercial Items (Oct 2018). Addenda: (1) Change paragraph (c) to read: Period for acceptance of offers. The offeror agrees to hold the prices in its offer firm for 30 calendar days from the date specified for receipt of offers. (Oct 2018). (2) Delete paragraph (h), Multiple Awards. - see below for additional quotation submission instructions. EVALUATION (In lieu of FAR provision 52.212-2): Evaluation and award will be in accordance with Simplified Acquisition Procedures at FAR 13.106, Soliciting Competition, Evaluation of Quotations or Offers, Award and Documentation authorized by FAR Subpart 13.5, Simplified Procedures for Certain Commercial Items as prescribed by FAR 12.301(c)(2). Selection of the Contractor for this purchase order will be based on NARA’s assessment of the best overall value to the Government. Accordingly, best value for this purchase order will be obtained through a lowest price technically acceptable evaluation. Exceptions taken to any terms and conditions stated in the RFQ must be clearly outlined on a separate page of the Contractor’s quotation entitled “Exceptions”. The Contractor must also include a justification and the cost impact of each exception noted. However, Exceptions may render the quotation unacceptable for award. The Government reserves the right to make an award on the initial quotation without communicating with contractors. For evaluation purposes, Contractors must provide pricing for each Contract Line Item Number (CLIN). The evaluated Total Purchase Order Price will be determined by summing the total price for each CLIN. The Total Purchase Order Price will be used to determine the lowest price. FAR provision 52.212-3, Offeror Representations and Certifications - Commercial Items (Oct 2018) - The Offeror shall complete only paragraph (b) of this provision if the Offeror has completed the annual representations and certification electronically in the System for Award Management (SAM) accessed through https://www.sam.gov. If the Offeror has not completed the annual representations and certifications electronically, the Offeror shall complete only paragraphs (c) through (u) of this provision. FAR clause 52.212-4, Contract Terms and Conditions - Commercial Items (Oct 2018) – see Attachment 8, Additional NARA Terms and Conditions (Addenda to FAR clause 52.212-4). FAR clause 52.212-5, Contract Terms and Conditions Required to Implement Statutes or Executive Orders - Commercial Items (May 2019) - see Attachment 9, FAR Clauses for the full text of this clause and for additional applicable FAR clauses. FAR provision 52.217-5, Evaluation of Options (Jul 1990). The Contractor is required to be registered in the System for Award Management (SAM) and maintain registration until final payment in accordance with FAR provision 52.204-7, System for Award Management (Oct 2018). Full text provisions and clauses can be found at http://www.acquisition.gov. QUOTATION DUE DATE: Quotations must be received by 12:00 PM ET on August 7, 2019. Failure to submit quotations by the due date and time may result in rejection of the quotation as untimely. Contractors submitting via e-mail are cautioned to allow one extra business day for delivery and confirm receipt of quotation as the e-mail will need to pass through IT security. QUOTATION SUBMISSION INSTRUCTIONS: This is a Brand Name requirement. Therefore, quotations for other than Hitachi Appliance Maintenance, Support, and Licensing for Hitachi Storage Platform will not be considered. Contractors must submit proof, in writing from the Original Equipment Manufacturer (OEM), of its status as an Authorized/Certified reseller of the maintenance, support and licensing required. Contractors must also submit a completed copy of Attachment 1, Schedule of Prices and Attachment 2 through Attachment 6, Requirements with its quotation. The contractor’s quotation will be considered technically unacceptable without providing this documentation. NARA requests that contractors email one (1) copy of the quotation to: Ms. Tyrice Buie (Contractor), Contract Specialist at tyrice.buie@nara.gov.

ATTACHMENT 1

SCHEDULE OF PRICES

Period of Performance: August 16, 2019 through August 15, 2020

CLIN

DESCRIPTION

QTY

UNIT OF ISSUE

TOTAL FIRM-FIXED PRICE

The Contractor shall provide EOP 44 Primary (DATR) Maintenance Renewal, EOP 44 Replica (E&S) Maintenance Renewal, EOP CAT Environment Maintenance Renewal, and EOP Tenant 43 on 44 Replica Maintenance Renewal in accordance with Attachment 2 through Attachment 5, Requirements.

Lot

The Contractor shall provide Acquisition Services Division & Center for Legislative Archives maintenance and support in accordance with Attachment 6, Requirements.

Lot

TOTAL PURCHASE ORDER PRICE:

CLIN = Contract Line Item Number; QTY = Quantity

ATTACHMENT 2

REQUIREMENTS

EOP PRIMARY (DATR) MAINTENANCE RENEWAL

Period of Performance: August 16, 2019 through August 15, 2020

Unified Compute Platform – Serial #10097

Unified Compute Platform Software Support

Compute Blade System 500 Maintenance

Chassis - Serial #Y00000640

Blades - Serial #Y00002439, #Y00002421, #Y00001126, #Y80000782, #Y00002424, #Y00002423, #Y00001123, #Y00001332

Hitachi

043-992128-01.P SVC Compute Blade 500 Chassis 24x7x2 Onsite Maint (PREM) Yr-B 1Mo

043-992139-01.P SVC Compute Blade 500 Blade 24x7x2 Onsite Maint (PREM) Yr-B 1Mo

VMware Software Support

HUS VM - Serial #211705

HUS VM Maintenance Support

HUS VM Perpetual Software Support

304-232001-03L.P SVC Mo HUS VM Hitachi BOS Unlmtd Cap Active Lic - SW Sppt

304-232002-03L.P SVC Mo HUS Vm HCS Analytics Unlmtd Cap Active Lic - SW Sppt

304-232016-03.P SVC Mo HUS VM BOS flash optimization Base License (20TB) - SW Sppt

Cisco Platform HW Maintenance - Serial #SSSI191202C7 & #SSSI191202C4

Compute Rack 210H Product Maintenance

Serial #323GQ-CR210HM-NDN-Y00005918

Serial #323GQ-CR210HM-NDN-Y00003142

043-992256-01.P SVC Compute Rack 210H 24x7x2 Onsite Maint (PREM) Yr-B 1Mo

VMware Software Support

Hitachi Content Archiver Software Support

Hitachi Content Platform VM Software Support

HCP-S Maintenance Support - Serial #30062 & #30063

043-993308-01.P SVC HCP S10 Node Capacity Upgrade PREMIUM Maint Yr-B 1Mo

Hitachi Content Archiver Software Support

Hitachi Data Discovery NEO Software Support

Compute Rack 220H Product Maintenance

Serial #GQ-CR220HM-NDN-Y00001193

Serial #GQ-CR220HM-NDN-Y00001188

Serial #323GQ-CR220HM-NDN-Y00001197

Serial #323GQ-CR220HM-NDN-Y00001196

Serial #323GQ-CR220HM-NDN-Y00001191

Serial #323GQ-CR220HM-NDN-Y00001189

043-992269-01.P SVC Compute Rack 220H 24x7x2 Onsite Maint (PREM) Yr-B 1Mo

Cisco Maintenance - Serial #FOC1934R20M & #FOC1934R23M

SUBTOTAL CLIN 0001 PRICE:

ATTACHMENT 3

EOP 44 REPLICA (E&S) MAINTENANCE RENEWAL

Converged Data Center Solutions - Serial #10319

Unified Compute Platform Software Support

Compute Blade System 500 Maintenance - Serial #Y80000361

Blades –Serial #Y90000832, #Y00004431, #Y00004609, #Y80000013

#Y00000062, #Y00000065, #Y00000078, #Y00000082

043-992128-01.P SVC Compute Blade 500 Chassis 24x7x2 Onsite Maint (PREM) Yr-B 1Mo

SVC Compute Blade 500 Blade 24x7x2 Onsite Maint (PREM) Yr-B 1Mo

VMware Software Support

VCS6-STD-P-SSS-C.P

Support for vCenter Server 6 Standard for vSphere 6 for 1 Year

VS6-EPL-P-SSS-C.P

Support for VMware vSphere 6 ENT Plus for 1 processor for 1 year

Cisco Platform HW Maintenance

Serial #SSSI1945010R & #SSSI194500ZY

CON-SNTP-N5548O-US.P

N5548(OSM) Smartnet 24x7x4 - US

VSP G600 - Serial #440952

VSP G600 Software Support

304-236038-010.P SVC Mo VSP G400-G600-Hitachi Perf Analytics-10TB Block-SW Sp

304-236038-06B.P SVC Mo VSP G600 - Hitachi Perf Analytics - Base Lic - SW Spp

304-236038-080.P SVC Mo VSP G400-G600-Hitachi Perf Analytics-80TB Block-SW Sp

304-236038-020.P SVC Mo VSP G400-G600-Hit Command Suite Analytics-20TB Block-SW Sppt

304-236038-UL.P

SVC Mo VSP G400-G600-Hit Command Suite Analytics-TB Upg to UNL-SW Sppt

VSP G600 Maintenance Support

Converged Data Center Solutions

Compute Rack 210H Product Maintenance

Serial #323GQ-CR210HM-NDN-Y00006037 &#323GQ-CR210HM-NDN-Y00005712

043-992256-01.P SVC Compute Rack 210H 24x7x2 Onsite Maint (PREM) Yr-B 1Mo

VMware Software Support

Support for VMware vSphere 6 ENT Plus for 1 processor for 1 year

Hitachi Content Platform - Serial #10632

Hitachi Content Archiver Software Support

Hitachi Content Platform VM Software Support

HCP-S Maintenance Support

043-993308-01.P SVC HCP S10 Node Capacity Upgrade PREMIUM Maint Yr-B 1Mo

Hitachi Content Archiver Software Support

Brocade Virtual Traffic Manager

MNT-STM-FIPS-4000-1

Support - FIPS Add-On Module - FIPS 140-2 Level 1, 1 YR

SUBTOTAL CLIN 0001:

ATTACHMENT 4

EOP CAT ENVIRONMENT MAINTENANCE RENEWAL

Period of Performance: August 16, 2019 through August 15, 2020

Unified Compute Platform - Serial #10404

Unified Compute Platform Software Support

Compute Blade System 500 Maintenance

Chassis - Serial #Y80000402

Blades - Serial #Y00005214, #Y00005215, #Y00004548, #Y00004550

SVC Compute Blade 500 Chassis 24x7x2 Onsite Maint (PREM) Yr-B 1Mo

SVC Compute Blade 500 Blade 24x7x2 Onsite Maint (PREM) Yr-B 1Mo

VSP G400 - Serial #441639

VSP G400 Maintenance Support

043-993452-01.P SVC VSP G DRO 1Mo - HDD Disk Retention Option (per HDD)

VSP G400 Software Support

304-236032-120.P

SVC Mo VSP G400-G600 - SVOS - 120TB Block - SW Sppt

304-236032-04B.P

SVC Mo VSP G400 - SVOS - Base Lic - SW Sppt

304-236032-UL.P

SVC Mo VSP G400-G600 - SVOS - TB Upg to UNL - SW Sppt

304-236038-UL.P

SVC Mo VSP G400-G600-Hit Command Suite Analytics-TB Upg to UNL-SW Sppt

Cisco Platform HW Maintenance - Serial #SSSI203300PS & #SSSI203601YJ

CON-SNTP-N5548O-US.P

N5548(OSM) Smartnet 24x7x4 - US

Server for Solutions Multi-Node T41S-2U Product Maintenance

Chassis - Serial #QTFCKJ54600212

Nodes - Serial #QTFCKJ54600359 & #QTFCKJ54700361

043-993518-01.P SVC Mo Server for Solutions Multi-Node T41S-2U Svr Node PREM Yr-B

043-993549-01.P SVC Mo Server for Solutions Multi-Node T41S-2U Chassis PREM Yr-B

043-993553-01.P SVC Mo Server for Solutions Multi-Node Node DRO Per Drive HDD SSD

VMware Software Support

Support for VMware vSphere 6 ENT Plus for 1 processor for 1 year

VCS6-STD-P-SSS-C.P

Support for vCenter Server 6 Standard for vSphere 6 for 1 Year

Hitachi Content Platform - Serial #10761

HCP-S Maintenance Support

HCP Economic Storage Software Support

Hitachi Content Archiver Software Support

Hitachi Content Platform VM Software Support

SVC Mo HCP VM Software 1TB (up to 40TB) Lic - SW Sppt

ATTACHMENT 5

EOP Tenant 43 MAINTENANCE RENEWAL

Hitachi Content Platform - Serial #10769

HCP-S Maintenance Support

HCP Economic Storage Software Support

TOTAL CLIN 0001 PRICE:

ATTACHMENT 6

ACQUISITION SERVICES DIVISION &

CENTER FOR LEGISLATIVE ARCHIVES

HCP500 Hardware Support PRODUCTION PRIMARY

Brocade Hardware Maintenance

043-991417-01.P SVC Brocade FC Switch Pkg HCP500 Remote Support PREM 1Mo (6 Units)

043-991472-01.P

SVC HCP Small Base Support PREM 1Mo

S/N: ALM2538H031 Row Rack: 10.09 U27

S/N: ALM2538H02w Row Rack: 10.09 U28

S/N: ALM2538H038 Row Rack: 10.09 U29

S/N: ALM2538H03B Row Rack: 10.09 U30

S/N: ALM2538H02M Row Rack: 09.09 U 27

S/N: ALM2538H02T Row Rack: 09.09 U 28

Compute Rack 220 Product Maintenance

043-991986-01.P SVC Compute Rack 220 24x7x2 Onsite Maint (PREM) Yr-B 1Mo (32 Servers)

S/N: 00000262 Row Rack 10.09 U1

S/N: 00000260 Row Rack 10.09 U2

S/N: 00000244 Row Rack 10.09 U3

S/N: 00000243 Row Rack 10.09 U4

S/N: 00000245 Row Rack 10.09 U5

S/N: 00000241 Row Rack 10.09 U6

S/N: 00000246 Row Rack 10.09 U7

S/N: 00000242 Row Rack 10.09 U8

S/N: 00000258 Row Rack 10.09 U10

S/N: 00000063 Row Rack 10.09 U11

S/N: 00000080 Row Rack 10.09 U12

S/N: 00000078 Row Rack 10.09 U13

S/N: 00000098 Row Rack 10.09 U14

S/N: 00000230 Row Rack 10.09 U15

S/N: 00000096 Row Rack 10.09 U16

S/N: 00000099 Row Rack 10.09 U17

S/N: 00000100 Row Rack 10.09 U18

S/N: 00000065 Row Rack 10.09 U19

S/N: 00000097 Row Rack 10.09 U20

S/N: 00000094 Row Rack 10.09 U21

S/N: 00000095 Row Rack 10.09 U22

S/N: 00000202 Row Rack 9.09 U3

S/N: 00004201 Row Rack 9.09 U2

S/N: 00004202 Row Rack 9.09 U1

S/N: 00003465 Row Rack 9.09 U10

S/N: 00003466 Row Rack 9.09 U9

S/N: 00000220 Row Rack 9.09 U4

S/N: 00000201 Row Rack 9.09 U6

S/N: 00000219 Row Rack 9.09 U5

S/N: 00000196 Row Rack 9.09 U8

S/N: 00000195 Row Rack 9.09 U7

S/N: 00000234 Row Rack 10.09 U9

Hitachi Content Archiver Software Support

304-210779-13E.P

SVC HCA 100GB Incr (500.1-1000TB) Lic

61200

304-210883-03.P

SVC HCA Object Replication License

Hitachi Data Discovery Software Support

304-220586-03D.P SVC Mo Hitachi Data Discovery Suite for HCP 1 Node (> 10) Lic - SW Sprt

HUS 150

043-992033-01.P

HUS 150 Svc Premium Upg Yr-B+ 1Mo (2 Units)

S/N: 93040434 Row Rack 10.08 U1

S/N: 93040246 Row Rack 09.08 U2

043-992045-01.P

HUS DBS Svc Premium Upg Yr-B+ 1Mo (SFF Tray) (10 Units)

S/N: 200742 Row Rack 10.08 U28

S/N: 200746 Row Rack 10.08 U30

S/N: 201356 Row Rack 10.08 U32

S/N: 206623 Row Rack 10.08 U34

S/N: 206624 Row Rack 10.08 U36

S/N: 204313 Row Rack 10.08 U38

S/N: 206245 Row Rack 10.08 U40

S/N: 203179 Row Rack 09.08 U17

S/N: 216103 Row Rack 09.08 U22

S/N: 100184 Row Rack 09.08 U19

043-992072-01.P

HUS DBX Svc Premium Upg Yr-B+ 1Mo (LFF Tray) (9 Units)

S/N: 200007 Row Rack 10.08 U4

S/N: 200095 Row Rack 10.08 U8

S/N: 100151 Row Rack 10.08 U12

S/N: 200436 Row Rack 10.08 U16

S/N: 200196 Row Rack 10.08 U20

S/N: 200162 Row Rack 10.08 U24

S/N: 202334 Row Rack 09.08 U4

S/N: 202300 Row Rack 09.08 U8

S/N: 202195 Row Rack 09.08 U12

304-230199-03.P

SVC Mo HUS 150 Base Operating System M Lic - SW Sppt

304-230217-03.P

SVC Mo HUS 150 TnM Lic - SW Sppt

HCP500 Hardware Support PRODUCTION REPLICATION

Brocade Hardware Maintenance

043-991417-01.P SVC Brocade FC Switch Pkg HCP500 Remote Support PREM 1Mo (4 Units)

SVC HCP Small Base Support PREM 1Mo

S/N: ALM2538H037 Row Rack 10.07 U27

S/N: ALM2538H02P Row Rack 10.07 U28

S/N: ALM2538H03A Row Rack 10.07 U29

S/N: ALM2538H036 Row Rack 10.07 U30

Compute Rack 220 Product Maintenance

SVC Compute Rack 220 24x7x2 Onsite Maint (PREM) Yr-B 1Mo (22 Servers)

S/N: 00000198 Row Rack 10.07 U1

S/N: 00000190 Row Rack 10.07 U2

S/N: 00000199 Row Rack 10.07 U3

S/N: 00000200 Row Rack 10.07 U4

S/N: 00000187 Row Rack 10.07 U5

S/N: 00000206 Row Rack 10.07 U6

S/N: 00000192 Row Rack 10.07 U7

S/N: 00000207 Row Rack 10.07 U8

S/N: 00000205 Row Rack 10.07 U9

S/N: 00000168 Row Rack 10.07 U10

S/N: 00000072 Row Rack 10.07 U11

S/N: 00000077 Row Rack 10.07 U12

S/N: 00000079 Row Rack 10.07 U13

S/N: 00000125 Row Rack 10.07 U14

S/N: 00000128 Row Rack 10.07 U15

S/N: 00000103 Row Rack 10.07 U16

S/N: 00000102 Row Rack 10.07 U17

S/N: 00000066 Row Rack 10.07 U19

S/N: 00000127 Row Rack 10.07 U20

S/N: 00000081 Row Rack 10.07 U21

S/N: 00000064 Row Rack 10.07 U22

S/N: 00000101 Row Rack 10.07 U18

Hitachi Content Archiver Software Support

304-210779-13E.P

SVC HCA 100GB Incr (500.1-1000TB) Lic

61200

SVC HCA Object Replication License

Hitachi Data Discovery Software Support

HUS 150

HUS 150 Svc Premium Upg Yr-B+ 1Mo (1 Unit)

S/N: 93040209 Row Rack 10.06 U1

HUS DBS Svc Premium Upg Yr-B+ 1Mo (SFF Tray) (7 Units)

S/N: 200743 Row Rack 10.06 U28

S/N: 200745 Row Rack 10.06 U30

S/N: 201357 Row Rack 10.06 U32

S/N: 204921 Row Rack 10.06 U34

S/N: 201692 Row Rack 10.06 U36

S/N: 201691 Row Rack 10.06 U38

S/N: 201693 Row Rack 10.06 U40

HUS DBX Svc Premium Upg Yr-B+ 1Mo (LFF Tray) (6 Units)

S/N: 100194 Row Rack 10.06 U4

S/N: 200437 Row Rack 10.06 U8

S/N: 200097 Row Rack 10.06 U12

S/N: 200430 Row Rack 10.06 U416

S/N: 200241 Row Rack 10.06 U20

S/N: 200094 Row Rack 10.06 U24

SVC Mo HUS 150 Base Operating System M Lic - SW Sppt

SVC Mo HUS 150 TnM Lic - SW Sppt

HCP500 Hardware Support - DEVELOPMENT PRIMARY

Brocade Hardware Maintenance

043-991417-01.P SVC Brocade FC Switch Pkg HCP500 Remote Support PREM 1Mo

SVC HCP Small Base Support PREM 1Mo (2 Units)

S/N: ALM2538H02N Row Rack 10.05 U27

S/N: ALM2538H033 Row Rack 10.05 U28

Compute Rack 220 Product Maintenance

SVC Compute Rack 220 24x7x2 Onsite Maint (PREM) Yr-B 1Mo (6 Servers)

S/N: 00000208 Row Rack 10.05 U29

S/N: 00000210 Row Rack 10.05 U30

S/N: 00000203 Row Rack 10.05 U31

S/N: 00000204 Row Rack 10.05 U32

S/N: 00000193 Row Rack 10.05 U33

S/N: 00000194 Row Rack 10.05 U34

Hitachi Content Archiver Software Support

304-210779-13A.P

SVC HCA 100GB Incr (0.1-40TB) Lic

12600

SVC HCA Object Replication License

Hitachi Data Discovery Software Support

HUS 150

043-992060-01.P

HUS DBL Svc Premium Upg Yr-B 1Mo (3 Units)

S/N: 00200833 Row Rack 10.05 U3

S/N: 00200659 Row Rack 10.05 U5

S/N: 00101379 Row Rack 10.05 U7

HUS DBS Svc Premium Upg Yr-B 1Mo (1 Unit)

S/N: 00202197 Row Rack 10.05 U9

043-992019-01.P

HUS 130 Svc Premium Upg Yr-B 1Mo

S/N: 90240176 Row Rack 10.05 U1

304-230192-03.P SVC Mo HUS 130 Base Operating System M Lic - SW Sppt

304-230216-03.P

SVC Mo HUS 130 TnM Lic - SW Sppt

HCP500 Hardware Support - DEVELOPMENT REPLICA

HUS 130

HUS 130 Svc Premium Upg Yr-B 1Mo

S/N: 90240199 Row Rack 09 08 u27

SVC Mo HUS 130 Base Operating System M Lic - SW Sppt

304-230216-03.P

SVC Mo HUS 130 TnM Lic - SW Sppt

HUS 150

HUS 150 Svc Premium Upg Yr-B+ 1Mo

S/N: 93040261 Row Rack 10.04 U2

HUS DBS Svc Premium Upg Yr-B+ 1Mo (SFF Tray) (10 Units)

S/N: 202570 Row Rack 10.04 U5

S/N: 202571 Row Rack 10.04 U7

S/N: 202572 Row Rack 10.04 U9

S/N: 202573 Row Rack 10.04 U11

S/N: 202574 Row Rack 10.04 U13

S/N: 202575 Row Rack 10.04 U15

S/N: 202576 Row Rack 10.04 U17

S/N: 202495 Row Rack 10.04 U19

S/N: 202307 Row Rack 10.04 U21

S/N: 202432 Row Rack 10.04 U23

SVC Mo HUS 150 Base Operating System M Lic - SW Sppt

SVC Mo HUS 150 TnM Lic - SW Sppt

File Module Support

S/N: M2SEKW1210091 Row Rack 10.04 U25

S/N: M2SEKW1207241 Row Rack 10.04 U28

043-992315-01.P

SVC File Module SMU Premium Upg Yr-B+ 1Mo

304-230406-03.P

SVC Mo HUS FM-M2 Entry SW Bundle - SW Spt

Compute Rack 220 Product Maintenance - INGEST Servers

Compute Rack 220 Product Maintenance

SVC Compute Rack 220 24x7x2 Onsite Maint (PREM) Yr-B 1Mo (18 Servers)

S/N: T236-003287 Row Rack 10.03 U25

S/N: T236-003288 Row Rack 10.03 U27

S/N: T234-003138 Row Rack 10.03 U29

S/N: T234-003143 Row Rack 10.03 U31

S/N: T211-002577 Row Rack 10.03 U33

S/N: T232-003136 Row Rack 10.03 U35

Brocade 6510 Support

301-003216-01.P Hitachi Data Systems SVC PREM Brocade 6510 Switch (2 Units)

6510SVC-SWMAINT.P

SVRS, Brocade 6510 Maintenance

S/N: BRW2536H07Y Row Rack 10.07 U36

S/N: BRW2436H07R Row Rack 10.07 U37

CRI Support

HUS 130 Maintenance Support

HUS 130 Svc Premium Upg Yr-B+ 1Mo

Serial Number 92202188 Rack 1, U3-4

HUS DBX Svc Premium Upg Yr B+ 1Mo

043-992097-01.P SVC HUS DBX LFF 4U x 48HDD DRO (Per Frame - 1 Mo)

Serial Number 202398 Rack 1, U5-8

Serial Number 202405 Rack 1, U9-12

Serial Number 202406, Rack 1, U13-16

HUS 130 Storage Software Support

SVC Mo HUS 130 Base Operating System M Lic - SW Sppt

HUS File Module M1 Maintenance Support

043-992180-01.P

SVC File Module M1 Premium Yr-B+ 1Mo

Serial Number M2SEKW1203275, Rack 1, U17-20

HUS File Module M1 Software Support

304-230403-03.P SVC Mo HUS/HUS VM FM-M1 Entry SW Bundle - SW Spt

304-230441-03.P SVC Mo HUS/HUS VM FM-M1 SW Lic - 1 TB License - SW Spt

Brocade Platform HW Maintenance

Brocade

301-003251-01.P

SVC PREM Brocade 6505 Switch

Brocade

6505SVC-SWMAINT.P

SVRS, Brocade BR6505 Maintenance monthly

Serial Number CCD2533LOBW, Rack 1, U40

Compute Rack 220 Product Maintenance - INGEST Servers

Compute Rack 220 Product Maintenance

S/N: 00001188

S/N: 00001189

S/N: 00001191

S/N: 00001193

S/N: 00001196

S/N: 00001197

SUBTOTAL CLIN 0002:

TOTAL PURCHASE ORDER PRICE:

ATTACHMENT 7

PURCHASE ORDER ADMINISTRATION

I. GOVERNMENT PURCHASE ORDER ADMINISTRATION

A. This purchase order will be administered by:

National Archives and Records Administration Office of the Chief Acquisition Officer (Z) 8601 Adelphi Road, Room 3340 College Park, MD 20740-6001

B. Contract Specialist (CS):

See award document.

C. Contracting Officer (CO):

Any Z Warranted CO

The Contracting Officer (CO) has the overall responsibility for the administration of this purchase order. Written communication to the Contract Specialist (CS) must make reference to the purchase order number and must be emailed or mailed with postage prepaid, to the above address.

The CO alone, without delegation, is authorized to take actions on behalf of the Government to amend, modify, or deviate from the purchase order terms, conditions requirements, specifications, details, and/or delivery schedules; make final decisions on disputed deductions from purchase order payments for non-performance or unsatisfactory performance; terminate the purchase order for convenience or default; and issue final decisions regarding purchase order questions or matters under dispute. However, the CO may delegate certain other responsibilities to authorized representatives.

II. NARA TECHNICAL POINT OF CONTACT (TPOC)

a. TPOC: See award document.

b. The individual named above is designated as the NARA Technical Point of Contact (TPOC) to assist the CO in the discharge of the CO’s responsibilities. The NARA TPOC serves as the point of contact through which the Contractor can relay questions or problems of a technical nature to the CS and the CO. The NARA TPOC is responsible for the inspection and acceptance of the purchase order requirements and for the review and certification of invoices for the purchase order requirements.

c. In no event will any understanding or agreement, modification, change order, or other matter deviating from the terms of the purchase order between the Contractor and any person other than the CO be effective or binding upon the Government.

d. When, in the opinion of the Contractor, the NARA TPOC requests effort outside the existing scope of the purchase order, the Contractor must promptly notify the CO in writing.

e. No action will be taken by the Contractor under such technical instruction unless the CO has issued a contractual change.

III. INVOICE SUBMISSION INSTRUCTIONS

(a) The preferred method for invoicing is through the Invoice Processing Platform (IPP), which is a secure web-based electronic invoicing and payment information system. This service is provided by the U.S. Treasury’s Bureau of the Fiscal Service free of charge to federal agencies and contractors. IPP allows contractors to view information regarding their purchase orders and orders, electronically submit invoices and view payment information.

(b) The IPP website address is https://www.ipp.gov. Contractors can obtain enrollment assistance by contacting the Fiscal Service Accounts Payable Help Desk via e-mail at AccountsPayable@fiscal.treasury.gov or by phone at 304-480-8000, Option 7.

(c) Contractors that are not able to utilize the IPP system for submitting payment requests may submit invoices electronically by e-mail to AccountsPayable@fiscal.treasury.gov. Microsoft Excel, Adobe Acrobat Portable Document Format (PDF) and Microsoft Word are acceptable formats.

(d) Invoices for services shall be submitted monthly unless otherwise stated elsewhere in the task order.

(e) For invoice and payment questions call the Fiscal Service AP Help Desk at 304-480-8000, Option 7.

IV. INVOICE FREQUENCY

The Contractor shall invoice one-time for the full amount, upon complete delivery and acceptance of items under CLIN 0001 and 0002.

V. FINAL PAYMENT

Before final NARA payment is made, the Contractor must furnish to the CO a written release of all claims against the Government arising by virtue of the purchase order, other than claims in stated amounts as may be specifically excluded by the Contractor from the operation of the release. If the Contractor’s claim to amounts payable under the purchase order has been assigned under the Assignment of Claims Act of 1940, as amended (31 U.S.C. § 203, 41 U.S.C. § 15), a release may also be requested of the assignee. To ensure that all necessary adjustments for non-performance or unsatisfactory performance have been made and a release of claims has been submitted before the purchase order is closed out, the final NARA payment will be made in thirty (30) calendar days after receipt of a proper invoice, date of completion of performance, or receipt of release of claims by the CO, whichever is later.

ATTACHMENT 8

ADDITIONAL NARA TERMS AND CONDITIONS

(Addenda to FAR clause 52.212-4)

I. SECURITY OF INFORMATION AND PROTECTION OF CONTROLLED UNCLASSIFIED INFORMATION, INCLUDING PERSONALLY IDENTIFIABLE INFORMATION (APRIL 2017)

(a) Applicability

This clause applies to all controlled unclassified information, which may include personally identifiable information, as defined in Section B, regardless of the medium in which it is found and includes paper records.

(b) Definitions. As used in this clause:

“Breach” means the loss of control, compromise, unauthorized disclosure, unauthorized acquisition, unauthorized access, or any similar situation where persons other than authorized users, and for other than authorized purpose, have access or potential access to personally identifiable information, in usable form whether physical or electronic.

“Controlled Unclassified Information” means information the Government creates or possesses, or that an entity creates or possesses for or on behalf of the Government, that a law, regulation, or Government-wide policy requires or permits an agency to handle using safeguarding or dissemination controls. However, CUI does not include classified information or information a non-executive branch entity possesses and maintains in its own systems that did not come from, or was not created or possessed by or for, an executive branch agency or an entity acting for an agency. Law, regulation, or Government-wide policy may require or permit safeguarding or dissemination controls in three ways: Requiring or permitting agencies to control or protect the information but providing no specific controls, which makes the information CUI Basic; requiring or permitting agencies to control or protect the information and providing specific controls for doing so, which makes the information CUI Specified; or requiring or permitting agencies to control the information and specifying only some of those controls, which makes the information CUI Specified, but with CUI Basic controls where the authority does not specify.

“Personally identifiable information (PII)” means any information that permits the identity of an individual to be directly or indirectly inferred, including any other information that is linked or linkable to that individual regardless of whether the individual is a citizen of the United States, legal permanent resident, or a visitor to the United States. Examples of PII include the following:

(1) Name.

(2) Date of birth.

(3) Mailing address.

(4) Telephone number.

(5) Social Security Number.

(6) Email address.

(7) Zip code.

(8) Account numbers.

(9) Certificate/license numbers.

(10) Vehicle identifiers including license plates.

(11) Uniform resource locators (URLs).

(12) Internet protocol addresses.

(13) Biometric identifiers (e.g., fingerprints).

(14) Photographic facial images.

(15) Any other unique identifying number or characteristic.

(16) Any information where it is reasonably foreseeable that the information will be linked with other information to identify the individual.

“Sensitive personally identifiable information (sensitive PII)” means a subset of PII, which if lost, compromised or disclosed without authorization, could result in substantial harm, embarrassment, inconvenience, or unfairness to an individual.

(1) Complete social security numbers, alien registration numbers (A-number) and biometric identifiers (such as fingerprint, voiceprint, or iris scan) are considered sensitive PII even if they are not coupled with additional PII.

(2) Additional examples include any grouping of information that contains an individual’s name or other unique identifier plus one or more of the following elements:

(i) Driver’s license number, passport number, or truncated social security number (such as last 4 digits);

(ii) Date of birth (month, day, and year);

(iii) Citizenship or immigration status;

(iv) Financial information such as account numbers or electronic funds transfer information;

(v) Medical information; and/or

(vi) System authentication information such as mother’s maiden name, account passwords or personal identification numbers.

(3) Other PII may be “sensitive” depending on its context, such as a list of employees with less than satisfactory performance ratings or an unlisted home address or phone number. In contrast, a business card or public telephone directory of agency employees contains PII but it is not sensitive.

(c) Data Security.

(1) The Contractor shall limit access to the data covered by this clause to those employees and subcontractor who require the information in order to perform their official duties under this purchase order. (2) The Contractor employees, and subcontractors must physically or electronically secure CUI, which may include sensitive PII, when not in use and/or under the control of an authorized individual, and when in transit to prevent unauthorized access or loss.

(3) When CUI is no longer needed or required to be retained under applicable Government records retention policies, it must be destroyed in accordance with NIST 800-88 standards.

(4) The Contractor shall only use CUI obtained under this purchase order for purposes of the Contractor; it shall not be disclosed, released, disseminated, or published without the prior written consent of the Contracting Officer.

(5) If it is established elsewhere in this purchase order that information to be utilized under this purchase order, or a portion thereof, is subject to the Privacy Act, The Contractor shall follow the rules and procedures of disclosure set forth in the Privacy Act of 1974, 5 U.S.C. 552a, and implementing regulations and policies, with respect to systems of records determined to be subject to the Privacy Act.

(6) At expiration or termination of this purchase order, the Contractor shall turn over all CUI obtained under the Contractor that is in its possession.

(d) Systems Access. Work to be performed under this purchase order may require the handling of CUI, including PII. The Contractor shall provide the Government access to, and information regarding those systems handling CUI, including sensitive PII for the Government under the Contractor, when requested by the Government, as part of the Contractor’s responsibility to ensure compliance with security requirements, and shall otherwise cooperate with the Government in assuring compliance with such requirements. Government access shall include independent testing of controls, system penetration testing by the Government, Federal Information Security Management Act data reviews, and access by agency Inspectors General (IG) for IG reviews.

When requested by the NARA CO or COR or other NARA official as described herein, in connection with NARA’s efforts to ensure compliance with security requirements and to maintain and safeguard against threats and hazards to the security, confidentiality, integrity, and availability of NARA Information, Contractor shall provide NARA, including the NARA OIG, (1) access to any and all information and records, including electronic information, regarding a Covered Information System, and (2) physical access to Contractor's facilities, installations, systems, operations, documents, records, and databases. Such access may include independent validation testing of controls, system penetration testing, and FISMA data reviews by NARA or agents acting on behalf of NARA, and such access shall be provided within 72 hours of the request. Additionally, the Contractor shall cooperate with NARA’s efforts to ensure, maintain, and safeguard the security, confidentiality, integrity, and availability of NARA information.

(e) Systems Security.

(1) In performing its duties related to management, operation, and/or access of systems containing PII under this purchase order, the Contractor, its employees and subcontractors shall comply with all applicable security requirements and rules of conduct applicable to the agency’s systems as described in:

a) NARA Directive 1608 http://www.archives.gov/foia/directives/nara1608.pdf and

b) FedRAMP baseline controls for moderate IT systems.

(2) In addition, the use of Contactor-Owned laptops or other portable storage devices to process or store sensitive PII is prohibited under this purchase order until the Contractor provides, and the Contracting Officer, in coordination with the Senior Agency Official for Privacy (SAOP) or the SAOP’s designee, approves the Contractor’s written acknowledgment that the following requirements are met:

(i) Laptops and other portable storage devices must employ encryption that is NIST Federal Information Processing Standard (FIPS) 140-2 validated (or its successor) http://csrc.nist.gov/publications/PubsFIPS.html, and approved.

(ii) The Contractor has developed and implemented a process to ensure that security and other applications software are kept current.

(iii) Mobile computing devices utilize anti-virus software and a host-based firewall mechanism.

(iv) Removable media, such as hard drives, flash drives, devices with flash memory, CDs and floppy disks containing CUI, which may include sensitive PII shall not be removed from a Government facility unless they are encrypted using a NIST FIPS 140-2 or successor approved product.

(v) When no longer needed, all removable media, hard drives, and flash memory shall be destroyed in accordance with Government security requirements identified in NARA’s Media Protection Methodology.

(vi) The Contractor shall maintain an accurate inventory of devices used in the performance of this purchase order.

(3) All NARA information obtained under this purchase order shall be removed from Contractor-Owned information technology assets at the direction of the Contracting Officer or Contracting Officer’s Representative. Removal must be accomplished in accordance with standard FedRAMP controls for media protection in moderate IT systems and NIST 800-88 standards. Certification of data removal will be performed by the Contractor’s Project Manager and written notification confirming acknowledgment will be delivered to the Contracting Officer within 30 days of the direction to remove the information.

(4) Back up or mirrors of any systems or files containing CUI shall be treated in the same manner as the original data containing CUI, with the same protections and obligations.

(5) The Contractor shall require FIPS 140-2 (or successor) encryption of any sensitive PII when transmitted electronically across the Internet or other public works.

(f) Breach Notification to Government.

(1) The Contractor has been provided with: NARA Directive 1608, and is aware of its roles, responsibilities, and relationship with the Government in case of data breach.

(2) In the event of any actual or suspected breach of sensitive PII, the Contractor shall immediately, and in no event later than one hour of discovery, report the breach to the Contracting Officer, the COR, the Senior Agency Official for Privacy (currently NARA’s General Counsel garymstern@nara.gov) and the Chief Information Officer (only for IT requirements) in accordance with NARA Directive 1608.

(3) The Contractor is responsible for positively verifying that notification is received and acknowledged by appropriate Government parties identified in subparagraph (2) above.

(4) In the event of a confirmed, potential or suspected Security Breach, involving unauthorized exposure, loss of control, compromise, exfiltration, manipulation, disclosure, acquisition, or accessing of any Covered Information System or any NARA Information accessed by, retrievable from, processed by stored on, or transmitted within, to or from any such system, Contractor shall immediately (and in no event later than within 1 hour of discovery) report any Confirmed Breach to the NARA CO and the CO's Representative (''COR").

(5) NARA, at its sole discretion, may obtain, and Contractor will permit, the assistance of other federal agencies and/or third party contractors or firms to aid in response activities related to any security incident, PII or Security Breach. Additionally. NARA, at its sole discretion, may require Contractor to retain, at Contractor's expense, a Third Party Assessing Organization (3PAO) acceptable to NARA, with expertise in incident response, compromise assessment, and federal security control requirements, to conduct a thorough vulnerability and security assessment of all affected Information Systems.

(6) Any report submitted in accordance with paragraphs (1), (2) and (3) above, shall identify (I) both the Information Systems and NARA Information involved or at risk, including the type, amount, and level of sensitivity of the NARA Information and, if the NARA Information contains PII, the estimated number of unique instances of Pll, (2) all steps and processes being undertaken by Contractor to minimize, remedy, and/or investigate the Security Incident, (3) any and all other information as required by the USCERT Federal Incident Notification Guidelines, including the functional impact, information impact, impact to recoverability, threat vector, mitigation details, and all available incident details; and (4) any other information specifically requested by the NARA. Contractor shall continue to provide written updates to the NARA CO regarding the status of the Security incident at least every three (3) calendar days until informed otherwise by the NARA CO.

(7) Response activities related to any security incident or PII or Security Breach undertaken by NARA, including activities undertaken by Contractor, other federal agencies, and any third-party contractors or firms at the request or direction of NARA, may include inspections, investigations, forensic reviews, data analyses and processing, and final determinations of responsibility for the Security Incident and/or liability for any additional response activities. Contractor shall be responsible for all costs and related resource a locations required for all such response activities related to any Security Incident or Breach, including the cost of any penetration testing.

(g) Personally Identifiable Information Notification Requirement

Contractor certifies that it has a security policy in place that contains procedures to promptly notify any individual whose Personally Identifiable Information ("Pll") was, or is reasonably determined by NARA to have been, compromised. Any notification shall be coordinated with the NARA CO and shall not proceed until NARA has made a determination that notification would not impede a law enforcement investigation or jeopardize national security. The method and content of any notification by Contractor shall be coordinated with, and subject to the approval of, NARA. Contractor shall be responsible for taking corrective action consistent with NARA Data Breach Notification Procedures and as directed by the NARA CO, including all costs and expenses associated already covered by above clauses added in PII clause with such corrective action, which may include providing credit monitoring to any individuals whose Pll was actually or potentially compromised.

All determinations regarding whether and when to notify individuals and/or federal agencies potentially affected by a Security Incident, Breach, or PII Breach will be made by NARA senior officials at NARA’s discretion.

(h) Flowdown of security requirements to subcontractors.

(1) The Contractor shall incorporate the substance of this clause, its terms and requirements including this paragraph (g), in all subcontracts under this purchase order, and require written subcontractor acknowledgement of same.

(2) Violation by a subcontractor of any provision set forth in this clause will be attributed to the Contractor.

II. CONFIDENTIALITY OF INFORMATION

(a) Confidential information is any information that, if subject to unauthorized access, modification, loss, or misuse could adversely affect the national interest, the conduct of Federal programs, or the privacy of individuals, but has not been specifically authorized under criteria established by an Executive Order or an Act of Congress to be kept secret in the interest of national defense or foreign policy. Confidential information also includes proprietary data and information for which other restrictions on access apply.

(b) The Contracting Officer and the Contractor may, by mutual consent, identify elsewhere in this purchase order specific information and/or categories of information which the Government will furnish to the Contractor or that the Contractor is expected to generate which is confidential. Similarly, the Contracting Officer and the Contractor may, by mutual consent, identify such confidential information from time to time during the performance of the purchase order. Failure to agree will be settled pursuant to the “Disputes” clause.

(c) While in the course of performance of this purchase order, the Contractor may have access to confidential information and communications, including but not limited to Personally Identifiable Information (PII). Confidential information may be contained in printed material or on electronic media. The Contractor will preserve the confidentiality of all such information and communications and agrees not to disclose, release, disseminate, or publish any such information or communications for any purposes whatsoever without the prior approval of the Contracting Officer. Failure to comply with the provisions of this paragraph will be grounds for Termination for Cause and the Contractor may be liable for damages. This provision shall survive the expiration or termination of the period of performance of this purchase order.

(d) If it is established elsewhere in this purchase order that information to be utilized under this purchase order, or a portion thereof, is subject to the Privacy Act, the Contractor will follow the rules and procedures of disclosure set forth in the Privacy Act of 1974, 5 U.S.C. 552a, and implementing regulations and policies, with respect to systems of records determined to be subject to the Privacy Act.

(e) During the course of the performance of this purchase order, the Contractor may have access to and use of data and information which may be considered proprietary by other contractors, or which may otherwise be of such a nature that its dissemination or use, other than in performance of this purchase order, would be adverse to the interest of NARA and these other contractors.

(f) Except as may be otherwise agreed to with these other contractors, the Contractor agrees that it will not use, disclose or reproduce proprietary data and information belonging to these other contractors other than as required in the performance of this purchase order; provided, however, that nothing herein shall be construed as: (1) precluding the use of any such data or information independently acquired by the Contractor without such limitation; or (2) prohibiting an agreement at no cost to NARA between the Contractor and these contractors which provides for greater rights to the Contractor.

(g) When…