Rev_SOW_RPS_Backup_Solution_Support_8_27_15.docx

U.S. Department of Agriculture Economic Research Service

STATEMENT OF WORK

ERS Backup Solution

1. INTRODUCTION

BACKGROUND:

The Economic Research Service (ERS) is a primary source of economic information and research in the U.S. Department of Agriculture. ERS conducts a research program to inform public and private decision-making on economic and policy issues involving food, farming, natural resources, and rural development.

The focus of this Statement of Work (SOW) is the backup solution of the ERS Local Area Network (or ERS LAN System), a general support system which provides the necessary IT capability for ERS’ research program. The ERS LAN System includes the network equipment (routers, switches), servers, workstations, and printers that connect each employee to the internal resources required to perform their tasks. It also includes access to external resources through the Internet and includes all of the necessary security components to protect ERS resources from external threats. All components of the general support system are under the same direct management control, have similar functions, and have the same general operational characteristics and security needs.

Applications on the ERS LAN System provide user supported processing or are used to generate reports and publications. The user community consists of approximately 400 ERS staff located at 355 E Street, SW, Washington, D.C. There are extranet applications to collaborate with a limited number of trusted non-ERS users. Software applications are commercial-off-the-shelf (COTS) econometric, predictive analytic or statistical applications, models, office productivity software (e.g. Microsoft Office Professional Suite), and other software necessary for the editing and preparation of research results for publication via the web or traditional hard copy.

ERS computing and network equipment is located at three physical locations: ERS Headquarters at 355 E St., SW, Washington, D.C., USDA Headquarters at 1400 Independence Ave., SW, Washington, D.C., and National Information Technology Center (NITC) Enterprise Data Center (EDC) Headquarters in Kansas City, MO. All sites connect to the USDA WAN through dedicated telecommunications circuits and do not have any additional Internet connection. The network backbone at ERS Headquarters is managed by Washington Communications & Technology Services (WCTS). The network backbone at both USDA and EDC Headquarters is managed by NITC.

The LAN is based on a switched Ethernet infrastructure with fiber optic backbone providing 1-Gb/sec throughput to the switches. High use servers are also connected to the network at the 1-Gb/sec speed. Workstation connectivity is at 1-Gb/sec.

The servers’ and workstations’ processors are based on the Intel architecture and use the Windows operating system. All servers run on Windows Server 2008, 2008r2 and 2012.

OBJECTIVE:

The purpose of this SOW is to put a contract in place for the continued services of Recovery Point Systems to provide a NetApp Storage Area Network with 40 TB of storage, a Tape Library with 2 LTO-6 tapes drives, and a dedicated 300 mbps dedicated Internet circuit. ERS is seeks to continue its current end-to-end LAN replication and backup solution of its IT infrastructure with RPS. The backup service makes a copy of our approximately 100 virtual servers/5 physical servers and storage area network and replicate it to an offsite facility. The service will use the same type of storage infrastructure ERS currently owns so ERS does not need to buy any new hardware or software with this RPS solution. The replicated data is then be backed up to a tape backup system at an offsite facility and then taken offsite to a vaulted storage facility. This would meet our backup needs and ensure ERS’ ability to recover data in the event of a system disaster or data loss.

SCOPE:

This SOW does not change the functionality or scope of the network. This SOW is for the continuation of an existing a state of the art backup service solution that was initially put into place on September 30, 2013.

2. TASK STANDARDS/SPECIFICATIONS

The backup/replication solution is a proven end-to-end solution and includes the following:

· Dedicated NetApp target SAN resources for ERS-USDA replication and backup

· Dedicated tape library for tape creation

· Dedicated recovery server to run NSB backup and recovery applications

· Software licensing for one hundred ten virtual (110) ERS servers to generate integrated backup and rapid recovery capabilities

· Five (5) Hot site Intel servers for recovery of initial group of virtual or physical systems

· Step target DASD pricing in 10 TB increments to support incremental ERS-USDA production SAN growth

· Off-site location for storage of tapes

· IPv6 compatibility

· Encryption of data at rest and in transit

· Veeam Backup and Replication software for backup and recovery

TASK 1 Continued Service of Providing ERS with a Dedicated and Committed Replication and Backup Solution for ERS’ IT infrastructure

The Contractor shall perform all tasks in conjunction with ERS IT staff.

Subtask 1 – Hardware

The Contractor shall continue to provide a dedicated NetApp target SAN for ERS-USDA replication and backup as well as an 300 Mbps committed Internet at Recovery Point Services, Inc. in Germantown, Maryland. The device will be compatible with the existing NetApp SAN in the current ERS-USDA environment. The ERS NetApp environment consists of:

· Model FAS3140 dual controller

· SAS and SATA disk shelves

· Seven ESXi hosts

The Contractor shall continue to accommodate an ERS-provided Windows Server to be used with the Veeam Backup Repository.

The Contractor shall continue to provide a dedicated tape library with LTO-6 or greater tape drives for tape creation with a three month retention period for offsite tape storage.

Subtask 2 – Software

The Contractor shall continue to provide software licensing for one hundred ten (110) ERS servers to general integrated backup and rapid recovery capabilities.

The Contractor shall continue to provide support for all required backup and recovery software at both the production and replication sites. The Contractor shall continue to maintain documentation in relation to the backup solution implemented and to the Government with a updates to the documentation as configuration changes are made.

3. DELIVERABLES

Any document deliverables that are developed in accordance with the services rendered under the above tasks will be provided to the COR in the following forms: two (2) original copies and one (1) electronic copy in Microsoft Word/Excel (as appropriate) format, delivered via email or USB thumb drive. If formal knowledge transfer from the Contractor to ERS becomes necessary, exact methods are to be determined in consultation with the COR. No other deliverables are anticipated.

Any document deliverables will be sent directly to room 7-230, 355 E St., SW, Washington, DC 20024.

4. SECURITY

4.1 SECURITY REQUIREMENTS

The Contractor will not disclose sensitive or proprietary information of, or in the possession of the United States Department of Agriculture or any of its operating units, Contractors, or business partners to unauthorized persons. The Contractor will be subject to any and all penalties imposed by law for unlawful disclosure of USDA information.

The component parts of this effort and reports are expected to contain highly sensitive information that could act as a guide for hostile entities to cause harm to the Department’s critical infrastructure. Any such information made available in any format shall be used only for the purpose of carrying out the provisions of this agreement. Such information shall not be divulged or made known in any manner to any person. The Contractor shall not remove classified or sensitive information without permission from the ERS COR or approval from the ERS Chief Information Officer. The Contractor will not retain any information regarding reports, strategic plans, and other documents at the end of the task order. All hard and electronic copies will be returned to the Government. Any information stored on fixed hard drives must be erased.

4.1.1 COMPLIANCE

The Contractor shall provide documentation showing proof of FISMA compliance and the Authority to Operate (ATO). The contractor shall provide documentation for the complete solution configuration for ERS’ A&A process and to allow ERS to update all required security documentation.

4.2 CLEARANCES

The Contractor shall provide only fully qualified and properly cleared personnel for the work to be performed under this task order. Personnel shall have, at a minimum, the appropriate security clearance/investigation of a National Agency Check with Investigation. The Contractor shall ensure all Contractors and sub-contractor personnel (Contractor personnel) having access to information on USDA’s security programs and systems received or generated under this task order are United States citizens and specifically authorized access by the Program Manager.

4.3 SENSITIVE INFORMATION STORAGE AND DISCLOSURE

Sensitive-But-Unclassified (SBU) information, data, and/or equipment will be disclosed only to authorized personnel on a Need-To-Know basis. The holder shall ensure that appropriate administrative, technical, and physical safeguards are established to ensure the security and confidentiality of this information, data, and/or equipment will be returned to Government control; destroyed; or held until otherwise directed. Destruction of items shall be accomplished by tearing into small parts; burning; shredding or other method that precludes the reconstruction of the material, consistent with GSA guidelines.

4.4 PROTECTION OF INFORMATION

Information about the USDA networks and/or the security posture of any USDA information asset gathered or created under this SOW will be considered as SBU information. It is anticipated that this information be gathered, created, and stored within the primary Government work location. If the Contractor personnel must remove any information from the primary work area, they must protect it to the same extent of their proprietary data and/or company trade secrets. If the Contractor must remove any materials from the primary location prior approval must be obtained.

4.5 SECURITY CLASSIFICATION

The preparation of the deliverables in this delivery order will be completed at an SBU level unless otherwise stated by the COR.

4.6 CONFIDENTIALITY AND NON-DISCLOSURE

The Contractor may have to access proprietary information and shall be required to sign non-disclosure and conflict of interest statements. The preliminary and final deliverables and all associated working papers, and other material deemed relevant by the agency that have been generated by the Contractor in the performance of this task order are the property of the U.S. Government and cannot be reproduced, or retained by the Contractor. When no longer required, this information, data, and/or equipment will be returned to Government control. All appropriate documents and information will be given to the COR during and at the end of this contract. Any request for information relating to this SOW presented to the Contractor must be submitted in writing to the COR and the CO, who will in turn provide a written response.

4.7 FACILITY ACCESS

All Contractor personnel who work at USDA must have approval for facility access; the Contractor must supply the names of those employees selected to perform the work.

4.8 PRIVACY ACT

Work on this project may require that personnel have access to Privacy Information. Personnel shall adhere to the Privacy Act, Title 5 of the U. S. Code, Section 552a and applicable agency rules and regulations. The Contractor Program Manager shall ensure that all contract personnel take the required USDA Privacy and Security training.

5. SECTION 508 - ACCESSIBILITY OF ELECTRONIC AND INFORMATION TECHNOLOGY

(a) This SOW is subject to Section 508 of the Rehabilitation Act of 1973 (29 U.S.C. 794d) as amended by the workforce Investment Act of 1998 (P.L. 105-220). Specifically, subsection 508(a)(1) requires that when the Federal Government procures Electronic and Information Technology (EIT), the EIT must allow Federal employees and individuals of the public with disabilities comparable access to and use of information and data that is provided to Federal employees and individuals of the public without disabilities.

(b) The EIT accessibility standards at 36 CFR Part 1194 were developed by the Architectural and Transportation Barriers Compliance Board ("Access Board") and apply to contracts and task/delivery orders, awarded under indefinite quantity contracts on or after June 25, 2001.

(c) Each Electronic and Information Technology (EIT) product or service furnished under this contract shall comply with the Electronic and Information Technology Accessibility Standards (36 CFR 1194), as specified in the contract, as a minimum. If the Contracting Officer determines any furnished product or service is not in compliance with the contract, the Contracting Officer will promptly inform the Contractor in writing. The Contractor shall, without charge to the Government, repair or replace the non-compliant products or services within the period of time to be specified by the Government in writing. If such repair or replacement is not completed within the time specified, the Government shall have the following recourses:

1. Cancellation of the contract, delivery or task order, purchase or line item without termination liabilities; or

2. In the case of custom Electronic and Information Technology (EIT) being developed by a contractor for the Government, the Government shall have the right to have any necessary changes made or repairs performed by itself or by another firm for the noncompliant EIT, with the contractor liable for reimbursement to the Government for any expenses incurred thereby.

(d) The contractor must ensure that all EIT products that are less than fully compliant with the accessibility standards are provided pursuant to extensive market research and are the most current compliant products or services available to satisfy the contract requirements.

(e) For every EIT product or service accepted under this contact by the Government that does not comply with 36 CFR 1194, the contractor shall, at the discretion of the Government, make every effort to replace or upgrade it with a compliant equivalent product or service, if commercially available and cost neutral, on either a contract specified refresh cycle for the product or service, or on a contract effective option/renewal date; whichever shall occur first.

Section 508 Compliance for Communications The Recovery Point Services, Inc. shall comply with the standards, policies, and procedures below. In the event of conflicts between the referenced documents and this SOW the SOW shall take precedence.

Rehabilitation Act, Section 508 Accessibility Standards

1. 29 U.S.C. 794d (Rehabilitation Act as amended)

2. 36 CFR 1194 (508 Standards)

3. www.access-board.gov/sec508/508standards.htm (508 standards)

4. FAR 39.2 (Section 508)

5. USDA Standards, policies and procedures (Section 508) In addition, all contract deliverables are subject to these 508 standards as applicable.

Regardless of format, all Web content or communications materials produced, including text, audio or video - must conform to applicable Section 508 standards to allow federal employees and members of the public with disabilities to access information that is comparable to information provided to persons without disabilities. All contractors (including subcontractors) or consultants responsible for preparing or posting content must comply with applicable Section 508 accessibility standards, and where applicable, those set forth in the referenced policy or standards documents above. Remediation of any materials that do not comply with the applicable provisions of 36 CFR Part 1194 as set forth in the SOW shall be the responsibility of the contractor or consultant.

The following Section 508 provisions apply to the content or communications material identified in this SOW:

36 CFR Part 1194.21 a - l 36 CFR Part 1194.22 a - p 36 CFR Part 1194.31 a - f 36 CFR Part 1194.41 a – c The contractor shall provide a completed Section 508 Product Assessment Template and the contractor shall state exactly how proposed EIT deliverable(s) meet or does not meet the applicable standards.

The following Section 508 provisions apply for software development material identified in this SOW:

For software development, software applications, and operating systems the Contractor/Developer/Vendor shall comply with the standards, policies, and procedures below:

Rehabilitation Act, Section 508, Accessibility Standards

(1) 29 U.S.C. 794d (Rehabilitation Act as amended)

(2) 36 CFR 1194 (508 Standards)

(3) www.access-board.gov/sec508/508standards.htm (508 Standards)

(4) FAR 39.2 (Section 508)

(5) USDA Standards, policies and procedures (Section 508)

For web-based applications (intranet, internet information and applications, 16 rules), the Contractor shall comply with the standards, policies, and procedures below:

Rehabilitation Act, Section 508, Accessibility Standards

(1) 29 U.S.C. 794d (Rehabilitation Act as amended)

(2) 36 CFR 1194 (508 Standards) 36 CFR Part 1194.22 (a – p) 36 CFR Part 1194.31 (a – f) 36 CFR Part 1194.41 (a – c)

(3) www.access-board.gov/sec508/508standards.htm (508 Standards)

(4) FAR 39.2 (Section 508)

(5) USDA Standards, policies and procedures (Section 508)

For Telecommunication products the Contractor shall comply with the standards, policies, and procedures below:

Rehabilitation Act, Section 508, Accessibility Standards

(1) 29 U.S.C. 794d (Rehabilitation Act as amended)

(2) 36 CFR 1194 (508 Standards) 36 CFR Part 1194.23 (a – k) 36 CFR Part 1194.31 (a – f) 36 CFR Part 1194.41 (a – c)

(3) www.access-board.gov/sec508/508standards.htm (508 Standards)

(4) FAR 39.2 (Section 508)

(5) USDA Standards, policies and procedures (Section 508)

For video and multimedia applications (including training), the Contractor shall comply with the standards, policies, and procedures below:

Rehabilitation Act, Section 508, Accessibility Standards

(1) 29 U.S.C. 794d (Rehabilitation Act as amended)

(2) 36 CFR 1194 (508 Standards) 36 CFR Part 1194.24 (a – e) 36 CFR Part 1194.31 (a – f) 36 CFR Part 1194.41 (a – c)

(3) www.access-board.gov/sec508/508standards.htm (508 Standards)

(4) FAR 39.2 (Section 508)

(5) USDA Standards, policies and procedures (Section 508)

For self contained, closed products, the Contractor shall comply with the standards, policies, and procedures below:

Rehabilitation Act, Section 508, Accessibility Standards

(1) 29 U.S.C. 794d (Rehabilitation Act as amended)

(2) 36 CFR 1194 (508 Standards) 36 CFR Part 1194.25 (a – j) 36 CFR Part 1194.31 (a – f) 36 CFR Part 1194.41 (a – c)

(3) www.access-board.gov/sec508/508standards.htm (508 Standards)

(4) FAR 39.2 (Section 508)

(5) USDA Standards, policies and procedures (Section 508)

For Desktop and portable computers, the Contractor shall comply with the standards, policies, and procedures below:

Rehabilitation Act, Section 508, Accessibility Standards

(1) 29 U.S.C. 794d (Rehabilitation Act as amended)

(2) 36 CFR 1194 (508 Standards) 36 CFR Part 1194.26(a – d) 36 CFR Part 1194.31 (a – f) 36 CFR Part 1194.41 (a – c)

(3) www.access-board.gov/sec508/508standards.htm (508 Standards)

(4) FAR 39.2 (Section 508)

(5) USDA Standards, policies and procedures (Section 508)

All Electronic Information Technology that is subject to the 36 CFR 1194 standards will have a Section 508 acceptance test and Section 508 will be validated upon acceptance.

All maintenance for Electronic Information Technology that requires upgrades, modifications, installations and purchases will adhere to the Section 508 Standards and 36 CFR 1194.

6. PLACE OF PERFORMANCE

The work under this SOW shall be performed at the following location, as applicable:

ERS Headquarters 355 E Street, SW Washington, DC 20026

USDA Headquarters 1400 Independence Avenue, S100 Washington, DC 20250

Recovery Point Services, Inc.

20441 Century Boulevard Germantown, MD

7. QUALITY ASSURANCE

The Contractor shall be solely responsible for the supervision, management, and inspection of its employees under this Statement of Work. The Contractor will monitor and ensure its employees meet the requirements of this Statement of Work. The Contractor shall provide and maintain an inspection system acceptable to the Government covering services provided under this statement.

Any incidents that cannot be resolved by the Contractor in a timely manner will be identified and referred to the COR or designated representative. The Program Manager will provide for technical monitoring on an ongoing basis and accept or recommend rejection of services and deliverables.

8. QUALIFICATIONS (PERSONNEL)

Technical skills required include a level of expertise in computer and data networking, VMware, Storage Area Networking, Backup software and solution design. The Contractor should understand that operational availability is essential when conducting any tests, assessments, reviews, or analysis. In addition, must be fully qualified to conduct any activities as required and hold the appropriate security related certifications.