Att A Statement of Need.pdf

STATEMENT OF NEED

Teledyne CARIS Software Annual Maintenance Renewal

Requisition No. 141009-25-0023

1. General Description

The Office of Coast Survey (OCS) is the nation's nautical chart maker. Established by President Thomas Jefferson in 1807, OCS is the oldest United States scientific organization and has a long history of supporting and facilitating maritime commerce. Today, it continues to promote safe navigation, meet the challenges of navigating larger ships and those that carry hazardous cargo, and provide data for geographic information system (GIS) analysis, coastal stewardship, management decisions, shoreline change analysis, and marine boundary issues.

OCS collects, manages, and compiles the data and information necessary to maintain the national suite of 1,000 nautical charts. In addition, OCS conducts hydrographic surveys that measure water depth and produces coastal maps and vector shoreline series and historic maps and charts.

These products support commercial shipping, the fishing industry, United States Navy and Coast Guard operations, state and local governments, GIS users, and recreational boaters throughout the United States.

OCS relies on software developed by Teledyne CARIS to complete many functions of its overall mission. CARIS is the manufacturer of software packages that form the critical workflow for processing hydrographic survey data. Various NOS offices and the NOAA survey fleet require software maintenance and development for their CARIS suite of software. These packages are an industry standard for processing hydrographic data and generating various products from that data. Maintenance and development for that software is essential.

2. Scope of Work

Software Maintenance An annual maintenance renewal contract is required for Teledyne CARIS software. Teledyne CARIS software is required to process, manage and perform quality assurance on data acquired by NOAA. This renewal includes OCS offices, onboard the NOAA survey fleet and response vessels, and other line offices. The annual software maintenance allows NOAA access to the following items for all products under maintenance and additional licenses as needed:

• Critical software security patches

• Software new releases and updates

• Feature enhancements

• Technical support

NOAA requires an annual license agreement to maintain the following software packages that Teledyne CARIS have developed. The following table is the quantity of licenses that are part of this licensing agreement:

Product Product ID Quantity HIPS/SIPS Pro CMW117-S 63 BASE Editor CMW200-S 40 BASE Manager CMW201-S 7

For Teledyne CARIS software maintenance, an Enterprise Licensing Agreement (ELA) that includes access to the licenses for the software is required. This agreement will utilize single and network Entitlement Management System (EMS) licenses. An EMS license file can contain any or all Teledyne CARIS software included in the ELA. The EMS licenses can replace any local or network Universal Serial Bus keys, or site licenses, at NOAA’s discretion. The license files can only be distributed within the following locations:

• NOAA’s Office of Coast Survey

• NOAA’s Center for Operational Oceanographic Products and Services

• NOAA’s Chesapeake Bay Office

• NOAA’s Hydrographic Survey Ships and Response Vessels

• NOAA’s Thunder Bay National Marine Sanctuary

The maintenance subscription will also include:

• Software updates o New product versions via download from Teledyne CARIS Online Customer

Services Website o Service packs and hotfixes via download from Teledyne CARIS Online Customer

Services Website o Include solutions that correctly processes hydrographic data and adhere to NOAA

Hydrographic System Specifications and Deliverable (HSSD) using NOAA provided test datasets.

• Technical Support o Available via telephone, E-mail and Online Teledyne CARIS HelpDesk submission o All service requests are tracked and accessible anytime via Online Teledyne CARIS HelpDesk o Dedicated CARIS-NOAA liaison available during normal business hours EST

3. Contacts

Technical Point of Contact To be determined at award

Contracting Officer’s Representative and Invoicing

To be determined at award.

4. Period of Performance:

CARIS Software Maintenance:

Base Year: October 1, 2025 to September 30, 2026 Option Year 1: October 1, 2026 to September 30, 2027 Option Year 2: October 1, 2027 to September 30, 2028 Option Year 3: October 1, 2028 to September 30, 2029 Option Year 4: October 1, 2029 to September 30, 2030

5. Security Requirements:

The Assessment and Authentication requirements of Clause 48 CFR 1352.239-72 do not apply, and a Security Accreditation Package is not required.

The contractor will only supply software and/or product license. The contractor will not access, store, process, or transmit any government privileged information. The contractor will not have access to any non-public government systems or networks.

The contractor must provide all supporting documentation or a reference to obtain the necessary material which describes the security capabilities, the design and development processes and the testing and evaluation procedures used by the product or services being provided for this acquisition. The contractor must provide all supporting documentation or a reference to obtain the necessary material which describes all product or service updates and enhancements as they are implemented. The product or service supporting documentation could be the user and system administrator guides, which is documents the functional properties of the security controls employed to permit the analysis and testing of the security controls.

The contractor must provide sufficient document demonstrating that the software being provided meets the following:

• The standard installation, operation, maintenance, update, and/or patching of software shall not alter the configuration settings from the approved Facilities Design and Construction Center/United States Government Configuration Baseline/other secure configuration.

• Applications designed for normal end users shall run in the standard user context without elevated system administration privileges.

The contractor must provide sufficient document demonstrating that the software being provided complies with Office of Management and Budget Memorandum M-07-18 entitled Ensuring New Acquisitions Include Common Security Configurations and the FAR 39.101(d) regulations involving National Institute of Standards and Technology (NIST) common security configuration checklists including FDCC or USGCB initiative.

Common security configurations are available from the NIST website at http://checklists.nist.gov.

http://checklists.nist.gov/