Attach 9 TO 0001 SOO 12032020.docx

Defense Information Systems Agency (DISA)

Defense Enclave Services (DES)

Statement of Objectives (SOO) Task Order #001

03 December 2020

1. Overview

DISA desires to partner with industry to provide commercial Information Technology (IT) services, decrease redundant IT costs, enhance cybersecurity posture, and standardize IT services across disparate networks. Defense Enclave Services will unify the 4th Estate’s Common Use IT systems, personnel, functions, and program elements associated with the support of those systems and technologies under a Single Service Provider (SSP) architecture managed, operated, and supported by DISA.

2. Purpose

The specific purpose of Task Order #001 is to receive standardized, responsive and innovative IT services focused on mission value and user network experience, while improving security, network availability, and reliability.

3. Scope

DES will provide all required transition, infrastructure, network operations and management, engineering and innovation, cybersecurity, and technical refresh support services for a SSP network environment with Defense Agency and Field Activities (DAFA) mission partners. The network will consist of Non-classified Internet Protocol Router Network (NIPRNet) and Secure Internet Protocol Router Network (SIPRNet) domains, and will use the DISA DoDNet as the technical baseline for standardization between agencies upon transition.

A total of five (5) 4th Estate agencies have been identified to be included in this Forth Estate Network Optimization (4ENO) effort. Three (3) agencies (Defense Technical Information Center (DTIC) and Defense Prisoner of War/Missing in Action Accounting Agency (DPAA) and DISA Headquarters (HQ) will require only sustainment services, as migration will be completed under a separate DoDNet Services contract awarded in FY2020.

4. Constraints and Risks

a. Cable Plant and Wireless Infrastructure Support services within DISA facilities in the National Capitol Region (NCR) will require Top Secret (TS)-Sensitive Compartmented Information (SCI) clearance since network equipment is located in Sensitive Compartmented Information Facilities (SCIF).

b. All planning, migration, and sustainment activities shall be priced separately. The activities are defined as follows:

· Planning activities: site survey, BOM development, network design, physical/Layer 1 analysis, service design package

· Planning exit criteria: site survey(s) completed, network and equipment requirements defined, service design package complete

· Migration activities: deploy and configuration equipment, migrate domain and identity management services, conduct successful pre-IOC pilot

· Migration exit criteria: network built and operational, ATO change request completed/approved, Initial Operating Capability achieved (ready to image user workstations)

· Sustainment activities: image workstations, sustain cybersecurity posture, operate network and services

c. Planning, Migration and Sustainment of the Defense Microelectronics Activity (DMEA) shall be priced as a separate Optional CLINs.

d. Planning, Migration and Sustainment of the Defense Media Activity (DMA) shall be priced as a separate Optional CLINs.

e. Current operations across the 4th Estate environment include a disparate mixture of government/contractor owned IT hardware (HW) (e.g., servers, desktops, laptops, routers, thin clients, printers) and IT software (SW) (e.g., desktop and application SW) as well as a combination of government and contracted operated services. Some Government locations may use thick clients, Virtual Desktop Infrastructure (VDI) environments, or kiosk/shared workstations in their respective facilities.

f. Sample DAFA enterprise architecture is included in Appendix C; the accuracy of this information may change between the Request for Proposal and actual start of DAFA migrations.

g. The 4th Estate Common Use IT services are required to be 24x7 with core hours M-F, 8 am to 5 pm local time. Some Common Use IT services may require a Continuity of Operations Plan, which includes surge support requirements for Disaster Recovery and reconstitution activities.

h. Network operations and service availability are paramount to migration; DISA and its mission partners shall not experience delays or degradation of services in the SSP environment.

i. Network architecture shall not contain proprietary elements or closed architecture; the overall architecture must be open to allow for the rapid integration of new and cost-efficient technologies.

j. The procurement of end devices, peripherals, network equipment, and software is not in scope of this DES task order. The DES provider will plan for the lifecycle and technical refresh of all infrastructure and endpoint nodes, which the Government will procure through competitive means. The provisioning and maintenance of the Government-procured devices are within the scope of the DES contract .

k. Service Desk Support is not in scope of this task order.

l. Physical site attributes (such as Layer 1 cabling, etc.) may impact whether NIPR and SIPR networks have concurrent or separate migration schedules.

m. At the direction of DISA, additional 4th Estate agencies may be identified and included in this effort.

5. Schedule

Within ten (10) business days of task order award, the Contractor shall deliver to the Government a schedule in a format that is typically used in commercial network migrations such as this at high velocity. This schedule shall be reviewed at the Kick Off meeting, “baselined” and incrementally evolved per the Contractor’s recommended process.

At a minimum, the schedule shall identify major project capability milestones, dependencies, communication and related activities associated with the project. In addition, the Contractor shall provide management plans and reports, technical issues, resolutions, and mitigation strategies for the base period at the Kick Off meeting.

6. Transition

A. The Contractor shall begin the phase-in efforts immediately after contract award. The Contractor shall submit a Transition Plan as part of their proposal. In this plan, the Contractor shall specify how it will phase in seamless personnel staffing and support so that no delays or degradation of services is experienced by DISA and its mission partners. In the plan, the Contractor shall include adequate time to hire appropriate personnel, conduct inventories, assume network control, issue subcontracts, etc. after Task Order award. The contractor shall commence implementation of the proposed Transition Plan immediately upon contract award. During the phase-in period, the contractor shall be responsible for finalizing all employee clearance requirements. The contractor shall complete the necessary steps for assumption of the operation during the phase-in period and shall meet all requirements as specified in the SOO with the beginning of full performance. The phase-in period shall be no more than 90 calendar days.

B. To ensure a smooth phase-out to the next service provider at the conclusion of the task order, or in the event an Option Period is not exercised, and to prevent possible decreases in productivity or service quality, the Contractor shall provide a 90 calendar day phase-out period prior to the task order conclusion date. During this period, the Contractor shall make available to the incoming contractor representatives who are versed in the established operation of the functions to be performed to key incoming contractor personnel. This service shall be made available to explain procedures for conducting government business, show the next contractor various work sites, introduce the contractor to customer representatives, etc. During this period, the incumbent contractor shall provide required training pertaining to the current status and pending transactions and conduct material, equipment, and tools transfers. Inventories shall be conducted jointly with the Government representatives and representatives of the incoming contractor.

7. Objectives

DES is a Government-owned contractor-operated service model. The objectives of DES include providing singular Command and Control (C2) focus across DAFAs for Common Use IT operations, decreasing redundant costs and enhancing cybersecurity:

A. Consolidate, integrate and optimize disparate Local Area Network IT Support Services.

· Provide a single flexible contract vehicle that includes end-user technical support, engineering, asset management, and operational project support;

· Implement an integrated network operations center management of services across all aspects of the environment;

· Manage desktop engineering and image configuration management;

· Report service performance metrics in real time, identify root cause of service outages, scope areas of service improvement and reduce user downtime.

B. Reduce contract overhead through the consolidation of multiple support contracts.

· Implement a program that incorporates the full management of HW and SW provisioning and service operations leveraging industry best practices;

· Eliminate redundant SW and HW assets;

· Generate innovative service delivery techniques that will increase cost savings;

· Utilize industry best tools, processes, and procedures to enhance customer services, reliability and efficiencies to reduce the number of needed service technicians.

C. Generate and identify opportunities for new technology insertion to enhance the cybersecurity posture of DISA and its mission partners.

· Promote innovation and delivery of new technology, including executing pilots and proof of concepts on emerging technologies related to Common Use IT services;

· Ensure solutions proposed operate in a compatible, non-vendor lock-in, competitive environment.

8. Performance Metrics The Contractor shall deliver services in accordance with Table 2 - Network Operations below.

Table 2 - Network Operations

9. Deliverables The Contractor shall deliver data items in accordance with Table 4 below. All deliverables shall be provided to the Government for review and approval. Furthermore, the Contractor shall propose additional documentation they believe will help the program operate effectively.

Non- Disclosure Agreement

DoD Contract Manpower Report (Former ECMRA Contract Record)

Monthly Status Report

Quality Control Plan

Knowledge Management Plan

Migration Plan

Sustainment Plan

Site Survey Report

DoDNet Status & Outage Update Report

Incident, Problem, and Change Trend Analysis Report

Once 60 days after award, then quarterly updates.

The first one will be 60 days after award, then daily after that.

Standard Distribution* Once 60 days after award, then quarterly updatehs.

Standard Distribution* Once 60 days after award, then quarterly updates.

Table 4 - Deliverables

10. Reserved

11. Government Furnished Material and Equipment The Government shall provide access to requisite program and technical information that is necessary to carry out the requirements of this SOO. The Government shall provide access to facilities, equipment, software tools, and technical information necessary for the performance of this task order. Items may include office space, desk, telephone, printer, access to electronic mail, and computers, when deemed appropriate by the Government. In addition, the Government shall provide access to appropriate systems. Contractor personnel will not use government resources in violation of any federal, State, or Local statute, regulation or policy.

12. Travel Requirements The Contractor shall support government directed meetings as needed. All travel costs (lodging, per diem, airfare, rental car etc.) shall be reimbursed at cost via the travel contract line item. Contractors shall be responsible for making their own travel and lodging arrangements as necessary to support requirements. Contractors shall plan to support travel to CONUS and OCONUS locations, as necessary.

13. Place of Performance The contractor may utilize their own facilities when planning the work associated with this SOO.

Appendix B contains location information for 4th Estate mission partners. The Contractor shall identify the Contractor’s place(s) of performance in their PWS. At the direction of the DISA, additional 4th Estate agencies and locations may be identified and included in this effort.

14. Period of Performance

The task order will consist of a 1-year base period and four, 12-month option periods.

15. Data Rights The Government will have unlimited rights to use/modify/share all information, technical data, computer software, and computer software documentation utilized under this task order. The Contractor shall deliver to the Government all databases, scripts, source code, configuration documentation, and any information relevant and pertinent to host, manage and support new, modified and/or existing systems or applications under this task order.

16. Security DES will provide standardized delivery and management of NIPRNet and SIPRNet services; reference the pre-solicitation DD Form 254, Contract Security Classification Specification. The nature of this acquisition requires access to, handling, receiving and storing classified (Secret and Confidential) and Controlled Unclassified Information (CUI), Personally Identifiable Information, Personal Health Information, unclassified information, documents, hardware and software using the applicable standards of DoD 5220.22-M National Industrial Security Program (NISPOM).

The nature of this task order requires access to Secret and unclassified data, information, and spaces. The Contractor shall be required to attend meetings at classified and unclassified levels.

The work to be performed under this task order is up to the Top Secret level and will require Sensitive Compartmented Information (SCI) access eligibility for personnel assigned to cable plant and wireless infrastructure support at DISA. Cable plant support requires access into all SCI Telecommunication Rooms (TRs) at DISA HQ Fort Meade, the JWICS Computer Equipment Room (C3J58), and SCI areas in Command Building for cable survey, installation, repair, and maintenance. After-hours/weekends access to the TRs are also required in order to troubleshoot network connectivity issues (from the wall jack to the patch panels) during network outages.

The work performed by the Contractor will require access to Secret and Controlled Unclassified Information facilities and workspaces, as well as Sensitive Compartmented Information Facilities (SCIF). The Contractor must have an interim Top Secret Facility Clearance from the Defense Counterintelligence and Security Agency. Appendix E provides a PWS template with current security language.

17. Cybersecurity Maturity Model Certification (CMMC) The Government reserves the right to require CMMC Level 3 certification once the standards are available. The certification timeline will be established by the Government at the task order level.

STATEMENT OF OBJECTIVES APPENDICES

Appendix A: Solicitation HC1047-20-R-0014 Services Summary Appendix B: Places of Performance Appendix C: Agency Size Designations and Sample IT Architecture Appendix D: DES Task 1 Quality Assurance Surveillance Plan Appendix E: DISA PWS Template Appendix F: DAFA Data Calls Appendix G: Glossary image1.emf