Attachment 1- Performance Work Statement.pdf

Attachment 1 – Performance Work Statement

PERFORMANCE WORK STATEMENT

60 months contract for maintenance, consumable supplies, repairs Versant 280 Color production printer with Fiery Controller

INTRODUCTION

DLA J67F Document Services seeks to maintain existing Xerox Versant 280 print production equipment Fiery Controller. The output will include but is not limited to supporting the Department of Defense within Europe, Middle East, and Africa in large volume print production. It is imperative that the digital printing ensures that all printed products uphold and maintain the mission requirements of the Services for color and Black and white output.

1.0 GENERAL INFORMATION

1.1 DLA J67F Production Operations requires the ongoing service maintenance for existing equipment at Ramstein Germany DLA Document Services - Ramstein Germany Suite 4 Building 404

APO AE 09094

1.2 Service requested on Xerox Versant 280 and Fiery Controller

Serial Number Xerox Versant 280 SN: 3148383927 Serial Number Fiery Controller SN: 3087691488

2.0 CONSUMABLE SUPPLIES

2.1 The contractor shall provide all consumable supplies necessary for device operation using an automatic replenishment system.

2.1.1 The phrase “consumable supplies” means all supplies necessary for device operation including, but not limited to, toner, developer, fuser oil, replacement parts, and staples etc. Paper is excluded from the definition of consumable supplies.

2.1.2 The phrase “automatic replenishment system” means a process where the contractor without prompting, orders or intervention of any sort from DLA Document Services personnel– continuously delivers consumable supplies for each device at each location so that the equipment it delivers under this contracting action runs properly while maintaining or exceeding the MUA set forth at paragraph 3.1. This is typically based on usage.

2.2 The contractor shall provide access to its vendor ordering system and/or a toll-free telephone number so that DLA Document Services personnel can order consumable supplies without an additional fee should the automatic replenishment system fail.

(Providing this information for consumable supplies thereby does not excuse failure to meet the requirements in paragraph 4.1.) A permanently affixed decal in a prominent location on each device should have this phone number and email address (if applicable)

2.3 The contractor shall reclaim expended toner cartridges, fuser modules, overflow containers and any other consumable items considered recyclable or hazardous to the environment and recycle and /or dispose of them in accordance with Executive Order

13693. Prepaid mailing labels will be supplied by the contractor for reclamation.

2.4 When the device under contract is deemed to be no longer serviceable by DLA, the contractor shall provide for a pickup of all remaining consumable supplies, parts within 10 calendar days of notification. Failure to provide this will result in the supplies and materials to be disposed of.

2.5 The contractor will provide current and updated Material Safety Data Sheets on all consumable supplies it provides.

3.0 MAINTENANCE & REPAIRS

3.1 The contractor shall maintain at least 90% Monthly Uptime Availability (MUA) per machine which shall be calculated based upon the 21 standard Federal workdays in a month and an eight-hour day and excludes normal preventive maintenance time. MUA uses the following equation: (Uptime + Scheduled Maintenance)/ (Unscheduled Downtime + Uptime + Scheduled Maintenance) Refer to Section 8.0 Meetings, Reports and Administration, Para 8.2 for reporting requirements.

3.2 The contractor shall provide 8:00am - 5:00 pm, local time, maintenance and repair coverage which includes four-hour service response, for maintenance services including travel, parts, labor, software version upgrades (up to the hardware capability) and retrofits for all equipment including all components. A telephone call is not an acceptable service response. A service technician must call the primary operator within 1 hour.

3.3 The contractor must ensure all service technicians are eligible for access to Department of Defense facilities in accordance with the authority in Directive Type Memorandum (DTM 09- 012) which establishes DoD access control policy and the minimum DoD security standards for controlling entry to DoD installations and stand-alone facilities.

Contractors must also check and follow installation access policies specific to each DoD installation. Technicians must be eligible at time of the award.

4.0 IT CONFIGURATION

4.1 The following is a list of the current print server operating system requirements:

• Microsoft Windows 10 or current DLA approved Operating System

• Windows 10 Long Term Service Channel Release 1809 or higher

• Microsoft Windows Server 2016 and 2019 or current DLA approved OS

• Sun Solaris 11 or current DLA approved Operating System

This list is not inclusive of any future requirements and or changes by the DLA or CYBERCOM. The contractor will be required to perform operating system updates and patches IAW future DoD or DLA directives at no additional cost to the government.

4.2 All contractor-provided software (including Operating System) must be supported by the contractor and the software’s original manufacturer at all times during its use by the government. If it becomes apparent that either the contractor or original manufacturer will no longer support any contractor-provided software, the contractor must provide and install other software in coordination with delegated DLA Document Services delegated POC that is still supported by the contractor and the software’s original manufacturer.

4.3 Contractor solution must be capable of functioning in a common security environment, given that DLA Document Services is required to add additional software that is standardized within DLA Document Services including but not limited to McAfee ePolicy Orchestrator (multiple modules including Antivirus and Host Intrusion Prevention), Arcsight Logger, Active Client Software and Axway Desktop Validator.

4.4 All hard drives that are put into service at DLA Document Services must remain in the custody of DLA Document Services. All hard drives, whether internal, external, or otherwise, shall not be returned to the contractor. A permanent decal, affixed in a prominent location on the device, should detail the number of hard drives in the equipment and the location of these hard drives to facilitate removal if/when needed.

This applies to the print units, servers, PCs, controllers and any other applicable device.

4.5 All devices/components shall meet DoD information security specifications when interfacing with classified materials to ensure no remnants of the classified data exists after the classified process has been completed. Guidelines can be found at https://iase.disa.mil. The contractor shall indicate the specific steps needed to ensure classified data is never disclosed. Any proposed process must include the use of removable hard drives and receive DLA Document Services POC approval, which will occur during the certification and accreditation process.

4.6 All devices shall be configured in compliance with all applicable DoD Security Technical

Implementation Guides (STIG) (Ref: http://iase.disa.mil/stigs). Any remaining deficiencies that cannot be resolved shall be identified to DLA Document Services delegated POC prior to the Certification and Accreditation testing phase for evaluation of acceptance.

4.7 The equipment shall operate and coexist on a network that can support each of the following:

4.7.1 Internet Protocol Version 4 (IPv4)

4.7.2 Internet Protocol Version 6 (IPv6)

4.7.3 Internet Protocol Version 4/6 Hybrid (IPv4/6)

4.8 All devices/components shall have the capability of turning on and off any ports and protocols.

4.9 DLA Document Services will provide a configuration standard / settings document for each hardware model that the vendor shall utilize when installing hardware at a designated site. This configuration standard / settings document will be developed for each asset / model in conjunction with the vendor post-award at DLA Document Services facilities in Mechanicsburg, Pennsylvania.

4.10 The use of USB flash drives is strictly prohibited at all DoD installations with all

Document Services locations included as well. In addition, non-government issued IT devices (e.g., phones, laptops, etc.) are prohibited from being used on DLA Document Services equipment and network. In instances where classified devices are being worked on, cell phones and other such devices that can record or take pictures are prohibited.

4.11 Section 508 Accessibility Standards - The user interface shall comply with Section the

Rehabilitation Act of 1973, per the 1998 Amendments, and the Architectural and Transportation Barriers Compliance Board’s Electronic and Information Technology Accessibility Standards at 36 Code of Federal Regulations (CFR) 1194. The standard

1194.21 (Software applications and operating systems) has been determined to be applicable to this contract.

5.0 IT CERTIFICATION & ACCREDITATION, AND TECHNICAL SUPPORT

5.1 The contractor shall monitor industry standard vulnerability sites (e.g., http://nvd.nist.gov/ ) and take appropriate actions if its equipment is subject to a known vulnerability. In addition, DLA Document Services will notify the contractor as security vulnerabilities are identified concerning the installed equipment. When vulnerability is identified, the contractor shall provide patches within 30 calendar days unless a shorter time period is directed by DLA Document Services delegated point of contact. The contractor shall provide the monthly Security Vulnerability Report per paragraph 8.5.

5.2 The contractor shall update all contractor supplied software.

5.3 J64 retains responsibility for patching all Microsoft Windows systems that can be updated via Microsoft SCCM. In the execution of contractor-initiated software updates, coordination shall be made with the DLA Document Services delegated POC named in the task order.

5.4 All maintained hardware shall be registered by the vendor under the “DLA” name for 3rd party technical support.

5.5 The contractor shall not have remote access to equipment unless authorized.

5.6 Provided workstation hardware will be imaged with a DLA standard image for both classified and unclassified systems.

6.0 MEETINGS, REPORTS AND ADMINISTRATION

6.1 The Contractor shall provide a single POC for administration of the contract and a single POC for service issues. The Contractor shall prepare and deliver a monthly Availability Equipment Report via email to the Office Group Production Manager Linda Hamm (linda.hamm@dla.mil) and local POC, Matthew Wilcox (matthew.wilcox@dla.mil). At a minimum the report shall contain the following:

Location

Product

Name

Product

Model

Listing of accessories (such as controller )

Serial Number

Number Monthly of Service

Calls Monthly Total

Downtime Available Hours

Percentage of Up-Time/Availability

Reports are due by the 15TH of the month following the reporting period.

6.2 The Contractors’ Administrative POC and the Contractors’ Service POC shall attend, as requested by DLA Document Services a teleconference with the POC and others to discuss the report set forth in paragraph 5.1, above. The meeting discussion will be based on previous month(s) machine information.

6.3 The monthly Security Vulnerability Report shall be provided by the Contractor to the POC. The report shall contain the location of all devices, product name, serial number, details of the security vulnerability and its status.