Attachment 1-PWS_EITOM_Draftv4.docx

Performance Work Statement (PWS) Indian Health Service Enterprise IT Operations and Maintenance (EIT O&M) Services

Contents

Purpose The Indian Health Service (IHS) requires Enterprise IT Operations and Maintenance (EIT O&M) support to ensure the availability, integrity, security, and confidentiality of critical IT services provided by the IHS Office of Information Technology (OIT). The IHS OIT operates two primary Data Centers and requires both on-site and off-site contractor staff resources to provide systems engineering and administration for IT Operations and Maintenance, staffed with experienced IT specialists to maintain the existing functionality and to design, implement and support new network technologies. The contractor shall furnish the necessary technical and administrative staff and staffing facilities to meet the IHS program objectives. This support is to include the sustainment support for a variety of hardware, software, and IT services to include Server Administration, Active Directory (AD) Infrastructure, Storage Area Networks, Virtualized Data Center management, Hybrid Cloud services, Enterprise Patch Management, Enterprise Antivirus Protection, Multi-Factor Authentication (MFA), Global Address Directory Synchronization, Identity and Access Management, Internet Proxy with URL Filtering/ Reporting, Endpoint Encryption Management, Device Certificate Management, and Virtual Private Network (VPN) Remote Access. The IHS requires highly knowledgeable and experienced contractor IT Subject Matter Experts to sustain the existing IHS IT infrastructure and provide support for new emerging technologies.

Background The Indian Health Service, an operating division of the United States Department of Health and Human Services, is a geographically diverse agency with 623 locations across the United States serving 566 federally recognized Tribes (sovereign nations). The IHS OIT is required to support and maintain the availability, integrity, and confidentiality of the IT systems that support the IHS mission.

The IHS Fact Sheet web site gives more statistics on the IHS supported services: https://www.ihs.gov/newsroom/factsheets/ . The IHS HQ, Office of Information Technology website provides additional information regarding IT Services and the approved IT Strategic Plan at: https://www.ihs.gov/OIT/aboutus/ .

Division of IT Operations The IHS HQ OIT Division of Information Technology Operations (DITO) manages technologies deployed for use across the agency in support of the IHS Mission. DITO is committed to providing reliable customer services and technically relevant solutions and support for the IHS information technology services to all Federal Employees and Contractors across IHS. The DITO Division Director oversees all areas for IT Operations to include additional services not included within this PWS. Additional information regarding the support provided through the DITO can be found at https://www.ihs.gov/OIT/operations/ In accordance with Office of Management and Budget (OMB) guidance and the Presidents Management Agenda, the support services listed within this PWS are broken down into the specific Technology Business Management (TBM) IT “towers” to include standard investments and cost pools in order to allow for reporting across each of the cost sources. The TBM is a value-management framework instituted by CIOs, CTOs, and other technology leaders to gain alignment between IT, Finance, and Business Unit leaders and to provide a standard taxonomy of all cost sources, technologies, IT resources (IT towers), applications, and services.

Contract Objectives Mission: To providing IHS staff and health service providers supporting the agency mission with excellent, reliable, and efficient enterprise IT infrastructure through contracted operations and sustainment services to ensure the delivery of effective healthcare through information technology.

Vision: To provide a people-focused approach to meeting next generation IT requirements using cutting edge techniques and technology.

To provide the IHS with highly skilled, knowledgeable, and professional IT support resources who shall perform IT O&M services in support of the IHS mission to raise the physical, mental, social, and spiritual health of American Indians and Alaska Natives to the highest level. The Contract staff shall be proficient in various enterprise applications, IT services, and federal security policies and procedures. Specifically, the key objectives for this contract include:

· Align all cost reporting and work performed with the TBM IT Cost Pools and IT Towers

· Maintain current operational capabilities of the IHS infrastructure and HQ Data centers

· Maintain and enhance the security and resiliency of critical services within the IHS HQ OIT security boundary.

· Maintain and improve support for the IHS AD and enterprise services

· Maintain and improve user access to data and ensure data integrity

· Maintain and improve support for standard IHS applications

· Maintain and improve Service Desk IT Support services

· Provide onsite End User Support services for HQ onsite employees in Albuquerque, NM and Rockville, MD along with support for remote HQ teleworkers

· Provide IT Call Center technical support triage and limited enterprise services for all IHS

· Provide Contact Center Representatives in support of Customer Experience initiatives

· Maintain and improve documentation of each system and IT service

· Support of all IT project activities and initiatives to include oversight and routine reviews of Risk Management, Change Management and Resource Management.

· Maintain and improve the program management of all IT Projects according to the established IHS standards and HHS Enterprise Performance Life Cycle (EPLC) standards and roles where applicable (https://www.ihs.gov/CPIC/lifecycle/).

· To provide for the modernization and security of IT operations of the DITO services in support of new technologies, Zero Trust initiatives, priorities and services to include new enterprise applications, Disaster Recovery, CDM and Hybrid Cloud Service Management.

Scope of Requirements The Contractor shall provide skilled, experienced, and highly knowledgeable technical support resources for the IHS enterprise level IT operations and maintenance services for the Headquarters, Office of Information Technology (HQ, OIT) Data Centers and the enterprise IT systems (non-Health IT) that support the IHS mission. This includes the maintenance and improvement of the availability, integrity and confidentiality of the IT architecture and engineering, systems administration, Data Center infrastructure systems and storage, desktop, and service desk services for the HQ user base as well as an IT Call center for all critical enterprise infrastructure services to the IHS Regional Areas and facilities.

The tasks included as part of this PWS includes the Operations support and systems administration of all physical infrastructure hardware, virtual systems and interconnected devices within the Headquarters (HQ) Data Center (s) (see Appendix A for scope of the two IHS Data Centers) to include disaster recovery, enterprise AD administration and application services and operational security support for IHS. These functions include but are not limited to operating systems, virtual infrastructure, network equipment and connectivity, AD Management, enterprise infrastructure applications and services, VPN, URL filtering services, Device Certificate management, Endpoint encryption, the IHS IT Service Desk as well as Local and remote desktop support for HQ employees and contractors. Additionally, the contractor is tasked to provide support resources for a newly established Contact Center, for contact management and business analytics, enterprise licensing, and documentation services to produce the systems configuration reports, Standard Operating Procedures and metrics reporting as required by the agency and supported by the DITO.

Contract Type The contract type awarded is a Firm Fixed Price (FFP) Contract. For reference, the current contract #75H70420C00004, period of performance end date: 3/29/2025, and the Contracting Officer Representative (COR) is Ms. Kathryn Lewis, Kathryn.Lewis@ihs.gov .

Period of Performance (PoP) The PoP for all O&M and service support shall be one (1) twelve (12)-month base period with four (4) twelve (12)-month option periods beginning at contract award.

The Contractor shall perform all requirements of this Performance Work Statement (PWS) in accordance with IHS and Department of Health and Human Services (HHS) policies, procedures, and directives as referenced in the Appendix B of this PWS.

Place of Performance Related tasks within this PWS are to be performed onsite for the HQ OIT Data Center locations as follows:

· OIT Rockville (Rockville Data Center (RDC) and HQ Service Desk): 5600 Fishers Lane, Rockville, MD 20857

· OIT Albuquerque Data Center (ADC): 1011 Indian School Rd NW, Albuquerque, NM 87104.

All other support locations are to be provided at the Contractor location or onsite at the IHS location as indicated in the following table:

Place and Hours of Performance Minor deviations in start and end times are likely to be acceptable, especially those which tend to increase the hours during which coverage is available. Such deviations must be approved by the COR.

Emergency Call Back:

The Contractor shall provide irregular, off hours (weekends, weekdays, and holidays, 24/7) critical enterprise support remotely via approved remote software tools/applications. Onsite Data Center critical support may also be required as issues or emergencies are identified. Estimated hours per contract year for each area of support are provided as follows:

· Data Center, Storage, Compute Services: 60 hours

· Authentication and enterprise application services: 60 hours

· End User Services: 30 hours Emergency troubleshooting or repair work is occasionally required for unplanned outages or major issues impacting production services. Work may need to be performed on site or remotely during non-business hours. All scheduled maintenance work causing system outages must be performed during non-business hours.

The contractor shall provide a call-back within 60 minutes of any after-hours contact from the government. This ensures timely support and continuity of operations during emergency/critical incidents. The contractor shall maintain a reliable and efficient communication protocol to meet this response time.

Holidays and Time-Off:

All federal holidays are observed. The only exception would be the support for critical support services or outages. Contractor personnel shall not report to work nor remain at the work locations any time the Government unexpectedly closes their offices with the exception of emergency support required. The contractor is responsible for all notifications of their contractor staff during times of closure. During office closures, the contractor may elect to reschedule work hours during the same pay period.

Current federal holidays:

Travel Travel within the continental United States is required in support of the tasks within this PWS. Two personnel supporting End User Services are required to travel and support an annual 3-day conference hosted by OIT. The conference may be held at various cities throughout the life of this contract. Other travel may be required for mission critical support in very rare circumstances.

Standard Investment Support Tasks IT Management High Level Objective: IHS seeks administrative support, project, and program management, to deliver new technology and capabilities to IHS while efficiently sustaining existing capabilities.

Administrative Support The Contractor shall assist the COR with administrative work related to IT Project management, information security and Area facility coordination activities related to deployment of applications and services, or other support activities as required by national IHS and HHS initiatives. This includes, but is not limited to: data collection related to user and information security, involvement in the annual Certification & Accreditation (Continuous Authorization) document completion, Data Call coordination in support of the Operational Analysis and other HHS data reporting needs, Equipment management in coordination with the Property Office to locate equipment, support for systems lifecycle management and other various related Agency administrative support activities. The following additional administrative services and support shall be provided for all areas of the PWS:

Contract Management Plan: The contractor shall submit a contract management plan to include each of the tasks in the PWS. The contract management plan will be approved by IHS to ensure contract expectations and requirements are clearly understood. The contract management plan shall be prepared for IHS review and approval no more than ten (10) days after the task order award.

Quality Control and Quality Assurance Surveillance Plans: The Contractor shall prepare, implement, and adhere to a Quality Control Plan (QCP). The Contractor shall submit the Draft QCP with the proposal and shall update the QCP within 10 days after award. The QCP shall document how the Contractor will meet and comply with the quality standards established in this statement of work. The QCP must include a self-inspection plan and an outline of the procedures that the Contractor will use to maintain quality, timeliness, responsiveness, and customer satisfaction. The Government will monitor the Contractors’ performance under this contract according to the Service Level Agreements (SLAs) and the Quality Assurance Surveillance Plans (QASP). Yearly reporting will be provided within the CPARS reporting system.

Service Level Management: The Contractor shall document the baseline SLA for the tasks described in the PWS within 30 business days of contract award. The monitoring and reporting of the SLAs associated with each standard investment will require approval by IHS. This includes providing for continuous monitoring of service performance to meet the SLAs and report conformance results monthly.

DITO Tactical Operation Plan: The Contractor shall track all key activities and tasks within this PWS to include the status tracking of key activities and projects for reporting to the COR and DITO management monthly. This would include technical implementation projects such as major software upgrades, hardware replacements, technical alternative assessments, new processes, or technical changes to be implemented within HQ OIT and/or across IHS.

Project Management The Contractor shall provide complete project management for all IT project activities and initiatives on behalf of the Division of IT Operations in a manner that meets OMB and HHS requirements (following HHS Enterprise Performance Life Cycle (EPLC) standards). This includes current operational project upgrades/replacements and any future major IT projects (technology modernization and enhancements). These projects are generally implementations of commercial-off-the-shelf applications, cloud services, or IT infrastructure. The scope of project management support excludes Health IT software development or enhancements to Health Information Technology applications (e.g. Electronic Health Records system). Project Management supports the IHS Capital Planning and Investment Control (CPIC) Management team, the IT Project peer reviews and each of the required stage gate reviews (https://www.ihs.gov/CPIC/ ).

The Contractor shall manage the following EPLC project related activities and deliverables required for each major IT project included as part of this contract:

a. Identification and capturing of all project requirements.

b. Cost and resource estimates for all major IT Projects.

c. Creation of all IT Project documentation deliverables.

d. Management of staffing resources for each initiative.

e. Management of project due dates, risks, issues, deliverables, and general reporting.

f. Business Needs and Business Case requests for IT governance approvals.

g. Project Management Plans – including Project Charters, Change Management, Risk Management and Communication plans.

h. Post Implementation Reports and Lessons Learned reviews.

The Contractor shall provide timely project management status reports on all contracted activities to include:

a. Performance assessment reports on all contract activities and improvement opportunities

b. Assist with support to Federal Managers on the completion of the detailed project related documents for approved IT projects using approved Project Management tools such as PlanView (https://www.planview.com/products/planview-enterprise/), or Microsoft Project for managing, planning, and tracking the resources and costs for new IT projects as well as O&M reporting and maintenance.

c. Weekly contract labor resource reports to show the number of hours worked on DITO projects per resource type.

d. The Contractor shall document measurements for meeting project milestones and track all issues and risks as part of the monthly reporting to the COR.

Program Management The Contractor shall provide Program Management support, IT technical documentation support and other Information Technology Infrastructure Library (ITIL) related services that are required for effective management and sustainment of IHS IT services. This shall include the management and oversight of the following functions:

Knowledge Management

a. The Contractor shall provide knowledgeable, experienced IT Technical documentation support for all systems engineering work to include:

· The creation and maintenance of all System Administrator Guides, process descriptions, implementation plans, contingency procedures, design documents, and workflows.

· The Contractor shall present draft materials to the COR in ongoing cycles of review, discussion, and improvement. Documentation modifications are required at various stages of the systems lifecycle and are to be up to date.

b. The Contractor must use provided templates, policies, forms and other agency documents to comply with contract deliverables as appropriate.

c. The Contractor shall maintain and update all internal documentation to include:

· Configuration management documents for each major system

· Enterprise Services Architectural Designs

· Standard Operating Procedures (SOPs), test plans and implementation plans must be maintained and updated for upgrades, replacements, and new product installations.

· Maintain current Data Center diagrams which include hardware, server locations, racks, cabling placement, power, and other relevant data. This includes maintaining updated network diagrams, VLANS and switch configurations including switch ports and other relevant data. All SOPs must follow IHS naming convention guidelines and format.

· Customer facing technical notes, user guides and frequently asked questions and updates to the Information Technology Service Management (ITSM) solution (ServiceNow) or internal SharePoint.

· Operations plan updates of key activities

· All documentation (contract related, metrics, and technical documentation and baseline procedures) must be stored in a federally approved IHS storage location as an accessible document repository location for reference to include version management and an updated document catalog. All content will remain as government property.

d. The Contractor shall maintain the following documentation according to OIT procedures. Documentation is used for planning and failover/recovery capabilities.

· Service Interruption Documentation and Notices

· Monthly uptime report for all critical data center services, Change Management Events, maintenance notices, issues log and risk logs

· Monthly IHS Dashboard metrics reports (includes Uptime reports, Antivirus compliance, Patch Management compliance, Service Desk tickets and customer satisfaction surveys)

· Network Device Inventory List, Location Diagrams, and baseline Device Configurations

· Static IP Address Management reports

· Server, appliances, racks, and peripherals Inventory

· System Configurations for critical systems

· Data Center Hardware Lifecycle Reports

· Licensing utilization and Inventory Reports

· AD metrics and health status reports

· Desktop Inventory, Laptop, and Peripherals Inventory List

· Security Compliance Reports

e. The Contractor shall provide support and content management of multiple SharePoint sites for all areas identified within this PWS. The Contractor shall ensure that all contract related SharePoint sites support the capabilities for dashboards, graphics, workflows, and reporting based on the Enterprise Client Access Licensing (ECAL) available to IHS.

f. All Contractors will be evaluated on the effectiveness, clarity, professionalism, and timely submission of Project related documents, technical systems design, implementation plans and other applicable documents.

Service Strategy: The Contractor shall provide recommendations to assist the COR and Federal Managers with the development of strategic goals and objectives regarding technical architecture, database design, Customer support improvement opportunities according to ITIL best practices, identity access management, security configurations and use of emerging technologies to improve service level agreements, Data Center support, enterprise application availability, Tier 3 support and overall Enterprise Architecture (EA).

Service Design:

· The Contractor shall assist with the assessment of new technologies and determine if a technology will support/satisfy new requirements, enhance the security posture of the IHS network, integrate into existing architecture and tool sets and can be properly accredited and authorized for use within IHS.

· The Contractor shall ensure that any new systems, applications, and improvements are developed following IHS CPIC and EPLC standard processes for IT Governance and approvals. An IT Technical Review Board shall verify that the requirements are clearly defined and provide approvals to proceed with the next stage of the project lifecycle.

· The Contractor shall NOT commence any production implementation until all research and design work for new projects, upgrades, and systems improvements are approved. The Contractor shall complete all preliminary cost analysis, design documentation, risk assessments, and testing before IHS determines if a project is feasible, meets agency goals and objectives, and fits EA and performance plans.

· The Contractors' analysis and design work shall follow IHS EA, Agency and ISAC priorities, IHS IT Strategic Planning, Division IT Tactical planning goals and objectives, and IHS Mission plans, where available.

Risk Management: The Contractor shall assess for risks associated with all tasks within this PWS to include the degree to which the risks associated with the support activities impact the success of deliverables, resources, IHS funding availability, and IHS IT services integration. All identified risks are to be assessed for probability, severity, and impact along with planned mitigation recommendations for review and approval.

Service Transition: The Contractor shall provide for the O&M for service transition to include change management, asset management, configuration management and release and final deployment of new services.

Change Management: The Contractor shall develop documented baselines and maintain all major equipment modifications, software changes and Enterprise changes in an acceptable change management database.

a. The Contractor shall provide routine communication to the IHS IT Service Desk regarding any necessary changes to existing features and functionality of Enterprise services that may impact end users due to any activities performed by the contractor or required by IHS as identified within the internal Change Control Board (CCB) process and procedural documentation.

b. The Contractor shall be required to perform all maintenance, patching and service changes for production systems during a predetermined maintenance window and during data center off peak hours to the maximum extent possible.

c. The Contractor shall ensure to require notifications of changes and assessment of any potential impact from all Sysadmins, System Owners and Database administrators which should be provided at least three business days in advance of planned maintenance activities.

d. The Contractor shall document all changes in the IHS approved Change Management database with reporting capabilities.

Asset Management: The Contractor shall document, validate, and manage various service assets used within IHS to include hardware, software, knowledge management systems, AD objects, policies, certificates, etc.

Configuration Management: The Contractor shall maintain up to date data and information on systems in use within DITO in an approved configuration management database. This includes referencing any approved changes as documented within ServiceNow.

Release and Deployment Management: The Contractor shall ensure that all analysis and development work follow the IHS EA, IHS IT Strategic Planning, IT Tactical goals and objectives, IT Security policies and the IHS Mission. Therefore, the Contractor is to follow the ITIL guidelines for planning, scheduling, documenting, and controlling the release of patches, versions, upgrades, and new applications. Test plans must be prepared and completed with approvals to proceed prior to implementation of major upgrades.

Service Operation: The Contractor shall ensure that all incident and problem management procedures are followed. This includes maintaining production infrastructure to prevent service interruptions and efficiently deliver IT services.

a. The contractor shall recommend hardware and software changes for problem solving, capacity limitations, performance “tuning,” system improvements, and process improvements. This includes the identification of where load balancing may improve system performance, reporting problem resolutions and developing a Trend Analysis and Recommendations report for review. For any identified incidences, all emergency system and network changes must be reported to the COR within one (1) hour and take corrective action to restore to operational capabilities within four (4) hours (this may depend on the criticality of the service and associated SLAs).

b. The Contractor shall report when corrective actions are complete to the COR within 24 hours. Notification of any unplanned outages are required to be provided to the COR and Federal Manager immediately upon identification.

Continuous Service Improvements: Assigned contractor personnel shall be knowledgeable of industry best practices related to the processes and procedures used to develop new systems and to recommend and implement system improvements for an enterprise IT operations center.

a. The Contractor shall be familiar with all aspects of the ITIL Service Management framework to assist with improving the effectiveness and efficiency of IT services and support to the business and mission of the IHS for both the internal and external customers.

b. The Contractor shall develop and document best practices to promote continuous improvement to the IHS AD, HQ Data Centers, Service Desk, User Support, Applications support and other Administrative support with the goal of providing a higher level of service maturity and improved customer satisfaction.

Contract Staff Management:

The Contractor shall prepare a staffing management plan to include recruitment and retention of key personnel (see section 6.4.5 for listing of Key personnel) and support staff and present to the COR for approval.

a. Staff Security: The Contractor shall monitor and track all staffing Personal Identification Verification (PIV) cards and certificate expirations and ensure that renewal documentation and certificate updates are completed in a timely manner according to HHS Homeland Security Presidential Directive (HSPD) HSPD-12 policies and renewal requirements.

b. At least 30 days prior to diverting any of the specified individuals to other programs or contracts (or as soon as possible, if an individual must be replaced, for example, as a result of leaving the employ of the Contractor), the Contractor shall notify the Contracting Officer and shall submit comprehensive justification for the diversion or replacement request (including proposed substitutions for key personnel) to permit evaluation by the Government of the impact on performance under this contract.

c. Staff Training:

· The contractor shall complete the IHS Computer Security Awareness Training (ISSA) course for each contractor/subcontractor employee by the due date required (www.ihs.gov/issa ) to include the associated role-based training prior to performing any contract work, and thereafter completing the IHS-specified fiscal year refresher course prior to the due date identified. Certificates of completion must be retained

· The Contractor shall ensure that all staff supported within this contract attend ITIL Foundations training to include certification within three months of onboarding within IHS.

· The Contractor shall be required to attend and document the completion of various IHS mandated trainings identified throughout the contract period.

· The Contractor shall maintain a listing by name and title of each contractor and subcontractor employee working under this PWS of all trainings completed during the contract. Any revisions to this listing as a result of staffing changes shall be submitted with next required technical progress report.

· The Contractor shall provide any necessary technical training relating to applications, services and support being provided as part of this PWS for all contract staff in order to remain technically relevant and authoritative for all services. The contractor shall maintain an up to date listing of all trainings completed during the contract for each technical resource. Some trainings may be provided by IHS for critical projects, applications and systems as funding is available.

Consultation: The Contractor shall provide consultation for solving complex problems, design reviews, emerging technologies and systems analysis to Area Offices and field locations on an as needed basis.

End User Training Support: The Contractor shall provide as needed application training for IHS users and lower level admins in new commercial application implementation plans to include training end users and lower level system administrators for developed production systems. The Contractor shall provide training online, audio conferencing, offsite, or occasionally in an IHS supported training room. These trainings may be scheduled or unscheduled, as needed based on end user support needs.

Meetings and Conferences: The Contractor staff shall attend local and virtual meetings and conferences as directed by IHS staff for technical input, project guidance, etc.

Interagency Development and Support: The Contractor shall provide support for any development and implementation of specific technical solutions that may be required by the HHS and will require interagency project coordination and outside agency resource sharing management. The Contractor shall provide analysis, design, complex troubleshooting, and implementation services for work related to these outside entities.

Data Center Services High Level Objective: IHS seeks to ensure the security, availability, and lifecycle management of the physical and virtual infrastructure in support of IHS critical Enterprise services.

The Contractor shall provide Data Center Management services for the Albuquerque, NM and Rockville, MD Data Center Infrastructures. Contract staff must be available for onsite support on a rotational basis during standard support hours as well as irregular (on-call) support for critical alerts and monitoring. Standard support hours are to be from 8 am to 5pm, local time, M-F. This includes availability for urgent support after hours for all Federal Holidays & weekends. Support is to include the assessment and provisioning of the appropriate rack space, power, network connectivity, cable management, and various other elements for Data Center Management and support of all IHS hardware.

Facilities Support The Contractor shall interface with local Data Center Facility Management Staff on IHS infrastructure needs including conditioned computer room space, telecom, power, cooling, etc. and attend all monthly Data Center Management meetings. This may require some troubleshooting and reporting of all data center infrastructure concerns and issues to the Federal Manager.

The Contractor shall also conform to all Data Center Facility infrastructure requirements for design, cabling, equipment listing, operability, security, change management, etc. Server racks are to be locked at all times when not under active maintenance.

The Contractor shall ensure that the server rooms and work areas are kept clear of debris for safety purposes according to the Facility Safety policies.

Vendor Coordination The contractor’s onsite data center staff shall ensure secure access to IHS racks to include the supervision, monitoring and support of any vendor performing work on the IHS equipment or infrastructure within the Data Centers. This would include but is not limited to: vendors installing or upgrading hardware components, or telecommunication providers installing or troubleshooting telecommunication circuits or other onsite support.

Hardware Lifecycle Management The Contractor shall provide support for the physical and virtual infrastructure, Application servers, File Servers, Terminal Servers, VPN devices, Network appliances, various Storage environments, Backup devices and National Data Warehouse environments. A listing of all specific hardware platforms included as part of this PWS are contained within the Appendix A.

The Contractor shall assess and recommend hardware and software solutions to replace end of life systems and support modernization efforts. The Contractor shall prepare for, install, cable, and connect all infrastructure hardware in coordination with associated vendors.

Hardware Inventory The Contractor shall maintain and up to date inventory of all equipment in the IHS supported management system. All new equipment that is placed on the network is properly labeled and configured per IHS policy and inventory lists managed to include Make/Model, SN, Barcodes, warranty dates, system owners, NetBIOS name, etc. The inventory of all systems is to be kept up to date within three days of any changes into an approved inventory/configuration management database and available for COR/Federal Manager review.

The Contractor shall provide support for yearly equipment inventory reviews in collaboration with the IHS Property Management staff to include escorting and assisting with identification, tracking of missing items, verification of overages, etc. Equipment inventory reports are to be provided as requested with recommendations supplied for yearly technology refresh or warranty renewal requirements as requested by Data Center management to ensure efficient operations. Support for the completion of all equipment transfer forms shall be provided to the COR for the IHS property management staff.

The Contractor shall provide a list of all surplus equipment that the contractor removes from production to the IHS Federal Manager/COR for inventory control and to ensure proper disposal in alignment with the Indian Health Manual, part 5, chapter 12. The Contractor shall assist with and ensure that all hard drives are wiped according to IHS policies with documentation provided to Federal Manager.

The Contractor shall provide for technical support for Area/Facility Data Center services, Data Center consolidation and consultative support for local support utilizing standardized technologies, services. The catalog of services includes technical implementations, troubleshooting and recommendations in support of various capabilities.

IP Address Management The Contractor shall maintain an accurate account of static IP addresses used with the IHS Data Center to include the list of subnets, VLANs, assigned group, etc. in coordination with the IHS Network support team.

Network Cabling The Contractor shall provide O&M support for inside plant telecommunications cabling for server rooms, patch panels, and telecommunication closets. The scope of this support is to perform minor add/remove/change tasks and not implement major cabling projects. Additional support includes:

a. Work with vendors to coordinate the installation of additional networking equipment.

b. Install cabling within and between racks to connect Ethernet and Fiber Channel devices.

c. Install network equipment in racks and wiring closets.

Disaster Recovery Management The Contractor shall provide experienced, knowledgeable technical support for the integration with Cloud Service Provider (CSP) vendors for implementation of Disaster Recovery (DR) services as part of the HQ Cloud Strategic Plan. NOTE: this effort is dependent on the IHS inter Data Center capacity and the IHS Cloud Strategic Plan and identified projects for HQ Data Center expansion.

The Contractor shall assess, recommend, implement, and provide for routine testing of a DR Plan for the HQ Data Centers. This includes a Disaster Recovery technical SME to negotiate the priorities and recovery time objective (RTO), and to develop, build out, document, test and provide support for data/system recovery validation.

The Contractor shall document the baseline Disaster Recovery plans for critical infrastructure services and provide the follow-on maintenance and improvement the infrastructure Disaster Recovery plans to include design, configuration, testing, and validation reporting on a yearly basis.

The Contractor shall ensure that all identified critical services and applications are maintained according to service level agreements in alignment with the High Availability and failover requirements identified in coordination with the IHS HQ DR site identified.

The Contractor shall lead technical efforts to provide support for application owners and system owners to assess and implement the redundancy of services hosted and supported within the control of DITO.

The Contract staff shall participate in any Incident Response and Emergency Management Plan exercises as required.

Cloud/Hybrid Implementation IHS will implement several Federal Risk and Authorization Management Program (FedRAMP) approved Cloud Services to comply with multiple federal policies established in 2018. Specifically, IHS will improve citizen-facing services through the increased use of cloud-based solutions to align with the 2018 President’s Management Agenda. IHS will also align with the HHS Federal Health Information Technology Strategic Plan. (The Contractor shall design, test, implement, operate, and technically maintain Cloud services supporting the IHS (dependent on service agreement with Cloud Provider).

The Contractor shall provide experienced, knowledgeable technical support for the integration with any IHS approved, FedRAMP Authorized Government Cloud Service Provider (CSP) vendors and the IHS private cloud environment as part of the HQ Cloud Strategic Plan and in alignment with National Institute of Standards and Technology (NIST) SP 800-145.

The Contractor shall assist in the assessment and identification of both the business and technical requirements, architectural requirements, use case identification, security and design reviews for the HQ Hybrid Cloud infrastructure implementation and integration with approved CSP. This includes providing and/or recommending solutions as well as to provide for the implementation and management support for cloud integration and brokering services.

The Contractor shall develop and implement the proof of concept testing and validation of technical designs and processes needed to support a Cloud/hybrid infrastructure in collaboration with various OIT business partners and vendors.

The Contractor shall provide a dedicated, knowledgeable, experienced support resource that would lead efforts to integrate IHS services to a FedRAMP authorized CSP.

The Contractor shall ensure integration of critical IHS infrastructure requirements such as AD, Multifactor Authentication (MFA) and various support tools such as VMware are part of the IHS Hybrid Cloud management plan.

The Contractor shall assist with the tracking of all cloud activities in use across the Agency through the use of IHS tools. Reports are to include what is consumed, what is FedRAMP approved and to facilitate the migration of existing services from non-approved sources to an approved IHS authorized, FedRAMP service.

The Contractor shall identify, implement, and document all network, storage, and process changes and dependencies required for the testing and sustained use of an Infrastructure as a Service offering with a CSP according to IHS policies and security practices.

End User Services High Level Objective: IHS seeks to promptly resolve end user IT related issues in order to reduce service disruptions and to minimize the impact to IHS services in a timely manner.

The Contractor shall provide an IT service desk as well and direct End user support to both HQ facilities (approximately 1000 employees and contractors) as well as to provide for triaging of all IHS Enterprise IT support requests via a tiered Service support structure as defined at https://www.ihs.gov/itservicedesk/ . The following table represents current support statistics for each of the sub tasks:

5,000

HQ IT End User Support Providing excellent customer service is the IHS priority. The Contractor shall provide remote and onsite IT support services to approximately 1000 HQ employees and contractors at the HQ location in Rockville, MD as well as remote support to IHS HQ Federal Employees and contractors operating from telework locations throughout the country (nationwide). Remote support can be located at the contractor’s discretion. Onsite Tier 2 support hours are to be from 6am to 5pm, EST, M-F (excludes Holidays) at the Rockville, MD location.

The contractor shall provide an onsite IT Service Desk to manage all HQ incident, problem, change, and service requests from IHS HQ staff. This includes:

a. Service Desk support for HQ laptops and other peripherals.

b. Providing first call resolution (FCR) for common tasks such as password resets, AD group membership changes, Outlook Address Book updates, and other services through well-defined procedures. The End User Service Desk is to log all requests into the IHS ITSM Solution which is the primary interface between IHS customers and IT staff providing support. The End User Service Desk shall monitor the lifecycle of tickets and ensure IHS meets established service level agreements.

The Contractor shall utilize the IHS ITSM System – Calls and incidents are recorded into ServiceNow as only recently implemented by IHS. Service Desk employees are responsible for understanding and following all service desk procedures and support level agreements and ensuring for efficient and effective customer communications, capturing thorough customer information that is accurately documented and that support services are completed timely.

The Contractor Service Desk staff shall determine the nature of the incident, problem or service being requested, provide instructions to the user, and either close the ticket or assign the call to subject matter experts. The Service Desk staff will monitor for quality assurance all assigned tickets to make sure support teams are working on the issue according to established procedures and defined SLAs (see Appendix C) as well as at http://www.ihs.gov/itservicedesk/ .

The Contractor Service Desk shall make every effort to resolve issues at the time of the service call directly through accurate triage and confirmation of customer acceptance and resolution. Escalation to an appropriate OIT SME may be required and completed when confirmed.

The Contractor shall develop new, maintain, and improve all current system user support documentation to include operating procedures, process descriptions, workflows, checklists, and implementation plans. These documents must be updated for any upgrades, replacements, and new product installations. Documentation must be stored in an accessible location for reference.

The contractor shall provide onsite IT GFE hardware support, maintenance and security. This includes Desktop support for:

a. The onsite HQ users in Rockville, MD

b. The training room workstations, peripherals, and applications in HQ Rockville. The Rockville training room seats 20 workstations, one (1) instructor workstation, and audio/video equipment (when required)

c. The Continuity of Operations Plan (COOP) site based on established test schedules, located at Frederick, MD (HHS Mission Support Center (MSC), 6701 English Muffin Way, Frederick, MD 27103).

The Contractor shall manage the security of all HQ User government furnished equipment to include:

a. Utilizing security related patch management tools to ensure the compliance of the IHS owned HQ workstations/laptops patched monthly utilizing standard available tools and ensuring compliance according to SLAs.

b. Maintain software versions and configurations in accordance with IHS standards and vendor security recommendations. Non-security related service packs, hot fixes, updates, and patches shall be tested with documented results before they are implemented to ensure they do not adversely affect systems.

c. Perform all system maintenance and vulnerability management during non-working hours to the maximum extent possible.

d. Verify and monitor that all IHS HQ owned desktops and laptops are covered by the supported Antivirus applications with current virus definition dates (no less than 1 release date old).

The Contractor shall support the HQ yearly laptop refresh (lifecycle Management for one third of staff per year) for all scheduled employees to include the imaging, distribution, staff assistance as well as the secure destruction of replaced hard drives. All refresh replacements for HQ employees shall be completed within six months after approval to proceed from the Federal Manager. Additionally:

a. The Contractor shall coordinate with IHS HQ Property and Supply management as to the disposition of all IT equipment (replacement, moves, etc.). New equipment that is placed on the network will be properly labeled and conform to IHS standard naming conventions.

b. The contractor shall maintain a list of all spare, available replacement equipment that will be imaged and prepared for production use. This list shall be maintained and updated to ensure equipment is available for new users or for replacement use.

c. The contractor shall maintain a database of employees scheduled for the yearly IT equipment refresh to include laptops and monitors.

The Contractor shall assist the HQ Property and Supply office with the validation of the physical location of specific user Government furnished IT equipment and the final wipe of the hard drive prior to removal or destruction.

The Contractor shall provide support for the following types of Desktop and peripheral services:

a. Providing one-on-one training to users related to common business applications such as Microsoft productivity tools, conferencing systems, form processing tools, and other applications/OS (Adobe, MS Office, Windows 10, etc.) and peripherals.

b. Maintaining the Microsoft AD objects for HQ (approximately 1000 local and remote users).

c. Setting up, testing, and supporting Audio/Video/WebEx and other technology-based meetings.

d. Provide hardware and software support for all Government Furnished Equipment (GFE) in use, both locally and remotely, including installation of peripherals and software. Assisting users with all IHS approved applications including installing, configuring, using, and troubleshooting of the application. Provide support of all standard desktop operating systems, currently supported versions of office automation applications or other standard applications.

e. Arrange for repair or replacement of parts from the manufacturer, as required.

f. Providing any assistance for compliance with all other IHS training requirements.

g. Providing support for Mobile Device Management Enterprise Service functions to include setting up, configuring, and troubleshooting of all IHS Government furnished Smart Phones for HQ users including user account setup, password changes and other…