Attachment 2 - Statement of Work.docx

STATEMENT OF WORK

Liquid ink fully automatic printer w/envelope feeder

INTRODUCTION

Defense Logistics Agency (DLA) Document Services seeks to purchase a Liquid ink, color, High-Speed, Digital, Fully Automatic Printer, with Envelope Feeder, consisting of a bundle package with two extra print cylinders (HD Drum), Master F type HD87 UA rolls, Ink HD black, envelope feeder, User's Manual, Software, etc. and the following associated services:

· Delivery and installation of the equipment.

· 2-year Warranties for repair of the equipment.

· Training on using/daily operations of the equipment, to include hardcopy User Manuals.

Equipment is to be delivered to DLA Document Services, 1100 Ramirez de Arellano Road, Suite 108D Silverdale, WA 98315-5740

GENERAL INFORMATION

1.0 Liquid ink fully automatic printer w/envelope feeder

1.1 Require a full color digital duplicator with envelope feeder that can function in an automated process. The system should have the salient characteristics as described in the attachment.

1.2 DLA Document Services requires offerors to propose a full color digital printer to be used for processing envelope orders. The offeror will be responsible for installation and any necessary configuration to ensure a complete solution for all above.

MAINTENANCE WARRANTY AND REPAIRS

2.0 Maintenance and repairs refer to two-year contract. The device must be registered with the manufacturer for the extended maintenance/warranty as offered by the specific vendor/manufacturer.

2.1 Basic on-site repair service includes spare parts for verified hardware and software failures. Parts required or system replacement are provided with overnight shipment of required replacements. Service is performed by a technical support group in person, or through remote phone support.

DELIVERY AND INSTALLATION

TRAINING REQUIREMENTS

4.0 Within five (5) business days after the complete installation of the device, the contractor shall provide initial hands-on training regarding the device and its software. This training must be in English and accomplished by an individual having expert knowledge in all operational aspects of the device and software. This training includes Software, if it is required.

4.1 As part of the training requirement, the vendor shall provide a hardcopy User Manual which is concise, written in English, user friendly and provides specific steps and processes in all operational aspects in the use of the device and the accompanying peripherals, and software.

4.2 All costs associated with providing this initial training (to include travel costs of the contractor-provided instructor) shall be included in the proposed price and will not be reimbursed separately.

EQUIPMENT AND ACCESSORIES

IT CONFIGURATION

6.0 This section pertains to equipment constructed with internal software or application configuration(s) requiring network compatibility. It is anticipated that the equipment sets are software supported or require network access to operate.

6.1 All devices requiring network or app software to operate, shall be maintained and kept current with DLA required and approved operating systems and drivers, with the exception of standalone devices.

6.2 All contractor-provided software (including Operating System drivers) shall be supported by the contractor, and the software’s original manufacturer, at all times during its use by the government. If it becomes apparent that either the contractor or original manufacturer will no longer support any contractor-provided software, the contractor shall provide and install other software, that is still supported by the contractor and the software’s original manufacturer, in coordination with J67F POC William Hamilton

6.3 Contractor solution requiring software must be capable of functioning in a common security environment, given that DLA Document Services is required to add additional software that is standardized within DLA Document Services including but not limited to McAfee Epolicy Orchestrator (multiple modules including AntiVirus and Host Intrusion Prevention), Arcsight Logger, Active Client Software and Axway Desktop Validator.

IT CERTIFICATION & ACCREDITATION, TESTING, AND INSTALLATION & TECHNICAL SUPPORT

7.0 This section pertains to equipment constructed with internal software or app configuration(s) requiring network compatibility. It is anticipated that the equipment sets are software supported or require network access to operate

7.1 Upon award, DLA Document Services shall identify the specific pieces of equipment and software that require network testing, security accreditation, and approval. Within 21 calendar days of notification, the contractor shall deliver the identified equipment and software, at no additional cost to the Government, to the DLA Document Services production facility at 621 Waldron Street Bldg.83, Travis AFB, CA 94535 for testing of its compliance to the requirements set forth in this Statement of Work (SOW). The equipment shall be free of vulnerabilities and be configured in a compliant manner with any known STIG deficiencies identified prior to the testing commencement for evaluation of acceptance.

7.2 The DLA Document Services Information Assurance Manager will determine the acceptance or rejection of any residue risk as part of the Certification and Accreditation process. Testing will be performed for a maximum period of 20 calendar days. This testing will determine if the equipment meets all of the requirements of the SOW, can function as delivered, and will develop a standard configuration that the contractor will use for all installations. All testing will be conducted by DLA Document Services with the contractor’s assistance and the acceptance of the award does not occur until testing has been completed.

7.3 Testing will include but is not limited to vulnerability scanning, port scanning and STIG compliancy checks. Upon notification of a discrepancy, the contractor will have seven (7) calendar days to provide corrective action. The contractor shall, at no additional cost, provide onsite engineering assistance and other support necessary to configure, setup, and test the equipment. Until successful completion of the IT Certification and Accreditation phase as determined by DLA Data Production Operations, no actual equipment delivery shall be made until the contracting officer provides a notice to proceed.

7.4 The contractor shall monitor industry standard vulnerability sites (e.g. http://nvd.nist.gov/) and take appropriate actions if its equipment is subject to a known vulnerability. In addition, DLA Document Services will notify the contractor as security vulnerabilities are identified concerning the installed equipment. When vulnerability is identified, the contractor shall provide patches within 30 calendar days unless a shorter time period is directed by DLA Document Services Contract POC.

7.5 The contractor shall update all contractor supplied software with the following exception. DLA J64 retains responsibility for patching all Microsoft Windows systems that can be updated via Microsoft SCCM. Prior to execution of contractor initiated software updates.

7.6 All purchased hardware shall be registered by the vendor under the “DLA” name for 3rd party technical support.

SECURITY

8.0 All devices/components requiring software shall meet DoD information security specifications when interfacing with classified materials to ensure no remnants of the classified data exists after the classified process has been completed. Guidelines can be found at https://iase.disa.mil. The contractor shall indicate the specific steps needed to ensure classified data is never disclosed.

8.1 All devices requiring software shall be configured in compliance with all applicable DoD Security Technical Implementation Guides (STIG) (Ref: http://iase.disa.mil/stigs). Any remaining deficiencies that cannot be resolved shall be identified by J67 POC William Hamilton prior to the Certification and Accreditation testing phase for evaluation of acceptance.

8.2 As part of the installation process, the contractor shall label all equipment requiring software, with the appropriate classification as defined by DLA Data Production Operations. DLA Data Production Operations shall provide the appropriate instructions and labels.

8.3 DLA Data Production Operations shall provide a configuration standard and settings document for each hardware model that the vendor shall utilize when installing hardware at a designated site. This configuration standard and settings document will be developed for each device in conjunction with the vendor post-award at DLA Data Production Operations headquarters facilities in New Cumberland, Pennsylvania.

SECTION 508 ACCESSIBILITY STANDARDS

9.0 The user interface shall comply with Section 508 of the Rehabilitation Act of 1973, as amended (29 U.S.C. 794d), and the Architectural and Transportation Barriers Compliance Board’s Electronic and Information Technology Accessibility Standards at 36 Code of Federal Regulations (CFR) 1194. The standard 1194.21 (Software applications and operating systems) has been determined to be applicable to this contract.