DEPARTMENT OF HOMELAND SECURITY

STATEMENT OF WORK

FOR

BIOMETRIC EXAMINATION TOOL

1.0. INTRODUCTION

The U.S. Department of Homeland Security (DHS), the Office of Biometric Identity Management (OBIM) supports DHS’ mission to protect our nation by providing biometric identification services to federal, state, and local government decision makers to help them accurately identify the people they encounter and determine whether those people pose a risk to the United States. OBIM operates a biometric system which supports the delivery of biometric identity management services.

The IDENT database also provides biometric identification services to and/or shares information with stakeholders who utilize the IDENT capabilities for identifying victims and suspects of terrorist events, assisting law enforcement with cold cases, and vetting individuals who are not admissible to the United States, who have violated immigration laws by overstaying the periods of their admission or by claiming false identity, or who pose a national security threat to the United States and/or international partners by providing biometric and identity services to federal, state, tribal, territorial, and local governments, and foreign partners so they may accurately identify the individuals they encounter and determine whether they pose a risk to the United States (U.S.).

2.0 BACKGROUND

OBIM’s Biometric Support Center (BSC) supports OBIM’s mission by providing expert biometric examination and identity management services for supported modalities including fingerprint, face, latent print and iris. OBIM uses biometric examiners to support its 24/7, mission critical biometric services and is the largest U.S. government biometric examiner operation. Examiners supplement OBIM’s automated biometric matching capabilities in a streamlined manner that requires examiner tools to be integrated with OBIM’s biometric system.

The BSC currently relies on various outdated tools for its biometric examination functions. The main tool used by the BSC today, is a 20+ year old in-house developed system that support just ten print operations. The OBIM BSC Tool Consolidation effort encompasses the acquisition of a multimodal examiner tool that is integrated with OBIM’s biometric system and meets the unique mission needs of BSC’s 24/7 operation. This effort will streamline OBIM’s BSC examination functions and improve efficiency.

3.0 SCOPE

The scope of this requirement is to procure biometric examination software, to include multi-modal biometrics examiner software including latent, fingerprint, face and iris. This suite of tools supports a wide range of biometric modalities in a single, integrated environment. This procurement is for software, annual maintenance, training and integration with OBIM’s biometric system.

4.0 REQUIREMENTS

OBIM requires a biometric examination tool that supports multiple modalities and that is not tied to any particular biometric matching vendor. Having examiner tools that are independent of biometric matching vendors allows OBIM the flexibility it needs to swap backend components (i.e., matching algorithms and vendors) of its biometric system without impacting examiner operations. Tying mission critical examiner operations to a particular matching vendor, increases risk to BSC operations.

The Government intends to procure examiner software to include integration, maintenance and training.

At a high level, the tool shall

• Support examination functions for multiple biometric modalities to include at a minimum, fingerprints, face, iris, and latent prints.

• Must be biometric matching vendor agnostic

• Support a high volume, 24/7, rapid response environment

• Support roles-based access/work assignments

• Integrate with OBIM’s biometric system

• Meet all applicable DHS Security requirements.

• Meet the specific mission needs of OBIM’s BSC as defined in BSC Examiner Tool

Requirements document.

5.0 PERIOD(S) OF PERFORMANCE

The period of performance shall be one (1) base period for twelve (12) months starting upon award of this contract.

12 months of software license and maintenance support: Software maintenance agreements must be compatible with software purchased. (The Government assumes that software license use, maintenance support and off site training comes with the procurement.

6.0 PLACE(S) OF PERFORMANCE

The places of performance shall be at the following data center locations:

OBIM facility in the National Capital Region and the Biometric Support Center located in San Diego, CA.

7.0 SECURITY

This is a software purchase. The software contains sensitive information. Contractor will have access to unclassified and Sensitive But Unclassified Information under this SOW. Contractor employees shall safeguard this information against unauthorized disclosure or dissemination.

8.0 CONTRACT DELIVERABLES

The Contractor shall submit license information, software keys, serial numbers, authorization codes, activation codes, etc. to the COR. All software licenses and/or license keys shall be delivered within five

(5) business days after award. Software to be provided under this contract is to be licensed to DHS Office of Biometric Identity Management (OBIM). The Contractor must deliver all required software in accordance with Federal procurement guidelines and agreements.

9.0. ASSUMPTIONS

The price of annual software includes all maintenance and updates as well as 24/7 online support portal and telephone support.

10.0 INTELLECTUAL PROPERTY

Not applicable.

11.0 INVOICING

The Contractor shall ensure copies of all invoices/packing slips/receipts for property purchased for OBIM accompanies the Monthly Asset Management Report. In addition, the contractor shall provide invoices for all Accountable Personal Property within 30 days of acquisition to the COR.

By mail:

DHS, MGT-OBIM

Financial Operations-Burlington P.O. Box 1000 Williston, VT 05495-1000 Attn: MGT-OBIM

By e-mail: InvoiceMGT.Consolidation@hq.dhs.gov

The invoice number and MGT-OBIM shall be annotated in the subject line of the e-mail. Only (1) invoice shall be submitted per e-mail message. The invoice attached to the e-mail shall be in Portable Document Format (PDF).

Invoices submitted by other than these two methods will not be processed and will be returned.

12.0 POINTS OF CONTACT

Government Program Requiring Official (GPRO)

TBD

6595 Springfield Center Drive Springfield, VA 22150

Contracting Officer’s Representative (COR)

TBD

mailto:InvoiceMGT.Consolidation@hq.dhs.gov

BFO Contracts Management Section 6595 Springfield Center Drive Springfield, VA 22150

Contracting Officer (CO)

TBD

Office of Procurement Operations

13.0 STATEMENT OF WORK – TERMS AND CONDITIONS

The terms and conditions are provided as a separate attachment to the SOW.

14.0 PROPERTY DEFINITIONS

o Accountable Personal Property - An asset that meets one or more of the following criteria: (1) expected useful life is two years or longer and an asset value and/or acquisition cost of $5,000 or more; (2) that is classified as sensitive; (3) for which accountability or property control records are maintained; (4) Capitalized personal property, (5) Leased property that meets accountability standards, or (6) otherwise warrants tracking in the property system of record.

Current accountable personal property information may be obtained through the OBIM Accountable Property Officer (APO) Office at OBIMProperty@hq.dhs.gov.

o Capitalized personal property - Non-expendable personal property with an acquisition cost over an established threshold and a normal life expectancy of two years or more. Current Capitalization Threshold information may be obtained through the OBIM APO Office at OBIMProperty@hq.dhs.gov.

o Contract property - All property, both real and personal, that is used in the performance of a contract, and includes facilities, material, special tooling, special test equipment, and agency-peculiar property. Contract property refers to both Contractor-Acquired Property (CAP) and Government Furnished Property (GFP), in the possession of contractors.

o CAP - Property acquired, fabricated, or otherwise provided by the contractor for performing a contract and to which the Government has title.

o Excess Personal Property - Personal property under the control of any Federal agency that is not required or needed for that agency’s needs, as determined by the head of the agency or designee.

o GFP - Property in the possession of, or directly acquired by, the Government and subsequently furnished to the contractor for performance of a contract. Government-furnished property includes, but is not limited to, spares and property furnished for repair, maintenance, overhaul, or modification. Government-furnished property also includes contractor-acquired property if the contractor-acquired property is a deliverable under a cost contract when accepted by the Government for continued use under the contract. NOTE: GFP may also be referred to as Government Furnished Equipment (GFE), the two terms are interchangeable.

o Leased property - Property that is not owned by DHS, but that is leased by the Government under terms as stipulated in the lease agreement (this excludes the leasing of property by contractors in the performance of a contract).

o Sensitive personal property - All items, regardless of value, that require special control and accountability due to unusual rates of loss, theft, or misuse; national security or export control considerations. Such property includes but is not limited to, weapons, ammunition, explosives, information technology equipment with memory capability, cameras, and communications equipment. Current sensitive personal property information may be obtained through the OBIM APO Office at OBIMProperty@hq.dhs.gov.

14.1 PHYSICAL INVENTORY

o In addition to requirements provided under FAR § 52.245-1:

The Contractor, jointly with the OBIM APO Office on a quarterly basis, shall perform, record, and disclose physical inventory results of CAP and GFP.

The Contractor shall, on a monthly basis, perform, record, and disclose physical inventory results of CAP and GFP to the OBIM APO Office at OBIMProperty@hq.dhs.gov and COR.

• As requested inventory results will be completed, certified and submitted, in the timeframe defined at the time of request, to the OBIM APO Office at OBIMProperty@hq.dhs.gov and

COR.

14.2 PROPERTY DISPOSAL

o All documentation and goods are the property of the United States Government and, if applicable, the contractor shall return or destroy appropriately upon request. The contractor shall comply with applicable Government rules and regulations for disposal of Government property. Further, the contractor shall provide necessary information to the COR and the OBIM IT Property team at OBIMProperty@hq.dhs.gov for all excess property prior to taking any action.

14.3 LOST, STOLEN, DAMAGED OR DESTROYED (LDD) PROPERTY:

o Unless otherwise provided in the contract, the contractor is liable for LDD of contract property, except for reasonable wear and tear.

o Any occurrence of LDD must be investigated and fully documented by the COR, who will promptly notify the CO. The contractor will submit a report of any incident of LDD contract property to the COR in accordance with FAR § 45.504, “Contractor’s Liability,” and as detailed below, as soon as it becomes known o When GFP or CAP property is LDD, the Contractor must report within 24 hours of discovery of the event to the COR who will initiate a Report of Survey. This document will be obtained from OBIM IT Property team at OBIMProperty@hq.dhs.gov.

o A Report of Survey will be prepared, regardless whether or not preliminary research of a LDD event indicates positive evidence of negligence, misconduct, or unauthorized use and the responsible individual refuses to admit pecuniary liability.

o The Contractor must forward this document with all supporting documentation to the COR within 5 business days of the LDD event for review.

o The COR must submit the completed package to OBIMProperty@hq.dhs.gov within 5 business days of receipt from the Contractor.

o The Contractor and COR must supply all requested information and any subsequent requests for information.

15. SECTION 508

Section 508 of the Rehabilitation Act (classified to 29 U.S.C. § 794d) requires that when Federal agencies develop, procure, maintain, or use information and communications technology (ICT), it shall be accessible to people with disabilities. Federal employees and members of the public with disabilities must be afforded access to and use of information and data comparable to that of Federal employees and members of the public without disabilities.

All products, platforms and services delivered as part of this work statement that, by definition, are deemed ICT shall conform to the revised regulatory implementation of Section 508 Standards, which are located at 36 C.F.R. § 1194.1 & Appendixes A, C & D, and available at https://www.ecfr.gov/cgi-bin/text-idx?SID=e1c6735e25593339a9db63534259d8ec&mc=true&node=pt36.3.1194&rgn=div5. In https://uscode.house.gov/view.xhtml?req=(title:29%20section:794d%20edition:prelim)%20OR%20(granuleid:USC-prelim-title29-section794d)&f=treesort&edition=prelim&num=0&jumpTo=true https://www.ecfr.gov/cgi-bin/text-idx?SID=e1c6735e25593339a9db63534259d8ec&mc=true&node=pt36.3.1194&rgn=div5 https://www.ecfr.gov/cgi-bin/text-idx?SID=e1c6735e25593339a9db63534259d8ec&mc=true&node=pt36.3.1194&rgn=div5 the revised regulation, ICT replaced the term electronic and information technology (EIT) used in the original 508 standards. ICT includes IT and other equipment.

Exceptions for this work statement have been determined by DHS and only the exceptions described herein may be applied. Any request for additional exceptions shall be sent to the Contracting Officer and a determination will be made according to DHS Directive 139-05, Office of Accessible Systems and Technology, dated November 12, 2018 and DHS Instruction 139-05-001, Managing the Accessible Systems and Technology Program, dated November 20, 2018, or any successor publication.

Section 508 Requirements for Technology Services

1. When developing or modifying ICT, the Contractor is required to validate ICT deliverables for conformance to the applicable Section 508 requirements. Validation shall occur on a frequency that ensures Section 508 requirements is evaluated within each iteration and release that contains user interface functionality.

2. When modifying, installing, configuring or integrating commercially available or government-owned ICT, the Contractor shall not reduce the original ICT Item’s level of Section 508 conformance.

3. When developing or modifying electronic documents and forms provided in a Microsoft Office or Adobe PDF format, the Contractor shall demonstrate conformance to the applicable to the applicable Section 508 standards (including WCAG Level A and AA Level 2.0 Success Criteria) by conducting testing using the test methods published under “Accessibility Tests for Documents” at https://www.dhs.gov/compliance-test-processes.

Section 508 Deliverables

1. Section 508 Test Plans: When developing or modifying ICT pursuant to this contract, the Contractor shall provide a detailed Section 508 Conformance Test Plan. The Test Plan shall describe the scope of components that will be tested, an explanation of the test process that will be used, when testing will be conducted during the project development life cycle, who will conduct the testing, how test results will be reported, and any key assumptions.

2. Section 508 Test Results: When developing or modifying ICT pursuant to this contract, the Contractor shall provide test results in accordance with the Section 508 Requirements for Technology Services provided in this solicitation.

3. Section 508 Accessibility Conformance Reports: For each ICT item offered through this contract (including commercially available products, and solutions consisting of ICT that are developed or modified pursuant to this contract), the Offeror shall provide an Accessibility Conformance Report (ACR) to document conformance claims against the applicable Section 508 standards. The ACR shall be based on the Voluntary Product Accessibility Template Version 2.0 508 (or successor versions). The template can be found at https://www.itic.org/policy/accessibility/vpat. Each ACR shall be completed by following all of the instructions provided in the template, including an explanation of the validation method used as a basis for the conformance claims in the report.

16. CLOSELY ASSOCIATED INHERENTLY GOVERNMENTAL FUNCTIONS

Tasks under this Statement of Work (SOW) shall not be interpreted to include any inherently governmental functions, as described in FAR Subpart 7.5, or other related Acts, Executive Orders, or federal policy. At no time shall contractor personnel exercise sovereign control, such as possessing signature or approval authority. Contractor personnel shall not perform tasks that are inherently governmental. The COR will continue to monitor any tasks that are closely associated with inherently https://www.dhs.gov/compliance-test-processes https://www.itic.org/policy/accessibility/vpat governmental functions to ensure that such tasks do not evolve into inherently governmental tasks during contract performance. Contractor personnel shall not possess the ability to commit the Government to a course of action. Contractor personnel shall be limited to developing options or implementing a course of action that has been decided on previously by the Government.

17. DHS ENTERPRISE ARCHITECTURE COMPLIANCE

All solutions and services shall meet DHS Enterprise Architecture policies, standards, and procedures.

Specifically, the contractor shall comply with the following HLS EA requirements:

- All developed solutions and requirements shall be compliant with the HLS EA.

- All IT hardware and software shall be compliant with the HLS EA Technical Reference Model (TRM)

Standards and Products Profile.

- Description information for all data assets, information exchanges and data standards, whether adopted or developed, shall be submitted to the Enterprise Architecture Division (EAD) for review, approval and insertion into the DHS Data Reference Model and Mobius.

- Development of data assets, information exchanges and data standards will comply with the DHS Data Management Policy MD 103-01 and all data-related artifacts will be developed and validated according to DHS data management architectural guidelines.

- Applicability of Internet Protocol Version 6 (IPv6) to DHS-related components (networks, infrastructure, and applications) specific to individual acquisitions shall be in accordance with the DHS Enterprise Architecture (per OMB Memorandum M-05-22, August 2, 2005) regardless of whether the acquisition is for modification, upgrade, or replacement. All EA-related component acquisitions shall be IPv6 compliant as defined in the U.S. Government Version 6 (USGv6) Profile (National Institute of Standards and Technology (NIST) Special Publication 500-267) and the corresponding declarations of conformance defined in the USGv6 Test Program.