B01_Synopsis_of_Proposed_Contract_Action_1.pdf

Subject: Information Technology Support Services (ITSS) Indefinite Delivery, Indefinite Quantity (IDIQ) – Department-Wide

Solicitation Number: 140A1624R0001

Notice Type: Pre-solicitation Notice

Date: Thursday 11/30/2023

Classification Code: DF01 IT and Telecom - IT Management Support Services

NAICS: 541519 Other Computer Related Services, business size standard of $34 million

Contracting Office Address: Bureau of Indian Affairs, Central Office

Point of Contact:

Issue Date:

Place(s) of Performance:

Set Aside:

12201 Sunrise Valley Drive, Reston, VA 20192

Lesly Hill, Contract Specialist, lesly.hill@bia.gov Jeff Pearson, Contracting Officer, jeffrey.pearson@bia.gov

A Request for Proposal (RFP) will be posted on SAM.Gov between 1/30/2024 and 3/01/2024

Continental United States and Alaska; Individual Task Orders will identify the specific place(s) of performance.

100% Indian Small Business Economic Enterprise (ISBEE) set aside as defined by Department of the Interior Acquisition Regulation (DIAR) 1480.201. Only proposals from ISBEEs will be considered for award. DIAR clause 1452.280-4 will be included in the RFP and must be submitted with the proposal and marked appropriately to qualify for an IDIQ award.

Description of Service:

The purpose of this acquisition by Indian Affairs (IA) is to establish multiple-award indefinite-delivery indefinite-quantity contracts (IDIQs) for Information Technology Support Services (ITSS). The anticipated period of performance for the IDIQs is ten (10) years with no option years. The total ceiling for all IDIQs combined is anticipated to be $500 million.

In support of department-wide efforts to increase the use of the Buy Indian Act set-aside authority, the ITSS IDIQs will be available for use by all Department of the Interior and Indian Health Service offices.

Except as specifically added in Task Orders, all personnel will require a minimum of public trust/background checks.

The ITSS IDIQs will provide non-personal information technology (IT) support services to include the following (non-exhaustive) functions:

Customer Engagement Data & Analytics Solutions Platforms Security Governance Information Management Program Support Non-Traditional Government Service Delivery

Customer Engagement:

The Customer Engagement functional area is central to the overall IA IT vision of becoming a customer-centric, “one-stop shop” for IT solutions and support that strategically partners with customers to improve the effectiveness and efficiency of their operations through innovative IT solutions. With proactive customer engagement, a well-structured portfolio, and a defined service catalog, customers will have improved access to critical data and business intelligence and IT-enabled business processes to effectively advance the Department’s missions. This shift represents a significant transformation in the approach to identification and delivery of the solutions and support required by customers. Customer service approaches that previously differed across customer groups and functional silos will be standardized and integrated, reducing cost and complexity. A deliberate focus on proactively engaging and partnering with customers to jointly identify and develop IT solutions of value will be implemented to boost collaboration and foster innovation.

Data & Analytics:

As part of the overall vision to become a more proactive and strategic partner in supporting customer missions, IA/DOI is dedicated to improved management and curation of data and assets. The targeted end state is a structured and holistic approach to better leverage all IA/DOI data and assets to create a more robust overall framework for data analytics, knowledge management, and asset management. Once established, this fundamentally new service will enable IA/DOI to respond more quickly and effectively to ever-growing customer requests for data reporting, provide data-driven decision support, and better management of assets.

Solutions:

The Solutions functional area partners with customers to build and enhance innovative solutions and applications and integrate them with enterprise systems, to enable data-driven decisions, and optimize workflows. Historically, IA’s broad range of applications have been developed and deployed largely on-premises rather than leveraging the efficiencies of the cloud. These changes will simultaneously improve efficiency, reduce cost, ensure a proactive approach to engaging customers in the creation of innovative solutions, and improve security that is aligned with the NIST’s Risk Management Framework (NIST-RMF).

Platforms:

Innovation, modernization, and stability are now paramount to the Platforms functional area as customers rely on IA OIMT to succeed in a largely remote work environment, with expanding mobile device usage and increased requirements for reliable remote access to IA data and systems. Historically, reactive operations and complex, over-engineered network infrastructure resulted in inconsistent customer experiences. The transformation of the Platforms functional area will achieve consistent customer satisfaction by providing robust, stable infrastructure and enhancing situational awareness through proactive monitoring. Modernizing equipment and reducing the complexity of processes will also simultaneously increase the efficiency and decrease the operating costs of infrastructure. Additional efficiencies will be gained through the implementation of a fee-for-service subscriber model with an optimized footprint. Platforms will rely on the Customer Engagement functional area to provide a “one-stop-shop” for customer support requests and refer appropriate customer inquiries to Platforms personnel to leverage their expertise where appropriate.

Infrastructure Support Services consists of a number of programs that provide operational and maintenance support to all facets of the network infrastructure. The scope consists of the Tier 3 operational support of System Administration, Storage Area Network, Network Attached Storage, Local Area Network, Wide Area Network, IT System Monitoring, Web Services, Messaging, Business Continuity, and Disaster Recovery. This area includes support services for IA and cloud services. In addition, this area includes the Account Management Services provide ongoing management of all user, machine and service accounts.

Security:

Federal Agencies must implement, document, assess, and continuously monitor an information assurance/security program to adequately protect information and information assets that support the operation of the agency. Through the issuance of the National Institute of Standards and Technology Special Publication 800-37 (as amended) the Certification & Accreditation (C&A) process was formally transformed into the Risk Management Framework (RMF). The RMF process changed the traditional focus of C&A as a static, procedural activity to a more dynamic approach (now referred to as Assessment and Authorization (A&A)) that provides the capability to more effectively manage information system-related security risks. In accordance with Department of the Interior (DOI) policy, all bureau security programs shall have an Incident Response Capability and Information Security Engineering program that must be implemented in accordance with applicable National Institute of Standards and Technology (NIST) Special Publications (SP) and Federal Information Processing Standards (FIPS) as well as any other relevant directives or regulations.

Governance:

The Governance functional area is foundational to IA OIMT achieving its strategic vision to develop efficient and innovative IT solutions. It leads and provides the thought leadership for the shifts to agile/Scrum methodology, DevSecOps, increased security monitoring and planning, and risk management and mitigation strategies. The various positions within the Governance functional area will collectively oversee and perform the full range of IT governance functions for IA OIMT operations, focusing on the planning and analysis of IT projects, programs, and services, as well as strategically aligning the goals of IA OIMT with the broader mission. The changes in the IA OIMT Governance functional area reflect the evolving need to deliver guidance on IA’s compliance with laws, policies, and regulations impacting IA IT operations.

With the emphasis on developing a robust cybersecurity framework with mitigated risks and vulnerabilities, the Governance functional area will work closely with Security to focus on addressing cybersecurity architecture, requirements, objectives, and policies. Overarching governance is key when orchestrating a successful Bureau-wide IT investment and information management process, inclusive of IT Capital Planning and Investment Control (CPIC). This process is designed to support a cadre of IT Project Managers (PM) and other mission program representatives in the efficient and effective planning, development, implementation, operation and maintenance of IT investments, as well as strategic planning and management of information. This is accomplished by developing procedures and practices in alignment with OMB and DOI direction for information management. In addition, guides, templates, forms, and coordinated information collection/reviews are provided to support IT project, investment and portfolio management. These efforts are meant to ensure the IT Portfolio supports the IA mission programs and business needs while minimizing risks throughout the investment’s life cycle.

IA OIMT’s Internal Audit provides objective assurance and advice to senior management on the adequacy and effectiveness of OIMT’s governance and risk management. Assessing the design and implementation of internal controls and identifying corrective actions, evaluating the accuracy of information provided by management, and monitoring compliance with applicable statutory, regulatory, or policy requirements. Internal audit regularly meets and reports their findings to senior management to facilitate continuous improvement.

Information Management Program Support:

Information Management is characterized by a diverse number of programs, such as, Privacy, Freedom of Information, Records and Information Management, Controlled Unclassified Information, Forms Management, Plain language content editing and Section 508 compliance.

Non-Traditional Government Service Delivery:

The Non-Traditional Government Service Delivery functional area is foundational to those IT services IA needs to meet the requirements within areas not usual considered as standard federal requirements. This particularly includes those requirements and needs for IA’s Bureau of Indian Education which is one of two federal school systems (Department of Defense Education Authority (DODEA) being the other). This functional area requires IT services, platforms, infrastructure, and systems that are delivered to schools and non-federal users.