Base_PWS_Rev1.3_20240903.docx

Performance Work Statement (PWS)

For

Foundation Sustainment Support, Software and Integration (FS3i)

Sept 3 2024 Version 1.3

Version 1.0

Initial release

Table of Contents

Purpose This Performance Work Statement (PWS) describes the technical services required to support the National Geospatial-Intelligence Agency (NGA) Foundation GEOINT (FG) Information Technology (IT) systems. The Foundation Sustainment Support Services and Integration (FS3i) contract vehicle will establish the acquisition framework for delivering the full scope of information technology capabilities to support the IT operations of the Mapping, Charting Geodesy (MC&G) for the Foundation Integrated Program Office (IPF) and the FG capabilities in support of the NGA’s Source Operations & Management Directorate's Foundation GEOINT Group (SF) and the Source Dissemination (ST) Group. SF’s FG mission areas include: Aeronautical, Maritime, Topographic, Geopolitical Geography (to include Human Geography (HG), Political Geography, and Names, Places and Boundaries), Elevation, Geodesy (e.g. Global Positioning System (GPS), Soils, Surveys, and Gravity), and Controlled Imagery. ST mission areas include but not limited to content management and dissemination of the source data and products to users across the NGA enterprise.

FG mission IT capabilities are defined throughout FS3i documentation as Systems, Subsystems, Applications, Features, Services, and Data management.

This contract is designed to be flexible in satisfying total SF and ST IT requirements, work within existing NGA IT infrastructure, complement and support other NGA efforts, and adapt to new and emerging requirements as new IPF, SF, and ST missions evolve and leading-edge technologies become available.

Background

The mission of NGA is to provide timely, relevant, and accurate Geospatial Intelligence (GEOINT) to policy makers, the Intelligence Community (IC), Department of Defense (DoD), and other federal agencies and partners in support of national security. The collection, analysis and interpretation of FG data supports intelligence, defense, and commercial needs. Current Source FG production methods were developed over many years and are unique to each specific FG mission area. Current and future demands for FG mission modernization necessitates continual iterative improvement to NGA’s operational production and dissemination environments. GEOINT encompasses imagery, imagery intelligence, and geospatial information, which is also known as Foundation GEOINT (FG). FG exists mainly in the forms of attributed vectors and surface models, data applications and services.

This contract has six service categories:

· Software Development: software development services to deliver new capabilities Foundation GEOINT baseline capabilities.

· Integration: integrate solutions delivered by the individual system development teams into the Foundation GEOINT enterprise production environment. These may include both Government-Off-The Shelf (GOTS) and Commercial Off-the-Shelf (COTS) capabilities / services.

· Software Maintenance: Corrective, Adaptive, Preventative, and Perfective maintenance in support of FG capabilities in operations.

· Operations Support: services supporting the Foundation GEOINT operational baselines and daily-production activities.

· Foundation GEOINT Information Technology Procurement: acquisition, engineering, integration, maintenance and warranty support of select IT hardware in the FG enterprise.

· Foundation GEOINT COTS Software Procurement: acquisition, engineering, integration, maintenance and warranty support of select software in the FG enterprise.

Scope The FS3i Contractor provides the services in these six service categories, as described in Section 6, for support to the FG systems and capabilities specified in each of the individual task order (TO) that are to be executed under this base contract.

Current Environment and Constraints The FG environment consists of services and systems used by government, military, academia, international partners and contractor customers. These customers are primarily located at NGA’s NCE and NCW facilities, but are also deployed throughout the world. The capabilities are provisioned on TOP SECRET, SECRET, and UNCLASSIFIED security domains, as well as the World Wide Web. While the FS3i contract work is spread across all security domains, individual task orders will identify baseline capability requirements by environment, networks, and security domains.

The FS3i contractor will be the primary Integrator for multiple government and contract capability development teams for the various discrete FG capabilities and systems. To do this, the FS3i contractor is required to use a Scaled Agile Framework (SAFe) technical approach to Sustainment services. This approach is detailed in the Government provided IPF Capability Delivery SOP. The SOP is authoritative across all IPF modular contracts and the FS3i Contractor reviews, comments, and complies with all government policies.

The FS3i will be dependent upon multiple NGA Infrastructure Service Providers and enterprise service providers, including but not limited to: the NGA Cloud Program Management Office (PMO), NGA NCE and NCW data centers and their contract support teams, NGA cloud service providers, NGA Identity Management GeoAXIS service, Open Data Store (ODS), GEOINT Search and Retrieval (GSR), GEOINT Visualization Services (GVS) and Enterprise Cross-Domain Services (ECDS). The FS3i contractor will also leverage existing NGA IT management providers including, but not limited to, Software Asset Management (SAM), Enterprise Service Management / Help Desk (ESM), Enterprise Audit, and Enterprise Certification & Accreditation (C&A).

The FS3i Contractor must assess and validate all systems, hardware, software, software engineering, and information technology associated with this effort to comply with all the relevant Federal Government, DOD, and NGA policies and standards to include, but not limited to, those listed in Appendix C.

The FS3i Contractor will report labor in the WBS Structure as outlined in Appendix B. The WBS (1) is Program Management, the rest of WBS align to the service categories as follows:

Figure 3.1: Top Level FS3i WBS Structure

The contractor will ensure that all systems, hardware, software, software engineering, and information technology associated with this effort is made in a manner that is accessible for people with the standards for people with disabilities as directed in NGA Instruction 8400.4 and Section 508 of the Rehabilitation Act of 1973 as amended in 1998 (Section 508). Specifically, all Electronic and Information Technology (EIT) associated with Foundation GEOINT Services, may use the Web Content Accessibility Guidelines (WCAG) 2.0 to comply with Section 508 or use alternative designs or technologies which result in substantially equivalent or greater access to and use of the product for people with disabilities. Furthermore, the contractor will pursue human centered design and usability guidelines in order to ensure that all services associated with this PWS are accessible by as many users as possible and as a means to drive modernization, innovation, and enhance mission support.

Services Categories FS3i base contract level requirements provide general services that can be used across Task Orders (TOs). A TO could require one or many of the services listed below based on its specific requirements. Common activities and services will be combined to maximize efficiencies, drive process improvements, eliminate service overlaps, and realize cost efficiencies to the Government. The Contractor effectively manages and transforms these core functional areas and the associated services to deliver IT strategic advantage and best-value to the Government.

The FS3i contractor will assume responsibility in the sustainment of FG COTS, Free and Open Source Software (FOSS), contractor/government developed code, and GOTS environments and software baselines as defined in each individual task order that will be developed under this base contract. The FS3i contractor provides, Software Development, Integration, Software Maintenance, and Operations Support services including both cloud/non-cloud and classified/unclassified capabilities.

The FS3i contractor will also provide Foundation GEOINT IT Procurement and Foundation GEOINT Software Procurement services to support the acquisition of IT that supports FG capabilities. The government may have the FS3i vendor procure software or hardware in lieu of the NGA SAM or other enterprise options in the event they are unable to support the FS3i requirement.

Services The services listed in this section may be added a la carte to the individual task orders, and may be applicable to any of the six service categories. They are contracted for, and managed, at the task order level. Reporting and traceability of the services is done via the WBS structure described in Appendix B. Contract deliverables associated with the service are defined and managed in the individual task orders.

System Performance Optimization Services to coordinate with developers and enterprise service providers to analyze system metrics and develop recommendations to improve performance. Example areas include, but are not limited to, modifications to provisioning environments, selection of computer processors, choice of memory size and type, selection of data storage solutions, transport connection modifications, choice of database solutions, and software architecture modifications. These recommendations are delivered to the Government for assessment and implementation by supporting contractors, development teams, or external service providers as appropriate.

Software Library Management Services to manage and maintain a master Software Library for the installed FG baseline. The Software Library contains the gold copy source code, or COTS licensing information and installation packages (as appropriate) for all software in the production baseline. It includes coordination with the Government Project Management Office to provide advance notice on impacts to COTS licenses, upcoming releases, and system/application impacts that may require changes in license management.

Configuration Management Services to provide configuration management control of the hardware and software provided in each release for the IT systems supported by the contractor, and could include those delivered by the discrete development teams. The processes and procedures must be consistent with the NGA Configuration Management Plan (NCMP) and industry best practices.

Automation Services to implement automated solutions where relevant. It includes collaboration with developers to automate continuous integration/continuous deployment (CI/CD) in the FS3i environments on each security domain. Additionally, it includes evaluation of solutions and services for automation opportunities and making recommendations to the government. The contractor creates and implements methods to automatically deploy existing or newly identified capabilities where the FS3i contractor has direct control and responsibility. Coordinate and collaborate with the development teams to produce solutions that are fully automated from a provisioning and deployment standpoint. Produce deployment instructions for all baselines.

Release Management Services to manage the FS3i release activities in accordance with the Government provided Capability Delivery SOP. The Contractor functions as the lead to collaborate with the individual development team Release Trains to plan, integrate, stage and release new/updated capabilities from the FG development efforts into the test and operational baseline. Release Management includes facilitation of the FS3i release train processes and execution to include risk management ensuring value delivery and driving continuous improvement to the FG services. The Contractor facilitates and coordinates release planning with all Government and Contractor stakeholders, to include developers. The Contractor also manages, produces, updates and delivers the Release Calendar.

Backlog Management Services to manage and maintain the overall master Backlog. The Contractor must follow the Agile Continuous Planning Model (CPM) to update and maintain the prioritized backlog for all existing FS3i capabilities and services. The preferred solution for this is the Atlassian JIRA software. The service provides Atlassian JIRA as the common requirements system for all supported Developers/Release Trains. The backlog is accessible in real time and shared with the Government, the FG development contractors, and the FS3i contractors. Provide Backlog Grooming to maintain and update the prioritized backlogs.

Government Readiness Reviews Services to report the technical assessment and status of FS3i readiness of a supported development efforts for the Government’s Test Readiness Reviews (TRR), Operational Readiness Reviews (ORR), and other Readiness reviews as needed.

Continual Service Improvement (CSI) / Business Process Reengineering (BPR) Services to define and implement standard continuous service improvement (CSI) processes and continuously collect data related to the services process streamlining, quality of the user experience, system performance, and or cost savings. CSI approaches, methodologies and techniques are documented to allow evaluation and assessment of effectiveness of the approach chosen. Business process reengineering (BPR) may also be needed to streamline business processes. The Contractor applies the selected CSI approach to Agile processes emphasizing periodic “stop, inspect, improve” as a process with the following goals:

· Improve customer experience

· Improve system performance

· Decrease deployment cycle time

· Reduce system and cloud costs

· Improve time to market delivery

Value Engineering Change Proposal (VECP) Services to provide a business case with supporting data that details a proposed value engineering change to the contract. The contractor defines processes and continuously collects data related to the six service categories in this IDIQ. The contractor presents the business case with analysis and propose cost savings efforts in a change proposal to the Government Program Management Office (GPMO).

Request for Change (RFC) Management Services to review and prepare responses to RFCs. The Contractor provides system impact assessment with a summary of technical and cost information that impact the backlog and software baseline in accordance with NGA’s RFC process.

DevSecOps Management Services to execute all the processes required for delivery of new/updated software baselines from one environment to the next to expose the capabilities/services to the users for testing and deployment into operations. The Contractor procures, provides or enables, as appropriate, DevSecOps services and capabilities to the individual development teams where applicable and feasible.

Demonstration Support Services to support, provide or participate as appropriate, in demonstrations of FS3i provided capabilities and services.

Test Support Services to support, provide or participate as appropriate in test to evaluate functional and non-functional requirements. Support integration, developer, and user testing in test environments in support of DevSecOps processes. These processes support developer’s testing, FS3i integration testing, and government user’s testing to support NGA’s Readiness processes such as Independent Verification and Validation (IV&V). Provide supporting documentation for the government’s Cert to Field process for newly delivered capabilities. Provide test support to users for the government’s NGA’s Testing Organization (NTO) assisted-service process and execution of the government’s User Acceptance Testing. The contractor coordinates with the developer and Government Product Owner to produce test plans and supports testing to assess reliability, availability, maintainability (RAM) sustainment requirements and other non-functional requirements for IT platforms and IT enterprise services architecture integration.

Training Services to develop and provide training to support end user familiarization and proficiency with FS3i capabilities and services.

Knowledge Management Services to manage an unclassified or classified, or both Atlassian JIRA / Confluence and Microsoft SharePoint capabilities and manage accounts to support collaboration and information sharing between FS3i, GPMO, and development teams. This repository is available to all development teams to capture information and lessons learned related to development of any FG-related system, service or capability. The contractor maintains an Intellipedia site on classified and unclassified networks where the FG services and capabilities information will be made available and can be shared. Services to perform content curation.

Corrective Maintenance Software Maintenance services to correct deficiencies in the software code baseline. This includes the delivery of a new software code baseline, and is not limited to:

· Fixing minor application bugs, including system restarts

· Reconfiguring COTS for specific user / use case errors

· Working with ISP, Cloud Service Provider (CSP) and other system admins to resolve Discrepancy Report (DR) causes by external factors that arise in non-FS3i capabilities

· Fast, one-time fixes that do not involve agile software development, backlog creation, or using the more formal development and sustainment processes described in other service definitions.

· Analysis of Software License status, renewal and terms, and identification of risks/issues arising thereto with current or future use.

Adaptive Maintenance Software Maintenance services to adapt existing solutions to a change in the provisioned environment. It is primarily where a development or software maintenance team no longer exists, but the capability must continue to be provided by FS3i. This includes the delivery of a new software code baseline, and is not limited to:

· Changes to infrastructure or middleware on which the capability is provisioned

· Changes in software dependencies or supporting software (e.g. Net framework, JAVA versioning, supported web browsers)

· Identify Software License issues and provide change recommendations

Preventive Maintenance Software Maintenance services to proactively prevent future capability deficiencies that are known to be pending. It is primarily where a development or software maintenance team no longer exists, but the capability must continue to be provided by FS3i. This includes the delivery of a new software code baseline, and is not limited to:

· Preparing for Operating System deprecations

· Removing obsolete functions from the capability baseline

· Recoding and recompiling legacy source code from deprecated languages

· Removing unsupported dependencies that no longer have current vendor / developer maintenance

· Prepare and record any Software Licenses risk or issues

Perfective Maintenance Software maintenance services to perfect the installed baseline for optimal operations and performance, and to comply with relevant policies and directives. It is primarily where a development or software maintenance team no longer exists, but the capability must continue to be provided by FS3i. This includes the delivery of a new software code baseline, and is not limited to:

· Security patches and hot fixes

· Operating System and support software updating

· Fixing source code to prevent outage or triggering incidents (e.g. malformed error handling in the source code, logic flaws in error management, substandard code documentation, suboptimal deployment packaging)

· Determining the required amount of Software Licenses and the replacement requirement

Help Desk and Desk Side Support: Tier I Support Services to provide Comprehensive Tier I Help Desk support for the all development and production environments. The Contractor’s approach must meet NGA’s Enterprise Management’s requirements for monitoring policy. It must also integrate with, and not be duplicative of functions of, the NGA Enterprise Service Center’s (ESC) Tier 1 solution for incident support and reporting of continuity of operations and operational inter-dependencies across the NSG. It must also utilize, and not be duplicative of the functions of, the NGA Service Management Solution (Service+) to support FS3i providing Service Request Management, Change Management, Incident Management, Knowledge Management, Configuration Management and IT Asset Management to the level of implementation as directed by the government. The solution must enable all the relevant ESC/Service+ features to provide a comprehensive implementation that supports all stakeholders for all development and production environments.

Help Desk and Desk Side Support: Tier 2 Support Services to provide Tier 2 Help Desk support to monitor and administer the FS3i operational baseline to include, but not limited to, the software baseline, load balancer configurations, firewall configurations, and database configurations.

The Contractor provides a Tier 2 support structure that leverages Enterprise Management and FS3i provided monitoring to support response efforts to cover the sustainment of all aspects of FS3i in operations. This support ensures the FS3i services are available to mission customers and can execute to their designed functionality and performance levels at the availability and reliability per the performance specifications. Tier 2 operations support covers custom code, COTS, and database configurations (e.g. tables, indexes, views) specifically developed and tailored for accessibility of FS3i services. Tier 2 operations support includes activities such as:

· FS3i services monitoring

· Initial issue response

· Metrics analysis and discrepancy resolution

· Database administration

· Application startup/shutdown

· Application software deployment and other mission application oriented preventative maintenance necessary to meet availability/reliability requirements

· Tier 1 ESC (Enterprise Service Center and Enterprise Management Office) support to resolve user generated questions/problems and operational incidents

· Incident and DR/Problem Investigation (PBI) management

· Coordination with FS3i service consumers

Tier 2 operations support also includes support to NGA operational management forums external to the program to support operation and problems status reporting and outage request management (e.g., coordinating outages through NGA operational outage boards). Tier 2 provides standing notifications as needed, during and after normal business hours, when Priority 1 or other urgent Priority incidents/problems arise with monitored system applications. The Contractor’s approach must integrate relevant services with NGA’s Service+ modules and provide operational dashboards with metrics on the operational support actions and system activity.

Help Desk and Desk Side Support: Tier 3 Support Services to provide Tier 3 Help Desk support to operations for Priority 1 and 2 DRs and other DRs as prioritized by the Government.

Incident Tracking Services to submit and track incidents (INCs), PBIs, and DRs in accordance with NGA’s Incident Response process for Incident management workflow and response time SLAs as minimal requirements needed for Incident management support required. The Contractor’s approach must utilize the NGA Service+ support tool for initiating and tracking the status of INCs and PBIs, lead Root Cause analysis investigations for repeating pattern of Priority 1 and 2 Incidents or emergency/urgent PBI/DRs. The Contractor provides a cross reference for every INC in the supporting tasks documented in JIRA.

Discrepancy Report Investigation Services to implement a process for Discrepancy Report investigation and tracking at assumption of control of Operations. The process must be in compliance with applicable contractor and NGA configuration management plans. The Contractor provides discrepancy investigation and evaluation for outages/degradations of any FS3i managed services IAW NGA policy.

0. System Performance Services to operate and maintain the FS3i capabilities and services to meet the individual operational performance requirements defined in the individual task orders

0. Services Status / Status Tracking Services to provide continuous monitoring of the health and status of the FS3i test and operational environments during their designated operating hours, and report on operational status to include availability and quality of services required to make the FS3i capabilities/ services operate. The Contractor’s approach must comply with relevant NGA Operations guidelines. The Contractor’s approach must provide automated, dynamic Operational Status dashboards that shows all capabilities, services, and database/data storage status currently provided or consumed by FG production development efforts or operational capabilities. Technical issues related to any system capability Recoverability, Availability, and Maintainability (RAM) are documented on an industry standard Root Cause Analysis form, kept in the Software library, documented in the Service + system, and the proper messaging and notifications must be made from the FS3i Contractor leadership.

0. Metric Collection and Analysis Services to collect and conduct system and performance metrics in accordance with the Capability Delivery SOP and other relevant processes and principles. The Contractor provides continual analysis of all environments to identify ways to optimize performance and manage cloud costs. This includes providing periodic reports to the sustainment GPMO on status of data storage and cost, processing optimization and cost, and availability, usage, and cost reports for every system, service, or capability. The contractor may also provide other additional ad-hoc cloud usage reports to the sustainment GPMO as required.

Services to collect, analyze, and report on web usage data in accordance with NGA Instruction 8955.6 and OMB Memorandum M-17-06. The Contractor provides continual analysis of web data on all environments to measure web traffic and identify ways to optimize web usage. This includes providing periodic reports to the sustainment GPMO on status of web traffic / usage. The Contractor provides other additional ad-hoc web traffic/usage reports to the sustainment GPMO as required.

0. Cyber Security Services for all environments and domains to ensure compliance and support all necessary Assessment and Authorization work for the delivered FS3i services, to include software scans. The Contractor’s approach must follow NGAM 8010.1, Information Management Systems (IS) Risk Management Framework (RMF) Guide and adhere to ICD 503 for the Assessment and Authorization of the newly delivered FS3i services.

Additionally, services to support the NGA Information Assurance Vulnerability Assessment (IAVA) process to ensure FS3i sustained components stay compliant with A&A standards, while continuing to meet stated availability/reliability requirements. The Contractor’s approach must adhere to NGA vulnerability response timelines, in concert with Government priority direction and to the extent practical to not unduly jeopardize mission system availability/reliability.

Additionally, services to provide cybersecurity and information assurance services that enforce, comply with and support the DoD, NGA and IC cybersecurity and IA security directives for individual operational deployments of existing and new capabilities.

Additionally, services to monitor and improve DevSecOps processes, developed in collaboration with the development teams and NGA Security.

Additionally, services to generate and maintain the required documents in accordance with Federal Information Security Management Act (FISMA) and ICD 503 series regulations and instructions. The contractor supports inspection requests and activities as necessary, and mitigates/remediates FISMA findings within the specified period provided.

Authorized Outage Coordination Services to support coordination with the Government’s Outages Control Board to schedule the authorized outage necessary to deploy the integrated capability. The Contractor ensures all Operations Readiness Checklist pre-requisite activities have been completed in accordance with (IAW) NGAI 8500.2, Authorized Outages and Maintenance Activities. The Contractor supports coordination with the Government’s Outages Control Board to schedule the authorized outage necessary to deploy the integrated capability.

Decommissioning Services to prepare and execute Decommissioning Plan(s) in accordance with the government’s decommissioning readiness checklist. Decommissioning includes, but is not limited to, all activities required to archive the system data, documentation and records; all work needed to remove the system software from its hosted hardware; all tasks required to turn in unneeded hardware and software licenses and the schedule required to execute the work within the required timeframe.

Provisioning Services Services to provision and maintain the environments required by the task order. The contractor coordinates with FG development teams for changes and outages as required by NGA configuration and change management processes.

Information Technology Disaster Recovery Support (ITDR) Services to provide ITDR (also known as the Information System Contingency Plan (ISCP)) for all supported environments. The Contractor conducts and maintains an end-to-end comprehensive ITDR program to include but not limited to:

(1) Conduct end-to-end reviews of architecture, cloud engineering, RAM engineering, backups, fail-overs and process/policy to determine ITDR options for government selection.

(2) Implement government-selected ITDR options in the architecture and process changes through the sprint and release process.

(3) Prepare and maintain ITDR plans

(4) Enter information into the ITDR Continuity Planning Tool (CPT)

(5) Conduct/participate in ITDR exercises for operational FS3i capabilities.

Database Management Services Services for administering the mission domain geodatabases. These are used by viewers, editors and analysts in the FG customer base. Activities include, but are not limited to: troubleshooting geodatabase issues, replication issues, versioning issues, performance issues and proactive monitoring of the health and overall enterprise database environment. The Contractor assists with implementing and administering distributed data workflows to support external/disconnected production staff. The Contractor facilitates and executes upgrading and/or migration of enterprise geodatabases.

Additionally, the Contractor provides database architecture design following database architecture best practices for relational, Triplestore, and other database types.

Additionally, the Contractor provides Data Modeling services following Data Modeling best practices and NGA’s Data Modeling process and guidelines.

System Administration Services Services to perform all necessary system administration tasks in support of the FS3i capabilities and services. Services include, but are not limited to, documenting, operating, maintaining, deploying, and sustaining the FS3i capability/service environments, required input services and databases.

Enterprise Services Services to coordinate with the GPMO to document agreements with relevant enterprise service providers to assure sustained mission readiness for its customers. Services to coordinate the FS3i-specific role and consumption of government enterprise services. FS3i will be dependent upon NGA enterprise services as described in Section 4. FS3i Contactor identifies requirements and capability gaps, and develops solution recommendations to meet FG sustainment and operation needs. The FS3i Contractor must collaborate with necessary parties to define enterprise service requirements for the government to provide to the service provider. The Contractor coordinates and participates in enterprise service testing as required.

Requirements Management and Analysis Services to conduct requirements analysis associated with DRs, IAVAs and Request for Changes (RFCs). The Contractor leads backlog grooming activities to determine required tasks, integration support, identify long lead activities, and identify any required engineering tasks.

The Contractor documents the Government’s non-functional and IT requirements and decomposes, manages, and configuration controls the solutions from Agile Features and User stories throughout the Agile development process. The Contractor must document IT infrastructure and IT Enterprise service requirements to be developed, integrated, demonstrated, tested, and validated to ensure system platforms meet sustainment RAM non-functional requirements. The Contractor updates documentation for capabilities in Operations as IT and non-functional requirements are updated.

Cloud Engineering, Integration, and Management Services to provide engineering, design, and management of baselines deployed in the cloud in order to build, maintain, optimize, and efficiently manage cloud resources. The Contractor supports modernization, migration, and deployment of FG capabilities to the cloud. The Contractor may leverage government provided cloud engineering resources, as available. The Contractor obtains the required data storage from government provided service providers, optimize processing and cost, manage availability and usage, and provide estimates of future cost.

Engineering Services to provide the necessary engineering expertise and resources to plan, execute studies, manage and implement FS3I technical requirements and activities covered by this SOW consistent with the NGA System Engineering Plan (SEP) and industry best practices. The Contractor performs engineering management tasks associated with release planning in accordance with best practices and the IPF Capability Delivery SOP. The Contractor develops and provides to the government, architectural Service Views that document the physical architecture for the implemented technical solutions for the FG capabilities being sustained in formats compliant with the IPF Architecture guidelines. These views are required to sustain a service-centric implementation of FG capabilities.

The Contractor must actively engage with FG service developers and government architects to support the process to identify and document linkages between the physical service architecture views and the Government’s higher-level (logical and/or conceptual) architectural service views, up to the NGA Enterprise Architecture and NSG Architecture level. Establishing linkages between physical solutions service architecture and higher-level logical or conceptual service views is required to ensure alignment of solutions architecture with the government’s overall enterprise architecture.

Technical Writing and Documentation Support Services to provide support in development and dissemination of technical documents, including analysis of government functional and non-functional requirements, to document baselines.

Technical Library Services to provide a document registry and inventory control function for storage of all required CM controlled contract materials list for all delivered FS3i capabilities after each operational release. Activities of this task include, but are not limited to, establishing a SharePoint site, Atlassian Confluence, or Jira on SBU and NGANet and collecting/storing all applicable CDRLs, and other contractually required documents.

Transition-In Services to transition capabilities in to the FS3i control from a legacy Integration / Operations and Sustainment service provider. The Contractor delivers transition-in plans and associated artifacts that details the process of capturing and transitioning all necessary information, equipment and personnel relating to transitioning of operations and maintenance support from an incumbent service provider to the FS3i service provider. The Contractor then executes the transition-in of the capability, in coordination with the legacy service provider, in accordance with the transition plan.

Transition-Out Services to transition capabilities out of FS3i control to a new service provider. The Contractor delivers transition-out plans and associated artifacts that details the process of capturing and transitioning all necessary information, equipment and personnel relating to transitioning of all required services from FS3i to an alternate service provider. The Contractor then executes the transition-out of the capability, in coordination with the successor service provider, in accordance with the transition plan.

Software Development Services to develop new capabilities that did not previously exist. This does not extend, adapt or modify existing services, which is covered under Adaptive, Perfective, Preventive and Corrective Maintenance (sections 6.16 through 6.19 inclusive). New capabilities will be developed via the Agile process, mirroring to the greatest extent practicable the Agile processes used in the four Maintenance service categories. All new developed capabilities will be done in accordance with the policies and best practices set forth in Section 4.0 Constraints.

IT Hardware Procurement Services to procure IT Hardware. This service is used in lieu of other NGA enterprise hardware purchasing avenues, when those options are unable to meet the component, schedule, or quantity needed.

Software Procurement Services to procure Commercial Off the Shelf (COTS) Software. This service is used in lieu of other NGA enterprise software purchasing avenues, when those options are unable to meet the component, schedule, or quantity needed.

Program Management These activities correspond to the Program Management category of the WBS.

Program Management Plan The Contractor develops and maintains a Program Management Plan (PMP) for effective program management of the overall FS3i effort.

Additionally, this includes reporting on overall FS3i program progress in accordance with the PMP-based IMS at each Program Management Review (PMR), at selected technical reviews, weekly status reviews and as required by the Government. The contractor’s Subcontractor Management Plan is to be included within the PMP. The contractor provides reports on cost, schedule, and performance against the PWS requirements, the WBS structure, key personnel and staff, cites accomplishments, deliverables and CDRL status relevant to the reporting period. The contractor arranges and supports such meetings and reporting as defined in the individual task orders. The contractor produces the Contract Funds Status Report (CFSR) in the format defined by the Government. The contractor provides end of sprint/deployment status reports at the completion of each release, when applicable. The reports provide achievements, stories planned/completed/not completed, risks/issues and goals.

The Contractor develops and maintains a Risk Management Plan in the format defined by the government. The contractor’s Risk Management Plan documents the Contractor’s Risk Management Process and will provide the Government insight into how the Contractor will manage the risks for the total contracted effort. The contractor updates and posts a risk/issue register for each system and for the FS3I program / contract.

The Contractor may be requested to host PMRs, release planning events, technical exchange meetings, and other meetings to accommodate approximately up to 30 personnel in the local vicinity of the DC area to include teleconferencing, SBU/NGANet, IC Connect, speaker phone, and other typical conference collaboration capabilities.

The Government may direct the contractor to prepare briefings, take action items, provide resolution, and document meeting minutes.

The Contractor designs and conducts a stakeholder communications program for each task order and delivers a stakeholder communications plan. This plan is tailored to the specific characteristics of the service being added to the FS3i oversight, and is intended to inform the capability’s customer base of the FS3i processes related to the capability they are using. The plan covers, but is not limited to, such issues as: outage and system impact notification procedures, capability delivery schedules, capability degradation, and problems up to capability failures. It also includes instructions for how to interact and obtain support from the FS3i Contractor. The Contractor can leverage this process to request government assistance in solving problems through this communications plan and process as required.

Staffing List The Contractor will develop and maintain a current Staffing List. The Staffing List will contain the names, job title, assignments, employer, contact information, and planned departure date for all Contractor and Subcontractor personnel assigned to the FS3I contract. The Staffing List will be current as of the first day of the current month. It will identify any personnel that left the contract during the previous month and identify any personnel scheduled to on-board on the contract during the current or following month. Names of personnel that have left the contract will be removed from the Staffing List within four (4) working days of their departure. The Staffing List will be posted for GPMO personnel, COR, and CO access.

Key Personnel Key Personnel requirements will be specified at the task order level. Hours of availability for Key Personnel will be specified at the task order level. All Key Personnel are required to have an active TS/SCI with CI polygraph.

The Contractor must staff all the Key Personnel positions identified in the individual task orders.

Key Personnel may be modified in accordance with the above, to substitute or add personnel. The contractor provides a Staffing Plan as part of the individual task order that outlines staffing requirements and staffing goals.

All personnel that require elevated or privileged user access such as Security personnel and Systems Administers must have and meet all DoD 8570 requirements and NGA requirements. Proof of these qualifications are to be provided to the COR or PM for verification.

Cyber issues related to personnel misconduct or any security related incidents must be reported to the government PM and/or COR immediately via telephone or Email. Detailed Email reports are due ASAP that include personnel involved, date, time, and other information relevant to the incident.

Government Furnished/Contractor Acquired Property Management The contractor must account for and maintain all the Government-provided materials, property and equipment IAW FAR Clause 52.245-1 (JAN 2017), Government Property and NARI Clause 5X52.45.102-9000 (Nov 2016). The equipment must be documented and tracked via a Government Furnished Property/Material list. The list must include, but is not limited to:

· Contract Number

· Contractor Point of Contact

· Date of Last Physical Inventory

· Inventory with the following:

· Item Name

· Asset Identification Number or Unique Item Identifier

· Item Description

· Manufacturer Name

· Manufacturer Part Number

· Manufacturer Model Number

· Serial Number

· Quantity

· Location

· Type of Government Property – Government Furnished Property (GFP) or Contractor Acquired Property (CAP)

· Current condition of equipment, per the equipment condition status listed below as applicable:

· Condition A – Serviceable Usable without Qualification

· Condition B – Serviceable Usable with Qualification

· Condition D – Serviceable Test/Modification

· Condition F – Unserviceable Reparable

· Condition H - Condemned

Travel Travel is anticipated in the performance of this contract. Travel will predominantly entail travel to NGA facilities. All travel requires Government approval/authorization and notification to the COR prior to the start of travel.

The contractor will not be reimbursed for any local travel. Local travel is defined as travel conducted on official business within a 50-mile radius of official duty station.

Travel is reimbursed in accordance with FAR 31.205-46. The contractor must provide all travel costs in detail / per traveler to include lodging, rental car, airfare, and such miscellaneous charges as defined by the FAR, to the Government for review and certification prior to submission for payment. Invoicing for travel charges is provided to the COR and includes official records/receipts documenting dates, travel modes, lodging, rental vehicle information and costs to ensure JTR/FAR compliance.

Security The contractor must conduct a security program to ensure all security requirements of the contract are satisfied, and are in accordance with relevant policies, procedures and laws. The contractor must document their security program in a Security Plan.

Work Performance Security Requirements

Classified Work Performance Security Requirements

Contractors must abide by the DD Form 254 - Contract Security Classification Specification (referred to as DD254 hereafter), the National Industrial Security Program Operating Manual (NISPOM 32 CFR Part 117), and all other applicable security policies and regulations including operational security (OPSEC) requirements.

Defense Counterintelligence and Security Agency (DCSA) remains the Cognizant Security Agency (CSA) for individuals performing work with collateral (SECRET or TOP SECRET) security clearances. As such, Security Executive Agent Directive (SEAD) 3 reporting should continue to be provided to the Contractor’s Facility Security Officer (FSO) for reporting to DCSA via Defense Information Security System (DISS). DCSA will also dictate mandatory security training as the CSA for the collateral cleared community.

Personnel Security Requirements

Contractor personnel performing Top Secret/Sensitive Compartmented Information (TS/SCI) work on the contract are required to have active TS/SCI clearances for access to TS/SCI facilities, when performing duties within TS/SCI environments, and for access to TS/SCI computer systems for the performance of this contract. Contractors are subject to a Counterintelligence-Scope Polygraph examination, as requested by NGA. As a condition of employment and assignment, contractors who have not successfully completed polygraph testing within the last five years must immediately schedule a polygraph examination and must complete the process, in no more than three test sessions, within 90 days.

All Contractor personnel shall possess a current Top Secret Personnel Security Clearance and be eligible for favorable NGA adjudication for SCI access. The government will be responsible for verifying security clearances/SCI eligibility of the Contractor personnel in accordance with (IAW) SEAD 7: “Reciprocity of Background Investigations and National Security Adjudications”. If needed, NGA will sponsor SCI accesses at its sole discretion. NGA will provide badges, Common Access Cards (CAC) and other items (e.g. parking hangtags) when applicable, for required Contractor personnel.

Cleared Contractor personnel will be enrolled into Director of National Intelligence (DNI) Continuous Evaluation System (CES) throughout the lifecycle of the contract while at NGA IAW SEAD 6: “Continuous Evaluation”.