SOW BEP Tour Program Ticketing Service.pdf

Statement of Work SECTION I: Background

The Bureau of Engraving and Printing (BEP) is the largest producer of security documents in the United States. The BEP prints billions of Federal Reserve Notes for Deployment to the Federal Reserve System each year. These notes are produced at facilities in Washington, DC, and Fort Worth, Texas. In addition to U.S. currency, the BEP produces several other security documents such as portions of U.S. passports, materials for Homeland Security, and Immigration and Naturalization Certificates.

The BEP U.S. Currency Production Tours at DCF provides educational, indoor-guided walking tours to over approximately 230,000 visitors per year as a free service to the public. The tour allows visitors to see how paper currency is made and includes a discussion of counterfeit deterrent features. Visitors range in age, diversity, and level of understanding of the currency manufacturing process.

The BEP has identified a requirement for print and on-line services for advance ticketing/passes stock for the U.S. Currency Production Tours at the Washington, DC facility. Currently, the BEP issues tickets for its U.S. Currency Production Tour via distribution tickets by hand throughout the day on-site. The ticketing distribution process needs to be modernized and simplified. We are looking for a partner that can deploy the emerging technologies and trends in ticketing services to ensure the BEP is aligned with the general public’s “purchasing” behavior, cross channel (box office, kiosk internet, mobile, etc.) to provide ease of process for visitors and increased visitation to the United States Currency Production Tour.

SECTION II: Purpose

2.1 Product, Service or Outcome Needed.

Advance Ticketing Services for the United States (U.S.) Currency Production Tours at the Washington, DC facility (DCF).

2.2 Scope of the Product, Service, or Outcome.

BEP is looking for a contractor that can recommend and deploy the emerging technologies and trends in ticketing services to ensure the Currency Production Tours are aligned with the general public’s “purchasing” behavior, cross channel (box office, kiosk internet, mobile, etc.) to provide ease of process for visitors and increased visitation to the Currency Production Tour.

BEP ticketing falls into three categories: Non-peak season, the Friday after Thanksgiving Day, and Peak season.

• Non-peak season. The DCF tour non-peak season begins the Tuesday following Labor Day and ends the Friday before the National Cherry Blossom Festival begins. Visitors are required to obtain free, same-day tickets to take the public tour. Visitors enter at the Tour and Visitor Center (TVC) entrance on 14th and C Street, SW. Tours run between 9 a.m. and 2 p.m., Monday through Friday, and every 15 minutes.

• Friday After Thanksgiving Day. Visitors enter at the Tour and Visitor Center (TVC) entrance on 14th and C Street, SW. Tours run between 9 a.m. and 2 p.m., every 15 minutes.

• Peak season. The DCF tour peak season begins the first Monday of the National Cherry

Blossom Festival in late March through the last Friday before Labor Day. Visitors are required to obtain free, same-day tickets to take the Public Tour. The ticket booth, located at 15th Street, SW, Raoul Wallenberg Place, opens at 8 a.m., Monday through Friday, and closes when all tickets have been distributed for the day. Extended tour hours are from 9 a.m. to 6 p.m. and tours run every 15 minutes.

SECTION III: Technical Requirements/Tasks/Outcomes

3.1 The Contractor shall provide BEP Currency Production Tours reservation and ticketing services through telephone and on-line services year-round.

3.2 The Contractor’s internet pages shall have a link to the tickets/passes and be approved by the Currency Production Tours Legal Counsel, Project Manager (PM), and Contracting Officer’s Representative (COR) for appearance and content. After award, the Contractor’s internet pages must conform to the Currency Production Tours visual identity and descriptive language.

3.3 The Contractor shall provide a robust reporting and analytics platform including a BEP Visitor Tour Survey Satisfaction Survey that includes the following functions:

3.3.1 Reporting Functions

3.3.1.1 Provide reporting dashboard illustrating tour schedule/open ticketing, ticketing surveys, and data conversion of the manual ticketing process.

3.3.1.2 The Ticketing System shall have the functionality for Office of External Affairs (OEX), Public Service Division (PSD) to view reporting to include:

o A dashboard to view track date/time of open or booked ticketing.

o Display in dashboard(s) analytical tour ticketing reporting.

o A system that tracks both online and walkup tour ticket information.

3.3.1.3 The reporting shall support tracking of ticketing add/change/delete actions taken by OEX PSD staff in the ticketing software.

3.3.1.4 Reporting for gallery and floor tours and across channel options; (online, walk up ticketing and tickets per session by date/time and mobile tickets scanned.

3.3.1.5 Customized reports according to the OEX-PSD requests. Details of reports will be gathered during discover session or Contractor offer recommendations for reporting.

3.3.1.6 Provide ease of processing and the ability for OEX-PSD staff to track volume of tickets, sessions that are filled, statistical information, scheduling, number of tickets booked per session and no shows.

3.3.2 Survey Reporting

3.3.2.1 Recommend and deploy a “BEP Visitor Tour Satisfaction Survey” upon completion of the visitor’s attendance at the public and group gallery tours to allow the visitor to submit their feedback anonymously so that BEP can improve upon tour service. It is suggested that the ticketing software shall be sent either by email or text message with link to the visitor to complete the survey within 1-3 hours after the tour.

3.3.2.2 Determine how to apply the survey to public for the purpose to improve upon the tour experience and group tours and delivery of survey reports to obtain feedback from visitors who attended the tour.

3.3.2.3 Provide templated customer feedback survey questions to evaluate and finalize approval with OEX-PSD.

3.3.2.4 Provide reporting for daily tour date/time via email the survey responses to the tour date and time.

3.3.2.5 Provide an option for the customer an option to send the visitor a feedback tour survey and have the option to opt in or out. This should include a request to complete the survey.

3.3.2.6 The surveys shall be scheduled by tour date/time, including follow-up reminders to complete the survey 1-3 business days if no response.

3.3.2.7 All survey responses gathered by tour dates and times shall be anonymously reported to the tour scheduler with an agreed upon schedule.

3.3.3 Data Conversion

The Contractor shall provide the BEP support for Data Conversion as described:

3.3.3.1 Discuss import of data during discovery session to determine exact years and timeframe by public, congressional, and group tours.

3.3.3.2 The Contractor shall transfer at a minimum prior fiscal year Tour Ticketing data record stored in the existing Tours database to the new system so that no reservations will be lost during the transition with the ability to transfer data via secure means to the new ticketing system.

3.3.3.3 Data import from a spreadsheet shall be available to directly upload into the Tour Ticketing system.

3.4 The Contractor shall have the ability to increase on-line ticketing to 375,000 annually.

3.5 The Contractor shall attend at least two (2) on-site visits per year. Additional visits may be required as needed to discuss Contract operations.

3.6 The Contractor must ensure all relevant sites are optimized for mobile web (including online reservations) and the ability to link from within an app. Additional option may include mobile ticket delivery via email or text messages, i.e., Apple Passbook which can be scanned via e-Ticket. (See Section 3.15 Mobile Application)

3.7 Equipment

3.7.1 Contractor shall provide electronic equipment compatible with printed ticket stock in order to scan all passes (online / printed and VIP tickets) for tour entry.

3.7.2 The Contractor shall provide a specified laptop and industrial printer capable, according to the requirements, for printing of all public tours, Congressional Constituents Tours, and Group Tours (Special, Large, Schools) on a daily basis and must include the ability to place various Special Visitor and ticket types for reservation with barcodes.

3.7.3 The Contractor shall provide hand-held scanners to facilitate the scanning of both on-line and daily tickets/passes.

3.8 Training and Technical Support

3.8.1 The Contractor shall provide all training and technical support required to include but not limited to troubleshooting of all equipment and/or any new equipment provided by the Contractor.

This shall include both training on the use of the ticket hand-held scanners for BEP staff, volunteers, and interns in addition to Train-the-Trainer for select Currency Production Tours Services staff on the new ticket labeling and printing system.

3.8.2 Technical support by the Contractor shall be available 24 hours a day, seven days a week in order to ensure the successful operations of all ticketing equipment.

3.8.3 Minimum Response Turn-around Times

3.8.3.1 The Contractor shall be responsible for responding to Currency Production Tours technical and maintenance support issues within one (1) hour time frame after verbal notification of hardware and/or software problem by the Currency Production Tours authorized technical personnel.

3.8.3.2 Notification shall be comprised of telephonic communications with the Contractor. BEP’s personnel will identify the problem and the call will be confirmed and followed up by an agreed upon method to the Contractor citing the problem that is being experienced by the BEP Currency Production Tours.

3.8.3.3 The Contractor shall at no additional charge to BEP provide a toll-free help line to answer inquiries received from BEP personnel concerning technical and maintenance issues.

3.8.3.4 Major equipment issues shall require a 24 hour Contractor turn-around time in order to ensure Museum ticketing operations are in no way disrupted.

3.8.3.5 Minor equipment issues shall require a 2 to 4 calendar day Contractor turnaround time in order to ensure the BEP Tour ticketing operations, reservations are functional for all customers.

3.8.3.6 Response time shall commence upon such a written notification in the form of an agreed upon format.

3.9 Quality Assurance

3.9.1 Data Access and Security

3.9.1.1 The Contractor shall take the utmost precautions to ensure and prevent theft, misappropriation, or disclosure to unauthorized third parties of the system database or any part thereof.

3.9.1.2 The Contractor shall establish a password system with the individual user IDs to control access to the database. The COR shall identify those individuals and outside vendors who will have authorized access to the system database and will notify the Contractor in writing of any change in these authorizations.

3.9.1.3 The Contractor shall monitor the system database for any unusual activity (e.g., six or more repetitive unsuccessful log-in attempts, unusual hours of access.), and shall immediately report in writing any such activity to the COR.

3.9.1.4 The Contractor shall use the following guidelines as prescribed by BEP Federal Cloud Computing IT Security Requirements.

3.9.1.5 Data that is stored on the Contractor’s premises is to be encrypted and shall not to be stored beyond the storage period specified by the BEP’s COR. The BEP will provide the storage period specifications upon Contract award.

3.9.1.6 The BEP’s data shall be segregated and in no event co-mingled with other Contractor data.

3.10 System Security Assessments

The Contractor agrees to provide BEP a summary of any system security assessments performed on its systems, including a summary of planned actions for the duration of the Contract. In the event a weakness involving systems in which BEP data and information resides, the Contractor agrees to and shall provide a full written report no later than 48 hours after the occurrence of the weakness(s).

3.11 Data Confidentiality

3.11.1 The Contractor shall maintain all system data, including database backups, in accordance with the highest industry standards and applicable laws governing the privacy of on-line personal and sensitive information.

3.11.2 The Contractor shall further comply with all applicable BEP privacy and security policies regarding the use and disclosure of system data, and such other specific requirements and protocols that are specified herein.

3.11.3 During each transaction it is essential that the Contractor shall take the adequate and appropriate steps and precautions to ensure that the privacy of the BEP’s on-line visitors privacy is maintained and safeguarded at all times.

3.12 Data Back-up

The Contractor shall provide back-ups at least quarterly of the database as set forth in this Statement of Work (SOW). All database back-ups shall be securely stored to ensure and prevent any theft, damage, tapering and/or any unauthorized use. Other than the original system database and the database back-ups no other versions of the database shall be allowed to exist in any form unless authorized by the COR in writing.

3.13 Telephone Reservations

3.13.1 The Contractor’s customer service representatives shall provide customer phone access with no more than a three (3) minute wait for telephone reservations and inquiries. However, during the wait time, the Contractor will provide acknowledgement that the customer is waiting to be serviced and that someone will be with him/her shortly.

3.13.2 During the waiting telephone period, the Contractor shall be required to provide customers with a recording of general information about the BEP, which will be updated by the BEP as required to reflect changes in the exhibitions and to supply other pertinent information for BEP customer base.

3.13.3 Customers shall be able to purchase tickets during BEP Currency Production Tour hours.

3.14 Internet Reservations

3.14.1 Customers shall be able to secure tickets via the internet option (24) hours a day, seven (7) days a week.

3.14.2 The Contractor shall supply, via internet its web interface, a user, friendly page dedicated to ticket reservations for BEP Currency Production Tours. This page shall include but not limited to: BEP visitor information and a link to the BEP’s web page.

3.15 Mobile Application

3.15.1 The Contractor shall supply and/or integrate a compatible mobile process for the BEP Tour customers via a branded downloadable mobile application. Mobile applications shall have the option to monetize their entire mobile program in order to optimize on-line ticket reservations

3.16 Contractor Customer Service

The Contractor shall establish a policy of customer satisfaction guaranteed. All customers’ complaints and claims, including but not limited to claims for loss or damage to customers, shall be resolved at the Contractor’s expense. Any disagreement that cannot be resolved between the customer and the Contractor shall be referred to the COR for resolution within 30 calendar days of the acknowledgement of the dispute by both parties. The COR decision is final. If the Contractor receives a customer compliant, or a claim based on merchandise sold or services performed by a predecessor Contractor, the matter shall be referred to the COR.

3.17 Acceptance Criteria

3.17.1 The ticket stock shall be considered acceptable provided ticket stock reflects the BEP’s specifications, image and quality which will be discussed at contract award, and can be labeled as required by the new ticketing system.

3.17.2 All types of tickets shall be successfully identified by the electronic hand-held scanners or as identified by the contractor’s, I-phones and/or other equipment as identified by the Contractor for ticketing purposes.

3.17.3 The Contractor must have the option to ensure all provided and BEP equipment can be fully integrated for operational and tracking purposes.

3.17.4 In the event the BEP receives more than three (3) complaints from the Tour’s on-line and/or telephone customers within a given month, a meeting shall be convened by BEP with the Contractor to determine viable solution to the problem.

3.18 General Information

3.18.1 Special Delivery Instructions. Not applicable.

3.18.2 Performance/ Delivery Period.

The period of performance is 18 March 2024 – 17 March 2028, 12 month base period plus three option periods.

3.18.3 Place/ Location of Performance/ Delivery.

Contractor personnel will be required to travel to the government site for on-site installation, training, and working sessions at the Bureau of Engraving and Printing’s Washington DC facility located at 14th and C Streets, SW, Washington, DC 20228.

3.18.4 Hours of Work:

The Contractor shall provide consulting support services from 8:00AM to 5:00PM (Eastern), Monday through Friday except for observed Federal Government holidays.

3.18.5 Federal Holidays

The Government observes the following federal holidays:

New Year’s Day 1st day of January Martin Luther King Jr.'s Birthday 3rd Monday of January Presidents Day 3rd Monday of February Memorial Day Last Monday of May Juneteenth 19th day of June Independence Day 4th day of July Labor Day 1st Monday of September Columbus Day 2nd Monday of October Veterans Day 11th day of November Thanksgiving Day 4th Thursday of November Christmas Day 25th day of December

In addition to the days designated as holidays, the Government observes any day designated by Federal Statute, Executive Order, or President’s Proclamation. BEP facilities are also closed during the annual Year End Shutdown (YES) from December 25 to January 1.

The Contractor will generally not be granted access to BEP facilities during Federal Holidays, YES or closings. There are occasions when special deployments stretch over several days and in order to minimize the effect on currency production, may require the Contractor to work during Federal Holidays, YES or closings.

3.18.6 Travel Requirements

Travel and per diem will be reimbursed at actual cost in accordance with the limitations set forth in FAR 31.205-46 and the General Services Administration’s Federal Travel Regulations and will be listed as a separate CLIN. Profit shall not be applied to the travel costs. Local travel may be required for on-site meetings, etc. The Contractor shall provide a travel voucher statement for all local travel. The voucher will ensure verification of costs incurred for local travel under the contract is both allowable and reasonable and in accordance with the regulation FAR 31.205.46.

The Contractor shall attach the voucher and receipts to the monthly invoice.

3.18.7 Special Requirements

3.18.7.1 Contracting Officer Representative (COR): The (COR) will be identified by separate letter issued by the CO. The COR monitors all technical aspects of the Contract and assists in Contract administration. The COR is authorized to perform the following functions:

assure that the Contractor performs the technical requirements of the contract; perform inspections necessary in connection with contract performance; maintain written and oral communications with the Contractor concerning technical aspects of the contract; issue written interpretations of technical requirements, including Government drawings, designs, specifications; monitor Contractor's performance and notifies both the CO and Contractor of any deficiencies; coordinate availability of government furnished property, and provide site entry of Contractor personnel. A letter of designation issued to the COR, a copy of which is sent to the Contractor, states the responsibilities and limitations of the COR, especially with regard to changes in cost or price, estimates or changes in delivery dates. The COR is not authorized to change any of the terms and conditions of the Contract.

3.18.7.2 Physical Security: The Contractor shall be responsible for safeguarding all government equipment, information and property provided for Contractor use under this Contract.

This Contract requires access into the Controlled Industrial Area of the BEP. The Contractor personnel shall recognize that BEP deals with sensitive information and other proprietary information, which are valuable, special, and unique assets. All information pertinent to BEP’s information technology resources is highly sensitive and may not be released to third parties without the express, written consent of BEP. This information requires strict control procedures to preclude unauthorized disclosure or dissemination. Information pertinent to personnel is protected from unauthorized disclosure under the provisions of the Privacy Act of 1974 (5 U.S.C.

552a). Contractor personnel shall not divulge, disclose, or communicate in any manner, any information to any third party without prior written consent of the BEP. Contractor personnel shall protect information and treat it as strictly confidential and will abide by the security requirements of BEP. A violation of this paragraph shall be a material violation of this Contract. Should the Contractor receive or suspect they have learned of sensitive or classified information, the Contractor shall identify and report suspicions to the COR. Contractor personnel performing work under this Contract shall be subjects of background investigations, conducted by BEP’s Office of Personnel Security, prior to start of work under this Contract. Each Contractor employee performing under this Contract must successfully complete the Government required background check form at time of the proposal submission and must maintain the level of security required for the life of the contract.

3.18.7.3 Security Considerations: The position sensitivity of all positions occupied by Contractor and Subcontractor employees performing under this contract are designated as 1) High Risk, 2) Moderate Risk, and/or 3) Low Risk in accordance with the risk designation system Office of Personnel Management (OPM) recommends for Public Trust Positions. The risk level is assigned based on the position potential for adverse impact on the efficiency of the agency. A High-Risk level is defined as any position with the potential for exceptionally serious impact on the integrity and efficiency of the agency; Moderate Risk level is defined as a position with the potential for moderate to serious impact on the integrity and efficiency of the agency; and Low Risk level is defined as a position that involves duties and responsibilities of limited potential for impact upon the integrity and efficiency of the agency.

Persons performing HIGH RISK direct or indirect information technology labor effort on this contract shall be U.S. Citizens. Naturalized citizens shall be considered the same as native-born U.S. citizens. HIGH RISK entails work such as a system administrator, database administrator, network administrator or designs security models, application integration, customizes software or hardware, configures servers or networks, is able to manipulate alter or affect the integrity accessibility or availability of IT information or records.

Persons performing MODERATE RISK direct or indirect information technology labor effort on this contract shall be a US Citizen (Naturalized citizens shall be considered the same as native-born U.S. citizens) or lawful Permanent resident alien with 3+ years of US Residency.

MODERATE RISK entails work such as a programmer, system analyst or user of a system containing financial, proprietary or privacy/personally identifiable data.

Persons performing LOW RISK direct or indirect information technology labor effort on this contract shall be a US Citizen (Naturalized citizens shall be considered the same as native-born U.S. citizens) or lawful Permanent resident alien. LOW RISK entails work such as email or word processing from a user perspective.

3.18.7.4 Identification of Contractor Employees: All contract personnel attending meetings, answering Government telephones, and working in other situations where their contractor status is not obvious to third parties are required to identify themselves as such to avoid creating an impression in the minds of members of the public that they are Government officials. They must also ensure that all documents or reports produced by Contractors are suitably marked as Contractor products or that Contractor participation is appropriately disclosed. All Contractor personnel shall clearly identify themselves as a Contractor and shall be required to wear identification (ID) badges in a visible location on the front of exterior clothing, above the waist, (except when safety or health reasons prevent such placement). ID badges shall be worn at all times when performing work. ID badges shall have an identification picture and shall state the name of the individual and the company they represent. Contractor personnel are prohibited from possessing weapons, firearms, or ammunition, on themselves or within their Contractor-owned or privately owned vehicle while on BEP premises.

3.18.7.5 Organizational Conflict of Interest: Contractor and subcontractor personnel performing work under this Contract may receive, have access to or participate in the development of proprietary or source selection information (e.g., cost or pricing information, budget information or analyses, specifications, or work statements, etc.) or perform evaluation services which may create a current or subsequent Organizational Conflict of Interests (OCI) as defined in FAR Subpart 9.5. The Contractor shall notify the CO immediately whenever it becomes aware that such access or participation may result in any actual or potential OCI and shall promptly submit a plan to the CO to avoid or mitigate any such OCI. The Contractor’s mitigation plan will be determined to be acceptable solely at the discretion of the CO and in the event the CO unilaterally determines that any such OCI cannot be satisfactorily avoided or mitigated, the CO may affect other remedies as he or she deems necessary, including prohibiting the Contractor from participation in subsequent contracted requirements which may be affected by the OCI.

3.18.7.6 Non-Personal Service Statement: Contractor employees performing services under this Contract will be controlled, directed, and always supervised by management personnel of the Contractor. Contractor management will ensure that employees properly comply with the performance work standards outlined in the SOW. Contractor employees will perform their duties independent of, and without the supervision of, any Government official or other Government Contractor. The tasks, duties, and responsibilities set forth in this Contract may not be interpreted or implemented in any manner that results in any Contractor employee creating or modifying Federal policy, obligating the appropriated funds of the United States Government, overseeing the work of Federal employees, providing direct personal services to any Federal employee, or otherwise violating the prohibitions set forth in Parts 7.5 and 37.1 of the Federal Acquisition Regulation (FAR). The Government will control access to its facility and will perform the inspection and acceptance of the completed work.

3.19 Contractors’ Training Requirements

3.19.1 Security Awareness Training. All contractor personnel with access to BEP data and systems must complete BEP-provided mandatory security and privacy training prior to gaining such access. Non-compliance may result in revocation of system access.

3.19.2 Role-Based Training. The contractor shall ensure that IT personnel supporting this contract complete eight (8) hours of role-based specialized IT security training on an annual basis. The contractor must identify the IT personnel and their respective IT role1 that they serve in support of this contract. The contractor shall provide the list of List of IT Personnel on this Contract and Respective Role and the Completion Report for Role-Based IT Security Training.

3.19.3 IT Personnel include systems engineers; software developers; systems security engineers;

privacy engineers; system, network, and database administrators; personnel conducting configuration management activities; personnel performing verification and validation activities;

personnel with access to system-level software; personnel with contingency planning and incident response duties; personnel with privacy management responsibilities; personnel with access to personally identifiable information; and system security officers.

3.20 Other Direct Costs

All Other Direct Costs (printing, shipping, teleconference charges) required to complete this task order shall be pre-approved by the COR.

3.21 Post Award Conference

BEP intends to hold a post-award conference with the Contractor no later than 2 weeks after contract award. The purpose is to bring all relevant contract administration personnel together to establish a clear, mutual understanding of the contract requirements/objectives and personnel roles and responsibilities. Any changes to the contract resulting from a post-award conference must be made by contract modification.

3.22 Administration

This is a firm fixed price contract. The contractor shall propose an invoice schedule with clearly established milestones and associated invoice amounts. The contractor shall submit all invoices and necessary backup material on a monthly basis per milestone. Administration will be conducted by the COR. All invoicing and monthly non-labor Financial Reporting shall be approved by the

CO and COR and shall exactly mirror the awarded milestones before submission to the Internet Payment Platform (IPP). The contractor will invoice monthly being the award.

SECTION IV: Requirements for Handling Sensitive, Classified, and/or Proprietary Information

4.0 Data and Information Ownership

Government Access: The government will retain unrestricted rights to government data. The BEP retains ownership of any user created/loaded data and deliverables (e.g., documents, applications, custom code, diagrams, workflows, data sets, etc.) hosted on contractor's equipment, systems, infrastructure, etc., as well as maintains the right to request full copies of these at any time.

Removal of BEP Data: The contractor acknowledges the BEP's exclusive right of ownership of the information and is required to transfer, return, and/or delete all agency data collected, processed, stored or maintained by the contractor on behalf of BEP upon termination of services, and shall provide written certification and supporting documentation attesting to the transfer, return and/or deletion of agency information or data generated, collected, processed, maintained, or stored by the contractor and any subcontractors.

Documents and Deliverables: The preliminary and final BEP-specific deliverables and all associated working papers are the property of the U.S. Government. The contractor shall not release any information without the written consent of the Contracting Officer. All work papers, preliminary and final deliverables must be submitted to the COR at the conclusion of the contract in an acceptable and usable format, which may include the original format.

eDiscovery: The contractor must ensure data preservation requirements (i.e., halt destruction and maintain data the contractor may not otherwise have to maintain) related to litigation holds are met. The contractor shall also ensure that metadata associated with litigation holds are preserved.

Metadata is electronically stored information that describes the history, tracking, or management of an electronic document. It is created automatically when a user creates, modifies, accesses, or takes other actions with respect to an electronic document.

SECTION V: Compliance with Applicable Laws, Regulations, and Standards

5.1 Federal Laws. The contractor and all of its respective subcontractors shall follow and remain compliant at all times with the Federal Acquisition Regulation (FAR), Privacy Act of 1974 (5 U.S.C. 552a - the Act), Federal Information Security Modernization Act of 2014 (Public Law

107-347) (FISMA).

5.2 Federal Information Processing Standards (FIPS). The contractor and all of its respective subcontractors shall follow FIPS, National Institute of Standards and Technology (NIST) standards and guidelines, and other laws, mandates, or executive orders pertaining to the protection of sensitive information and information systems.

5.3 BEP and Treasury WC2 Standards. All user-to-cloud service communications must be encrypted with the latest approved browser protocol.

5.4 FIPS 199 System Security Category - FedRAMP. It is anticipated that the Federal Information Processing Standard (FIPS) 199 system security categorization for the Enterprise Data Governance and Data Catalog will be FIPS 199 High.

5.5 The FedRAMP Authorization Package and its contents shall be developed in accordance with OMB A-130, FedRAMP, and applicable NIST SPs guidance.

SECTION VI: Government Furnished Resources and Contractor Furnished Resource

6.1 Government Furnished Resources

6.1.1 BEP will provide a work area (typical office equipment), desktop computers, and other office consumable materials (paper, pen, etc.) as needed. On-site parking is not provided.

6.1.2 BEP will provide Office of Information Technology Operations (OITO) support services to assure BEP standards of all installation and security of hardware and software.

6.1.3 BEP will provide the vendor requested server-workstation hardware/operating systems, database software.

6.2 Contractor Furnished Resources

The Contractor shall be responsible for, but not limited to the following: Providing all labor, travel, parts, materials, transportation, equipment, tools, training, supplies, management and supervision and all other items and services necessary to perform these services in support of the BEP standard equipment or process. All deliveries are under warranty for 30 days.

ATTACHMENT 1: Requirements

Online Ticket requirements

The contractor shall provide the ability to access events and obtain tickets via an Internet browser.

Tour Program Reservations

Visitors to input personal contact information when ordering tickets. Expanded profiles for organizations such as tour operators to track communication with individual employees at those organizations.

Allows visitors to obtain tickets at a specified time prior to their visit to avoid standing in line.

Optional electronic RSVP reminder sent to guests who have made prior reservations.

Ticket Call Center Services

Contractor will provide Phone and email support, online and a dedicated account manager to oversee and assist BEP staff.

Hardware The desired hardware quantities are as follows:

• Mobile devices = quantity (5)

• Zebra Bar code QR scanners (PIV enabled) = quantity (4)

• Zebra Bar code printers = quantity (3)

• Ticket Paper Supply – (3) boxes

Software Ticketing Software to support 50 tickets per public tour session = 40 for public maximum distribution & 10 reserved for OEX distribution per scheduled tour

Public requestor that has a desire to obtain a ticket will be connected to the BEP website with a link to tour schedule open date/times and the ticket will be emailed to the requestor:

Types of tours:

• Public Tours (maximum ticket limit 4 per person)

• Congressional Constituents Tours o Reserved for guests of members of Congress. Congressional offices may request tours for up to 10 constituents per calendar day and submit a maximum of five tour requests per day.

o On the behalf of constituents, tour request forms must only be completed by U.S. Congressional staff with Senate.gov or Mail.House.gov

• Group Tours (Special, Large, Schools)

Training The contractor shall provide a training to BEP staff on the Contractor’s system.

Reporting Reporting Dashboard

• Analytics

• Survey Reporting

Data Conversion The contractor shall transfer at a minimum prior fiscal year Tour Ticketing data record stored in the existing Tours database to the new system.

4.0 Data and Information Ownership