Data Analytics SOO - RFI.docx

ICE

Statement of Objectives: Data & Analytical Services May 18, 2025

IMMIGRATION & CUSTOMS ENFORCEMENT

STATEMENT OF OBJECTIVES (SOO)

HSI DATA AND ANALYTICAL SERVICES

EXECUTIVE SUMMARY

U.S. Immigration and Customs Enforcement (ICE) protects America by dismantling transnational criminal organizations and enforcing immigration laws to preserve national security and public safety. ICE has offices in all 50 states and U.S. territories.

ICE has five main subcomponents: Homeland Security Investigation (HSI), the largest criminal investigative agency within the Department of Homeland Security (DHS) and the second largest investigative agency in the federal government; Enforcement and Removal Operations (ERO), which identifies, apprehends, and administratively removes illegal aliens from within the United States; the Office of the Principal Legal Advisor (OPLA) which serves as the exclusive representative of DHS in removal proceedings before the Executive Office for Immigration Review, litigating cases involving criminal aliens, terrorists, human rights abusers, and other aliens posing a threat to our homeland security; the Office of Professional Responsibility (OPR) which upholds ICE’s professional standards through a multi-disciplinary approach of security, inspections, and investigations, and Management and Administration (M&A), which supports ICE by providing sound agency management.

HSI conducts criminal investigations against terrorists and other criminal organizations who threaten national security. HSI combats worldwide criminal enterprises who seek to exploit America's legitimate trade, travel and financial systems and enforces America's customs and immigration laws at and beyond the nation's borders.

This document provides the requirements and objectives needed to support ICE offices with contract support for aggregated data to include proprietary data and analytical services.

The intent of this requirement is to establish an Blanket Purchase Agreement (BPA) contract where any ICE entity may place individual calls. Each individual call is to be issued and managed through the organization desiring such services. HSI/Office of Intelligence (Intel) will identify the basic requirements, and any ICE organization may place calls against it. Each organization must assign its own Contracting Officer's Representative (COR), Alternate COR (ACOR), and Project Manager for their call and will be responsible for receiving, accepting, and processing their invoices for the services received. (In accordance with FAR 52.216-18) The number of services identified herein are estimates only and are not purchased by this contract. The government may issue calls requiring performance at multiple locations, including any U.S. state or territory.

PURPOSE

The purpose of this procurement is to allow ICE organizations to quickly and efficiently engage the growing use of aggregated data to include proprietary data to precisely target criminal investigations of criminal, fraud, risk, and terrorism activity by utilizing data analysis to transform data into actionable insights. Obtaining these mission-critical analytic services will enable ICE to conduct customized analysis, screening, and monitoring of crime and fraud information. A data contract combined with professional analytical services provides ICE with access to information and the specialized expertise needed to process, analyze, visualize, and present that data in support of criminal investigations.

To be successful, law enforcement operations must adapt to changing public safety threats; thus, the ability to continually refine processes and modernize information technologies is mission critical. Agents and analysts must quickly and efficiently engage the growing use of data and data analysis technology to thwart criminal, fraud, risk, and threat activity. This includes more precisely targeting investigations by using data analysis to transform data into actionable insights. Data and analytical services are essential for conducting customized analysis, screening and vetting individuals and entities, developing lead information, and monitoring criminal and suspicious activities related to violations of the immigration and customs laws of the United States. The use of aggregated data, including propriety data, remains an essential approach to achieving agency goals. This contract requirement will support national security initiatives, maintain organization efficiencies, and allow leaders to focus resources on priority threats to public safety and/or national security.

Threats to homeland security include terrorist, transnational, and other criminal organizations that seek to exploit the customs and immigration laws of the United States. Accordingly, agents and analysts require immediate enhanced ability to identify, analyze, prioritize, disrupt, and dismantle transnational criminal organizations involved in the following:

· Narcotics and weapons smuggling/trafficking

· Transnational gang activity

· Financial crimes, money laundering and bulk cash smuggling

· Terrorism and terrorist activities

· Commercial fraud and intellectual property theft

· Cybercrimes including child exploitation and other Internet-enabled crime

· Human smuggling and trafficking

· Immigration, document and benefit fraud

· Human rights violations

· Intellectual property rights violations

· Export crimes

· International art and antiquity theft

An example of a specific mission related requirement is the combating of illicit fentanyl. Shared drug-related intelligence and trends are needed to address the threat from the shipments of illicit fentanyl, their precursors, and other synthetic drugs to the United States and elsewhere. These synthetics are then shipped and sold online from anonymous darknet markets and even overtly operated websites. It is extremely difficult for DHS, U.S. Customs and Border Protection (CBP), HSI, and the U.S. Postal Inspection Service (USPIS) to address the threat due to the combination of the questionable legal status of these substances, the enormous volume of international parcel traffic by mail and express consignment couriers, and the technological and logistical challenges of detection and inspection. It is important to have access to global data combined with analytical expertise and services that can yield effective results for available real-time business, patent, scientific, shipping, finance, cyber and other data and information.

SCOPE

The scope of this requirement is to obtain use of contractual support for data and analytical services to optimize ICE operational support functions to enable mission success. This includes providing direct operational support for all aspects of screening and vetting, lead development, and criminal analysis as described below (see Background). It also includes, but is not limited to, conducting data extractions to identify unusual trends, data anomalies, and control breakdowns; identifying possible trends, patterns, and links to automate methods for detecting, monitoring, analyzing, summarizing, and graphically representing patterns of relationships between entities; identifying potentially criminal and fraudulent behavior before crime and fraud can materialize; and detecting and reporting elements of crimes involving the exploitation of the immigration and customs laws of the United States.

The Contractor shall use their own wide range of proprietary, commercial, and public data sources to include other commercial and government database sources to ensure optimal search capability to assist in determining whether criminals and/or entities are violating or attempting to violate U.S. immigration and customs laws or participating in government programs through potentially fraudulent misrepresentation, to run searches to return actionable intelligence, and to deliver comprehensive reports and products in response to requests and requirements.

Availability of the contracted services must be flexibly structured to adapt to changing priorities in the law enforcement continuum. During performance of the requirements identified, it is possible that the anticipated effort could potentially expand to increase the level of effort depending on plans to review and implement a centralized support initiative. This could require the level of effort to be an increase of the anticipated data and analytical services, or it could require scaling of analytical service personnel, such as adding new open-source researchers or increasing/decreasing the number of service personnel assigned.

Global data combined with analytical services is required agency wide. Over the last decade, ICE has used Operations Research Analysts and/or Data Scientists within the following entities to support criminal investigations and law enforcement operations:

· HSI Intelligence, including support to HSI Field Offices, the National Homeland Security Task Force and Protective Intelligence Unit.

· Computer and Operations Technology, including the Innovation Lab and Cyber Crimes Center.

· National Security Investigations Division, including the Student and Exchange Visitor Program.

· Global Trade Investigations, including the National Intellectual Property Rights Coordination Center and the Counter-Proliferation Mission Center.

· Countering Transnational Organized Crime Investigative Division, including the Cross-Border Financial Crimes Center, Document and Benefit Fraud Law Enforcement Unit, Work Site Enforcement Unit, and Undercover Operations Unit.

· HSI International (Support to Foreign Offices and VISA Security Program).

· ERO National Criminal Analysis and Targeting Center.

· ERO Law Enforcement Statistics and Analysis.

· OPR Protective Intelligence.

· OPLA National Security Law Division.

PERIOD OF PERFORMANCE

The period of performance of the BPA will include a twelve (12) month base period, four (4) twelve-month option periods, and one FAR 52.217-8 -- Option to extend services for one (1) six (6) month optional extension period.

The Government reserves the right to modify performance standards and/or metrics during the life of this contract, to ensure that the right outcomes are being assessed and that the performance standards are appropriate. Changes will be made via supplemental agreement within the change's clause.

The Government may terminate the performance of work under this contract in whole or, from time to time, in part if the Contracting Officer determines that a termination is in the Government's interest. The Contracting Officer shall terminate by delivering to the Contractor a Notice of Termination specifying the extent of termination and the effective date.

PLACE OF PERFORMANCE

The contractor shall be required to support investigations, operations, and initiatives throughout the United States.

Operational Footprint. Exact locations will be given upon award.

BACKGROUND

HSI’s Guiding Principles of Data-Driven Support and Innovation and its goal to Optimize Operational Support Functions to Enable Mission Success, are the drivers for this procurement. Technological innovation increases efficiency, decreases operational costs, enhances security, and actively promotes information sharing. Investigative techniques and equipment must be updated and effective in uncovering criminal activity to ensure investigative and intelligence resources operate most efficiently and have the greatest impact possible.

Agents, analysts and support personnel perform three lines of effort that require contract support for data and analytical services: Screening and Vetting, Lead Development, and Criminal Analysis.

· Screening and Vetting involves researching the names of individuals and entities in law enforcement and other databases to determine if they are threats to homeland security.

· Lead Development involves researching and analyzing individuals, entities and suspicious activities to develop and disseminate information (such as alerts, investigative leads and investigative referrals) about possible criminals and criminal activity. The process of developing and disseminating alerts is also known as targeting or tipping and cueing.

· Criminal Analysis is the comprehensive study of criminals and their networks, activities, associations, and impacts.

Every investigative and intelligence group, section, division and program routinely conducts at least one of these lines of effort and therefore would benefit from contract support that specializes in supporting these lines of effort

The need to uncover patterns in data using analytical methods and techniques enables the detection of criminal activities, criminal conspiracies, and criminal networks. Detection increases cooperation in investigations and leads to greater overall support for public safety, increases response rates, and gets results to decision makers much faster. The need to quickly analyze massive amounts of data along with current and developing conditions helps uncover fraud, risk, criminal activity, illicit finance, and terrorism patterns. By using data analysis methodology, law enforcement can analyze, model, and score massive amounts of data which makes it less challenging to capture and act upon critical information that will not only accelerate the criminal investigation process but also help to deploy agents and identify situations likely to escalate crime, fraud, risk, and terrorism acts/incidents, where needed.

The use of data (including access to unique proprietary datasets) combined with analytical services is needed to build on existing efforts to use data analytics to employ techniques like criminal network analysis to identify potential crime and fraud indicators, capture detailed data that would allow the detection of patterns and anomalies that could indicate criminal conspiracy and fraud, and mitigate fraud risks in compliance processes.

Agents and analysts routinely draw upon various government databases to gather and analyze leads regarding violation of immigration status, identify potential security or criminal threats, and ensure full compliance with immigration laws. Data obtained for ICE programs are managed by the DHS Library Program Management Division as part of a DHS efficiency initiative. Although this is a massive collection of resources for homeland security partners, there is still a need for increased access to volumes of data content and information, with appropriate support from skilled researchers/analysts and data scientists to process this data and information.

GENERAL REQUIREMENTS

Our goal is to extract and aggregate data to identify possible trends, patterns, and links to criminal activity. The data and services must present data and content to be analyzed internally by both automation and trained analysts and agents with research support tools. It includes the ability to conduct, process, analyze, and report large volume bulk and batch queries along with a continuous monitoring and alert system that must be able to securely process and return information in a format compatible with agency systems and processes.

A wide range of proprietary, commercial, and public information data sources are required to ensure optimal search capability, run searches to return actionable intelligence, and deliver comprehensive reports in response to requests and requirements. This includes an online data analytics and investigative platform designed to streamline research and analysis and develop actionable insights by providing access to a vast array of public and proprietary data and linking law enforcement data.

Also required are data and analytical services with the ability to access, query, evaluate, process, integrate, analyze, and share the following required types of information and data to support criminal analysts, criminal investigators, and operational personnel utilizing both contractor tools and other government internal/external analysis resources:

· Business information

· Business associations

· Court records and information

· News and media reporting

· Social media (Facebook, X, Tik Tok, etc.) and web, including dark web

· Cyber information

· International trade data

· International travel data

· Transportation information

· Shipping information

· Advertising data and information

· Geolocation information (including license plate reader information)

· Public and proprietary records

· Law enforcement information

· Crime data

· Property records

· Commerce data

· Financial information

· Communications data

· Supply chain information

· Blockchain information

· Cryptocurrency data and information

· Education information

· Scientific research and development

· International patent information

· Other data and information that enables the analysis and investigation of criminals and criminal networks that exploit the customs and immigration laws of the United States.

ICE requires this data, as well as access to data through a team capable of using large scale data analysis platforms, obtaining/collecting from diverse sources, and automating data collection and analysis to present models that can repeat processes to quickly generate accurate predictions, reach goals, and monitor and report consistently. This combined service should develop data engineering models and products that can constantly and consistently leverage data as implemented automated solutions. This team should also be able to integrate effectively with ICE data teams, information systems, and data repositories.

ICE believes that it needs the following personnel to successfully implement this effort but is open to input by industry experts with suggestions on the most effective method for meeting this requirement:

Operations Research Specialists apply mathematical and analytical methods to help solve complex problems and make better decisions. They use techniques from operations research, statistics, and optimization to analyze data and develop models that improve efficiency and effectiveness. Typical responsibilities include:

1. Problem Identification: Identifying and defining problems within an organization that can be addressed using analytical methods.

2. Data Collection: Gathering relevant data from various sources to understand the context of the problem and potential constraints.

3. Model Development: Developing repeatable mathematical models and simulations.

4. Optimization: Applying optimization techniques to find the best possible solutions to problems, considering constraints and objectives.

5. Analysis: Analyzing the results of models and simulations to derive insights and recommendations.

6. Implementation: Working with stakeholders to implement solutions and monitor their effectiveness.

7. Reporting: Preparing detailed reports and presentations to communicate findings and recommendations to decision-makers.

8. Collaboration: Collaborating with cross-functional teams, including engineers, data scientists, and criminal analysts, to ensure solutions are feasible and aligned with organizational goals.

9. Continuous Improvement: Continuously refining models and methods to improve accuracy and effectiveness.

Data Scientists use scientific methods, processes, algorithms, and systems to extract knowledge and insights from structured and unstructured data. They combine expertise in statistics, computer science, and domain knowledge to analyze large datasets and solve complex problems. Key responsibilities include:

1. Data Collection and Cleaning: Gathering data from various sources and ensuring its quality by cleaning and preprocessing it.

2. Data Analysis: Applying statistical techniques and machine learning algorithms to analyze data and uncover patterns, trends, and relationships.

3. Model Building: Developing predictive models and algorithms to solve specific problems or make data-driven decisions.

4. Visualization: Creating visual representations of data findings to communicate insights to stakeholders effectively.

5. Reporting: Preparing detailed reports and presentations to share analysis results and recommendations with decision-makers.

6. Collaboration: Working with cross-functional teams, including business analysts, engineers, and domain experts, to understand requirements and deliver solutions.

7. Continuous Learning: Staying up to date with the latest tools, technologies, and methodologies in data science to improve their skills and the effectiveness of their work.

Data: ICE recognizes that there are companies within this industry that have created proprietary tools to perform the searches described in this requirement. Potential vendors shall provide a data dictionary in proposals outlining the types of data available within their proprietary database. To determine the effectiveness of proposals, we may provide a sample test case to be run within your system. Evaluators sign non-disclosure agreements when reviewing contractor proposals.

The National Security Clearance level could range from CONFIDENTIAL to TOP SECRET with access to Sensitive Compartmented Information.

The contractor shall accomplish the assigned work by employing and utilizing qualified personnel with appropriate combinations of education, training, and experience equivalent to or greater than an undergraduate-level degree in quantitative field(s) (i.e. math, computer science, statistics, etc.). The contractor shall match personnel skills to the work or task assigned. The Contractor will submit contract employee’s resumes to the call COR for the government for review and concurrence of proposed personnel. The Contractor shall provide the necessary resources and infrastructure to manage, perform, and administer the contract.

The Contractor shall be aware that the Government and other contractors are engaged in similar and supporting work, requiring close cooperation. Contractors are expected to form a cohesive team to include the Government and other contractors, by fostering transparency and information sharing for successful task execution.

SPECIFIC REQUIREMENTS

· All personnel assigned to the contract will be U.S. Citizens.

· Access to multiple global content data combined with analytic professionals of which SMEs provide deep web data and global content collection and analysis.

· The Contractor's service will deliver comprehensive data and information in response to requests to validate/verify school, benefit, immigration, or other eligibility requirements.

· The Contractor, the Contractor's affiliates, and the Contractor's third-party agreement providers will allow search and detection capability to address vulnerabilities as a part of an effective criminal and fraud prevention program to verify individual and entity information when conducting initial certification and re-certification reviews.

· The Contractor's services will be provided by SMEs with access to the Contractor's various data sources and analytical tools. This includes an online data analytics and investigative platform designed to streamline research and analysis and develop actionable insights by providing access to a vast array of public and proprietary data and linking law enforcement data.

· The Contractor will deliver comprehensive reports in response to requests and requirements by using a risk-based evaluative approach to reflect evidence of misrepresentation to fraudulently acquire or maintain a method of exploitation of ICE programs.

· Search results directly connected to the target that also contain information related to the target's associates shall be included with all information returned to help visualize data to more efficiently direct investigative resources, and if necessary, take steps to mitigate risk through early warning techniques.

· A continuous monitoring and alert service that provides real-time data to support the identification and location of threats to public safety and/or national security. The continuous monitoring and alert system to track content from the available sources for specified new data and information enhances the mission to proactively scrutinize known or suspected crime, identify and disrupt terrorist criminal enterprises, prevent exploitation of the nation's immigration system and to expand the resource equities within the various law enforcement agencies and intelligence communities. The continuous monitoring and alert service must be able to monitor a million individuals or entities of interest.

· Focus on immigration and customs related investigations and operations relies heavily on linguistic capabilities to help prioritize, translate, and understand in a timely fashion the information to which it has access. Information of this value is often subtle or cryptic, which requires high standards of language proficiency and cultural knowledge. In some cases, international information may require the ability to translate a specific language. For example, HSI requires the capability to transcribe/translate the Mandarin language.

· HSI's Investigative Programs Division (IPD), National Targeting Center (NTC), National Intellectual Property Rights (IPR) Coordination Center, and National Security Investigations Division (NSID) Student Exchange and Visitor Program (SEVP), require immediate enhanced ability to identify, disrupt, and dismantle organizations involved in the exponential growth of internet and global online fraud and crime posing a threat to national security. Particularly, the HSI IPD, and IPR, handle commercial fraud investigations while the NSID SEVP is focused on general school fraud investigations; all these entities recognize that fraud leads to many violations that fall under a larger scheme involving other HSI program areas focused on human smuggling and trafficking, narcotics/drugs, gangs, trade and financial crimes.

· HSI has a law enforcement sensitive requirement to support undercover operations.

· ICE requires support protecting high profile officials, personnel, operations, facilities, and information.

· Requests, reports and products developed by the contractor must be available in a format that can be shared within ICE and released to ICE’s partners.

· ICE requires that the contractor works within the agencies various analytics platforms to expand the agency’s ability to conduct data extractions to identify unusual trends, data anomalies, and control breakdowns. In addition, emphasis will be placed on identifying possible trends, patterns, and links to automate methods for detecting, monitoring, analyzing, summarizing and graphically representing patterns of relationships between entities identifying potentially criminal, threat, and fraudulent behavior before it can materialize. The combination of criminal, security and fraud investigation expertise and technological skills provides an integrated approach to closing immigration and customs related vulnerabilities that could pose substantial risks to homeland and national security (including the diversion of sensitive technology, materials, or information).

· All data products will be presented for review and analysis to agency criminal analysts and/or government leads. Search and detection results directly connected to a target which may contain information related to the target's associates shall be included with all information returned to help visualize data to more efficiently direct investigative resources, and if necessary, take steps to mitigate risk through early warning techniques.

· Contract personnel must be able to access and develop tools and systems for screening and vetting, lead development and criminal analysis including producing network analysis, link analysis, call-chain analysis, supply chain analysis, market models, financial analysis, impact assessments, criminal profiles, crime mapping, geospatial analysis, forensics, and other forms of advanced analysis to identify and address threats to homeland security.

TASKS

ICE requires data, as well as access to data through a data team capable of using large scale data analysis platforms, obtaining/collecting from diverse sources, and automating data collection and analysis in order to present models that can repeat processes to quickly generate accurate predictions, reach goals, and monitor and report consistently. The combination of tools and services will deliver data engineering models and products that can constantly and consistently leverage data as implemented automated solutions.

It is expected that the data sets include SMEs able to provide/perform the expected data access, data processing, and data research and analysis activities. The SMEs are tailored to the client requirements (individual calls) and may include:

OPERATION RESEARCH SPECIALIST (DATA ANALYST) TASKS MIGHT INCLUDE:

· Identify, coordinate, harvest, and expose relevant data sources across multiple domains and classification levels for the purposes of screening and vetting, lead development and criminal analysis to support investigations and operations

· Identify the various problem sets within ICE analytics to identify support gaps

· Gather input and requirements for methodology development, modification, and tailored mission support

· Provide on-site assistance, instruction, and education to ICE personnel including but not limited to utilizing lessons learned, and knowledge from ICE AORs, TTPs, operations and mission priorities to enable and ensure effective use and augmentation of data capabilities

· Collaborate with capability developers to enable customization of features and functionality to meet ICE requirements

· Enable a robust community of users by facilitating sharing of analysis methods and use cases between ICE field personnel, ICE HQ analysts, and interagency partners as applicable

· Foster collaboration among mission partners by establishing a Point of Contact (POC) and coordination point for communities of interest

· Facilitate collaboration and sharing of data and threat information

· Draft agreements and tailor documentation in the form of MOAs, MOUs, Commercial and other agreements to support data ingestion.

· Utilize agency and industry standards to evaluate the validity, accuracy and reliability of a broad array of and high volume of information for translation into intelligence relevant to ICE

· Initiate contact with key personnel, fellow intelligence analysts and experts to validate and ascertain the reliability and urgency of information

· Monitor intelligence trends to anticipate and recommend operations requirements

· Maintain operational relationships with ICE personnel and facilitate a collaborative effort

DATA SCIENTIST SPECIFIC TASKS MAY INCLUDE:

· Coordinate and foster collaborative working relationship between ICE and mission partner personnel on all projects

· Identify, coordinate, harvest, and expose relevant mission-partner data sources across multiple domains and classification levels for ingestion into ICE

· Identify mission-partner priorities and problem sets to identify support gaps

· Gather input and requirements for methodology development, modification, and tailored mission support

· Enable a robust community of users by facilitating sharing of analysis methods and mission IT use cases between partner-site personnel, ICE analysts, and personnel at other partner sites

· Facilitate collaboration and sharing of data, threat information, and intelligence analysis between ICE and the mission partners

· Deploy as needed to support field requirements for training

· Provide increased support for data ingestion and enrichment, data sciences, integration and fusion on demand in response to new and expanding requirements, global events, mission partner requirements, etc.

DELIVERABLES

All deliverables are to be provided electronically via electronic transfer or email regarding the specified due dates in their final format. All deliverables require review and acceptance by the appropriate Government representative (Call COR/ACOR/PM) and there shall be no proprietary formatted documentation. All documentation (deliverables, etc.) developed by the Contractor shall become the sole property of the U.S. Government and can be utilized IAW FAR 52.227-17.

Documentation shall not include brands, logos or other marks identifying ownership or authorship besides the Government. In fulfillment of this contract, the Contractor shall be responsible for maintaining and reporting accurate and current technical and project management reports. Calls may require participation in routinely scheduled status meetings and reviews as agreed in the order. In addition to the delivery descriptions cited below, all deliverables shall also remain consistent with the DHS ICE SLM and MD4300 Security documents. Other deliverables may be identified and added in the event of changing mission requirements or new initiatives and tasks requested by other Government entities and stakeholders.

Supervisory Program Manager/Call Program Managers

The Contractor shall provide a Supervising Program Manager (SPM) who shall be responsible for all Contractor work performed under this SOO. The SPM will be a single point of contact for the Office of Intelligence and manager of this larger contract effort. Costs for this SPM will be included in an individual call for the HSI/Office of Intelligence.

The SPM will be responsible for providing the following Deliverable:

1) A comprehensive report of all monthly invoices provided to Call CORs.

To include a consolidated report submitted to the Office of Intelligence COR with all contract work hours/activities including:

· Name of Individual Contract Employee

· Assigned Call Number

· Dates/Hours Worked (By Call if assigned to multiple.)

2) Individual Call Reports with Monthly Invoices To include the following for each Call with all contract work hours/activities including:

· Name of Individual Contract Employee

· Assigned Call Number

· Dates/Hours Worked in support of the effort

· Additional information may be included in Call SOOs

The Contract may assign individual PMs to calls at the expense of and request of the originating office. Individual calls must have an assigned COR/ACOR and a government technical representative if different from the COR. The name of the PM, and the name(s) of any alternate(s) who shall act for the Contractor in the absence of the PM, shall be provided to the Government as part of the Contractor's proposal. Each individual call is to be billed independently to the attention of the assigned COR. The contract COR assigned to this larger effort is not responsible for managing the administrative activities of individual calls.

The PM/SME shall be available to the call COR/ACOR/Technical Representative via telephone between the hours of 0830 and 1700 local time, Monday through Friday, and shall respond to a request for discussion or resolution of technical problems within 8 hours of notification. Individual Calls may alter this timeframe if their mission requires a more expeditious respond. The PM/SME shall meet with the COR/ACOR/Technical Representative upon request to present deliverables, discuss progress, exchange information and resolve emergent technical problems and issues. These meetings shall take place telephonically or at a location mutually agreed to between the COR/technical representative and PM/SME. Comment by Nelson, Kelsey D: In the TO’s place of performance time zone? Or what time zone?

The PM/SME shall ensure that: (1) the goals and objectives of the project and (2) problem resolution and customer satisfaction are accomplished within prescribed timeframes and funding parameters. Key duties include planning, organizing, directing, and controlling the project to ensure all contractual obligations are fulfilled, quality standards are met, and associated expectations of performance achieved. Other duties include developing schedules, reviewing work discrepancies and managing contractor staff. The PM/SME shall have/maintain a level of classification of Top Secret with eligibility to Sensitive Compartmented Information (SCI).

Project Plan The Contractor shall develop a Project Plan outlining resources, activities, and milestones necessary to accomplish the work specified in each call. Technical activities in the schedule shall be at a level of detail sufficient for the Contractor to manage the task. The Contractor shall amend the Project Plan schedule, whenever a modification to the contract occurs that affects the Project Plan. The Contractor shall provide the final plan within forty-five (45) calendar days after award. The Project Plan shall also include a critical milestone schedule (e.g.: staffing, logistics). The plan shall describe the planning and control system for this program. The plan shall include:

program risks.

Monthly Activity/Status Reports The Contractor may be asked to provide call monthly progress reports to ensure that its expenditure of resources is consistent with and shall lead toward successful completion of all tasks within projected cost and schedule limitations. Each call may include requests for Monthly Activity/Status Reports. These reports may require detailed progress made during the prior month, progress expected during the next month, resources expended, any significant problems or issues encountered, recommended actions to resolve identified problems and any variances from the proposed milestone schedule. The report may include all activities and scheduling updates. Each call will outline the individual requirements of that office.

Project Assignment - Deliverables Ad Hoc, Batch and Data Extraction/Model Reporting The Government will assign contract personnel projects ranging in size and complexity as described throughout their calls. Assigned personnel will work with designated points of contact to understand and document the requirements of the project. Calls may request a variety of data models, data extractions, or other ad hoc data reports pertinent to their requirements. Urgent/Emergency, routine and non-routine queries and reports will be run, as determined and as requested.

Project assignment deliverables may include one or more of the following:

1. MS Power Point, MS Word, MS Excel, graphics or similar reports describing the findings of the data analysis

2. Github README documents and Confluence pages.

3. Web Based user interface dashboards/tools both custom and leveraging tools such as Kibana, available within the ICE environment.

4. Proof that data was loaded into a designated system. This proof would generally be in the form of screen shots but could be provided in other formats.

5. Machine Learning models.

6. Scripts or other code which accomplishes the objective of the project assignment.

The data models should demonstrate and deliver varied levels and ranges for data extraction, data aggregation, and data visualization. It is expected that the data sets include the best leads possible for agents and analysts. The data products should reflect source information, holdings, legal, and access information for the data sets to include, but not limited to: State Identification Numbers; credit history; insurance claims; phone number account information; wireless phone accounts; wire transfer data; property information; payment information; public court records; address data; Individual Taxpayer Identification Number (ITIN) data; and employment records.

The Contractor shall use the Government-provided Product Backlog Repository and defect management tool, currently JIRA, to document and track user story and task progress related to project assignments. Good agile development processes should be adopted, and user stories/tasks should be decomposed at a level where the government can clearly see the progress that is being made on project assignments. As a general a rule, a single Jira user story/task should never contain more than two days of work. If the user story/task is larger than this, it should be split into multiple sub-tasks.

The Contractor shall store and manage all system configuration settings, development code and documentation in the ICE Approved Software Configuration Management (SCM) system, currently GitHub Enterprise.

The Contractor shall document operational tasks and Standard Operating Procedures (SOPs) in an ICE Approved knowledge management portal, currently Confluence.

Table 1. Schedule of Deliverables

Draft Project Management Plan:

The Contractor will prepare and submit a Draft Project Management Plan to document major milestones, review points and delivery dates for the initiative.

-URGENT/EMERGENCY - delivery: no more than 1 day -ROUTINE - delivery: no more than 3 days -NON-ROUTINE - delivery: as established by mutually agreed upon deliverable date(s) with the COR and/or GTM

MEETINGS

Post-Award Orientation Conference The Contractor shall commence work on the first day of the period of performance at the Contractor's facility if personnel are not able to obtain personal identity verification (PIV) and/or security clearance access for the designated site location. The Post Award Orientation Conference shall be coordinated with the Contracting Officer and held no later than 15 days after award. The Contractor shall participate in a post-award conference for the purposes of making introductions, coordinating security requirements, discussing schedules, prioritizing SOO requirements.

SPM, PM/SME, CO, COR/ACOR and Government Task Monitor (GTM) Progress Meetings The CO, COR/ACOR and GTM, as appropriate, will meet periodically or participate in teleconferences to review contract performance, progress, and resolve technical issues. Minutes of the meetings/teleconferences, with action items identified, shall be documented by the Contractor and provided to the COR no later than 72 hours after meeting.

INSPECTION AND ACCEPTANCE

All reports, documentation, and task deliverables shall be reviewed and accepted by the Government. The Call COR/ACOR will monitor compliance and report to the Contracting Officer.

PUBLIC & COMMERCIAL SOURCE SEARCHES AND SEARCH RESULTS

The Contractor shall return to ICE from publicly available and commercial sources available to the Contractor, any information that identifies targets as well as affiliated organizations, entities, and relationships through which fraud and/or threat can be derived. Results will be electronically transferred via encryption and through official ICE email addresses.

Search results directly connected to the target that also contain information related to the target's associates shall be included with all information returned to ICE. Upon exhaustion of initial search information, ICE may request that the Contractor conduct a follow-up search and return of information that includes any publicly available information about the target's associates, such, but not limited to family members, friends, or co-workers, through which a location of the target may be derived.

Publicly Available Sources Only searches of Internet and social media sites and facilities that are open to the general public (open source) in the U.S. and in foreign jurisdictions are permitted. Searches are to include social media profiles on a variety of social media sites, including, but not limited to Facebook, LinkedIn, Twitter, etc. The Contractor shall search only publicly accessible information, including social media profiles.

The Contractor and Contractor personnel must adhere to the following requirements when obtaining information from public sources in fulfillment of their duties under the contract:

1. Obtaining Information from Unrestricted Sources. When conducting searches the Contractor may obtain information from publicly accessible online sources and facilities under the same conditions that they may obtain information from other sources generally open to the public. This principle applies to publicly accessible sources located in foreign jurisdictions as well as those in the United States.

2. Accessing Restricted Sources. When conducting searches, the Contractor may not access restricted online sources or facilities.

3. Obtaining Identifying Information about Users or Networks. The Contractor may not use software, even those generally available as standard operating system software, to circumvent restrictions placed on system users.

4. Public Interaction. The Contractor may access publicly available information only by reviewing posted information and may not interact with the individuals who posted the information.

5. Appropriating Online Identity. "Appropriating online identity" occurs when an entity electronically communicates with others by deliberately assuming the known online identity (such as the username) of a real person, without obtaining that person's consent. The Contractor may not use this technique to access information about individuals.

6. PII Safeguards. The Contractor will protect personally identifiable information (PII) as required by the Privacy Act and DHS privacy policy. Additionally, email must be handled in accordance with FIPS 140-2, NIST SP 800-175B, and DHS 4300A Policy Encryption Standards.

7. International Issues. Unless gathering information from online facilities configured for public access, the Contractor should use reasonable efforts to ascertain whether any pertinent computer system, data, witness, or subject is located in a foreign jurisdiction. Whenever an item or person is located abroad, the Contractor should notify ICE, and ICE law enforcement personnel should follow ICE's policies and procedures for international investigations.

8. Email must be encrypted using end-to-end security. End-to-end security means that the entire message is encrypted from sending device to receiving device. Both devices must use appropriate FIPS 140-2 validated encryption. The contractor agrees to ensure that proper authentication and encryption mechanisms are implemented, so as toto ensure data integrity, confidentiality, and availability.

The Contractor shall not maintain any data, including the list of targets provided by ICE and search results provided to ICE after the analysis is complete, nor shall the Contractor maintain any data on behalf of ICE after the data is no longer in a state of analysis. The Contractor is also not permitted to use any law enforcement information provided by ICE for any outside commercial purpose.

RELEASE OF INFORMATION

Contractor access to proprietary and Privacy Act-protected information is required under the SOO. Contractor employees shall safeguard this information against unauthorized disclosure or dissemination in accordance with the Privacy Act of 1974, and the Handbook for Safeguarding Sensitive Personally Identifiable Information at DHS. Contractor and subcontractors shall not hold any discussions or release any information relating to this contract to anyone not having a direct interest in the performance of this contract, without written consent of the Contracting Officer (CO) and Call Contract Officer's Representation (COR). This restriction applies to all news releases of information to the public, industry or Government agencies, except as follows: Information for actual or potential subcontractors or other individuals necessary for Contractor's performance of this contract. Contractor and subcontractors shall not issue advertisements about projects performed under this task without government review and approval. For the purposes of this paragraph, advertisement is considered to be Contractor-funded promotional brochures, posters, tradeshow handouts, world-wide-web pages, magazines, or any other similar type promotions.

NON-DISCLOSURE

Any information made available to the Contractor by the Government shall be used only for the purpose of carrying out the provisions of these tasks and shall not be divulged or made known in any manner to any persons except as may be necessary in the performance of these tasks. Contractor personnel are required to sign Non-Disclosure statements (DHS Form11000-6).

All information, including documents, workflows, products, training materials, or programs, created in support of ICE, at the request of the ICE management or staff, or generated as a result of this contract, which contain or are derived from U.S. Government proprietary data are the sole property or will become the property of ICE and the U.S. Government.

All material, code or products developed under this contract which do not contain proprietary U.S. Government information are governed by the terms of FAR 52.227-17. Special care and discussion shall be taken surrounding Machine Learning Models which may be developed within this contract as often the algorithm may be subject to FAR 52.227-17 but the trained model would be the sole property of ICE and the U.S. Government if it was trained using U.S. Government proprietary information.

HOURS OF OPERATION

Contractor employees shall generally perform all work on site with the Call holder between…