SoW_NMSS_RevisedPgs.pdf

SoW_Network Management Support Services_DJA-13-AHDQ-R-0035, Page 9 of 18

4.10 Lessons Learned Due 15 calendar days after written notification from the COR

4.11 Technical Instructions Due 15 calendar days after written notification from the COR

4.12 Contingency Plans Due 30 calendar days after written notification from the COR

4.13 Risk Management Plans/Risk

Assessments

Due 30 calendar days after written notification from the COR

4.14 Cell Phone, Blackberry &

Smartphone Support Tasks

Due as needed

4.15 Disaster-Recovery Tasks Due as needed

4.16.1 Meeting Agendas Due 2 business days prior to scheduled meeting, or as assigned by the COR

4.16.2 Meeting Minutes Due within 3 business days after the meeting

4.17.6 Monthly Payables Report Due by the 5th business day of the following month

4.18 Market Research

Documentation

Due as needed, within 5 business days of the COR’s written request

4.19 Quality Control Program Due 60 days after contract award, then 30 days after written notification from the COR

4.20 Transition-In and Transition-Out Due within 9076 days

5.0 Security Requirements

All contractor personnel are subject to an ATF-security background investigation per ATF Clause #ATF-04 (Section H of this contract). Personnel Security Request Forms must be completed by all proposed personnel and submitted to the COR. No Contractor personnel shall be assigned to work unless acceptable access to ATF facilities has been granted. Personnel found unsuitable may not be assigned tasks under this contract. The Contractor shall have access to and be working with information that is sensitive but unclassified, as defined by the Computer Security Act of 1987. Furthermore, the information is subject to the provisions of the Privacy Act (or any other appropriate law that applies to the information to be handled). This information will be treated as confidential information as defined in ATF Clause #ATF-22 (Section H of this contract).

All Contractor personnel shall follow instructions from the COR on the proper disposition, storage, and destruction of materials, both hard copy and electronic, that is deemed sensitive information by ATF. The work shall be performed under the technical direction of the COR after issuance of a modification or a verbal by the CO. Any information obtained as a result of this effort shall be used only for the purpose of accomplishing contract tasks. If ATF wants the contractor to work at the contractor’s site, the contractor’s facility and ADP systems are required to be accredited and certified in accordance with OMB Circular A-130 Appendix III. In addition, the Contractor shall possess a Defense Industrial Security Clearance Office (DISCO) security clearance facility code and a Secret Facility Clearance to fully perform this work. The Contractor must provide proof of maintenance of the Facility Clearance requirement to the CO

SoW_Network Management Support Services_DJA-13-AHDQ-R-0035, Page 10 of 18 prior to the start of this contract. Contact ATF’s ISSO (ATF-ISSO@ATF.gov) for additional information.

Provide all services per relevant ATF Security standards:

a) ATF documented security requirements

i. ATF Chief Information Officer’s (CIO) requirements

ii. ATF HeadQuarters policies and procedures

b) National Institute of Standards and Technology (NIST) Special Publications (SP) — 800

Series and the Federal Information Processing Standards (FIPS)

i. International Standard 15408, Common Criteria for Information

Technology Security Evaluation

c) Homeland Security Presidential Directive 12 (HSPD-12) regarding minimum background checks

d) Federal Information Security Management Act (FISMA)

e) All DOJ security standards, policies, and standard operating procedures

f) All applicable Presidential Executive Orders

g) All applicable Office of Management & Budget (OMB) mandates (circulars and memos)

h) All applicable National Institute of Standards and Technology (NIST) Special Publications

(SP) and Federal Information Processing Standards (FIPS) and Checklists

i) Electronic and Information Technology Accessibility Standards (36 C.F.R. 1194)

j) Telecommunications Management Policy (40 C.F.R. Part 101-35) (Environmental

Protection Agency)

k) Clinger Cohen Act of 1996

l) Computer Fraud and Abuse Act

m) Protecting Sensitive Compartmented Information Within Information Systems

n) Physical Security Standards for Sensitive Compartmented Information Facilities

o) Electronic Communications Privacy Act of 1986

p) Government Paperwork Elimination Act

q) National Security Directive 42, National Policy for the Security of National Security

Telecommunications and Information Systems

r) The National Strategy to Secure Cyberspace (policy vs regulation)

s) HSPD-7, Critical Infrastructure Identification, Prioritization, and Protection

t) National Security Telecommunications and Information System Security Policy (NSTISSP)

No. 11, National Information Assurance Acquisition Policy

u) NSTISSP No. 4009, National Information Systems Security INFOSEC Glossary

6.0 LEVEL OF EFFORT

6.1.1 On-site Task Lead

ATF does not require a full-time on-site PM. However, ATF does require a full-time on-site Task Lead to perform the day-to-day operations and assigned tasks. The on-site lead will also serve as the COR’s primary point-of-contact (POC) for providing contract status, submitting billing documents and deliverables, receiving comments on deliverables, and directing appropriate corrective actions. The On-site Task Lead would be under one of the Key Personnel listed in Section 6.2.3 of this SOW.

mailto:ATF-ISSO@ATF.gov

SoW_Network Management Support Services_DJA-13-AHDQ-R-0035, Page 11 of 18

6.1.2 Technical Writers

ATF requires Technical Writers to perform and deliver on many of the tasks listed above. An example of this is with the security-related documentation and with the weekly status reports.

6.1.3 Administrative Assistant

ATF requires Administrative Assistants to perform and deliver on a few of the tasks listed above. An example of this is with the monthly payable reports.

6.2 Contractor Personnel Assigned to Project

6.2.1 Contractor shall provide a qualified staff of experts proficient in network management, LAN/WAN engineering, data and communications, and voice communication systems.

Specifically, contractor personnel must be skilled in the following areas of technology:

Microsoft Windows administration and networking (all versions used by ATF)

Microsoft Office (all versions used by ATF)

OPNET Suite of Network Management Tools (all current and future version used by ATF)

Transmission Control Protocol/Internet Protocol (TCP/IP) and Simple Network Management Protocol (SNMP)

Cisco hardware and software products

Voice and Data Network Design

Solarwinds management tools

Technical Writing

Cell Phone, Smartphone, iPad and Blackberry Support

6.2.2 All personnel must have a minimum of two (2) years network experience dealing with Cisco-related products with respect to WAN and LAN monitoring, support, and troubleshooting.

6.2.3 In accordance with (IAW) ATF Clause #ATF-31, ‘Key Personnel’, a) the positions specified below are considered to be essential to the work being performed hereunder.

Admin Assistant Network Engineer(s) Program Manager (Part-Time) Telecom Analyst Technical Writer(s)

b) Prior to diverting any of the specified individuals assigned to key personnel positions to other programs, the Contractor shall notify the Contracting Officer within thirty (30) days and shall submit justification (including a proposed substitution) in sufficient detail to permit evaluation of the impact on the program.

c) No diversions shall be made by the Contractor without the written consent of the Contracting Officer. The removal and/or replacement of personnel shall not be effective until the Contracting Officer approves the change in writing.

SoW_Network Management Support Services_DJA-13-AHDQ-R-0035, Page 13 of 18

Control Plan, a Resource and Staffing Plan, a Budget Plan, a Risk Management Plan, and a Communication Plan. Works additionally with the stakeholders with Review Project Methodology and approach to insure success. Furthermore, identifies and selects team members needed to complete project tasks. Participates in the evaluation of new equipment (software/hardware).

Program Manager – Bachelor’s Degree (recommended) with 7-10 years of directly-related work experience.

Telecomm Analyst (for the optional task if needed):

Maintains and works with computer and voice cabling. Works with applicable workstation software and products (especially with voice-related products). Capable of working with UNIX and LINUX system administration and networking (all versions used by ATF) as it is related to voice systems. Has a good knowledge of the Avaya PBX switch administration and the Avaya Integrated Management Suite administration. (ATF’s standard phone suite is with the Avaya product line.)

Technical Writers Analyze technology products and tools to develop a solid comprehension of their use and functionality and to determine how to most effectively convey that information to users.

Consult with teams/business units on product usage, tools and templates, and process design.

Document and depict complex project ideas, business requirements, and business process flows. Organize the professional production of written technical materials and maintain tight quality control over their appearance and timely completion. Propose and facilitate meetings to surface critical documentation needs. Maintain archives of prepared technical documentation.

Technical Writers I – Associate’s Degree (recommended) with 1-3 years directly-related work experience.

Technical Writers II – Bachelor’s Degree (recommended) with 3-5 years of directly-related work experience.

Technical Writers III – Bachelor’s Degree (recommended) with 7-10 years of directly-related work experience.

6.2.3.2 The minimum qualifications for other Personnel that may be proposed are as follows:

IT Analysts Consult with assigned business area on technology issue; identify necessary upgrading of the IT infrastructure to support requirements and ensure production readiness. Gather and analyze data on business requirements; document and communicate these to the Systems Development staff; assist in application development, testing and analysis of the impact to other systems. Apply computer techniques, principles, and precedents to develop, design, modify, install, test, evaluate, or operate network-based data processing systems or facilities.

Maintain, repair, inspect, troubleshoot or program systems equipment or components.

SoW_Network Management Support Services_DJA-13-AHDQ-R-0035, Page 15 of 18

Systems Architects I – Associate’s Degree (recommended) with 1-3 years directly-related work experience.

Systems Architects II – Bachelor’s Degree (recommended) with 3-5 years of directly-related work experience.

Systems Architects III – Bachelor’s Degree (recommended) with 7-10 years of directly-related work experience.

Avaya Voice Help Desk Specialist Must hold current AVAYA certification (See respsective Task Statement for full qualifications).

Avaya System Architect (ASA) Engineer Must hold current AVAYA certification (See respsective Task Statement for full qualifications).

6.2.4 Optional Tasks

The followings task are not required under this contract at this time, but may be added later, via a modification to the contract. Therefore, the contract will be renegotiated at that time.

Once the COR deems this to be a requirement and funding has been identified, the Contractor shall provide a qualified staff of experts skilled in the following areas of technology:

Computer and voice cabling

Applicable workstation software and products

UNIX and LINUX system administration and networking (all versions used by ATF)

AVAYA PBX (private-branch exchange) switch administration

AYAYA Integrated Management Suite administration

Forensics StarLIMS, including supporting software such as Oracle Data Access Components (ODAC), Crystal Reports Viewer and .Net configurations

7.0 Publicly-Available Documents. Contractor shall review the following documents and legislation:

Federal Information Security Management Act of 2002 (Public Law 107-347)

Office of Management and Budget Circular A-130, Appendix III (Security of Federal Automated Information Resources)

NIST Federal Information Processing Standard 200 (Minimum Security Requirements for Federal Information and Information Systems)

NIST Special Publication 800-53 (Recommended Security Controls for Federal Information Systems)

National Information Exchange Model (NIEM)

SoW_Network Management Support Services_DJA-13-AHDQ-R-0035, Page 17 of 18

11.0 Work Hours & Work Space

The Government will provide work space (600 square foot of space, 8 cubicles and 1 networking station), hardware and software necessary to accomplish the tasks. The Contractor shall be on-site at 99 New York Ave., NE in Washington, DC during normal business hours (7:00 a.m. to 6:00 p.m.). However, due to emergencies, critical needs of the ISD, and the nature of the tasks, the Government reserves the right to schedule the Contractor to work outside of those hours and at alternate locations (local and non-local) to accomplish the required tasks. Any work off-site, contractor personnel will be reimbursed for travel as allowed by the FTR. Any overtime (excess of 40 hours/week) must be approved in advance by the COR.

12.0 GOVERNMENT-FURNISHED INFORMATION & EQUIPMENT

12.1 Government-Furnished Information. The COR will provide the following information to the successful contractor upon award:

ATF H 7200.2b ATF Systems Life Cycle (SLC) Handbook

ATF H 7200.1a Enterprise Architecture Configuration Management Handbook

Data Management Handbook (V2.7)

Minimum Database Security Requirements as prescribed by the ATF Information Systems Security Office (ATF ISSO)

Government Order No. ATF O 7250.1, Automated Information Systems (AIS) Security Program

Government Order No. ATF O 7500.4A, Computer Security Incident Response Capability

ATF H 7250.1, Automated Information System Security Program

12.2 Government Furnished Equipment. The Government will provide the following equipment:

Building access and system authority levels to complete the deliverables and services for this SoW.

Appropriate access to all systems that will be affected by this SoW.

Appropriate access to ATF management, staff, data center facilities, and resources identified as essential to complete work activities. This includes appropriate work areas with desks, chairs, telephones, computer, terminal access, system access including remote logon capabilities, as may be required to complete work activities.

Manuals and any required materials for software products associated with the Tasks/Deliverables provided herein.

Test equipment to maintain the systems and infrastructure