DJJ-17-G-APG-0024AMD00001.pdf

(x)

DJJ-17-G-APG-0024

x x copies of the amendment; (b) By acknowledging receipt of this amendment on each copy of the offer submitted ; or (c) By separate letter or telegram which includes a reference to the solicitation and amendment numbers. FAILURE OF YOUR ACKNOWLEDGEMENT TO BE RECEIVED AT

THE PLACE DESIGNATED FOR THE RECEIPT OF OFFERS PRIOR TO THE HOUR AND DATE SPECIFIED MAY RESULT IN REJECTION OF YOUR OFFER. If by virtue of this amendment you desire to change an offer already submitted , such change may be made by telegram or letter, provided each telegram or letter makes reference to the solicitation and this amendment, and is received prior to the opening hour and date specified.

x

WASHINGTON DC 20530

PSS/APG

SUITE 8E.300

145 N STREET, NE

PSS/ACQUISITION PROGRAMS GROUP

U.S. DEPARTMENT OF JUSTICE

05/25/2017000001

13. THIS ITEM ONLY APPLIES TO MODIFICATION OF CONTRACTS/ORDERS. IT MODIFIES THE CONTRACT/ORDER NO. AS DESCRIBED IN ITEM 14.

12. ACCOUNTING AND APPROPRIATION DATA (If required) is not extended.is extended, Items 8 and 15, and returning

Offers must acknowledge receipt of this amendment prior to the hour and date specified in the solicitation or as amended , by one of the following methods: (a) By completing

The above numbered solicitation is amended as set forth in Item 14. The hour and date specified for receipt of Offers

11. THIS ITEM ONLY APPLIES TO AMENDMENTS OF SOLICITATIONS

FACILITY CODE CODE

10B. DATED (SEE ITEM 13)

10A. MODIFICATION OF CONTRACT/ORDER NO.

9B. DATED (SEE ITEM 11)

9A. AMENDMENT OF SOLICITATION NO.

CODE

8. NAME AND ADDRESS OF CONTRACTOR (No., street, county, State and ZIP Code)

7. ADMINISTERED BY (If other than Item 6)CODE 6. ISSUED BY

PAGE OF PAGES

4. REQUISITION/PURCHASE REQ. NO.3. EFFECTIVE DATE2. AMENDMENT/MODIFICATION NO. 5. PROJECT NO. (If applicable)

1. CONTRACT ID CODE

AMENDMENT OF SOLICITATION/MODIFICATION OF CONTRACT

05/25/2017

CHECK ONE A. THIS CHANGE ORDER IS ISSUED PURSUANT TO: (Specify authority) THE CHANGES SET FORTH IN ITEM 14 ARE MADE IN THE CONTRACT

B. THE ABOVE NUMBERED CONTRACT/ORDER IS MODIFIED TO REFLECT THE ADMINISTRATIVE CHANGES (such as changes in paying office, C. THIS SUPPLEMENTAL AGREEMENT IS ENTERED INTO PURSUANT TO AUTHORITY OF:

D. OTHER (Specify type of modification and authority) appropriation date, etc.) SET FORTH IN ITEM 14, PURSUANT TO THE AUTHORITY OF FAR 43.103(b).

E. IMPORTANT: Contractor is not, is required to sign this document and return __________________ copies to the issuing office.

ORDER NO. IN ITEM 10A.

14. DESCRIPTION OF AMENDMENT/MODIFICATION (Organized by UCF section headings, including solicitation/contract subject matter where feasible.)

The purpose of this amendment is response to questions and update the Statement of Work.

The due date for quotes is hereby extended to 9 June 2017. The SOW for the subject RFQ is hereby replaced entirety with the SOW dated 2 June 2017 attached to this amendment.

16A. NAME AND TITLE OF CONTRACTING OFFICER (Type or print)15A. NAME AND TITLE OF SIGNER (Type or print)

15C. DATE SIGNED 16B. UNITED STATES OF AMERICA 15B. CONTRACTOR/OFFEROR 16C. DATE SIGNED

(Signature of person authorized to sign) (Signature of Contracting Officer)

STANDARD FORM 30 (REV. 10-83)

Prescribed by GSA

FAR (48 CFR) 53.243

NSN 7540-01-152-8070

Previous edition unusable

Except as provided herein, all terms and conditions of the document referenced in Item 9 A or 10A, as heretofore changed, remains unchanged and in full force and effect .

DJJ-17-G-APG-0024 QnA 2 June 2017

The following are questions the DOJ has received in respect to the RFQ. The questions have been combined and paraphrased where needed. They are presented in no certain order.

Question A: The Technical Requirements as stated unfairly limit competition by requiring only ANAB or UKAS accreditation. The requirement should be re-written to state “must be accredited by a member of the International Accreditation Forum (IAF) with a scope of membership that includes management system certification.”

Question B: Are any exclusions being taken to ISO 20000-1? If so, state the exclusions.

DOJ’s Response to A and B

Change Technical Requirements (under Scope of Work) to Read:

Technical Requirements:

The Contractor must be accredited by a member of the International Accreditation Forum (IAF) with a scope of membership that includes management system certification. The Contractor’s proposal must include all of the service elements that ISO deems necessary to grant registration and certification to ISO 20000-1:2011. There are no exclusions being taken to ISO 20000-1:2011.

Change Registrar Selection Criteria (under Scope of Work) to Read:

Registrar Selection Criteria: The Contractor (1) must be accredited by a member of the International Accreditation Forum (IAF) with a scope of membership that includes management system certification; (2) must follow ISO/IEC 17021:2006, which are the ISO conformity standards used while conducting the assessment and certification; (3) must have IT experience; (4) must have the potential to also certify DOJ in ISO 27001, 14001, and 22301; and (5) must use auditors having the appropriate Standard Industrial Classification (SIC) code for assessing ISO/IEC 20000-1:2011.

Question C: The language regarding the Stage 2 Assessment on page 22 attempts to dictate when the Stage 2 audit will occur once the Stage 1 is completed. The gap between these two audits is dictated by ISO 17021 and can be no less than 30 days and no more than 6 months from the date the Stage 1 audit has been successfully completed. The following sentence should be removed The Stage Two assessment will occur within 4 weeks of the completion of the Stage One assessment, assuming there are no major nonconformities.

DOJ’s Response to C

Change Stage Two Assessment (under Scope of Work) to Read:

Stage Two Assessment – The Contractor shall assess the OCIO’s conformance with the ISO/IEC 20000-1:2011 requirements using assessors appointed for this purpose. The OCIO has the right to raise an objection to the composition of the audit team.

Question D: Factor 3 of the Evaluation Criteria states “Ability to provide certification audits for future potential engagements to include ISO 27000, 1400, 22301, and 3100.” The standards other than 27000 (which should state ISO 27001) do not exist and should be removed.

DOJ’s Response to D

Change Registrar Selection Criteria (under Scope of Work) to Read:

Registrar Selection Criteria: The Contractor (1) must be accredited by a member of the International Accreditation Forum (IAF) with a scope of membership that includes management system certification; (2) must follow ISO/IEC 17021:2006, which are the ISO conformity standards used while conducting the assessment and certification; (3) must have IT experience; (4) must have the potential to also certify DOJ in ISO 27001, ISO 14001, and ISO 22301; and (5) must use auditors having the appropriate Standard Industrial Classification (SIC) code for assessing

ISO/IEC 20000-1:2011.

Change Factor 3 (under Basis for Award) to Read:

Factor 3: Corporate Past Performance (10%)

• Ability to demonstrate performing as a successful registrar for other federal government agencies

• Ability to participate in customer’s certification award ceremony

• Must be accredited by a member of the International Accreditation

Forum (IAF) with a scope of membership that includes management system certification, to provide assessment and registration services for the OCIO’s ISO 20000-1:2011 certification; identified as a signatory to the International Accreditation Forum (IAF); follows Certification Body requirements of ISO/IEC 17021:2006

• Ability to provide certification audits for future potential engagements to include ISO 27001, 14001, and 22301.

• Ability to demonstrate a reputation for prompt customer service and technical competency

• Ability to award the certificate in a timely manner after the audit is successfully completed

• Ability to provide differentiators from other registrars for corporate performance

Question E: The most critical item missing from the SOW is the quantity of FTE, PTE, and Contracted personnel working within the scope of the IMS excluding vacancies. This total should be stated as a total and broken down by each site.

Question F: State whether any of the employees work on a shift basis (i.e. 7AM-3PM, 3PM- 11PM, etc.).

DOJ’s Response to E and F

Change first paragraph of Scope of Work to Read:

The Contractor, also referred to as the certification body or the registrar in this SOW, will provide assessment, certification, and recertification of the OCIO’s SMS, which covers the OCIO’s service management processes and OCIO offered services. These services include application services, cyber security, data center, enterprise services, and infrastructure services and are delivered and managed from two locations (2CON, Washington, DC and Rockville, MD). The OCIO’s outsource providers include phone companies, cloud providers, and other Federal data centers. The OCIO serves DOJ employees, private industry and citizens, other federal agencies, foreign governments, state, local and tribal organizations, and non-government organizations. The registration Information is ISO/IEC 20000-1:2011 (IT Service Management) and there are no exclusions from the standard. The Federal Acquisition Regulation (FAR) dictates the legal and regulatory information, used for this project. The total number of people working in the OCIO is 628 (218 government employees and 410 contractors).

Approximately 619 work on first shift, five (5) people work on second shift, and four (4) people work on third shift. All employees and contractors at both sites are full time and support all OCIO services and processes. The employee/contractor breakdown by site and shift is as follows:

Rockville, MD (Total 45 FTEs and 82 Contractors):

1st Shift: 44 FTEs and 74 Contractors 2nd Shift: 1 FTE and 4 Contractors 3rd Shift: 4 Contractors

2CON, Washington, DC (Total 173 FTEs and 328 Contractors):

1st Shift: 173 FTEs and 328 Contractors 2nd Shift: 0 FTEs and 0 Contractors 3rd Shift: 0 FTEs and 0 Contractors

Statement of Work

ISO 20000 Certification -

DOJ JMD OCIO 20000 Certification

UNITED STATES DEPARTMENT OF JUSTICE, JMD

SERVICE DELIVERY STAFF

2 June 2017

A. Mission Statement and Background

The Department of Justice (DOJ), Justice Management Division (JMD), Office of the CIO (OCIO) is an information-intensive organization. Consequently, OCIO’s dependence on information technology (IT), information systems, electronic communications, and digital media continues to grow rapidly and is essential to the mission of DOJ, program accomplishment, and service delivery.

The International Standards Organization (ISO) promotes globally recognized standards for various entities, including IT services. ISO/IEC 20000-1:2011 is an IT Service Management System (SMS) standard. It specifies requirements for the service provider to plan, establish, implement, operate, monitor, review, maintain and improve an SMS. The requirements include the design, transition, delivery and improvement of services to fulfill agreed service requirements. ISO/IEC 20000-1:2011 provides a framework that helps establish an integrated approach to identify interlinked processes. Having an integrated approach among service management processes offers greater control, efficiency and provides continual improvement.

As a result, service providers are able to deliver managed services to clients and meet business requirements. ISO/IEC 20000-1:2011 provides IT service management processes that optimize services delivered within agreed resources levels and which best meet customer needs. The goals include:

• Ensure the fulfillment of service requirements agreed upon with service consumers

• All service providers use a consistent approach

• Service provider organizations demonstrate their capability and consistency in the design, development, transition, and delivery of services

• Service provider organizations require continuous service improvement

• Monitor, evaluate and review service management processes and services delivered by service providers

• Auditors conduct audits against the requirements given in ISO/IEC 20000-1:2011

The OCIO is seeking ISO 20000-1:2011 certification to ensure the highest level of support services for the OCIO’s customers, who are DOJ employees, private industry, citizens, federal agencies, foreign governments, state, local and tribal organizations, and non-government organizations. They require and expect exceptional services, ranging from mechanisms that enable real-time reporting of important alerts, to data storage, enterprise collaboration tools, and case management services that support criminal justice around the globe. The OCIO needs to evolve and enable innovative ways for DOJ components to share information and services.

Critical to our success is a strong foundation of governance practices that promote transparency and efficiency

B. Objectives

Acquire services for assessment, certification, and recertification of the OCIO’s Service Management System (SMS) and to achieve certification and be registered as an ISO 20000- 1:2011 certified organization.

C. Scope of Work

The Contractor, also referred to as the certification body or the registrar in this SOW, will provide assessment, certification, and recertification of the OCIO’s SMS, which covers the OCIO’s service management processes and OCIO offered services. These services include application services, cyber security, data center, enterprise services, and infrastructure services and are delivered and managed from two locations (2CON, Washington, DC and Rockville, MD).

The OCIO’s outsource providers include phone companies, cloud providers, and other Federal data centers. The OCIO serves DOJ employees, private industry and citizens, other federal agencies, foreign governments, state, local and tribal organizations, and non-government organizations. The registration Information is ISO/IEC 20000-1:2011 (IT Service Management) and there are no exclusions from the standard. The Federal Acquisition Regulation (FAR) dictates the legal and regulatory information, used for this project. The total number of people working in the OCIO is 628 (218 government employees and 410 contractors). Approximately 619 work on first shift, five (5) people work on second shift, and four (4) people work on third shift. All employees and contractors at both sites are full time and support all OCIO services and processes. The employee/contractor breakdown by site and shift is as follows:

Rockville, MD (Total 45 FTEs and 82 Contractors):

1st Shift: 44 FTEs and 74 Contractors 2nd Shift: 1 FTE and 4 Contractors 3rd Shift: 4 Contractors

2CON, Washington, DC (Total 173 FTEs and 328 Contractors):

1st Shift: 173 FTEs and 328 Contractors 2nd Shift: 0 FTEs and 0 Contractors 3rd Shift: 0 FTEs and 0 Contractors

Technical Requirements:

The Contractor must be accredited by a member of the International Accreditation Forum (IAF) with a scope of membership that includes management system certification. The Contractor’s proposal must include all of the service elements that ISO deems necessary to grant registration and certification to ISO 20000-1:2011. There are no exclusions being taken to ISO 20000- 1:2011.

Services shall be performed within the specified performance period(s) for locations at 2CON (Washington, DC) and JDC-W (Rockville, MD) and will include performing the following:

Start up: In general, the task start-up period is a time for the contractor to acquire qualified auditors, obtain the needed clearances, and provide the necessary plans to lead to success.

Kick-Off Meeting.

Within five (5) business days following award of contract, the contractor shall hold a kick-off meeting, as mutually agreed with the Government Task Manager (GTM), also called the Management Representative. The purpose of the meeting is to ensure a complete understanding and agreement of the requirements by both the Government and the Contractor. Items to be covered in the meeting shall include, as a minimum:

• Introduction of key Contractor and Government personnel performing work under the various tasks in this contract.

• The Contractor shall demonstrate confirmation of their understanding of the work to be accomplished under this contract.

• The Government will validate Government Furnished Equipment (GFE) and Government Furnished Information (GFI) to be provided by the DOJ and/or outgoing contractor(s).

Security Clearances.

If required, security applications for all key personnel and other staff shall be submitted within five (5) business days of contract award.

Registration Audit and Surveillance Audits: The registration audit is the initial audit that makes a certification determination. Once approved, the certificate is valid for three years. The government reserves the right to cancel at any time, and only pay for what is used. After successful registration audit, the registrar returns every year for surveillance audits to validate maintenance of the SMS in accordance with the standard. Costs are typically dependent on the number of audit days required for the registration audit, number of people, number of locations, and travel costs for the auditors, administration fees, and accreditation fees.

Application fees shall be waived. There are two stages for the initial registration audit.

Stage One Assessment - The Contractor shall audit the OCIO’s Service Management System, SMS, using assessors appointed for this purpose. The Stage One assessment will be aimed at establishing OCIO’s readiness for the Stage Two audit by completing a document review and evaluating the level of implementation of the OCIO’s SMS. The Stage One assessment/audit will start within three months after contract award date or an agreed upon date with the government.

Stage Two Assessment – The Contractor shall assess the OCIO’s conformance with the ISO/IEC 20000-1:2011 requirements using assessors appointed for this purpose. The OCIO has the right to raise an objection to the composition of the audit team.

The OCIO will provide access to those parts of the organization, premises and supporting documents covered by the proposed scope of registration, with the exception of classified documents. The OCIO will provide office accommodations for the duration of all assessments/audits. The OCIO Management Representative (or designee) will be present, or available, throughout all assessments/audits and attend the opening and closing meetings. The OCIO will have completed SMS internal audits and management reviews prior to the Stage One audit.

Certificate of Registration: Following acceptance of recommendation for registration, the registrar will forward a Certificate of Registration detailing the OCIO’s scope of registration, the date of registration, validity period and the certificate number. The certificate shall incorporate the appropriate accreditation mark. During the currency of its registration, the DOJ OCIO shall be entitled to advertise that fact and to use the registration or certification mark(s) as appropriate.

Periodic Surveillance/Special Visits/Short Notice Audits: The first surveillance visit shall take place within 12 months after the last day of the Stage Two assessment/audit. The second surveillance visit shall take place within 12 months after the last day of the first surveillance assessment/audit. Subsequent surveillance visits can be undertaken on an annual basis. All annual assessments shall be performed on-site at the OCIO’s facilities.

OCIO Complaints Against the Registrar: The registrar will maintain a documented process for receiving, evaluating, and making decisions on the OCIO’s complaints. The complaints process shall include methods for recording, tracking, validating, investigating, and deciding what actions should be taken in response to the issue. The registrar shall acknowledge receipt of complaints and provide feedback to the complainant on progress and the final outcome.

Appeals: The OCIO may make representation to the Independent Certification Board (ICB) against any decision of the registrar to refuse to grant or withdraw registration.

Registrar Selection Criteria: The Contractor (1) must be accredited by a member of the International Accreditation Forum (IAF) with a scope of membership that includes management system certification; (2) must follow ISO/IEC 17021:2006, which are the ISO conformity standards used while conducting the assessment and certification; (3) must have IT experience;

(4) must have the potential to also certify DOJ in ISO 27001, 14001, and 22301; and (5) must use auditors having the appropriate Standard Industrial Classification (SIC) code for assessing

ISO/IEC 20000-1:2011.

Other Requirements: Prior to the audit, the Contractor will (1) present or provide access to all interpretations of the standard; (2) provide the OCIO with their assessment checklist, to allow the OCIO to conduct a self-assessment; (3) describe how major and minor non-conformances are determined; (4) provide the OCIO information on the areas of the standard in which they find the majority of non-conformances across industry and government; (5) provide bios of the lead and other auditors, i.e. education, experience, companies audited, and references; (6) describe their methodology to change auditors, when needed; (7) provide written examples of observations and non-conformances; and (8) allow the OCIO to approve the auditors that will be assessing the OCIO’s SMS.

D. DELIVERABLES

The contractor must prepare written deliverables using a reporting medium agreed to by the Government Task Manager (GTM). All reports must be delivered to the GTM in digital formats, unless requested otherwise.

The Contractor shall be responsible for, but are not limited to, the deliverables listed below.

The Contractor shall provide these deliverables to the GTM. Upon receipt and review, the GTM will provide feedback on necessary modifications or acceptance.

The Government may add or remove deliverables from this list as requirements and reporting needs change. All deliverables shall be provided in Microsoft Word, Excel, PowerPoint, Microsoft Project, or Visio, unless otherwise specified by the GTM.

The Contractor shall provide assessment/audit and registration services for ISO/IEC 20000- 1:2011 certification as follows:

The first year will include:

• System Assessments – Includes on-site Stage One and Stage Two assessments/audits to review and evaluate system documents and processes to determine if the OCIO’s SMS is sufficiently developed and ready for certification to include all findings and action plans.

• Registration Assessment – Written certification evaluation and decision document for issuance of ISO/IEC 20000-1:2011 certification, written assessment report documenting assessment results and certificates.

The second year will include the first surveillance assessment, which entails on-site assessments/audits of critical components of the OCIO’s SMS and written documents of identified findings.

The third year will include the second surveillance assessment, which entails on-site assessments/audits of critical components of the OCIO’s SMS and written documents of identified findings.

The fourth year will include:

• System Assessments – Includes on-site reassessments/audits to review and evaluate system documents and processes to determine if the OCIO’s SMS is maintained, improved, and ready for recertification, to include all findings and action plans.

• Registration Assessment – Written recertification evaluation and decision document for issuance of ISO/IEC 20000-1:2011 recertification, written assessment report documenting assessment results and certificates.

Reporting Schedule:

The Contractor shall provide registration services to include system assessment and registration for ISO/IEC 20000-1:2011 (IT Service Management) within the first three months of contract award. A draft report of the audit findings will be presented to the government within 24 hours after the audit. The final report will be due to the government within 30 days after the audit.

The Contractor will provide the official certification document, if earned within 30 days of the certification audit.

E. KEY PERSONNEL

The Contractor must provide the name and resume of the Lead Auditor and all accompanying auditors. The Lead Auditor must be present at each of the subsequent audits.

To maintain consistency, the same Lead Auditor must provide services at each audit. No substitutions of the Lead Auditor will be permitted unless such substitutions are approved by the Government or necessitated by an individual’s sudden illness, death or termination of employment. All requests for substitutions must provide a detailed explanation of the circumstances necessitating the proposed substitution, a resume for the proposed Lead Auditor, and any other information requested by the GTM to aid in the process of approving the proposed substitute. Proposed substitutions shall have the same (or better) qualifications and experience as the personnel being replaced.

F. PERIOD OF PERFORMANCE

The term of the task order will include a base period and three option periods as shown in the table below. The start date for the base period will be adjusted to reflect the actual task order effective date.

Task Order Term

Base Period Task Order Effective Date through September 30, 2017

Option Period 1 October 1, 2017 through September 30, 2018

Option Period 2 October 1, 2018 through September 30, 2019

Option Period 3 October 1, 2019 through September 30, 2020

This task order may be extended, at the unilateral option of the Government, upon the same terms and conditions stated herein for a period of one (1) year or fractions thereof. To exercise the option to extend the period of performance, the CO will issue a written modification by the first day of each fiscal year or within thirty (30) calendar days after funds for that fiscal year become available. The Government will endeavor to provide a preliminary written notice of its intent to exercise the option; however, the lack of such a written notice will not in any way lessen the Government's unilateral right to extend the task order pursuant to this clause. If such a preliminary notice is provided, it must not be construed as an exercise of the option nor will it bind the Government to exercise the option.

G. ACCEPTANCE CRITERIA

The Government will continuously evaluate the deliverables and work performed under the task order and the extent to which the contractor meets the objectives and instructions detailed in the SOW. If, at any point, the Government does not believe that the quality of service is in line with the requirements, the Contracting Officer (CO) will notify the Contractor in writing. If the Government determines there is no improvement after the notification, the CO will require the removal of the appropriate personnel and replacement personnel must be provided without a break in service.

Quality Assurance and Quality Control

The Contractor shall ensure that all documented guidelines and operating procedures for quality assurance/control are followed for all areas of performance. The Contractor shall develop and implement additional quality assurance/control procedures as necessary to ensure all work performed is in accordance with standards prescribed in this contract for the duration of the contract, and the Contractor shall stress to its staff the importance of quality control and quality assurance.

Within the specifications of the contract, the guidance of the ISO standards, the accreditation requirements, the guidance of procedures manuals, and the direction of the GTM or GTM designee, Contractor personnel shall perform all activities on their own initiative.

H. REPORTING REQUIREMENTS

The Contractor must coordinate work plans with the GTM, as required by the GTM. The Contractor must bring to the immediate attention of the GTM any specific issues or problems that may affect the delivery of requested products or completion of assigned tasks.

In a timely fashion, the Contractor must provide all reports stipulated in the SOW along with any other reports the Government deems necessary. Issues affecting the performance of the contractor under this SOW must be brought to the immediate attention of the GTM.

I. TRAVEL

All travel by Contractor personnel shall be covered in this firm fixed price contract and not billed separately.

J. GOVERNMENT-FURNISHED ITEMS OR INFORMATION

The Government reserves the right to supply the Contractor with government-furnished equipment (GFE), office facilities/space, office supplies, and materials, determined by the Contracting Officer and the Contracting Officer’s Representative to be necessary and in the best interest of the Government in the performance of this task order. Title to all property furnished by the Government shall vest in the Government. The Government retains the right to add, withdraw, or replace facilities, equipment, and information.

K. PLACE OF PERFORMANCE

The primary place of performance will be at the locations listed below, with the exception for work that is to be done by the Contractor at their remote locations, as required.

Department of Justice 145 N Street NW (2CON) Washington, DC 20530

Department of Justice 1151-D Seven Locks Road (Rockville) Rockville, MD 20854

L. GOVERNMENT TASK MANAGER (GTM)

The GTM for this task order is:

Peggy Younger U.S. Department of Justice

JMD, OCIO, SDS

M. Observance of Legal Holidays/Federal Non-work Days

The Contractor must establish a standard holiday schedule that exactly coincides with the Government’s schedule for employees working on Government site for those employees that are not considered “essential” to 24/7 operations. For those personnel not considered essential, Holidays observed are listed below. Holidays and other non-work days are not billable unless work is requested by the Government and performed on these days. The following is a list of Government holidays:

New Year’s Day Martin Luther King Day Washington’s Birthday Memorial Day Independence Day Labor Day Columbus Day Veterans Day Thanksgiving Day Christmas Day Inauguration Day (every fourth year in Washington DC metro only)

N. SPECIAL PROVISIONS

All technical personnel shall be United States Citizens and meet the DOJ Residency Requirement. The Residency Requirement states that, for three of the five years immediately prior to applying for a position, the individual must have: 1) resided in the United States; 2) worked for the United States overseas in a Federal or military capacity; or 3) be a dependent of a Federal or military employee serving overseas.

This requirement can be waived for short-term (i.e., those employees performing duties for a cumulative total of 14 days or less) if there is a critical need for their specialized or unique skills (for example, interpreters for rare foreign languages). These individuals must be United States citizens or Permanent Resident Aliens. A waiver request from the head of the Component outlining the extenuating circumstances along with the requisite contractor clearance package shall be submitted through the Contracting Officer’s Technical Representative (COTR) to the Department Security Officer (DSO) for approval. Each waiver request will be reviewed by the DSO and a determination made on a case-by-case basis.

Additionally, a contractor employee who is not a U.S. citizen must be from a country allied with the United States. Since the countries on the Allied Countries List are subject to change, the head of the Component shall review the following website for current information:

http://www.opm.gov/employ/html/Citizen.htm.

It is the responsibility of the Contractor to assure that proposed employees for each aspect of this task have met federal investigative standards of a National Agency Check with Local Agency Check and Credit Check (NACLC) and are suitable for employment. Certification of requirements from the Defense Security Service, Defense Industrial Security Clearance Office (DISCO) will be required.

A favorably adjudicated National Agency Check with Local Agency Check and Credit Check (NACLC) or the interim clearance issued by DSS is the minimum investigative level required before being allowed on site.

The Contractor shall not begin performance of substantive work under this task order until a sufficient number of its personnel have presented evidence that they have the required investigation. In the case where the Contractor presents the notice of an interim clearance issued by DSS, the GTM will request permission from the Justice Management Division Security Programs Manager to allow those proposed contractors to begin work on this task.

Data and Property Rights

JMD shall retain all rights and privileges, including those of patent and copyrights to all Government furnished data. The Contractor shall neither retain nor reproduce for private or commercial use any information or other materials furnished or produced under this task order. All property rights, including publication rights, in the information and materials produced by the Contractor in connection with this task order shall belong to JMD.

The contractor shall not embed its company name or logos or claim copyright for any deliverable submitted under this contract. The Contractor agrees not to assert any rights at common law or in equity or establish any claim to statutory copyright in such data. These rights are not exclusive and are in addition to any other rights and remedies to which JMD is otherwise entitled elsewhere in this task order.

Training of Contractor Employees

The contractor shall provide employees with the required core skills to perform their job duties.

Reimbursement for training shall not be authorized for replacement contractor employees.

http://www.opm.gov/employ/html/Citizen.htm.

Pre-Appointment Background Investigations

All contractor positions are low risk and will require favorable adjudication of a Minimum Background Investigation (MBI) precedent to a contractor employee’s initially beginning work for JMD and a National Agency Check with Law and Credit (NACLAC) reinvestigation every five

(5) years thereafter.

O. TYPE OF ORDER

The work under this task order shall be performed under a firm fixed price task order.

P. BASIS FOR AWARD

The selection and final award decision will be made based on a determination by the Contracting Officer as to which quotation represents the “Best Value” to the Government. “Best Value” means the expected outcome of an acquisition that, in the Government’s estimation, provides the greatest overall benefit in response to the requirement.

The “Best Value” determination will include evaluation of the following non-price factors in addition to price:

Factor I: General Technical Approach

• Ability to demonstrate value added audits, versus simply compliance audits

• Ability to provide post certification marketing for the customer

• Ability to provide clear, useful, and accurate draft and final audit reports in a timely manner

• Ability to provide recognition/reporting where customer demonstrates industry best practices

• Ability to provide access to the registrar’s interpretation of the standard

• Ability to demonstrate a reasonable conflict resolution approach to resolve issues between the auditor and the customer

• Ability to demonstrate the registrar’s internal process for qualifying and training auditors, on-going evaluation, local availability, and accessibility

• Ability to provide competent technical services at registrar’s home office, accessible via telephone and/or email.

• Ability to provide any registrar unique prerequisites not required by the standard

• Ability to provide differentiators from other registrars for their technical approach

Factor 2: Qualifications of Proposed Staff

• Ability to demonstrate that proposed auditors have an IT and Service Management System background (provide the resumes of the Lead Auditor and the Audit Team)

• Ability to provide insight into the typical non-conformances received from past audits

• Ability to demonstrate audits focused on operational effectiveness and organizational success

• Ability to demonstrate a reputation for providing a high standard of expertise, support, and flexibility and to provide auditors willing to consider creative approaches to meeting requirements

• Ability to provide a Lead Auditor with seasoned management experience and is familiar with the realities of running a business or government agency

• Ability to provide differentiators from other registrars for providing qualified auditors and providing post certification recommendations/improvements

Factor 3: Corporate Past Performance

• Ability to demonstrate performing as a successful registrar for other federal government agencies

• Ability to participate in customer’s certification award ceremony

• Must be accredited by a member of the International Accreditation Forum (IAF) with a scope of membership that includes management system certification, to provide assessment and registration services for the OCIO’s ISO 20000-1:2011 certification;

identified as a signatory to the International Accreditation Forum (IAF); follows Certification Body requirements of ISO/IEC 17021:2006

• Ability to provide certification audits for future potential engagements to include ISO 27001, 14001, and 22301.

• Ability to demonstrate a reputation for prompt customer service and technical competency

• Ability to award the certificate in a timely manner after the audit is successfully completed

• Ability to provide differentiators from other registrars for corporate performance

Factor 4 Cost:

• Contractor shall provide firm fixed prices with breakdowns to allow the assessment of ALL costs, which include the off-site documentation review, pre-assessment audit, registration audit, accreditation fee, all surveillance audits over the three-year cycle, travel expenses, and any other applicable costs (e.g. application fees, administration fees, document assessment fees, etc.)