SOW Att 01.pdf

Office of the Assistant Secretary for Administration and Management

Information Technology Center

October 30, 2009

Statement of Work

Professional Services for Information Technology Governance

Provide Information Technology services for Department of Labor: Information Technology Center, Office of Systems Development and Integration, to support technology governance and customer development activities.

Please note: This document contains highly sensitive information. Please Do Not Copy Without Written Permission from the Chief Procurement Officer’s Designated

Representative. Questions: Contact William Stevens (202) 693-4582.

ITC-OSDI INFORMATION TECHNOLOGY GOVERNANCE STATEMENT OF WORK

ATTACHMENT 01

October 30, 2009

Introduction

1.1 Program Office and Solicitation Background

The U.S. Department of Labor (DOL), Office of the Assistant Secretary for Administration and Management (OASAM), Information Technology Center (ITC), Office of Systems Development and Integration (OSDI) is seeking experienced professional information technology (IT) services to support its technology governance and customer development activities, across the technology investment and systems development life cycles. These services will be performed onsite at the Department of Labor. The customer for these services will be the ITC, OSDI.

1.2 Contract Type and Duration

This will be an Indefinite Quantity (IQ) contract for a period of 12 months, with four year option periods.

The contract can be extended an additional 6 months as referenced by section 52.217-8 Option to Extend Services (Nov. 1999) as outlined in the FAR.

1.3 Description and Specifications of Work Statement

Information Technology has become a critical enabling resource for providing high quality services to citizens by competent knowledge workers. Demands for technology services continue to increase, as the Department of Labor (DOL) strives to meet its internal strategic goals that allow success in reaching the President’s Management Agenda (PMA). Four essential goals of the DOL Strategic Plan must be met in order to empower America’s workers:

1. A Prepared Workforce – Develop a prepared workforce by providing effective training and support services to new and incumbent workers and supplying high-quality information on the economy and labor market.

2. A Competitive Workforce – Meet the competitive labor demands of the worldwide economy by enhancing the effectiveness and efficiency of the workforce development and regulatory systems that assist workers and employers in meeting the challenges of global competition.

3. Safe and Secure Workplaces – Promote workplaces that are safe, healthful, and fair; guarantee workers receive the wages due them; foster equal opportunity in employment; and protect veterans' employment and reemployment rights.

4. Strengthened Economic Protections - Protect and strengthen worker economic security through effective and efficient provision of unemployment insurance and workers' compensation;

ensuring union transparency; and securing pension and health benefits.

Trends continue to show that the demands for technology savvy workers will grow. The Department through its IT Governance Framework processes which encompasses; Capital Planning and Investment Control and the Federal Enterprise Architecture Programs that have resulted in well organized processes to select, evaluate, and control technology programs that drive the business.

ITC must retool its management processes to attain the level of performance to meet these goals. Five main Information Technology Service Management goals for this Statement of Work (SOW) were established:

October 30, 2009

I. Improved solutions analysis and development

II. Integrated process, project and investment management

III. Efficient customer service, customer tracking, and response procedures

IV. Effective team communications, collaboration, and reporting

V. Integrating business investment and IT services

Excerpts from the President’s report on progress made in attaining the goals set forth in the President’s Management Agenda highlight the importance of this strategic change in the management approach to IT services and processes within ITC. The urgency that lies ahead is captured in the following excerpt from the last report on PMA performance:

The achievements reported established a threshold for success that must be continually met, but also must be surpassed. As the future is embraced, and concrete actions are taken, it is the quality of decisions made today that will produce the anticipated value that is reported below in the PMA report.

To be successful in attaining these goals, OSDI has two major areas of operational responsibility; IT Governance and Business and Solutions Development and Support) that fulfill:

1.3.1 IT Governance:

Governance of the relationships existing between program owners and technology providers, performed within four major service areas:

Enterprise architecture management;

Investment management and capital planning;

System security compliance management; and

Records management and compliance.

1.3.2 Business and Solutions Development:

Software development complying with the strict framework of service and project management; performance as aligned with internal program and project management standards, adherence to accepted professional project and business management standards.

Identify opportunities that are justified, funded by customers, and consistent with the agency’s architectural transition sequencing plan and advance the performance goals for program services.

These efforts require a strong business centered approach to IT projects to gain the benefits described in the program’s business and performance architecture plans.

The software development program will be executed according to Project Management Institute (PMI) project management processes and the DOL Systems Development Life Cycle process, which is the

October 30, 2009 approved DOL project life cycle. Below is a summary of the process framework for each IT investment, including a software development effort.

Figure 1 - DOL Investment Control Life Cycle

The process areas are triggered by financial, security, and scope thresholds. Vendors will need to demonstrate practical application of their experience in use of such a process framework.

The software development process is governed by various regulations and policies including, but not limited to the following:

The Information Technology Management Reform Act of 1996, PL 104-106 (ITMRA/Clinger- Cohen)

The Privacy Act of 1974

The Computer Fraud and Abuse Act of 1986, PL 99-474

The Computer Matching and Privacy Protection Act, PL 101-56

The Electronic Communications Privacy Act of 1986, PL 99-508

The Privacy Act of 1974, PL 93-579, as amended

October 30, 2009

The Freedom of Information Act, PL 93-502

The Federal Managers’ Financial Integrity Act (FMFIA), PL 97-255

The Paperwork Reduction Act of 1995, 35 U.S. Code 44

The Federal Information Security Management Act (FISMA)

The E-Government Act of 2002

Federal Records Act of 1950, Chapter 33 of Title 44

FIPS 200, Minimum Security Requirements for Federal Information and Information Systems

NIST Special Publication 800-53, Revision 2

The opportunities development program will require experience in successfully marketing products and services developed internally to customers within DOL and the Federal market space. Such efforts will comply with goals of the E-Government Act, The President’s Management Agenda, and Presidential Priority Initiatives.

Customers will be government organizations; knowledge and expertise about the application of the reference models of the Federal Enterprise Architecture, is critical.

October 30, 2009

2 Executive Summary

The Information Technology Center (ITC) is continuously improving the delivery of technology services to Office of the Assistant Secretary for Administration and Management (OASAM) customers and beyond. The Office of Systems Development and Integration (OSDI) within ITC is at the forefront of implementing innovative technological advances to implement Federal, DOL, OASAM, and industry best practices, to ensure optimum results at high performance levels. OSDI provides project and records management, application solution, investment, security, and enterprise architecture (EA) management services to OASAM, VETS and other Department of Labor (DOL) customers.

The scope of services under this Statement of Work shall cover:

Managing the full Systems Development Life Cycle Management (SDLCM) process. Account for governance, EA, security, investment planning, and performance reporting responsibilities.

Supporting OSDI business customers’ requirements for the development of technical solutions to satisfy functional needs and processes, while adhering to DOL SDLCM methodology and other best practices (ITIL, PMI, etc).

Oversight and support of all ITC Records management processes for both electronic and paper records in compliance with the Federal Records Act, National Archives Records Administration (NARA) and DOL records management policies and guideline.

Executing Operations and Maintenance (O&M) support for OSDI-owned systems to include:

correcting system defects, addressing user questions (escalated from the help desk), complying with Office of Technical Services (OTS)-driven maintenance initiatives, and implementing security-related enhancements.

Investment and Security Management (ISM) for ITC, Business Operations Center (BOC), Human Resource Center (HRC), and Department Budget Center (DBC); Veterans and Employment Training Service (VETS), and other OASAM offices to ensure development of business cases and additional planning documents consistent with the DOL Governance Framework for IT Investments.

Implement quality assurance standards to ensure compliance with stated requirements and mandated standards and regulations.

Implement mechanisms such as Measurement & Analysis (M&A) Plans to track and report compliance with OASAM, ITC, and OSDI performance goals.

Refine and implement OSDI Business Solutions Development (BSD) processes and templates to execute and enhance O&M activities.

Assess and analyze new methodologies to implement innovative process for DOL applications to streamline user logon experience, minimize the use of privacy data, and minimize OSDI responsibilities to continually enhance applications to maintain proper Security posturing.

Support and operation of the DOL Project Management Office (PMO) for the Departmental HSPD-12 Project.

October 30, 2009

Provide program resources and perform full SDLCM-related support and services, as new initiatives emerge and are identified for funding and implementation.

2.1 ITC Mission

ITC operates the information technology and IT-related investment management programs within OASAM, one of six Centers that deliver the program functions aligned under OASAM, an agency within DOL. In this role, ITC provides technology management and development services to each Center and also beyond OASAM, to small agencies within DOL.

This functional alignment is consistent with DOL IT governance and EA policies and the Federal EA (FEA) framework for lines of business, sub-functions, and services. As such, ITC is organized to deliver without variation, in a consistent, disciplined, and unvaried way all services, with high quality to its customers. OSDI, an office within ITC leading this effort, needs to address gaps in staff resource, in order to further improve quality and performance standards.

2.2 Objectives of the SOW

The objectives of this Statement of Work (SOW) are to specify:

The activities, deliverables, and performance metrics required for project management, applications development, investment, security, records and EA management services delivered to ITC’s customers.

Define the primary organizational user of the services specified within this SOW, i.e. the Office of Systems Development and Integration within ITC.

Identify the compliance standards with, at a minimum, the principles defined in the latest DOL SDLCM Manual, Governance Framework for IT Investments, Computer Security Handbook, and OSDI Standard Operating Procedures (SOPs) and DOL and NARA Records Management policies.

October 30, 2009

3 Tasks

3.1 Investment Management (IM) Support

The contractor shall perform support activities as the central IM point of contact for OASAM Business Centers, Departmental Management Offices and VETS to ensure investments are in compliance with SDLCM, Capital Planning and Investment Control (CPIC), and Quality Assurance processes. CPIC Support to include:

Support CPIC activities and provide guidance to ensure OASAM Business Centers, Departmental Management Offices and VETS are in compliance with the SDLCM for CPIC documents, assessments, data calls, and quarterly control reviews.

Assist with the preparation of budget documentation (i.e., OMB Exhibit 300 and 53 and issue papers).

Review OASAM and VETS IT investment information and associated SDLCM and CPIC documents, to ensure they comply with Federal and Departmental policies, directives, and guidance

Ensure investment information and documents are entered into the Electronic Capital Planning Investment Control (eCPIC) System and maintained as required.

3.2 IT Security Compliance Support

The contractor shall support application security compliance across the 7 phases of the SDLCM process, based on the latest official version of FISMA, NIST SP 800-53 rev x, and the DOL Computer Security Handbook, to proactively manage, monitor, and update all security artifacts for OASAM, its customers, and VETS investments as requested by the OASAM IT Security team, and OCIO Security – for related submissions.

The contractor shall support the performance of reviews and ensure updates are completed for OASAM and VETS systems security documentation to include:

Privacy Impact Assessments (PIA)

FIPS 199 Security Categorization

System Security Plans (SSP)

Risk Assessments (RA)

Contingency Plans (CP) and testing

Security Control Assessments (SCA)

Annual and Quarterly Security Documentation review and testing

Authority to Operate (ATO) certifications and re-certifications

Security Self Assessments (SSA)

Memoranda of Understanding (MOU)

Interconnection Security Agreement(s)

October 30, 2009

On a quarterly basis, conduct reviews and update security documents for all OASAM systems to include:

Plan of Action & Milestones (POA&Ms)

Security Control Test & Evaluation (SCT&E)

Perform ATO re-certifications on expiring OASAM systems.

Coordinate with the VETS agency to perform ATO re-certification of expiring systems.

Support the development and implementation of the security C&A activities to obtain ATO certification for the AMS-1 (Personally Identifiable Information) and AMS-2 (General Support Systems).

Support the development and implementation of artifacts required by FISMA or descendant regulations for entities and systems as directed by the team lead or project officers.

3.3 Records Management Support

The Records Management task will comprise the development, implementation and day-to-day management of the ITC Records Management program, consistent with National Archives and Records Administration requirements.

Ensure compliance with DOL Records Management Policy for the ITC records management program

Develop and maintain ITC Records Management Standard Operating Procedures

Develop a file plan to support implementation of the ITC records management program

Develop and routinely schedule all ITC records

Review and generate reports on records that are slated for disposition within thirty days of the retention life cycle.

Incorporate Records Management into OASAM and VETS projects.

3.4 Enterprise Architecture Management (EA) Support

The EA task involves support for the development, maintenance, and tracking of enterprise architecture plans for OASAM and VETS, in compliance with the Federal Enterprise Architecture standards and the DOL EA program.

Manage the DOL Enterprise Architecture Management System (DEAMS) tool to make certain OASAM and VETS investments are correctly updated.

Perform activities and function as the central point of contact to make certain communications related to EA processes are included in all IT initiatives.

Act as liaison in support of the Federal Team Lead between the Office of the Chief Information Officer (OCIO) Department of Labor Enterprise Architecture Office (DOLEAPO) and the OASAM centers and offices for all EA-related activities.

Perform synthesis of EA information for DEAMS, assessments, reviews and data calls to assist the business and investment owners.

Ensure all of OASAM and VETS investments are compliant with EA requirements

October 30, 2009

Assist business owners with new investments proposals, products and technologies to ensure alignment with the DOL target architectural framework.

Conduct impact assessments and reviews of proposed EA investments, products and technologies.

Provide an architectural roadmap and process specifications for EA.

Assist with the development of OASAM and VETS EA related to the performance, business, service, technical, data, and Records Management, and security processes.

Provide guidance to OASAM and VETS investment owners for the quality improvement of their Investments in relation to the EA and Transition Strategy Planning (TSP) documentation.

Participate on the DOL EASC and ITASC subcommittees.

Promote knowledge sharing of EA to all OASAM and VETS business managers and investment owners, and communicate its importance to the decision making process.

Collaborate with OCIO/DOLEAPO for implementation and use of the DEAMS tool.

Use business productivity tools, such as SharePoint, to improve workflow, content management and reporting of OASAM EA related artifacts.

Provide roadmap for OASAM independent functions to consolidate them into the OASAM Administrative and Management System (AMS).

Provide IT coordination for all HR-LOB initiatives.

3.5 Business and Solutions Development (BSD) – Applications and Project Management

Provide general support for the applications maintained and operated by ITC/OSDI. Support will include Operations and Maintenance (O&M) and Enhancement activities. Execute support in accordance with DOL policy, approval by the Director, OSDI, and direction from the OSDI/BSD Federal Lead.

3.5.1 Operations and Maintenance (O&M) Support:

Provide O&M support to ensure applications continue to perform per their original specifications. This includes addressing issues driven by routine hardware and software upgrades to the ECN/DCN environment under the purview of the Office of Technical Services (OTS), correcting defects reported by users, applying new functionality and/or remediation systems mandated by policy and security guidelines, and the associated testing. O&M also includes support by Project Leads, Business Analysts, and Developers to develop and maintain documentation necessary for IM, EA, Security, and general business data calls.

Other activities shall include:

Coordination and support of the chairing of “steering” committees for high-visibility/high-usage applications (e.g., SIMS FOIA, SHIMS, EPMS, etc.)

Tracking Change Requests for applications and developing “skeleton” documentation for enhancement initiatives (e.g., Scope and Approach, Cost Estimate, Project Plans, etc.)

Support to decommission applications upon transfer of ownership or retirement of functionality

Development of recommended standardized operating procedures, processes, and templates to facilitate refined execution of projects

Provide applications maintenance services for over 30 administrative systems

October 30, 2009

3.5.2 Project Management and Application Enhancement Support:

Recommend and provide solution enhancement support to enable OSDI business customers to further automate and refine business processes, and improve the achievement of operational business objectives.

In addition to project management, code development and database updates, this support also includes producing recommended documentation (i.e., Scope and Approach, Cost Estimates, Project Plans, Application and System Design, Functional Requirements, Test Plan, Test Cases, User Acceptance with sign-offs, etc.), as directed by the OSDI/BSD Federal Lead and in accordance with DOL SDLCM and other industry best practices (i.e. ITIL, PMI, etc).

Each enhancement effort shall be submitted to the OSDI/BSD Federal Team Lead based on regulatory need, priority, and funding and approved by the Director, OSDI. These enhancement efforts are subject to change due to OSDI customer funding adjustments, or reprioritization from the OSDI/BSD Federal Lead.

3.5.3 Provide Support for Governance:

Support DOL Governance Process for all OSDI owned and managed applications in conjunction with the Investment and Security Management (ISM) group. These activities include:

Review, verify and update governance artifacts such as investment/capital planning, security, EA artifacts on a fixed interval (every quarter)

3.5.4 Provide Quality Control Support:

Support Quality Control (QC) to OSDI owned and managed applications. In accordance with SOPs, support BSD QC Group activities to:

Review and validate the Functional Requirements Document (FRD) for all applications, before they are submitted to the Business Owner for their review and approval signature.

Verify that the FRD and Test Plan are within the guidelines of DOL’s SDLCM, and ensure that each FRD is traced to the Test Plan and Test Cases, in the Requirements Traceability Matrix (RTM).

Validate Section 508 Compliance through the performance of a sequence of testing.

Deliverables and Milestone Tasks for this Task are: Assisting and supporting the Federal Project Manager to achieve the following SDLCM deliverables as required by DOL IT Governance by phase:

Life Cycle Phase Deliverables

October 30, 2009

Conceptual Planning

Operational Analysis (OA) Document

Cost Benefit Analysis (CBA) Document

Briefing materials Needed

Enterprise Architecture Transition Strategy Plan (TSP) – supporting the ISM group to update relevant artifacts in the Departmental Enterprise Architecture Modeling System (DEAMS)

Enterprise Architecture Target Enterprise Architecture (TEA) - supporting the ISM group to update artifacts in DEAMS

Planning and Requirements

Functional Requirements Document (FRD)

Budget Documents (i.e. Exhibit 300, etc.), Acquisition Strategy and Plan

Work Breakdown Structure (WBS)

Design Application and Technical Architecture Design Document – in the ECN/DCN environment including integration with Microsoft Active Directory (AD) and DOL Employee Database

Detailed Design Document – see specifications above

Briefing and Meeting materials as needed

Enterprise Architecture Transition Strategy Plan (TSP) – supporting the Investment Security Management (ISM) group to update relevant artifacts in the Departmental Enterprise Architecture Modeling System (DEAMS)

Update Previous Phase Core Deliverables including WBS

Test Test Plans

Requirements Traceability Matrix

Test Cases

Identify Security Controls

Training Plan & Materials (as needed/required by the project)

Update Previous Phase Core Deliverables including WBS

October 30, 2009

Implementation System Source Codes (Application, Desktop, Barcode and Oracle)

Updated System Design Documentation – including system and database characteristics

Briefing and Meeting materials as needed

Structured Walkthrough and end-to-end demonstration of the entire system

Transition Plan

Maintenance Guide Document

Assist in the Train the Trainer as documented in the Training Plan (as needed/required by the project);

Update Previous Phase Core Deliverables including WBS

Post Implémentation Q&A continuous Improvement Support

Recommend, develop and upon approval by the government, implement a Quality Assurance program

Identify and recommend process and quality improvement opportunities

Provide independent QA support to ensure the OSDI Quality Assurance Plan (QAP) is implemented

Conduct Quality Assurance Audits of OASAM systems at a minimum quarterly

3.6 E-Procurement System (EPS) Technical Support

EPS Technical Support will comprise the Tier 2 EPS support. The EPS Tier 1 support is handled through the ITC Help Desk. Issues requiring technical support will be escalated from Tier 1 to Tier 2. The support has the following characteristics:

Support hours are from 8:30 am to 5:30 pm Eastern Standard Time work performance per week.

The EPS System Administrator shall install all service packs to the EPS modules into production, by performing testing of the installed service pack in the development environment and in production after the deployment by OTS.

Test production after deployment to ensure there are no bugs with the installation.

Calls will be received by the ITC Help Desk and logged in the Remedy system (or future help desk system if applicable).

Tickets will be assigned to the E-Procurement technical team by the ITC Help Desk

EPS Tier 2 will update the tickets as appropriate. Those tickets requiring defects to be fixed in the system will remain open until the service pack is deployed to production. Once resolved, the tickets will be assigned back to the ITC Help Desk to interface with the customer.

October 30, 2009

The Tier 1 ITC Help Desk will closeout the issues with the users and marks the tickets appropriately.

Enhancements will be identified as such and reported to the EPS System Owner by the ITC Help Desk / Help Desk Manager.

Develop and test all Service packs for defect fixes.

Package and supply to OTS following normal ITC Change Management procedures. OTS will be responsible for the deployment to production.

Review updates of the Contracting Module provided by the Vendor prior to deployment.

Test and update the Contracting Module and deploy to production.

Test installation instructions and the interface with the Requisition Module, to ensure that the vendor has performed product testing independent of DOL’s custom interface with the Requisition Module.

Perform all System Administration oversight for EPS

Create, update and delete user accounts within EPS

Perform maintenance of EPS user accounts

Conduct semi-annual audit of EPS user list to all EPS

Coordinate and implement all system and software upgrades to EPS per the DOL SDLCM framework

Resolve Tier 2 and Tier 3 EPS helpdesk tickets

Develop and maintain all EPS systems user documentation

Develop and maintain System Administration Standard Operating Procedures (SOP)

Verify annual EPS training records and provide report to stakeholders

3.7 Program Management Office (PMO) Support – Homeland Security Presidential Directive-12 (HSPD-12)

The HSPD-12 PMO leads the Department’s efforts to meet the goals of identity and access management enabling DOL to attain the objectives of this Directive. The PMO will support the following areas:

Support project activities through all project processes and areas

Provide support for administrative activities of the PMO; participate in Steering Committees and Sub Groups as appropriate

Identify and manage documenting and archiving solution technical requirements

Validate that technical requirements at all levels meet the Department’s SDLC standards:

strategic, user, system, sub-system, interface, software, and hardware

Identify and manage technical risk factors, by developing and maintaining the project Risk Management Plan and Risk Register

Support the HSPD-12 Program full systems development life cycle (SDLC) process - accounting for governance, EA, security, investment planning, and performance reporting responsibilities

Support day to day Project Management Office (PMO) activities and ensure quality deliverables from the Integrated Project Team

October 30, 2009

Support organizational change, including supporting organizational analyses and facilitating updates to HR and Security policies / procedures.

Support updates as necessary the HSPD-12 Cost Benefit Analysis / Analysis of Alternatives and Business Case

Support updates of Enterprise Architecture deliverables describing HSPD-12 alignment to DOL’s overall Target EA

Support updates to the HSPD-12 Source Selection and Acquisition Strategy / Plans

Deliverables / Milestones for:

Government requested services and deliverables under this task may include, but are not limited to:

Enterprise Architecture Alignment and Compliance

OMB and NIST Guidance Analyses

Technical Requirements

SOWs and Requests for Proposal (RFP)

SOW and Proposal Technical Evaluation Plans and Criteria

SOW and Proposal Cost Evaluation Plans and Criteria

RFP Q&A Support

Product/Component “Scorecards”

Proposal Evaluation Support Quality Control

System Certification and Accreditation Support/Updates

Meeting Agendas and Minutes

Status Reports

Implementation Plans

Investment planning and performance reporting

3.8 Continuity of Operations and Pandemic flu

The contractor shall provide key personnel to support all essential functions needed to support the ITC and OASAM systems in the event of a disaster or the declaration of a Pandemic Influenza outbreak. The contractor shall provide the government with a list of all key personnel and the specific area of expertise to be supported during such a declaration of disaster. The contractor shall at a minimum perform the following tasks:

3.8.1 COOP Preparation and Planning

Ensure the contingency plans are kept current and tested periodically

Maintain updated procedures for each essential DOL OASAM function

Provide a calling tree of the contractor key personnel staff

Provide and maintain a primary and alternate for all declaration of disasters

Not replace Key Personnel without prior approval of the government

October 30, 2009

4 Scope of Work

4.1 Objective

For both core areas of operational responsibility in the OSDI program, the vendor will be required to develop and apply approved performance measurement standards with metrics, including earned value management. Software metrics are a centerpiece of ensuring that resources are correctly aligned with the ITC business processes. OMB requires projects to remain within 10 percent of overrun thresholds. As such, if ITC and OSDI cannot properly measure performance and use the data to improve future work estimates. Today’s data becomes tomorrow’s historical data for reference and decision making.

The vendor shall integrate their time management process with the ITC project resource management environment, so that resources and effort are aligned with an actual approved project in OSDI or ITC, if such resource support requires work beyond OSDI.

The process will answer some of the following questions:

How much is the software maintenance program costing over reporting periods determined by the government?

What fraction of maintenance is attributed to specific systems?

How much is spent on adaptive, perfective, and corrective maintenance?

To answer these questions, particularly the last, ITC will require recording and tracking in an environment that can be integrated with the ITC project and resource management systems, the hours spent on each of the three activity types above.

The vendor shall ensure that systems and reports aligned with this scope do not create a monopoly position, if and when contract re-compete occurs.

The results will allow government management to set periodic performance standards for quality and efficiency, such as reduction of corrective costs, ergo a reduction in product defects. The vendor’s proposal shall describe how past experience prepares them for this responsibility and how it’s been applied in other engagements.

Product development shall comprise software and business development activities. Both shall use the DOL SDLCM and DOL IT Project Management practices as foundations for realizing high-quality deliverables. The timeframe covered by this scope will be one base and four option years from contract award. Consulting services for this contract will be requested by task order, to be billed and paid by the Department of Labor.

The vendor shall provide Information Technology consulting services to OSDI according to the tasks issued against the awarded contract. Services will span the following IT Project Management process areas: Concept, Planning, Execution, Control, and Closeout.

Tasks will include strategic business planning, enterprise architecture development and management, investment portfolio management, custom software development, project management, and other services consistent with the ITIL Services framework.

October 30, 2009

The contractor and all staff shall follow all DOL Software Development Life Cycle (SDLC) and Security policies and procedures.

The contractor shall provide the personnel and material necessary to fulfill the obligations of this contract as written in the Statement of Work. All contractor staff must be professionally certified within the pertinent lifecycle process area.

4.2 General Program Control Requirements

The vendor shall provide the full range of support required to initiate, plan, execute, control, and closeout a project. This includes activities in the SDLC that enable compliance with the DOL IT governance practice and work processes in the ITC and OSDI.

The vendor shall provide evidence of practical experience in understanding and support of FISMA regulations, within the context of the software development process. The vendor shall demonstrate the capacity to efficiently capture, use, and report performance information as used commonly in industry to assess value creation/loss. All activities shall comply with standards that sustain internal and external scrutiny including those of the Office of the Inspector General.