FY15_SOW_with_Base_Year_and_Option.20150728.doc

STATEMENT OF WORK

TITLE: Technical Refresh of currently existing IBM QRadar Security Information and Event Management (SIEM) Hardware and Software, including Installation Services.

1.0 BACKGROUND INFORMATION AND OBJECTIVE:

1.1 Background Information— The DOL

OCIO

ECN/DCN

has a requirement to obtain the IBM QRadar SIEM to facilitate Continuous Monitoring of Security Incidents and Events. Due to the fact that the existing SIEM Infrastructure is End-of-Engineering-Life and that it will be End-of-Life/End-of-Service, it has been determined that a Technical Refresh of the IBM QRadar SIEM infrastructure, currently serving OASAM

, OSHA

, OWCP

, would be most advantageous for the DOL OCIO in support of its overall mission and security requirements.

1.2 Technical Objectives— In order to meet mandates of the Trusted Internet Connection initiative, Office of Management and Budget (OMB) Memorandum M-08-05, 08-16, and 08-27 as well as National Institute of Standards and Technology Special Publication 800-53, the United States Department of Labor has a requirement to implement a comprehensive IBM QRadar SIEM solution. This centralized IBM QRadar SIEM tool correlates information from disparate network and Information Technology systems. Business risk is controlled, continuously monitoring actionable data for both Executive Management and Engineering alike.

The IBM QRadar SIEM solution will consist of hardware, software licenses, and professional services. Software updates from IBM take care of the application as well as the operating system on the appliance. Further, the XForce subscription service provides near real time updates for the latest cyber security activity on the Internet at large.

1.3 Period of Performance—The period of performance is to start upon award for a one year term plus, if exercised, an available option period.

2.0 PLACE OF PERFORMANCE:

Department of Labor (DOL)

200 Constitution Avenue, NW

Washington, DC 20210

3.0 REQUIREMENT:

3.1 The contractor shall provide and perform all of the software support including updates.

4.0 SUPPORT SERVICES:

4.1 The Contractor shall provide and maintain the following:

UNITS

BASE YEAR

BASE YEAR Subtotal

OPTION YEAR 1

4.2 The Contractor shall independently perform all work and furnish all labor, materials, supplies, equipment, and services (except as otherwise specified in the contract.)

4.3 All work will be monitored by the Government Project Officer identified in the contract.

4.4 The Contractor shall provide original hardware, not refurbished, at the FPB location, as follows:

4.4.1 One 3128 Console

4.4.2 Two 1628 Event Processors

4.5 Task 1. The Contractor shall provide project coordination and engagement management

4.5.1 Deliverable Materials: Status Reports (to be provided by the deployment consultant) in Microsoft Word format, not password protected

4.6 Task 2. The Contractor shall upgrade the QRadar appliances, perform data migration and perform tuning

4.6.1 Deliverable Materials: Application and Configuration Document in Microsoft Word format, not password protected

4.7 Task 3. The Contractor shall perform post-upgrade services

4.7.1 Deliverable Materials: Lesson’s learned, best practices, standard operations activities in Microsoft Word format, not password protected

4.8 Labor Category Description-- C.1.14--Systems Installation Certified IT Specialist--Skill B:

4.8.1 Functional Description:

Performs site surveys, installs, tests, and validates operational automation and communications equipment/software as specified by installation standards, manufacturer’s guidance, and safety codes.

4.8.2 Minimum Experience:

The Certified IT Specialist (Skill B) has between 5 and 20 years of experience with large, complex systems, providing key leadership in a multi-vendor environment, including, extensive experience with large systems modernization and business practice reengineering.

4.8.3 Minimum Education:

The Certified IT Specialist (B Level) has a bachelor’s Degree in Information Systems, Business Management, or related field. The Certified IT Specialist (B Level) possesses the relevant years of field experience with may be substituted for education.

4.9 Other Direct Costs (ODC’s)

The Contracting Officer shall approve before incurring other direct costs, i.e. incidental services for which there is not a labor category specified in the contract. If advance approval is not obtained by the CO in writing, any request for reimbursement of costs may be denied by the CO. The Contractor's request must include cost estimates information and a justification for the purchase. The Government reserves the right to deny the request based upon the expense of the purchase, lease, or a determination that the purchase/lease is not justified.

4.10 Travel

Limited travel may be required to other DOL regions at the COR’s discretion and with the approval of the CO. T&L are estimated to be 15-18% of labor and will be invoiced as actual. If travel is deemed necessary by the CO/COR, any such approved travel and per diem shall be reimbursed in accordance with the Federal Travel Regulations and FAR 31.205-46. All contractor travel shall be approved in advance by the CO/COR. Advanced notice must be provided for any travel required by the Federal Program Manager.

5.0 Administrative

5.1 Place of Performance

U.S. Department of Labor

Francis Perkins Building

Room N-1301

200 Constitution Avenue, N.W.

Washington, D.C. 20210

5.2 Representative of the Contracting Officer

The following named Contracting Officer’s Representatives (COR) are authorized to act as an official representative of the contracting Officer:

TBD

5.3 Government Project Manager (GPM)

The COR has designated the following senior federal staff as the GPM to oversee, manage, administer, and accept deliverables for this requirement:

TBD

Primary

5.4 Government Recognized Holidays

The contractor is not required to perform services on the following holidays:

New Year’s Day

Martin Luther King Jr.’s Birthday

President’s Day

Memorial Day

Independence Day Labor Day

Columbus Day

Veteran’s Day

Thanksgiving Day

Christmas Day

5.5 Hours of Operation (7:00 am to 7:00 pm local time)

The contractor is responsible for conducting business between the hours of 7:00 a.m. and 7:00 p.m. Local Time, except during Government Recognized Holidays or when the Government facility is closed due to local or national emergencies, administrative closings, or similar Government directed facility closings. The contractor shall not be reimbursed when the government facility is closed for the above reasons. The contractor must, at all times maintain an adequate workforce for the uninterrupted performance of all tasks defined within this Task Order (when the Government facility is not closed for the above reasons). When hiring personnel, the contractor shall keep in mind that the stability and continuity of the workforce are essential.

6.0 Security Requirements:

Contractor staff is required to conform to DOL’s security and privacy requirements as described below.

6.1 The Contractor shall comply with the Computer Security Act of 1987. All products and deliverables developed under this SOW shall comply with DOL Computer Security guidelines and the guidelines contained in OMB Circular A-130. All contract staff working in DOL office space and/or using the DOL LAN/WAN and computer systems to perform duties under this SOW will agree, sign and fully comply with the DOL Rules of behavior for Computer Use and a Non-disclosure Agreement. Contractor staff with systems administrator permission will agree, sign and fully comply with DOL Rules of Behavior for System Administrators and Segregation of Duties. A copy of each signed and witnessed Non-disclosure agreement shall be submitted to the COR prior to the employee performing any work under this contract.

6.2 The Contractor will be responsible for ensuring compliance by its employees with the security regulations of DOL and other Government installations or Contractor facilities where work is performed under this Contract. This includes the safekeeping and display of a Government-provided photo ID badge for employees of the Contractor and any subcontractors while these employees are in federally owned or leased property as described in the Section titled “Place of Performance.” The Contractor will ensure the security of all DOL property, building ID Badges, key cards and standard keys issued to Contractor staff. For employees leaving the project permanently or for an extended period of time, the Contractor will return to the COR all badges, property, key cards, parking placards, and keys the same day the employee leaves the project.

6.3 Background Investigations

6.3.1 The DOL’s Employee Computer Network and Departmental Computer Network data and work environment hare considered sensitive buy unclassified. DOL is required under the Homeland Security Presidential Directive (HSPD) 12 “Policy for a Common Identification Standard for Federal Employees and contractors” to perform a background investigation on all contact staff. The offeror shall complete (at their own expense) and submit the National Agency Check with Inquiries (NACI) results to the contract Officer’s Representative (COR) for review prior to hiring any contract staff. The COR Will make an initial determination based on the NACI results.

6.3.2 Depending on the role and sensitivity, contract staff will undergo a National Agency Check with Inquiries (NACI), Minimum Background Investigation (MBI) or a Background Investigation (BI) which are conducted through the Office of Personnel Management. An investigation will be conducted for all Contractor Staff assigned to this Contract. Contractor staff will be required to provide two forms of acceptable identification as required in Form I-9; Employee Eligibility Verification, and be photographed and finger-printed. Successful clearance is required for an employee to continue working under this contract.

6.3.3 Per the PERSONAL IDENTITY VERIFICATION OF CONTRACTOR PERSONNEL clause of the Federal Acquisition Regulations (FAR 52.204-9), which is incorporated into this contract.

6.4 The Contractor shall comply with agency personal identity verification procedures identified in the contract that implement Homeland Security Presidential Directive-12 (HSPD-12), Office of Management and Budget (OMB) guidance M-05-24, and Federal Information Processing Standards Publication (FIPS PUB) Number 201.

6.5 The Contractor shall insert this clause in all subcontracts when the subcontractor is required to have physical access to a federally-controlled facility or access to a federal information system.

6.6 Privacy

Portions of information disclosed during the performance of this task are protected by the provisions of the Privacy Act of 1974; therefore, all personnel assigned to this Contract are required to take proper precautions to protect the information from disclosure.

6.7 Ownership and Data Rights

All products and deliverables developed under this SOW are the property of the U.S. government and DOL. Further, in accordance with FAR Data Rights clause 52.227-14, Rights in Data—General, incorporated into this contract and applicable to all task orders to be issued under it. DOL receives at least unlimited rights in all data and software as specified in this data right clause.

6.8 Commitment to Protect Sensitive Information

The Contractor shall not copy, release, publish, or disclose sensitive information to unauthorized personnel and shall protect such information in accordance with provisions of the following laws and any other pertinent laws and regulations governing the confidentiality of sensitive information: 18 U.S.C. 641 (Criminal Code: Public Money, Property or Records).

6.9 Required Security Training

All DOL employee and contractors must receive security awareness training prior to being given access to DOL systems and periodically thereafter as required by DOL security policies. Also contract staff will be required to successfully complete Role Based Training.

� DOL—Department of Labor

� OCIO—Office of the Chief Information Officer

� ECN/DCN—Employee Computer Network/Departmental Computer Network

� OASAM—Office Assistant Secretary for Administration and Management

� OSHA—Occupational Safety and Health Administration

� OWCP—Office of Workers’ Compensation Programs

Technical Refresh OF THE IBM QRADAR Security Information and Event Management (SIEM), Hardware, Software, and Installation Services

Statement of Work