Draft SOW IT Services.docx

Federal Election Commission Enterprise Architecture Statement of Work IT Services

Description/Specifications/Statement of Work

1.0 Introduction

The Federal Election Commission is an independent regulatory agency charged with administering and enforcing the Federal Election Campaign Act of 1971, as amended. The duties of the FEC are to disclose campaign finance information, to enforce the provisions of the law such as the limits and prohibitions on contributions, and to oversee the public funding of Presidential elections. The Commission enforces limitations and prohibitions on contributions and expenditures, investigates and assesses fines for violations, audits a limited number of campaigns and organizations for compliance, and administers the presidential campaign fund, which provides public funds to candidates for president.

The Commission currently has a contract to augment FEC staff to support 20+ applications/processes. This includes the Searchable Applications used by the Office of the General Counsel, Disclosure Applications and RAD Modules used by the Office of Compliance, Enterprise Content Management and Crystal Reports used by the entire Commission, and DBA and Informatica experience. The applications are a mix of COTS, java and .NET.

2.0 Objectives

The objective of this development effort is to provide support for 20+ applications in addition to ensuring they are up to date with security patches.

FEC conducted a study of its legacy systems (many of the 20+ applications) and developed a cloud migration plan for these legacy applications and systems during 2020. The cloud migration plan includes recommendations of the phased approach of migrating the FEC’s legacy systems (many of the 20+ applications and their disaster recovery environment) to the cloud. The FEC would like the staff augmentation contractor to support FEC migrating its legacy systems to the cloud and to provide the production support in the cloud environment.

3.0 Scope

4.0 Key Positions

Senior C#.Net Developer (Key Position)

Senior Analyst/Senior Database Developer/Java Programmer/Crystal Reports Developer (Key Personnel Position)

Program Manager/Project Manager/Analyst (Key Personnel Position)

RAD Modules Project Manager (Key Personnel Position)

Senior Informatica Programmer (Key Personnel Position)

5.0 Requirements

Enhance, update, develop, and maintain the FEC Disclosure applications: Candidates and political committees in federal elections must meet specific filing and reporting regulations. The Commission's Disclosure database is the repository for campaign finance data and statements of candidacy and committee organization. There is a suite of applications that pulls data from the Commission's Disclosure database. These applications provide Commission staff with tools for Administrative Fines, Compliance Tracking, Data Capture and much more. Technical oversight is performed by the IT Applications Team.

Enhance, update, develop and maintain RAD Modules. There are numerous JIRA tickets open with varying priorities and new ones are added weekly. The COR (Contracting Officer’s Representative) and contractor will work with the users to ensure that the defects are prioritized appropriately, and the contractor will provide start and estimated end dates for the resolution of the tickets. This activity will be covered in weekly status reports and discussed in weekly status meetings. Technical oversight is performed by the IT Applications Team.

Enhance, update, develop and maintain Searchable applications: There are numerous JIRA tickets open with varying priorities and new ones are added weekly. The COR (Contracting Officer’s Representative) and contractor will work with the users to ensure that the defects are prioritized appropriately, and the contractor will provide start and estimated end dates for the resolution of the tickets. This activity will be covered in weekly status reports and discussed in weekly status meetings. Technical oversight is performed by the IT Applications Team.

Provide support for the enterprise applications (ECM and Crystal Reports): This involves responding to any Help Desk incidents and some report development Ensure all applications are up to date with patching. Resolve critical and high security tickets.

Provide support for FEC to migrate its legacy systems to the cloud Provide the production support in the cloud environment.

Update, generate, maintain documentation for existing systems and for new development. The team documents their work. The government does not anticipate a Tech Writer on the contract.

Maintain skill levels: Contractors are responsible for staying abreast of technical components as they evolve.

Thorough software test plans, testing and reporting of same; Technical oversight is performed by the OCIO Applications Branch.

Provide knowledge transfer, technical coaching, and advice to FEC technical staff.

6.0 Resources

Discovery Documents from IT Modernization study

· Disclosure Suite and Data Capture.zip

· Enterprise Applications.zip

· RAD Modules.zip

· Searchable Legal Systems.zip

6.1 Security Requirements

The contractor and its employees must exercise the utmost discretion in regard to all matters relating to their duties and functions. They must not communicate to any person any information known to them by reason of their performance services under this contract which has not been made public, except in the necessary performance of their duties or upon written authorization of the Contracting Officer. All code, documents, and records (including photographs), generated during the performance of work under this contract shall be for the sole use of and become the exclusive property of FEC. Furthermore, no article, book, pamphlet, recording, broadcast, speech, television appearance, film or photograph concerning any aspect of work performed under this contract shall be published or disseminated through any media without the prior written authorization of the Contracting Officer. These obligations do not cease upon the expiration or termination of this contract. The Contractor must include the substance of this provision in all contracts of employment and in all subcontracts hereunder.

The Contractor shall follow the following guidelines while performing under this contract:

· Federal Information Security Modernization Act of 2014 (FISMA) as applicable,

· National Institute of Standards and Technology (NIST) SP 800-14, Generally Accepted Principles and Practices for Securing Information Technology Systems,

· National Institute of Standards and Technology (NIST) SP 800-53, Rev 4, Security and Privacy Controls for Federal Information Systems and Organizations as applicable,

· National Institute of Standards and Technology (NIST) SP 800-44, Guidelines on Securing Public Web Servers,

· National Institute of Standards and Technology (NIST) SP 800-171, Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations,

· OMB Circular A-130, Directive on Information Resources Management, Appendix III, Security of Federal Automated Information Resources,

· Federal Election Commission Information System Security Program Policy 58A as applicable,

· All applicable Federal Election Commission (FEC) OCIO security policies and

· All applicable Federal Election Commission (FEC) Physical Security policies.