Draft Statement of Work CDSW Hadoop Software License and Maintenance.pdf

Statement of Work Data Services Hadoop Refresh and Enhanced Countermeasures

1. Introduction:

The Internal Revenue Service (IRS) Data Services Cyber Security Data Warehouse (CSDW) requires the procurement of HPE Ezmeral (formally known as MapR), Elastic Search, and Ciphertrust software renewal licenses and One Identity Safeguard software maintenance (formally known as Balabit). This acquisition will refresh and expand upon the capability of the environment already in place. The environment’s goal is to implement a multilayered defense architecture which will deliver the IRS Cybersecurity organization the ability to quickly focus energy on detecting and preventing both internal and external cyber threats. In addition, the Hadoop environment will provide the Data Services Warehouse team benefits in reducing time spent preparing data, exploring data, and building analytical models.

2. Background:

The Internal Revenue Service (IRS) has invested significant resources in securing their Information Technology (IT) Infrastructure and protecting its critical data. Part of the infrastructure includes CSDW computing and storage technology that supports log collection and analysis to secure the enterprise and prevent fraudulent activity.

3. Scope of Work:

The vendor shall furnish HPE Ezmeral, Elastic Search, and Ciphertrust software renewal licenses and One Identity Safeguard software maintenance licenses as specified by the Government throughout the contract’s base Period of Performance and any exercised Option periods.

Item# Company Part #

Description Qty

Base Year - 9/28/2024 through 09/27/2025 0001 ElasticSearch

SBF-SN

Elastic Federal Platinum Subscription Brand Name

0002 HPE

R9J51AAE

HPE Ezmeral Data Fab Cvg An Hadoop E- LTU Brand Name

0003 HPE

R9J57AAE

HPE Ezmeral Data Fab Cvg Database E-LTU Brand Name

0004 HPE

R9J60AAE

HPE Ezmeral Data Fab Cvg Ev Stream E-LTU Brand Name 278

0005 HPE

R9J55AAE

HPE Ezmeral Data Fab Cvg SQL Drill E-LTU Brand Name 278

0006 HPE

R9J53AAE

HPE Ezmeral Data Fab Cvg Spark E- LTU Brand Name 278

0007 HPE

R9J62AAE

HPE Ezmeral Data Fab Port OS Plt E- LTU Brand Name 10

0008 One Identity

BPZ-BAL-

PS-247

One Identity Safeguard Privileged Sessions Module Per Host 24x7 Maintenance Renewal Brand Name 100

Item # Company Part #

Option Year 1 - 9/28/2025 through 09/27/2026 0001 ElasticSearch

SBF-SN

Elastic Federal Platinum Subscription Brand Name

0002 HPE

R9J51AAE

R9J57AAE

R9J60AAE

HPE Ezmeral Data Fab Cvg Ev Stream E-LTU Brand Name 278

0005 HPE

R9J55AAE

HPE Ezmeral Data Fab Cvg SQL Drill E- LTU Brand Name 278

0006 HPE

R9J53AAE

HPE Ezmeral Data Fab Cvg Spark E- LTU Brand Name 278

0007 HPE

R9J62AAE

HPE Ezmeral Data Fab Port OS Plt E- LTU Brand Name 10

0008 One Identity

BPZ-BAL-

PS-247

One Identity Safeguard Privileged Sessions Module Per Host 24x7 Maintenance Renewal Brand Name 100

0009 One Identity

BAF-BAL-

PS-247

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7 Maintenance Renewal Brand Name 1

0010 One Identity

BAF-BAL-

PS-247

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7 Maintenance Renewal Brand Name 1

0011 One Identity

BAF-BAL-

PS-247

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7 Maintenance Renewal Brand Name 1

0012 One Identity

BPZ-BAL-

PS-247

One Identity Safeguard Privileged Sessions Module Per Host 24x7 Maintenance Renewal Brand Name 100

0013 One Identity

BPZ-BAL-

PS-247

One Identity Safeguard Privileged Sessions Module Per Host 24x7 Maintenance Renewal Brand Name 100

0014 One Identity

ZAC-BAL-

PS-247

One Identity Safeguard Session Appliance 4000 Bundle 24x7 Maintenance Renewal Pack Brand Name 8

0015 Ciphertrust 976-00001-

001G-PM1

Ciphertrust Flex Connector Bundle, Basic, Perpetual. CTM Connector Plus 1-Year Brand Name 656

0016 Ciphertrust 976-00003-

001G-PM1

Ciphertrust Flex Connector Bundle, Advanced, Perpetual. CTM Connector Plus 1-Year Brand Name 34

0009 One Identity

BAF-BAL-

PS-247

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7 Maintenance Renewal Brand Name 1

0010 One Identity

BAF-BAL-

PS-247

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7 Maintenance Renewal Brand Name 1

0011 One Identity

BAF-BAL-

PS-247

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7 Maintenance Renewal Brand Name 1

0012 One Identity

BPZ-BAL-

PS-247

One Identity Safeguard Privileged Sessions Module Per Host 24x7 Maintenance Renewal Brand Name 100

0013 One Identity

BPZ-BAL-

PS-247

One Identity Safeguard Privileged Sessions Module Per Host 24x7 Maintenance Renewal Brand Name 100

0014 One Identity

ZAC-BAL-

PS-247

One Identity Safeguard Session Appliance 4000 Bundle 24x7 Maintenance Renewal Pack Brand Name 8

0015 Ciphertrust 976-00001-

001G-PM1

Ciphertrust Flex Connector Bundle, Basic, Perpetual. CTM Connector Plus 1-Year Brand Name 656

0016 Ciphertrust 976-00003-

001G-PM1

Ciphertrust Flex Connector Bundle, Advanced, Option Year 2 - 9/28/2026 through 09/27/2027 0001 ElasticSearch

SBF-SN

Elastic Federal Platinum Subscription Brand Name

0002 HPE

R9J51AAE

R9J57AAE

HPE Ezmeral Data Fab Cvg Database E-

R9J60AAE

HPE Ezmeral Data Fab Cvg Ev Stream E-LTU Brand Name 278

0005 HPE

R9J55AAE

HPE Ezmeral Data Fab Cvg SQL Drill E- LTU Brand Name 278

0006 HPE

R9J53AAE

HPE Ezmeral Data Fab Cvg Spark E- LTU Brand Name 278

0007 HPE

R9J62AAE

HPE Ezmeral Data Fab Port OS Plt E- LTU Brand Name 10

0008 One Identity

BPZ-BAL-

PS-247

One Identity Safeguard Privileged Sessions Module Per Host 24x7 Maintenance Renewal Brand Name 100

0009 One Identity

BAF-BAL-

PS-247

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7 Maintenance Renewal Brand Name 1

0010 One Identity

BAF-BAL-

PS-247

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7 Maintenance Renewal Brand Name 1

0011 One Identity

BAF-BAL-

PS-247

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7 Maintenance Renewal Brand Name 1

0012 One Identity

BPZ-BAL-

PS-247

One Identity Safeguard Privileged Sessions Module Per Host 24x7 Maintenance Renewal Brand Name 100

0013 One Identity

BPZ-BAL-

PS-247

One Identity Safeguard Privileged Sessions Module Per Host 24x7 Maintenance Renewal Brand Name 100

0014 One Identity

ZAC-BAL-

PS-247

One Identity Safeguard Session Appliance 4000 Bundle 24x7 Maintenance Renewal Pack Brand Name 8

0015 Ciphertrust 976-00001-

001G-PM1

Ciphertrust Flex Connector Bundle, Basic, Perpetual. CTM Connector Plus 1-Year Brand Name 656

0016 Ciphertrust 976-00003-

001G-PM1

Ciphertrust Flex Connector Bundle, Advanced, Option Year 3 - 9/28/2027 through 09/27/2028 0001 ElasticSearch

SBF-SN

Elastic Federal Platinum Subscription Brand Name

0002 HPE

R9J51AAE

R9J57AAE

R9J60AAE

HPE Ezmeral Data Fab Cvg Ev Stream E-LTU Brand Name 278

0005 HPE

R9J55AAE

HPE Ezmeral Data Fab Cvg SQL Drill E- LTU Brand Name 278

0006 HPE

R9J53AAE

HPE Ezmeral Data Fab Cvg Spark E- LTU Brand Name 278

0007 HPE

R9J62AAE

HPE Ezmeral Data Fab Port OS Plt E- LTU Brand Name 10

0008 One Identity

BPZ-BAL-

PS-247

One Identity Safeguard Privileged Sessions Module Per Host 24x7 Maintenance Renewal Brand Name 100

0009 One Identity

BAF-BAL-

PS-247

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7 Maintenance Renewal Brand Name 1

0010 One Identity BAF-BAL- One Identity Safeguard Privileged Sessions 1

PS-247 Brand Name Module Per Host High Availability 24x7 Maintenance Renewal Brand Name

0011 One Identity

BAF-BAL-

PS-247

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7 Maintenance Renewal Brand Name 1

0012 One Identity

BPZ-BAL-

PS-247

One Identity Safeguard Privileged Sessions Module Per Host 24x7 Maintenance Renewal Brand Name 100

0013 One Identity

BPZ-BAL-

PS-247

One Identity Safeguard Privileged Sessions Module Per Host 24x7 Maintenance Renewal Brand Name 100

0014 One Identity

ZAC-BAL-

PS-247

One Identity Safeguard Session Appliance 4000 Bundle 24x7 Maintenance Renewal Pack Brand Name 8

0015 Ciphertrust 976-00001-

001G-PM1

Ciphertrust Flex Connector Bundle, Basic, Perpetual. CTM Connector Plus 1-Year Brand Name 656

0016 Ciphertrust 976-00003-

001G-PM1

Ciphertrust Flex Connector Bundle, Advanced, Option Year 4 - 9/28/2028 through 09/27/2029 0001 ElasticSearch

SBF-SN

Elastic Federal Platinum Subscription Brand Name

0002 HPE

R9J51AAE

R9J57AAE

HPE Ezmeral Data Fab Cvg Database E-

R9J60AAE

HPE Ezmeral Data Fab Cvg Ev Stream E-LTU Brand Name 278

0005 HPE

R9J55AAE

HPE Ezmeral Data Fab Cvg SQL Drill E- LTU Brand Name 278

0006 HPE

R9J53AAE

HPE Ezmeral Data Fab Cvg Spark E- LTU Brand Name 278

0007 HPE

R9J62AAE

HPE Ezmeral Data Fab Port OS Plt E- LTU Brand Name 10

0008 One Identity

BPZ-BAL-

PS-247

One Identity Safeguard Privileged Sessions Module Per Host 24x7 Maintenance Renewal Brand Name 100

0009 One Identity

BAF-BAL-

PS-247

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7 Maintenance Renewal Brand Name 1

0010 One Identity BAF-BAL-

PS-247

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7 1

Maintenance Renewal Brand Name 0011 One Identity

BAF-BAL-

PS-247

One Identity Safeguard Privileged Sessions Module Per Host High Availability 24x7 Maintenance Renewal Brand Name 1

0012 One Identity

BPZ-BAL-

PS-247

One Identity Safeguard Privileged Sessions Module Per Host 24x7 Maintenance Renewal Brand Name 100

0013 One Identity

BPZ-BAL-

PS-247

One Identity Safeguard Privileged Sessions Module Per Host 24x7 Maintenance Renewal Brand Name 100

0014 One Identity

ZAC-BAL-

PS-247

One Identity Safeguard Session Appliance 4000 Bundle 24x7 Maintenance Renewal Pack Brand Name 8

0015 Ciphertrust 976-00001-

001G-PM1

Ciphertrust Flex Connector Bundle, Basic, Perpetual. CTM Connector Plus 1-Year Brand Name 656

0016 Ciphertrust 976-00003-

001G-PM1

Ciphertrust Flex Connector Bundle, Advanced,

4. Tasks:

Service Level Maintenance Support for the Hadoop (Martinsburg/Memphis):

4.1 The maintenance services shall provide Enhanced Support Coverage on a 24x7x365 basis for software and operating system, technical support, and upgrades for all components of the deployed CSDW Upgrade and shall include the following:

• Telephone and email support centers

• Access to On-line e-support center for web support, online case management, and knowledge base.

• Access to patches, maintenance, and major releases of software updates;

• Shall meet Section 508 standards.

4.2 The Contractor shall provide all software release patches/bug fixes for purchased software covered and maintained under the contract at no additional charge to the IRS other than the Standard annual maintenance fee for the devices. All software releases and patches must be provided with appropriate supporting documentation in electronic or soft format. Maintenance fees will include a technical support option for on-site, phone, and on-line support.

4.3 Access to Government Property and Facilities:

Any required maintenance tasks required to be performed on-site in connection with the Email Gateway solution shall be performed at any of the following locations: Kearneysville, West Virginia and Memphis, Tennessee

The Contractor shall abide by Department of the Treasury Directive (TD P) 15-71 regarding provisions for authorized entrance and exit at these facilities. When visiting a Government facility, the Contractor will be escorted at all times. The Contractor may be subjected to search by Security personnel when visiting a Government facility.

The Contractor shall meet the following requirement for any on-site technical support personnel:

U.S. Citizen or lawful Permanent Resident Alien with at least three or more years of U.S. residency from the date of legal entry into the U.S.

5. Delivery Instructions:

The delivery date for the software is 30 days after the approval of the award. The vendor will provide electronic copies of all software to the following points of contact:.

IRS ECC-MEM

ATTN: Darryl Hudson, MOD K CSIRC West Eric Smith, MOD K CSIRC West 5333 Getwell Road Memphis, TN 38118

Late Deliverables:

Notice of Late Delivery: In the event the contractor anticipates difficulty in complying with the contract delivery schedule, the contractor shall immediately provide written notice to the CO and the COR. For any task order level deliverable, the contractor shall provide written notification immediately to the COR, with a copy to the CO. Each notification shall give pertinent details, including the date by which the contractor expects to make delivery; provided, that this data shall be informational only in character and that receipt thereof shall not be construed as a waiver by the Government of any contract delivery schedule, or any rights or remedies provided by law or under this contract.

6. Place of Performance:

5333 Getwell Road Memphis, TN 38118

250 Murall Drive Keanrneysville, WV 25430-5200

7. Period of Performance:

The period of performance for the base year will be 09/28/2024 - 09/27/2025 with options as follows:

Option Period 1: 09/28/2025 - 09/27/2026 Option Period 2: 09/28/2026 - 09/27/2027 Option Period 3: 09/28/2027 - 09/27/2028 Option Period 4: 09/28/2028 - 09/27/2029

9. Government Furnished Property Access to Government property does not apply.

9.1 Government Furnished Information

Access to Government information does not apply.

10. Contract Administration Data

The Contracting Officer for this requirement is:

Internal Revenue Service Office of Procurement

Name: JW Terry Voice: 937-610-2123 Email: JW.R.Terry@irs.gov

Contract Specialist for this requirement is:

Internal Revenue Service Office of Procurement

Name: Vanessa Rodgers Voice: 904-661-3559 Email: Vanessa Rodgers@irs.gov

Contracting Officer’s Representative (COR) Point of Contact The COR Point of Contact for this order is listed below:

Internal Revenue Service Data Services Cyber Security Data Warehouse Name: Juan Acosta Phone: 240-412-5997 Email: juan.a.acosta@irs.gov

11. Technical Points of Contact:

Name: Darryl Hudson 5333 Getwell Road Memphis, TN 38118 Email: Darryl.S.Hudson@irs.gov

12. Section 508 Compliance

IR1052.239-9000 Section 508 Information, Documentation and Support (DEC 2019)

In accordance with 36 CFR, Appendix C to Part 1194, the information and communication technology (ICT) (ICT) products and product support services documentation furnished in performance of this contract shall be provided at no additional cost. The contractor shall provide information, documentation, and support relative to the supplies and services as described in the statement of work, performance work statement or statement of objectives (select one).

The following technical standards and provisions have been determined to be applicable to this contract:

_X__ Chapter 6: Support Documentation and Services

_X__ 601 General mailto:juan.a.acosta@irs.gov mailto:Darryl.S.Hudson@irs.gov https://www.access-board.gov/ict/ https://www.access-board.gov/ict/ https://www.section508.gov/buy/inventory-your-ict/

_X__ 601.1

_X__ 602 Support Documentation

_X__ 602.1 _X__ 602.2 _X__ 602.3 _X__ 602.4

_X__ 603 Support Services

_X__ 603.1 _X__ 603.2 _X__ 603.3

(End of clause)

IR1052.239-9001 Section 508 Conformance (NOV 2020)

Each information and communication technology (ICT) product and/or product related service delivered under the terms of this contract, at a minimum, shall conform to the applicable accessibility standards at 36 CFR, Appendix C to Part 1194 at the level of conformance as specified in the Attachment entitled, “(Voluntary Product Accessibility Template (VPAT)”

The following technical standards have been determined to be applicable to this contract:

_X__ Chapter 4: Hardware

_X__ 401 General

_X__ 401.1

_X__ 402 Closed Functionality

_X__ 402.1 __X_ 402.2(1-6) __X_ 402.3 _X__ 402.4 _X__ 402.5

___ 403 Biometrics

___ 403.1

___ 404 Preservation of Information Provided for Accessibility

___ 404.1

___ 405 Privacy

___ 405.1

_X__ 406 Standard Connections

_X__ 406.1

_X__ 407 Operable Parts

_X__ 407.1 _X__ 407.2 _X__ 407.3 _X__ 407.4 X___ 407.5 _X__ 407.6 _X__ 407.7 _X__ 407.8

_X__ 408 Display Screens

_X__ 408.1 _X__ 408.2 _X__ 408.3

_X__ 409 Status Indictors

_X__ 409.1

_X__ 410 Color Coding

_X__ 410.1

___ 411 Audible Signals

___ 411.1

___ 412 ICT with Two-Way Communication

___ 412.1 ___ 412.2 ___ 412.3 ___ 412.4 ___ 412.5 ___ 412.6 ___ 412.7 ___412.8

___ 413 Closed Caption Processing Technologies

___ 413.1

___ 414 Audio Description Processing Technologies

___ 414.1

___ 415 User Controls for Captions and Audio Descriptions

___ 415.1

_X__ Chapter 5: Software

_X__ 501 General

_X__ 501.1

_X__ 502 Interoperability with Assistive Technology

_X__ 502.1 _X__ 502.2 _X__ 502.3 _X__ 502.4(A-G)

_X__ 503 Applications

_X__ 503.1 _X__ 503.2 _X__ 503.3 _X__ 503.4

_X__ 504 Authoring Tools

_X__ 504.1 _X__ 504.2 _X__ 504.3 _X__ 504.4

_X__ Chapter 7: Referenced Standards

_X__ 701 General

_X__ 701.1

_X__ 702 Incorporation by Reference

_X__ 702.1 ___ 702.2 _X__ 702.3 _X__ 702.4 ___ 702.5 _X__ 702.6 ___ 702.7 ___ 702.8 ___

702.9 _X__ 702.10

The standards do not require the installation of specific accessibility-related software or the attachment of an assistive technology device, but merely require that the ICT be compatible with such software and devices so that it can be made accessible if so required by the agency in the future.

The following functional performance criteria (36 CFR Chapter 3) apply to this contract.

_X__ Chapter 3: Functional Performance Criteria

_X__ 301 General

_X__ 301.1

_X__ 302 Functional Performance Criteria

_X__ 302.1 _X__ 302.2 _X__ 302.3 _X__ 302.4 _X__ 302.5 _X__ 302.6 _X__ 302.7 _X__ 302.8 _X__ 302.9

(End of clause)

IR1052.239.9002 Section 508 Services (JUN 2022)

All contracts, solicitations, purchase orders, delivery orders and interagency agreements that contain a requirement of services which will result in the delivery of a new or updated information and communication technology(ICT) item/product must conform to the applicable provisions of the appropriate technical standards in 36 CFR, Appendix C to Part 1194, and functional performance criteria in 36 CFR Chapter 3, unless an agency exception to this requirement exists at FAR 39.204 Exceptions.

The following technical standards and provisions have been determined to be applicable to this contract:

_X__ Chapter 4: Hardware

_X__ 401 General

_X__ 401.1

_X__ 402 Closed Functionality

_X__ 402.1 _X__ 402.2(1-6) _X__ 402.3 X___ 402.4 _X__ 402.5

___ 403 Biometrics

___ 403.1

___ 404 Preservation of Information Provided for Accessibility

___ 404.1

___ 405 Privacy

___ 405.1

_X__ 406 Standard Connections

_X__ 406.1

_X__ 407 Operable Parts https://www.access-board.gov/ict/ https://www.access-board.gov/ict/ https://acquisition.gov/far/part-39#far_subpart_39_2 https://acquisition.gov/far/part-39#far_subpart_39_2

_X__ 407.1 _X__ 407.2 _X__ 407.3 _X__ 407.4 _X__ 407.5 _X__ 407.6 __X_ 407.7 _X__ 407.8

_X__ 408 Display Screens

_X__ 408.1 _X__ 408.2 _X__ 408.3

_X__ 409 Status Indictors

_X__ 409.1

_X__ 410 Color Coding

_X__ 410.1

_X__ 411 Audible Signals

_X__ 411.1

___ 412 ICT with Two-Way Communication

___ 412.1 ___ 412.2 ___ 412.3 ___ 412.4 ___ 412.5 ___ 412.6 ___ 412.7 ___412.8

___ 413 Closed Caption Processing Technologies

___ 413.1

___ 414 Audio Description Processing Technologies

___ 414.1

___ 415 User Controls for Captions and Audio Descriptions

___ 415.1

_X__ Chapter 5: Software

_X__ 501 General

_X__ 501.1

_X__ 502 Interoperability with Assistive Technology

_X__ 502.1 _X__ 502.2 _X__ 502.3 _X__ 502.4(A-G)

_X__ 503 Applications

_X__ 503.1 _X__ 503.2 _X__ 503.3 _X__ 503.4

_X__ 504 Authoring Tools

_X__ 504.1 _X__ 504.2 _X__ 504.3 _X__ 504.4

_X__ Chapter 7: Referenced Standards

_X__ 701 General

_X__ 701.1

_X__ 702 Incorporation by Reference

_X__ 702.1 ___ 702.2 _X__ 702.3 _X__ 702.4 ___ 702.5 ___ 702.6 ___ 702.7 ___ 702.8 ___

702.9 _X__ 702.10

The standards do not require the installation of specific accessibility-related software or the attachment of an assistive technology device, but merely require that the ICT be compatible with such software and devices so that it can be made accessible if so required by the agency in the future.

The following functional performance criteria (36 CFR Chapter 3) apply to this contract.

_X__ Chapter 3: Functional Performance Criteria

_X__ 301 General

_X__ 301.1

_X__ 302 Functional Performance Criteria

_X__ 302.1 _X__ 302.2 _X__ 302.3 _X__ 302.4 _X__ 302.5 _X__ 302.6 _X__ 302.7 _X__ 302.8 _X__ 302.9

(End of clause)

Statement of Work