Solicitation DTRT-57-10-R-20008.pdf

DTRT57-10-R-20008

SOLICITATION, OFFER AND AWARD

4. TYPE OF SOLICITATION2. CONTRACT NUMBER 3. SOLICITATION NUMBER

7. ISSUED BY CODE 8. ADDRESS OFFER TO (If other than Item 7)

ORDER UNDER DPAS (15 CFR 700)

6. REQUISITION/PURCHASE NUMBER

NOTE: In sealed bid solicitations "offer" and "offeror" mean "bid" and "bidder".

NEGOTIATED (RFP)

SEALED BID (IFB)

5. DATE ISSUED

1. THIS CONTRACT IS A RATED RATING PAGE OF PAGES

1 135

C. E-MAIL ADDRESS

EXT.NUMBERAREA CODE

B. TELEPHONE (NO COLLECT CALLS)A. NAME

10. FOR

INFORMATION

CALL:

CAUTION: LATE Submissions, Modifications, and Withdrawals: See Section L, Provision No. 52.214-7 or 52.215-1. All offers are subject to all terms and conditions contained in this solicitation.

(Date)(Hour) local timeuntildepository located in copies for furnishing the supplies or services in the Schedule will be received at the place specified in Item 8, or if hand carried, in the

SOLICITATION

9. Sealed offers in original and

PART IV - REPRESENTATIONS AND INSTRUCTIONS

OTHER STATEMENTS OF OFFERORS

EVALUATION FACTORS FOR AWARD

INSTRS., CONDS., AND NOTICES TO OFFERORS

REPRESENTATIONS, CERTIFICATIONS AND

LIST OF ATTACHMENTS

CONTRACT CLAUSES

PART III - LIST OF DOCUMENTS, EXHIBITS AND OTHER ATTACH.

I

J

K

L

M SPECIAL CONTRACT REQUIREMENTS

CONTRACT ADMINISTRATION DATA

DELIVERIES OR PERFORMANCE

INSPECTION AND ACCEPTANCE

PACKAGING AND MARKING

DESCRIPTION/SPECS./WORK STATEMENT

SUPPLIES OR SERVICES AND PRICES/COSTS

SOLICITATION/CONTRACT FORM

PART II - CONTRACT CLAUSESPART I - THE SCHEDULE

H

G

F

E

D

C

B

A

SEC. DESCRIPTION PAGE(S) (X) DESCRIPTION SEC. (X)

11. TABLE OF CONTENTS

18. OFFER DATE17. SIGNATURE

SUCH ADDRESS IN SCHEDULE.

IS DIFFERENT FROM ABOVE - ENTER

15C. CHECK IF REMITTANCE ADDRESS

EXT.NUMBERAREA CODE

15B. TELEPHONE NUMBER

(Type or print)AND

ADDRESS

OF

OFFEROR

CODE FACILITY

16. NAME AND TITLE OF PERSON AUTHORIZED TO SIGN OFFER15A. NAME

DATEAMENDMENT NO.DATEAMENDMENT NO.

and related documents numbered and dated):

amendments to the SOLICITATION for offerors

(The offeror acknowledges receipt of

14. ACKNOWLEDGEMENT OF AMENDMENTS

CALENDAR DAYS (%)30 CALENDAR DAYS (%)20 CALENDAR DAYS (%)10 CALENDAR DAYS (%)

(See Section I, Clause No. 52.232.8)

13. DISCOUNT FOR PROMPT PAYMENT

designated point(s), within the time specified in the schedule.

by the offeror) from the date for receipt of offers specified above, to furnish any or all items upon which prices are offered at the price set opposite each item, delivered at the

12. In compliance with the above, the undersigned agrees, if this offer is accepted within ______________ calendar days (60 calendar days unless a different period is inserted

NOTE: Item 12 does not apply if the solicitation includes the provisions at 52.214-16, Minimum Bid Acceptance Period.

OFFER (Must be fully completed by offeror)

IMPORTANT - Award will be made on this Form, or on Standard Form 26, or by other authorized official written notice.

28. AWARD DATE

(Signature of Contracting Officer)

27. UNITED STATES OF AMERICA

25. PAYMENT WILL BE MADE BY

26. NAME OF CONTRACTING OFFICER (Type or print)

CODE 24. ADMINISTERED BY (If other than Item 7)

ITEM

(4 copies unless otherwise specified)

23. SUBMIT INVOICES TO ADDRESS SHOWN IN

41 U.S.C. 253 (c) ( 10 U.S.C. 2304 (c) (

22. AUTHORITY FOR USING OTHER THAN FULL AND OPEN COMPETITION:

21. ACCOUNTING AND APPROPRIATION20. AMOUNT19. ACCEPTED AS TO ITEMS NUMBERED

AWARD (To be completed by government)

CODE

DTRT-RVP-33-101702/12/2010

X

RVP-32

USDOT/RITA/Volpe Center Contracts & Tech Support Services 55 Broadway RVP-32 Cambridge MA 02142-1001

SEE BLOCK #7 1500 ET 04/14/2010

Robert P Robinson 617 robert.robinson@dot.gov

494-3433

X

X

X

X

X

X

X

X

X

X

X

X

X

PAGE(S)

Robert P. Robinson

AUTHORIZED FOR LOCAL REPRODUCTION

Previous edition is unusable

STANDARD FORM 33 (Rev. 9-97)

Prescribed by GSA - FAR (48 CFR) 53.214(c) robinson Typewritten Text see Section L.2.J

TABLE OF CONTENTS

SECTION B - SUPPLIES OR SERVICES AND PRICES/COSTS

B.1 CONTRACT TYPE (JAN 2010)

B.2 CONTRACT LIMITATIONS (FEB 2010)

B.3 CONTRACT SCOPE (JAN 2010)

SECTION C – DESCRIPTION/SPECIFICATIONS/STATEMENT OF WORK

C.1. GENERAL INFORMATION

C.2 SCOPE OF WORK

SECTION D - PACKAGING AND MARKING

D.1 PACKAGING (MAY 1999)

D.2 MARKING (MAY 1999)

SECTION E – INSPECTION AND ACCEPTANCE

E.1 FEDERAL ACQUISITION REGULATION (FAR) 52.252-2 CLAUSES

INCORPORATED BY REFERENCE (FEB 1998)

E.2 GOVERNMENT REVIEW AND ACCEPTANCE (JAN 2008)

SECTION F - DELIVERIES OR PERFORMANCE

F.1 FAR 52.252-2 CLAUSES INCORPORATED BY REFERENCE (FEB 1998)

F.2 PERFORMANCE PERIOD (JAN 2010)

F.3 PLACE OF PERFORMANCE (JAN 2010)

F.4 DOCUMENTATION OF COMPUTER PROGRAMS (SEP 2009)

F.5 RIGHTS IN DATA (DEC 1998)

F.6 WARRANTIES (MAY 1999)

F.7 LICENSES (MAY 1999)

F.8 ELECTRONIC SUBMISSION REQUIREMENTS (JAN 2010)

F.9 CONTRACT PROGRESS REPORT (JAN 2010)

F.10 MONTHLY TASK ORDER PROGRESS REPORTS (FEB 2010)

F.11 MONTHLY TASK ORDER COST REPORTS (FEB 2010)

F.12 TECHNICAL REPORTS – TASK ORDER CONTRACTS (MAR 2008)

F.13 REPORTS OF WORK - REPORT DISTRIBUTION (DEC 2003)

SECTION G - CONTRACT AND ADMINISTRATION DATA

G.1 TAR 1252.242-73 CONTRACTING OFFICER’S TECHNICAL REPRESENTATION

(OCT 1994)

G.2 RESPONSIBILITY FOR CONTRACT ADMINISTRATION (MAR 2003)

G.3 ORDERING (APR 2008)

G.4 TASK ORDERS ISSUED UNDER MULTIPLE AWARD CONTRACTS (MAR

2008) 29

G.5 TASK ORDER OMBUDSMAN (JAN 2010)

G.6 TECHNICAL DIRECTION (JAN 2010)

G.7 ACCOUNTING AND APPROPRIATION DATA (MAY 1999)

G.8 PAYMENT AND CONSIDERATION (JAN 2010)

G.9 PAYMENTS UNDER COST REIMBURSEMENT CONTRACTS (MAR 2008)

G.10 PAYMENT OF FEE - COST-PLUS-FIXED-FEE (NOV 2007)

G.11 PERFORMANCE EVALUATIONS (MAR 2008)

G.12 VOUCHER REVIEW (MAR 2003)

G.13 COST ACCOUNTING SYSTEMS (APR 2008)

G.14 INCREMENTAL FUNDING OF TASK ORDERS (MAR 2008)

G.15 TRAVEL AND PER DIEM (APR 2005)

G.16 ALLOTMENT (MAR 2003)

SECTION H - SPECIAL CONTRACT REQUIREMENTS

H.1 SECURITY MEASURES ON THE VOLPE CENTER PREMISES (JAN 2010)

H.2 HOURS OF WORK (DEC 1998)

H.3 GPO PRINTING REQUIREMENT (DEC 1998)

H.4 INCIDENTAL HARDWARE/SOFTWARE (DEC 1998)

H.5 SALES TAX EXEMPTION (MAY 1999)

H.6 INSURANCE (FEB 2005)

H.7 POSITION SENSITIVITY (JAN 2010)

H.8 DOT INFORMATION SECURITY REQUIREMENTS (JAN 2010)

H.9 HANDLING OF DATA (SEP 2009)

H.10 NON-PERSONAL SERVICES (DEC 1998)

H.11 OTHER DIRECT COSTS (SEP 2009)

H.12 TASK ORDER LIMITATIONS (DEC 1998)

H.13 CONSENT TO RELEASE GOVERNMENT-ORDERED ITEMS (APR 2008)

H.14 DISCLOSURE OF CONFLICTS OF INTEREST (JAN 2010)

H.15 TECHNOLOGY UPGRADES/REFRESHMENTS (MAR 2008)

H.16 MAXIMUM FEE/PROFIT (DEC 2007)

H.17 SUBCONTRACT APPROVAL (MAR 2008)

H.18 ACCOUNTING SYSTEM (DEC 2003)

H.19 ADMINISTRATIVE LABOR (JAN 2010)

H.20 CONTRACTOR POLICY TO BAN TEXT MESSAGING WHILE DRIVING (FEB

2010) 50

SECTION I - CONTRACT CLAUSES

I.1 FAR 52.252-2 CLAUSES INCORPORATED BY REFERENCE (FEB 1998)

I.2 FAR 52.204-1 APPROVAL OF CONTRACT (DEC 1989)

I.3 FAR 52.215-19 NOTIFICATION OF OWNERSHIP CHANGES (OCT 1997)

I.4 FAR 52.222-42 STATEMENT OF EQUIVALENT RATES FOR FEDERAL HIRES

(MAY 1989)

I.5 FAR 52.244-6 SUBCONTRACTS FOR COMMERCIAL ITEMS (DEC 2009)

I.6 TAR 1252.216-71 DETERMINATION OF AWARD FEE (APR 2005)

I.7 TAR 1252.216-72 PERFORMANCE EVALUATION PLAN (OCT 1994)

I.8 TAR 1252.216-73 DISTRIBUTION OF AWARD FEE (APR 2005)

I.9 TAR 1252.237-73 KEY PERSONNEL (APR 2005)

SECTION J – LIST OF ATTACHMENTS

SECTION K - REPRESENTATIONS, CERTIFICATIONS, AND OTHER STATEMENTS OF

OFFERORS

K.1 IMPORTANCE OF ANNUAL REPRESENTATIONS AND CERTIFICATIONS

(JAN 2008)

K.2 FAR 52.204-8 ANNUAL REPRESENTATIONS AND CERTIFICATIONS (FEB

2009) 61

SECTION L – INSTRUCTIONS, CONDITIONS, AND NOTICES TO

OFFERORS OR QUOTERS

L.1 FAR 52.252-1 SOLICITATION PROVISIONS INCORPORATED BY REFERENCE

(FEB 1998)

L.2 GENERAL INFORMATION

L.3 TECHNICAL PROPOSAL (VOLUME I and II) - INSTRUCTIONS TO OFFERORS L.4 COST AND BUSINESS PROPOSAL (Volume III) - INSTRUCTIONS TO

OFFERORS

SECTION M - EVALUATION FACTORS FOR AWARD

M.1 GENERAL

M.2 TECHNICAL PROPOSAL EVALUATION

M.3 COST AND BUSINESS EVALUATION CRITERIA

ATTACHMENT J.1 - LABOR CATEGORY DEFINITIONS AND PERSONNEL

QUALIFICATIONS

ATTACHMENT J.3 - TECHNICAL REFERENCE LIBRARY

SECTION B - SUPPLIES OR SERVICES AND PRICES/COSTS

B.1 CONTRACT TYPE (JAN 2010)

A. This is an Indefinite Delivery/Indefinite Quantity (ID/IQ) task order contract. Work will be placed under this contract through the issuance of task orders.

B. Task orders may be issued on a Firm-Fixed-Price (FFP), Cost-Plus-Award-Fee (CPAF), Cost-Plus-Fixed-Fee (CPFF) Completion, or Cost-Plus-Fixed-Fee (CPFF) Term basis at the Contracting Officer's (CO) discretion consistent with the guidelines provided in Part 16 of the Federal Acquisition Regulations (FAR). Performance-based task orders will be used to the maximum extent practicable.

C. Individual CPFF task orders will be issued on a completion-type basis pursuant to FAR

16.306 (d)(1). If a completion-type task order is not appropriate, a term-type task order may be issued pursuant to FAR 16.306(d)(2).

D. The Contract Line Item Number (CLIN) structure provided in Subsection B.4 below establishes a CLIN for the four contract type/pricing methods available for use under this contract. Because using a particular contract type/pricing methodology requires terms and conditions specific to that use, this contract includes terms and conditions covering FFP, CPAF, CPFF completion, and CPFF term tasks. In general, these terms and conditions are clear on their face with regard to applicability.

B.2 CONTRACT LIMITATIONS (FEB 2010)

A. Multiple Contract Awards: (TO BE COMPLETED AT TIME OF AWARD) contracts have been awarded under the Volpe Center Solicitation No. DTRT57-10-R-20008.

B. Maximum Contract Value: The value of all task orders placed under all contracts awarded may not exceed $(TO BE COMPLETED AT TIME OF AWARD). As a task order is issued to one Contractor, its value is subtracted from the total value available to all Contractors.

C. Minimum Guarantee: The guaranteed minimum is $2,500 for each contract.

B.3 CONTRACT SCOPE (JAN 2010)

The Contractor, acting as an independent Contractor and not as an agent of the Government, shall furnish all supplies and facilities (for off-site task orders only), personnel, materials, support, and management necessary to provide the services required under this contract. The scope of this effort is defined in the Statement of Work (SOW) (see Section C). Specific work requirements will be stated in individual task orders.

B.4 CONTRACT LINE ITEMS (JAN 2010)

ITEM NO. SERVICES

0001 The Contractor shall furnish all supplies and facilities (for off-site task orders only), personnel, materials, support, and management necessary to provide the services in accordance with the Statement of Work (SOW) entitled VOLPE TRANSPORTATION INFORMATION PROJECT SUPPORT (V-TRIPS), and other terms and conditions of this contract through one or more of the contract types set forth below:

0001AA FIRM-FIXED-PRICE TYPE

0001AB COST-PLUS-AWARD-FEE TYPE

0001AC COST-PLUS-FIXED-FEE COMPLETION TYPE

0001AD COST-PLUS-FIXED-FEE TERM TYPE

SECTION C – DESCRIPTION/SPECIFICATIONS/STATEMENT OF WORK

VOLPE TRANSPORTATION INFORMATION PROJECT

SUPPORT (V-TRIPS)

C.1. GENERAL INFORMATION

The Volpe National Transportation Systems Center (Volpe Center) is an innovative, Federal, fee-for service organization within the U.S. Department of Transportation (DOT)/Research and Innovative Technology Administration (RITA), whose mission is to improve the Nation's transportation system. The Volpe Center’s programmatic requirements cut across all modes of transportation, both national and international, for the DOT and non-DOT organizations, including state and local governments. The Volpe Center's eight Centers of Innovation (COI) focus on cross-cutting transportation, research, education, innovation, and other multimodal issues. Each of the Volpe Center’s COI applies its technical capabilities to DOT strategic goals and national and international transportation priorities. The COIs expand the DOT's multimodal horizons and demonstrate how innovation can arise from creative and collaborative use of internal and external assets.

The Volpe Center utilizes a combination of Federal and Contractor personnel to maximize the broad range and quantity of skills needed to perform sponsoring organizations’ projects. This multiple award vehicle will augment the Volpe Center’s resources by providing high-technology capabilities and skills targeted to the Volpe Center’s programmatic requirements in the area of Information Technology (IT).

IT support has historically been provided through the utilization of support services contracts, allowing the Volpe Center to quickly respond to new and changing requirements of technical programs. On-site IT services are currently being provided by the Transportation Information Project Support (TRIPS) Services Contract No. DTRT57-06-D-30004. Task orders issued under this new V-TRIPS multiple award vehicle are anticipated to provide support in a manner and scope similar to the existing TRIPS contract in the functional area of IT. It is expected that at least one task order issued under this multiple award vehicle will include an important requirement for on-site Management and Administration services in addition to IT support.

C.2 SCOPE OF WORK

The objective of this contract is to provide IT support to a variety of Volpe Center transportation systems projects that cut across all modes of transportation for the DOT and for non-DOT organizations, including state and local governments. Due to the changing nature of the extensive and diverse portfolio of projects, resources must be easily accessible and flexible in terms of skill sets required. The workforce must be responsive to changing technical requirements and quickly provide IT capabilities that will enable the Volpe Center to take advantage of opportunities for new work.

C.2.A. INFORMATION TECHNOLOGY SUPPORT

The Contractor shall provide resources capable of performing the necessary IT functions in response to technical project requirements presented by the Volpe Center. The IT functional area supports a broad project base, covering every mode of transportation, a wide variety of sponsoring organizations, and a wide range of IT sub-areas. Technical project requirements vary widely in scope, cost estimates, and schedules. Volpe Center projects require specialized knowledge of a wide variety of national transportation system modes (i.e., aviation, surface transportation, marine, pipeline, and rail systems).

The Contractor shall provide a workforce with capabilities and experience relating to existing technologies and methodologies that address current transportation systems issues, as well as cutting edge technologies and methodologies that show promise in transforming the future of the transportation systems enterprise. The Contractor must bring a strong knowledge of and experience in transportation systems and functions to the work requirements outlined below.

The following sub-areas are included as part of the overall IT support requirement:

1. System Analysis, Development, Operations and Maintenance, and Deployment and Field Support;

2. System Architectures and Framework;

3. Facility and Operations Support;

4. Information System Security;

5. Technology Assessments and Modernization; and

6. Other Specialized Areas.

The descriptions that follow outline general work requirements typical in each sub-area, not actual tasks.

1. System Analysis, Development, Operations and Maintenance, and Deployment and

Field Support

Under this sub-area, support may be required in the definition and development of prototype concepts and in the definition, development, and maintenance of stand-alone and integrated systems and/or applications. These may be executive information systems, decision support systems, safety management systems, analytical and logistics support systems, transaction processing systems, modeling and/or simulation systems, or command and control systems.

System components can be commercial off-the-shelf (COTS) products, non-developmental items, and/or custom-developed components. Capabilities and upgrades are to be provided throughout the sequence of life cycle phases of IT development.

Support may be required for the integration, installation, and deployment of existing and proposed information systems. This support may be required for single stand-alone systems or multiple information systems in an integrated environment. This support may be applied within a large complex system development effort or across many such systems. This support may also cut across transportation modalities and involve COTS, non-developmental items, and/or custom-developed components. Integration may evolve over time during the migration from the existing systems infrastructure to the proposed systems architecture.

Systems analysis, development, operations and maintenance, and deployment and field support activities may include, but are not necessarily limited to, the following functions:

a. System Analysis and Planning

Skill sets may be required to support system and application analysis and planning activities. These include the development of application architectures and analysis of system components and their inter-relationships. Typical activities in this area may include, but are not limited to, analyzing current systems and operations; developing alternative system and software solutions (including existing commercially and/or Government available software/systems), developing high-level conceptual designs;

performing feasibility studies and cost benefit analyses; performing function point analysis; developing system implementation plans; and identifying applicable Government standards, policies, and guidelines.

b. Proof of Concept (Design, Development, Test, and Evaluation)

Skill sets may be required for the design, development, testing, and evaluation of new IT concepts or concepts of operations for transportation systems. The proof of concept area requires skill sets for design, development, test planning, test execution, and test evaluation to assess compliance with the functional, data, technical, and security requirements established within the conceptual system baselines. Activities in this area may include the definition of new IT technologies and processes and building and testing new IT concept prototypes that explore the viability of implementing new tools, techniques, and processes into the sponsor’s environment. A concept development project may incorporate “cutting edge” technology insertions into new or existing IT functionality (e.g., new decision support tools) or it may evaluate significant technology changes or upgrades to sponsor legacy systems (e.g., migration from client-server to web-based 2.0 functionality).

c. Requirements Analysis

Skill sets may be required for the definition of software functional requirements, data requirements, and other requirements (e.g., usability, performance, security, user interface, etc.) resulting from structured analysis, data modeling, entity relationships, functional decomposition, understanding information flows within the enterprise, business process analysis, organizational modeling, functional modeling and analysis, inventory of existing data stores, end user surveys, workshops, and other related concepts. Work may involve detailed analysis of complex transportation systems.

Requirement elaboration may be accomplished using traditional analysis methods or a rapid prototyping environment.

For enterprise information systems, requirements analysis activities may include functional, data, and technical integration functions. For functional integration, skill sets may be required to perform an analysis of and define the requirements for compatible functional interfaces between or among the functions performed on separate systems or within major modules. For data integration, skill sets for this area may include the ability to perform reconciliation of semantically and structurally inconsistent information and data element definitions across multiple systems or system modules. For technical integration, skill sets may be required to develop requirements for compatible logical and physical interfaces between systems or subsystems, including requirements for local and wide area network (LAN and WAN) systems, storage area networks (SAN), virtualization and cloud services, and other cutting edge technologies.

Skill sets in this area may be required to perform an analysis of and define the requirements for logical and physical system security needs, including security requirements for compliance with system Certification and Accreditation (C&A), disaster recovery, and continuity of operations plans.

d. Design of Information Systems and Work Systems

Skill sets may be required for developing a description of the hardware, software, data, and systems configurations that satisfy functional and data requirements and other considerations, including cost constraints, available technologies, and associated price/performance realities. Designs will address data structures, process modeling, process automation, user interfaces, security constraints, and compatible functional interfaces between or among the functions performed on separate systems or within major modules. Software, database, and hardware design specifications developed in accordance with applicable standards, Internet Engineering Task Force, or other accepted commercial standards, along with general workflow specifications, would be primary products of this activity. As with requirements analysis, software system design may be accomplished across a variety of development methodologies.

Skill sets may be required for technical integration, including the ability to design compatible logical and physical interfaces between systems or subsystems, including the Internet and LAN and WAN systems.

e. System Development and Integration

Skill sets may be required for the development of new systems or for the integration of existing system components. Skills in this area require knowledge of different database systems, data modeling, various coding languages, and a variety of user interface techniques (character mode, client-server windows, web-based pages) for software development. System development activities may require the implementation of tools and techniques for component configuration management; error correction; special system diagnostic support; performance improvement; Extract, Transform, and Load (ETL) for data loading; and capacity management. System integration activities may include technical integration functions. Skill sets for this function may include the ability to perform development of compatible logical and physical interfaces between systems or subsystems, including LAN and WAN systems.

System development and integration skills also may require experience with Internet, intranet, portal, and desktop-based information systems and databases. In this area, skill sets may be required for developing visual interfaces and dashboards; publishing interactive web-based applications; developing stand-alone desktop applications;

developing applications for collecting, displaying, and storing data; and developing database driven programs as well as the associated skills needed for programming, managing, administering, and maintaining such applications. This may require support to develop user interfaces (UI), logos, overall site branding schemas, and style guides, along with connecting the UI to the middleware and back-end programming elements. Skill sets related to the development of applications utilizing commonly used concepts, practices, and procedures related to website usability and accessibility (Section 508) also may be needed.

f. System Test and Evaluation

Skills may be required to perform unit-level, module-level, and system-level testing of functional software system components, system interfaces, and underlying database processes; logical and physical interface tests for technical component integration; user acceptance testing; and system security tests. The test and evaluation area requires skill sets for test planning, test execution, and test evaluation to assess compliance with the functional, technical, and security requirements established as baselines, process guidelines, and standards in the requirements and design phases (e.g., National Institute of Standards and Technology [NIST], DOT, Department of Defense (DoD), Volpe Center, Section 508 accessibility).

g. Documentation

Skills may be required to develop and maintain system documentation and/or models throughout all phases of the development process. Documentation requirements (paper or multimedia) may include, but are not limited to, concepts of operations, requirements analysis, feasibility study/cost-benefit analysis, system/subsystem design specifications, system test and acceptance procedures, user manuals, system administrator-level or operator-level operations and maintenance manuals, configuration control procedures, training manuals, disaster recovery plans, continuity of operations plans, help desk policies and procedures, and system operation policies and procedures.

h. Software and Database Maintenance

Skills may be required to provide maintenance support for various sponsor software applications and databases. Typical activities in this area may include, but are not limited to, systems analysis and programming in response to production/execution failures;

management of change requests, testing authorized changes, and implementing changes made to the software; design and implementation of modifications made in response to hardware/software technology upgrades, new operating procedures, operating system changes, or DOT/Volpe Center guidelines and/or directives; design and implementation of modifications and/or enhancements made in response to approved functional requirements; performance evaluations to determine potential areas of improvement; and maintenance and upgrades to system and user documentation.

i. Configuration Management and Quality Assurance

Skills may be required to perform software configuration management and software product evaluation for quality assurance. The software configuration control support may need to provide accounting, audits, and tracking of all the software products throughout the life cycle. Typical activities in this area may require skill sets that include, but are not limited to, providing a configuration identity scheme for each unique software project;

tracking project-unique software productions (e.g., computer files, electronic media, documents, software code); establishing and implementing configuration control procedures for access and tracking of change requests, implemented changes, and version control; preparing and maintaining records of the configuration status of items under configuration control; providing support for configuration audits; establishing and implementing procedures for packaging, storage, handling, and delivery of software products; establishing quality objectives in conjunction with the sponsor and/or Volpe Center and evaluating software based on the context of the quality objectives established for each software project; and preparing, maintaining, and providing quality assurance records for the life of the project where no standards have been prescribed.

j. Site Installation

The physical installation of the new software, database, hardware, and communication infrastructure is critical to the success of IT efforts. Skill sets may be required to support the installation of network capabilities (from stringing cables and installing network hubs to network software configuration); installation of system physical security components and site customization; and set up of hardware, software, and security components such as access control and intrusion detection.

Skills may be required to support the IT infrastructure of sponsoring organizations by specifying, configuring, installing, integrating, and testing all required components, computers, facilities, equipment, and systems; providing training; and furnishing integrated logistics support.

k. System Deployment and Field Support

This area encompasses several activities that are needed to support system deployment.

Activities in this area generally are targeted to transferring operations and information about the new system to a variety of stakeholders to establish the operational status of the new system. Skill sets in this area may be required to support end-user, operator, and administrator training (paper or multimedia); data conversion process development and implementation; communication of the operational status of the new system to personnel responsible for interfacing applications and systems; support for system C&A; and support for the development of system disaster recovery plans and continuity of operations plans.

Skill sets also may be required for the short-term management and operation of system facilities and users during start-up operations or initial system integration. Configuration management, error correction, special system diagnostic support, performance improvement, and capacity management are examples of activities included in this phase for which skill sets may be required. Specialized deployment plans, field support plans, and risk mitigation strategies are developed as part of the overall project plan.

2. System Architectures and Framework

Under this sub-area, support may be requested for the formulation, execution, and management of strategic and tactical plans supporting the definition of clear business goals and objectives, identifying risk factors and mitigation strategies, identifying and selecting appropriate IT architectures, developing operational concepts, and aligning the use of IT with departmental and/or agency strategic goals and architectures. Such projects may require extensive, technology-supported collaboration among geographically dispersed participants. Typically, this work includes performing infrastructure scans, supporting outreach activities to sponsors and stakeholders, and developing an assessment of the market and other institutional forces that drive the organization’s mission and functions. Work also may require identification of information flows, systems, and business processes within an organization through specialized studies, reviews, and analyses. In addition, efforts may require assessment of effectiveness and suitability of systems (particularly of new and emerging systems) and knowledge and application of best practices and metrics for measuring system and process effectiveness. System framework activities will include, but are not necessarily limited to, the following areas:

a. Strategic Planning

Strategic planning is an organization’s process of defining its strategy or direction and making decisions on allocating its resources to pursue this strategy, including its capital and people. When performed as an integral part of an IT task, skills may be required to help sponsoring organizations address broad near-term (i.e., 1-5 years) and long-term (i.e., 5-10 years) issues and focus on critical functional goals and objectives.

b. Information System Architectures

In the life cycle evolution of IT tasks, skills may be required to help sponsoring organizations develop near-term (i.e., 1-5 years) and long-range (i.e., 5-10 years) business and technical architecture plans for IT investments that conform to business goals, transform the organization, and meet client acceptable risk levels. The plans will be used for the analysis of existing systems and the implementation of future systems.

These architectures will provide a basis to develop and maintain systems, subsystems, and modules in a predictable manner. Such plans may address enterprise models, data architectures, application software architectures, hardware and network architectures, and systems technology architectures, such as the Office of Management and Budget (OMB) reference models for guiding long-term system planning, development, technology insertion, and technology refresh.

c. Organizational Integration

Skill sets for this area may include the ability to perform analysis, design, development, and implementation of organizational structural changes that encourage coordination and cooperation among multiple units to gain from technical or functional integration. Skills may be required to help organizations obtain maximum benefits from technologies and systems promoting information sharing. Skills also may include experience with workflow automation, internet and intranet content management, and multimedia interactive training.

3. Facility and Operations Support

In this sub-area, support may be required for the operation and management of a sponsor’s IT assets, including, but not limited to, hardware support, computer operations support, and help desk support. Varying levels of coverage are required, ranging from support during “traditional” work hours (7 a.m. to 5 p.m. five days per week) to continuous 24-hours-a-day, seven-days-a-week (24x7) support. Support also may be needed to staff and manage help desk services for facility operations, systems, and individual software applications. Sub-areas may include, but are not necessarily limited to, the following functions:

a. System Operations and Administration

Skill sets may be required to support, operate, and maintain a sponsor’s IT assets. Assets vary by sponsor organization and may include enterprise class and server-based systems in a clustered or distributed network, special purpose computer systems, application development hardware/software platforms, and web/application servers. Typical activities in this area may require skill sets that include, but are not limited to, providing up to 24x7 operations support of the IT assets; providing support for operations during “operator-unattended” mode for operations that are not 24x7; installing and configuring new system platform acquisitions with the required operating system and application software and databases; coordinating networking, security, and application system issues with the respective technical staff contacts prior to connection to the sponsor’s network;

training and cross-training technical support staff in the essentials of the various system configurations as well as their associated subsystems; testing and implementing new versions of host operating systems, system software, data patches, and security patches;

monitoring system performance through the use of innovative tools such as dashboards;

identifying system bottlenecks or abnormalities and offering suggestions for improving system performance; initiating remedial hardware/software maintenance action and initiating failure recovery procedures when failures occur or there are indications of impending failure; ensuring file integrity through the performance of daily/weekly/monthly back-up, fail-safe, and file recovery procedures based on Standard Operating Procedures (SOPs); implementing physical and information security and safety procedures and revising the procedures when new policies are issued; making recommendations to enhance reliability and availability to end users and reduce operating costs; operating and maintaining peripheral subsystem equipment; maintaining logs and records; maintaining, managing, and controlling a data media library for the storage of essential file back-ups both at on-/off-site locations in accordance with the sponsor’s/the DOT’s policies; administering procedures for establishing and terminating institutional system user accounts and associated privileges; establishing system/user authenticators and allocating systems resources; performing daily monitoring of systems activity to ensure that the integrity of system's use is maintained in accordance with the sponsor’s/the DOT’s IT security policies and procedures; and establishing preventive maintenance schedules and ensuring that preventive maintenance schedules are met.

b. Help Desk Support

Skill sets may be required to support, maintain, manage, and/or administer help desk facilities for local and remote end-users of facilities and/or systems managed for a sponsor. Typical activities in this area may require skill sets that include, but are not limited to, operating and managing the performance of a full-featured help desk to handle calls about problems with computing resources, software applications, databases, and/or systems that require up to continual 24x7 support; establishing, using, or maintaining an automated database system for recording, tracking, and reporting problems and subsequent resolutions; providing status reports on help desk activities; integrating and coordinating help desk activities with the sponsor’s network, desktop, or e-mail functions, as appropriate, to ensure timely and effective accomplishment of required services; developing, updating, and maintaining policies and procedures for help desk operations in conformance with sponsor documentation standards; providing end-user follow-up on problems to confirm and document problem resolution; and providing guidance and recommendations on new help desk technologies.

4. Information System Security

IT security is critical to all of the Volpe Center’s sponsors. Nearly all of the IT development, deployment, and operational facility projects performed by the Volpe Center require the assurance of data and system integrity provided by secure systems. Information systems need to comply with a wide variety of cyber security orders, regulations, and Public Laws such as: the Federal Information Security Management Act (FISMA); the President’s National Strategy to Secure Cyberspace (February 2003); Volpe Center Order 1640.6 - Information Systems Security Program; DOT Order 1350.2 - Departmental Information Protection Planning; NIST Special Publication 800-37 - Guidelines for the Security Certification and Accreditation of Federal Information Technology Systems; NIST Special Publication 800-53 - Recommended Security Controls for Federal Information Systems; and FIPS 199 - Standards for Security Categorization of Federal Information and Information Systems.

In addition to IT security requirements referenced elsewhere in Section C.2.A., IT security support requested by the Volpe Center may include, but is not limited to, the following areas:

a. System Security Administration

When the Volpe Center provides system operations and administration of a sponsor’s IT assets, support for system security administration may be required. Activities in this area may require skills that include, but are not limited to, ensuring that programs follow the sponsor’s/the DOT’s procedures and policies; performing periodic reviews and assessments of all sponsor-managed systems to ensure that such systems do not jeopardize the security of the sponsor’s IT resources and that systems are fully compliant with IT security policies, guidelines, and procedures; establishing and maintaining an inventory of sponsor-managed IT assets and network-connected systems; performing a vulnerability assessment of all sponsor-managed IT assets and providing technical guidance for their remediation, if results warrant; executing response team procedures for information security incidents, including reported virus infections or damage; addressing and reporting on information security incidents associated with sponsor-managed IT assets; ensuring that ongoing updates to the sponsor’s SOPs are accomplished relative to information security elements when policy or technology changes warrant; preparing input for submissions to annual and ad-hoc “calls” for system security information by sponsors; preparing and maintaining an ongoing multi-tier virus detection and remediation program for all sponsor-managed IT assets; performing ongoing monitoring of sponsor-managed IT assets; and providing assistance with the development, maintenance, and test execution of system disaster recovery plans and continuity of operations plans.

b. System Security Analysis and Evaluation

Skill sets may be required to perform an analysis and evaluation of IT software applications, subsystems, and components to identify security risks. This includes an assessment of system vulnerabilities, risk levels, privacy information management, and remediation options to remove security risks. The analysis and evaluation phase may include a risk assessment of the overall system, data sensitivity analysis, and vulnerability assessment; identification of remediation actions and control mechanisms commensurate with data sensitivity findings; the test and evaluation of established controls; access control and intrusion detection; and recommendations for contingency and disaster recovery planning. The analysis and evaluation should provide feedback on the use of techniques and tools to increase the security of the system such as the incorporation of specific hardware and software tools, two-factor authentication tools and processes, protocols, secure networks, and communications; Public Key Infrastructure (PKI); and data and message authentication algorithms.

c. System Security Plans

Skill sets may be required to develop and/or maintain system security plans based on the system security analysis and evaluation and for providing input into the maintenance of the plan. The plans should provide a snapshot of the security posture of operational systems and plans to mitigate any existing vulnerabilities. The system security plan identifies the management, operational, and technical security controls for the system.

The system security plan identifies the security requirements and describes the security control measures in place or planned for meeting those requirements. The system security plan also delineates responsibilities and expected behavior of all individuals who access the system. Input for plan maintenance may include the identification of criteria for performing a periodic security analysis and risk assessment and disaster recovery exercises.

d. System Security Documentation

Skill sets may be required to develop and/or maintain system security documentation.

This activity may include, but is not limited to, the development of specific application system security plans, a security risk assessment plan, and supporting documentation for application(s) to obtain C&A. The plans require performance of risk assessment, data sensitivity analysis, vulnerability assessments and remediation actions, identification and establishment of control mechanisms commensurate with data sensitivity findings, documentation of security test criteria for established controls, possible assistance with documentation for disaster recovery and contingency planning, and documentation for C&A in accordance with DOT and/or sponsor policy and guidelines.

5. Technology Assessments and Modernization

In this sub-area, in addition to specific project assistance, support may be required in the assessment of new Information System Development methodologies and tools, new technologies, standards, and software and hardware for use in future system designs. Sub-areas skills may include, but are not necessarily limited to, the following functions:

a. Information System Development Methodology Assessment

Skills may be required for the identification, assessment, development, and implementation of new and improved approaches to information strategic planning, return-on-investment analysis, and systems development and integration. New approaches are becoming available as a result of research and the availability of more powerful equipment, software, and group facilitation methods. Assessment and evaluation of these new approaches and industry best practices represent an essential capability within this area.

b. Technology Assessment

Skills may be required to evaluate the emergence of new computer equipment and peripherals, enterprise communications systems, new operating systems, applications software, and other technologies (e.g., electronic commerce, object technology, smart cards, wireless (WiFi), access control and intrusion detection, virtual computing and cloud technologies) plus technologies such as those highlighted in Other Specialized Areas (below). These products are integral to the improvements in the transportation enterprise. This may require skills in the assessment and evaluation of new products and methods of technology application, including technology directions relevant to the Volpe Center’s projects.

Skills may be required with technology insertion and enabling technologies, including automatic identification technology (AIT); radio frequency identification devices (RFID);

smart cards; card readers/terminals; and integration and customized services such as cameras, signal transmission media, monitors, displays and peripherals, access control technologies, video recognition technologies, biometrics, and other data carrier and associated acquisition devices. Skills may also be required in analyzing, designing, and deploying virtualized server environments, and analyzing and specifying requirements for “cloud computing” as well as potential trade off analysis between these approaches.

c. Standards Assessment

Skills may be required for the development of scalable, evolutionary systems in which the risk of obsolescence is minimized. This development approach requires the assessment of and adherence to a wide variety of standards, including, but not limited to, the digital interchange of text, image, audio, video, voice, and traditional data; general purpose multi-user operating systems; and digital communications. This approach may require support to interpret and apply existing and emerging standards, including analysis and documentation to support standards development.

d. Methodology Application and Software Process Improvement

The Volpe Center may require support in its efforts to improve its awareness of and capability to apply particular ISD methodologies or to apply the guidelines or industry-wide standards such as the International Standards (ISO-9000), the Information Technology Infrastructure Library (ITIL) or the Software Engineering Institute's Capability Maturity Model Integration (CMMI). Skills may be required for the preparation of project management plans and documents that follow designated methodologies or standards; the preparation of such documents as tailored process guidelines, risk management plans, and software process improvement plans; or working with Volpe Center software development projects toward achieving ISO, ITIL or CMMI compliance or compliance with internal Volpe Center process improvement initiatives.

6. Other Specialized Areas

Following are several additional areas that are representative of potential IT support tasks.

a. Project Management

Under this area, selected management approaches and control mechanisms must be tailored to the project development methodology chosen and must comply with the formal requirements of Volpe Center sponsors. The chosen management approach must establish a framework for coordinating the activities and results of multi-disciplinary teams. Support is required to (1) institutionalize the project management process; (2) implement adequate measures of performance; and (3) execute continuous improvements.

Support may also be required in the establishment, development, and implementation of strategies and methods to plan and monitor project and task execution. These activities may require an integration of cost, schedule, quality, and other data of various stakeholders using a risk management-based approach. For example, the Contractor may be required to implement a system for tracking Earned Value (EV) where a variety of parties are responsible for accomplishing work items or to provide data supporting EV analysis in an electronic format that can be used for analysis by common work productivity tools (e.g., Microsoft Excel, Access, Project).

Support may be required in the development of project management documents that tailor existing or planned Volpe Center standard templates, policies, and procedures. Typical documents include the Project Management Plan, Work Breakdown Structure (WBS), Schedule, Risk Management Plan, Test Plan, Security Plan, Quality Management Plan, and Configuration Management Plan. Support may include the review and analysis of planning and reporting documents from other contractors in order to assist in performance tracking, change management, and quality management activities.

Skills may be required to help sponsoring organizations define, initiate, and manage individual projects consistent with strategic information systems architecture planning. Such projects may involve detailed definition of new/revised systems (including process change and technology alternatives) as well as minimum critical requirements, systems performance analyses, deployment strategies, risk identification, and mitigation analyses. An essential result of this phase is the decision whether or not to proceed with the implementation of technology and/or work system changes and preparing a plan for executing these changes.

b. Networking And Communications (National And International Standards)

Work within this area is expected to focus on the development and analysis of network architectures and communication technologies and standards.

c. Information Distribution, Warehousing, and Distributed Databases

Projects at the Volpe Center increasingly deal with the storage and dissemination of large quantities of data at remote locations. Regardless of physical location of information it is essential that organizations have full access to data. Database technology is approaching the capability of providing full database services over a dispersed heterogeneous network of computers. As this technology becomes available, its application to projects may be a high priority. Under this area, technical support is needed to determine the concepts, applications, and methodologies for distributing information.

For information distribution and warehousing, data management support may be required, including requirements analysis, and design, development, installation,…