SOW.pdf

STATEMENT OF WORK

FOR ARNS APPLICATOIN AND EXEMPLARS RUNTIME LICENSE MAINTENANCE

NCNT0000-14-00894

OVERVIEW OF CENTER FOR OPERATIONAL OCEANOGRAPHIC PRODUCT AND

SERVICES

The Physical Oceanographic Real-Time System (PORTS®) is a hardware and software system which improves the safety and efficiency of maritime commerce and coastal resource management through the integration of real-time environmental observations, forecasts and other geospatial information. PORTS measures and disseminates observations and predictions of water levels, currents, salinity, and many meteorological parameters (e.g., winds, atmospheric pressure, visibility, etc.). ISD supports all computer-based PORTS hardware and software.

The National Water Level Observation Program (NWLOP) provides the long-term water level records from which are derived the vertical reference datums used for surveying and mapping, dredging and coastal construction, water level regulation, marine boundary determination, tide prediction and for analysis of long-term water level variations and trends. It also supports tsunami and storm surge warning, tidal prediction, monitoring of climate and coastal processes, and tectonic research.

The National Current Program (NCP) measures and disseminates observations of currents in the coastal and estuarine waters throughout the United States and produces various products and services from these measurements that support NOAA’s mission goals. The primary products are predictions that are published in the Tidal Current Tables (TCT) and quality controlled data sets but the program continuously seeks to broaden its products through user requests and development.

SCOPE

As an independent contractor and not as an agent of the Government, the Contractor shall provide regular software maintenance, updates and upgrades to CO-OPS installed base of ARNS application and EXEMPARS runtime licenses (for up to 25 PORTS) as they become available. This includes bug fixes, driver updates, and documentation updates. They shall also provide on-call technical support, 5 days/week during normal work hours.

ARNS (Automated Real-time Narrative Summaries) is an innovative natural language generation system developed by CoGenTex for NOAA's National Ocean Service (NOS), for use with their Physical Oceanographic Real-Time System (PORTS®).

The PORTS system displayed its real-time data in graphical and tabular form. The tabular form can require lengthy inspection to retrieve the relevant details, particularly in a large PORTS locale with many sensors. ARNS complements the tabular display by providing automatically generated natural-language summaries of port conditions, in order to give users a more comprehensive overview of the data.

http://tidesandcurrents.noaa.gov/ports.html

Exemplars provides an efficient, object-oriented framework for generating text, flexibly combining templates and simple "if-then" logic with more sophisticated text construction models and revision capabilities.

Exemplars is based on standard Java and XML technology, and can easily integrated with web servers, databases, and other environments.

IT SECURITY

The Certification and Accreditation (C&A) or Assessment and Authentication (A&A) requirements of Clause 48 CFR 1352.239-72 do not apply, and a Security Accreditation Package is not required.

The contractor will only supply software, product license and will not require the use of any contractor owned equipment. The contractor will not have remote access to any government owned equipment.

The contractor must provide all supporting documentation or a reference to obtain the necessary material which describes the security capabilities, the design and development processes and the testing and evaluation procedures used by the product or services being provided for this acquisition.

The contractor must provide all supporting documentation or a reference to obtain the necessary material which describes all product or service updates and enhancements as they are implemented.

The product or service supporting documentation could be the user and system administrator guides, which is documents the functional properties of the security controls employed to permit the analysis and testing of the security controls.

The contractor must provide sufficient document demonstrating the software being provided complies with Office of Management and Budget Memorandum M-07-18 entitled Ensuring New Acquisitions Include Common Security Configurations. For Windows applications, the provider of information technology shall certify applications are fully functional and operate correctly as intended on systems using the Federal Desktop Core Configuration (FDCC), United States Government Configuration Baseline (USGCB) initiative or other NIST identified (http://checklists.nist.gov) secure configuration. The standard installation, operation, maintenance, updates, and/or patching of software shall not alter the configuration settings from the approved FDCC/ USGCB/other secure configuration. The information technology should also use the Windows Installer Service for installation to the default “program files” directory and should be able to silently install and uninstall. Applications designed for normal end users shall run in the standard user context without elevated system administration privileges.

The contractor must provide sufficient documentation which demonstrates the acquiring information technology has implemented common security configurations. Common security configurations are available from the National Institute of Standards and Technology’s website at http://checklists.nist.gov.

http://checklists.nist.gov/ http://checklists.nist.gov/

The contractor includes the necessary product support and supporting documentation for the hardware and/or software that allows the sanitization (following NIST Special Publications 800- 88 Guidelines for Media Sanitization) of the hardware and/or software upon the disposal of the product.

The contractor must ensure that the product being purchased complies with the Homeland Security Presidential Directive 12 (HSPD-12) requirements from FAR 4.1302 stating: (a) In order to comply with FIPS PUB 201, agencies must purchase only approved personal identity verification products and services. (b) Agencies may acquire the approved products and services from the GSA, Federal Supply Schedule 70, Special Item Number (SIN) 132-62, HSPD-12 Product and Service Components, in accordance with ordering procedures outlined in FAR Subpart 8.4.

The contractor must ensure that the product being purchased complies with Internet Protocol Version 6 (IPv6) requirements from FAR part 11.002 (g) stating: when acquiring information technology using Internet Protocol, the requirements documents must include reference to the appropriate technical capabilities defined in the USGv6 Profile (NIST Special Publication 500- 267 - http://www.nist.gov/itl/antd/usgv6.cfm) and the corresponding declarations of conformance defined in the USGv6 Test Program (http://www-x.antd.nist.gov/usgv6/index.html).

The applicability of IPv6 to agency networks, infrastructure, and applications specific to individual acquisitions will be in accordance with the agency's Enterprise Architecture (see OMB Memorandum M-05-22 dated August 2, 2005).