Attachment_A_-_IVV_PWS.pdf

ATTACHMENT A

MIGRANT STUDENT

INFORMATION

EXCHANGE (MSIX)

MANAGEMENT AND

SUPPORT

Attachment A: Performance Work Statement

ABSTRACT

Contractor support services to perform Independent Verification and Validation (IV&V) and Capital Planning efforts to support the Migrant Student Information Exchange (MSIX) of Title I, Part C, Migrant Education Programs (MEP).

April 2016

Table of Contents Background

Purpose and Scope

Objectives and Tasks

Task 1: Contract/Project Administration

Task 1.1 – Kick-off Meeting

Task 1.2 – Phase-In and Phase-Out Periods

Subtask 1.2.1 – Phase-In (Base Year Only)

Subtask 1.2.2 – Prepare and Update Phase-Out Plan

Subtask 1.2.3 – Execute Phase-Out Plan (OPTIONAL)

Task 1.3 – Project Management Support

Task 2: IV&V Oversight of the MSIX Contract

Task 2.1 – Deliverable Reviews Artifact

Task 2.2 – Ongoing Assessment and Analysis of MSIX Contractor’s System Operations

Task 2.3 – Verify MSIX System Compliance with Privacy and System Security Regulations

Task 2.4 – Review all MSIX Deliverables for Quality

Task 2.5 - Review MSIX Deliverables Compliance with Section 508 of the Rehabilitation Act

Task 2.6 – Verify Customer Relationships, Support and Service

Task 2.7 – Ensure MSIX Contractor Provides and Maintains Reliability of System Components

Task 2.8 – Ensure MSIX Contractor Effectively Executes Risk Management Processes

Task 2.9– Verify MSIX Contractor Delivers Quality Software

Task 2.10 – Ensure Effectiveness of MSIX User Training

Task 2.11 – Ensure MSIX Contractor Demonstrates Improved Performance, Reliability, Security, and Reduced Cost of Operating MSIX

Task 2.12 – Ensure MSIX Contractor Provides a Successful Electronic System

Task 2.13 – Provide a Risk-Based, Cost-Effective Set of IV&V Services

Task 3: MSIX Business Case Support

Task 3.1 – MSIX Business Case Updates

Task 3.2 – Completion of Program Assessment (PA)

Task 3.3 –Completion of Operational Analysis Report (OAR)

Task 3.4 – Completion of Analysis of Alternatives (AoA)

Task 3.5 – Completion of Post-Implementation Review Independent Questionnaire

Background The U.S. Department of Education’s (the Department) mission is to ensure equal access to education and to promote educational excellence throughout the nation. The Office of Elementary and Secondary Education (OESE) Office of Migrant Education (OME) is responsible for administering the Migrant Education Program (MEP), which is among the many grant programs that support the mission of the Department. The Migrant Student Record Exchange (MSIX) is directly relevant to the Department’s mandates and strategic goals. MSIX was developed and implemented in response to Section 1308 of Title I, Part C, of the Elementary and Secondary Education Act of 1965 (ESEA), as amended. Section 1308(b) requires the Secretary to assist States in developing effective methods for electronically exchanging student records amongst States and determining the accurate number of migratory children in each State. Also, MSIX directly supports the fourth goal of the Department’s Strategic Plan, “Equity:

Increase educational opportunities for underserved students and reduce discrimination so that all students are well-positioned to succeed”.

The MEP, authorized under ESEA, as amended, is intended to:

a) support high-quality and comprehensive educational programs for migratory children to help reduce the educational disruptions and other problems that result from repeated moves;

b) ensure that migratory children who move among the States are not penalized in any manner by disparities among the States in the curriculum, graduation requirements, and State academic content and student academic achievement standards;

c) ensure that migratory children are provided with appropriate educational services (including supportive services) that address their special needs in a coordinated and efficient manner;

d) ensure that migratory children receive full and appropriate opportunities to meet the same challenging State academic content and student academic achievement standards that all children are expected to meet;

e) design programs to help migratory children overcome educational disruption, cultural and language barriers, social isolation, various health-related problems, and other factors that inhibit the ability of such children to do well in school, and prepare such children to make a successful transition to postsecondary education or employment; and

f) ensure that migratory children benefit from State and local systemic reforms.

MSIX is a web-based platform that links States’ migrant student record databases to facilitate the national exchange of migratory children’s educational and health information. A migratory child is defined as a child or youth who made a qualifying move in the preceding 36 months – (A) as a migratory agricultural worker or migratory fisher; or (B) with, or to join a parent or spouse who is a migratory agricultural worker or a migratory fisher.

Purpose and Scope The purpose of the Records Exchange Initiative is to help facilitate Section 1304(b)(3) of the ESEA, as amended, that requires State Education Agencies (SEA), to promote interstate and intrastate coordination of services for migratory children, and provide for educational continuity through the timely transfer of pertinent school records, including information on health, when children move from one school to another, whether or not such move occurs during the regular school year. In meeting this requirement, Congress required the Secretary in Section 1308 (b)(1) of the statute to “assist States in the electronic transfer of student records and in determining the number of migratory children in each State” and Section 1308(b)(2) that requires the Secretary, in consultation with the States to “ensure the linkage of migrant student record systems for the purpose of electronically exchanging, among the States, health and educational information regarding all migratory students.”

The scope of MSIX includes the linkage of 47 States’ migrant student systems for facilitating the national exchange of migrant student’s records including demographic, educational, and health information for Kindergarten – grade 12 students, as well as high-school aged out-of-school youth. MSIX is built upon Oracle’s COTS 11g Enterprise Edition platform, which utilizes a Relational Database Management System (RDBMS) in conjunction with a suite of applications. Some of these applications include Oracle Internet Directory (OID), which serves as a Lightweight Directory Access Protocol (LDAP), Oracle Discoverer, and Oracle Workflow. Also, MSIX uses eScholar’s Uniq-ID student matching engine to uniquely identify students. MSIX uses this state-supplied data to develop a consolidated data record for each migrant student and provides views of each migrant student’s educational and health record to authorized MSIX users. The goal of the record exchange is to support participation in the MEP, as well as timely, accurate, and successful enrollment, placement, and credit accrual of migrant students.

MSIX is a complex technology platform and a major investment for the Department. These conditions require significant Independent Verification and Validation (IV&V) and Capital Planning efforts. IV&V is a systems engineering discipline that helps to build quality into the software during the software lifecycle.

Validation ensures the system meets the user’s needs, and verification ensures the system is well engineered for quality. IV&V services will be used to monitor and validate the effectiveness of the MSIX contract and ensure the continued success of MSIX program. IV&V must provide overall MSIX program oversight, analysis, and recommendations to the Department to ensure correctness and quality of the design, development, and operation of MSIX and related deliverables through the Lifecycle Management (LCM) of the program. The IV&V services approach must ensure overall quality through early identification of risks and defects and provides metrics that address all MSIX contract activities and deliverables throughout the life of the MSIX program.

Objectives and Tasks The following overarching objectives are mandated to be accomplished under this contract.

1. Establish a partner-focused working relationship with Government.

2. Provide a partnership with team members and subcontractors that appear seamless to the

Government and that fosters shared accountability and responsibility among all partners.

3. Throughout the life of this effort, demonstrate improved performance, reliability, security, and efficiency of IV&V efforts and capital planning activities, including reviewing, verifying, monitoring and validating MSIX contract deliverables.

4. Provide timely services and early identification of risks and defects, as well as recommendations to ensure the continued success of the MSIX program.

Task 1: Contract/Project Administration

Task 1.1 – Kick-off Meeting Within five (5) calendar days of contract award, of all contract periods, the IV&V Contractor shall conduct a kickoff meeting with the Government to discuss contract objectives and timelines. The IV&V Contractor shall conduct the kickoff meeting at the Department headquarters in Washington, D.C. The IV&V Contractor shall provide the meeting agenda and any meeting artifacts (including the initial project plan and timeline, and subsequent meeting minutes).

Deliverable(s)

• Kick-off Meeting Agenda

• Kick-off Meeting Artifacts

• Kick-off Meeting Minutes

Task 1.2 – Phase-In and Phase-Out Periods The IV&V Contractor shall develop comprehensive procedures for phasing in and phasing out of the project and within the time allowed under the terms of this contract. The IV&V Contractor's phase-in and phase-out procedures shall not disrupt or adversely impact the day-to-day conduct of Government business.

Subtask 1.2.1 – Phase-In (Base Year Only) During the phase-in period of the base year, the IV&V Contractor shall prepare to assume full responsibility for all areas of operation in accordance with the terms and conditions of this contract.

The IV&V Contractor shall submit a Phase-In Plan to the Contracting Officer’s Representative (COR) for review and approval no later than ten (10) calendar days after contract award date to include the bullet points below as well as a description of how all the actions outlined in Task 1 will be initiated and completed. The Plan shall finalize the IV&V Contractor’s efforts to affect a smooth and orderly implementation of contract responsibility.

During the phase-in period, the Contractor shall, at a minimum:

Obtain all required certifications, licenses, permits, and clearances, including personnel security clearances, if applicable Participate in joint inventories and sign for Government-Furnished Information (GFI) Continue to develop and submit required deliverables Attend post-award meetings as required

Deliverable(s)

• Phase-In Plan

Subtask 1.2.2 – Prepare and Update Phase-Out Plan A phase-out plan shall be submitted 90 calendar days prior to the completion of the base period. A revised phase-out plan shall be submitted 90 calendar days prior to the end of each option period. The purpose of the phase-out plan is to ensure that the IV&V Contractor is prepared at all times during the life of the contract to facilitate a smooth and orderly transfer of contract responsibility to a successor Contractor, to the Government, or to retire the system. The COR will review the submitted phase-out plan and make requested changes as needed. The IV&V Contractor shall update the phase-out plan in accordance with the COR’s requested changes.

Deliverable(s)

• Phase-Out Plan

Subtask 1.2.3 – Execute Phase-Out Plan (OPTIONAL) If Optional Task 1.2.3 is exercised by the Government, the IV&V Contractor shall execute the phase-out.

The COR will notify the IV&V Contractor whether the IV&V operations are being transferred to a successor Contractor, whether the IV&V operations are being transferred to the Government, or whether the MSIX system is being retired.

• If IV&V operations are being transferred to a successor Contractor or the Government, during this time, management personnel of the incoming workforce or Government may observe operations and performance methods of the incumbent IV&V Contractor. This will allow for the orderly turnover of equipment and records and will ensure continuity of service. The IV&V Contractor shall not defer any requirements for the purpose of avoiding responsibility or of transferring such responsibility to the succeeding Contractor or Government. The IV&V Contractor shall fully cooperate with the successor Contractor and the Government to accomplish this task.

• If the MSIX system is being retired, all digital information to include contract and system documentation, webpages, and databases and data shall be packaged and delivered to the COR during this time. All software licenses directly paid for by the contract shall be transferred to the Government, and the IV&V Contractor shall properly package and deliver all hardware to the Government (or dispose of it), in accordance with Federal guidelines.

Task 1.3 – Project Management Support The IV&V Contractor’s project management shall include detailed planning and coordination of contract activities and related technical engineering requirements to enable the efficient operations, sustainment, documentation, and enhancement of IV&V efforts, Capital Planning activities, MSIX Business Case, and MSIX contract deliverables. The IV&V Contractor shall provide project management support to promote the optimal use of contract resources, ensure adequate contract performance, and establish management controls to deliver quality services within budget and on time.

Project management shall consist of:

1. Management of the IV&V Contractor’s activities using industry standard project management processes to initiate, plan, execute, control, and close the project in agreement with the Guide to the Project Management Body of Knowledge (PMBOK) or other industry standards.

2. Monthly status reports that include, at a minimum: a brief, factual summary description of IV&V and Capital Planning activities for each task (or groups of tasks) during the reporting period, work scheduled for the next reporting period, variances between work scheduled and work performed, issues, risks and proposed corrective actions.

3. Monthly and quarterly updates to the Department’s Electronic Capital Planning and Investment Control (eCPIC) system.

4. Monthly performance reports including IV&V and Capital Planning performance measurement status as required by this contract and an extract from the risk management repository.

5. Attend Information System Security Officer (ISSO), quarterly Plan of Action and Milestones (POA&M), and other security meetings.

6. Attend quarterly project management, as well as ad hoc, meetings for the Department’s Major Investments

7. Participate in MSIX weekly status meeting, to track the status of MSIX contract deliverables. During these meetings, the IV&V Contractor must provide a weekly status report and briefing on IV&V and Capital Planning activities.

8. The IV&V Contractor shall develop a Project Management Plan of processes and procedures that demonstrate management controls are in place, used, and quality controls are conducted for IV&V and Capital Planning activities. The IV&V Contractor shall deliver the Project Management Plan to the COR for review and approval no later than 15 calendar days after contract award date.

9. The IV&V Contractor shall develop and maintain an Integrated Project Schedule using Microsoft Project. The Contractor shall deliver the Integrated Project Schedule to the COR for review and approval no later than 20 calendar days after contract award date.

10. The IV&V Contractor shall work in collaboration with the COR to establish baselines and set targets for performance metrics and performance measures utilizing the sample chart of performance metrics provided below:

Desired Outcomes

(What are the goals as a result of this contract?)

Required Services

(What task must be accomplished to achieve the desired result?)

Performance Standard

(What should the standards for completeness, reliability, and quality be?)

Acceptable Quality Level

(AQL)

(How much error is acceptable?)

(Monitoring Method)

(How is success defined?)

11. The IV&V Contractor shall establish an electronic project library or manage the existing MSIX

Program SharePoint Site in the Department’s intranet. As part of this library, the Contractor shall maintain, update, and create (where necessary) the following:

a. Personnel and Staffing Plan and roster

b. Project Management Plan

c. Integrated Project Schedule

d. Monthly Performance Report

e. Monthly Status Report

f. Weekly Status Report

g. Personnel Roster updates quarterly or as needed

h. Phase-In Plan

i. Phase-Out Plan

j. MSIX Deliverable Reviews

k. IV&V Deliverables

l. Capital Planning Deliverables

The COR may request briefings, white papers, strategy documents, data extracts, and other reports. It is estimated that no more than five (5) white papers or documents per year and four hours per quarter of briefings will be required.

Deliverable(s):

• Project Management Plan (Annual)

• Integrated Project Schedule (Annual)

• Monthly Performance Report (Monthly)

• Monthly Status Report (Monthly)

• Weekly Status Report (Weekly)

• Weekly Status Briefing (Weekly)

• Electronic Project Library or Management of the MSIX Program SharePoint Site

• Up to Five (5) White Papers (Annual)

Task 2: IV&V Oversight of the MSIX Contract MSIX is in the support and improvement stage, undergoing activities known as Operations and Maintenance (O&M). Commercial off the Shell (COTS) upgrades and new custom functionality are needed to ensure that MSIX continues to meet its goals. These events will result in a series of new releases, each following a tailored set of Life Cycle Management (LCM) activities for the definition, construction, validation, and implementation phases. These enhancements may require baseline changes and amendments to the business case.

The lifecycle activities for implementing approved changes must be performed while the system continues to meet its primary goal of facilitating the national exchange of migrant student educational and health information. The IV&V Contractor must monitor and validate the lifecycle activities and related deliverables, as well as provide feedback and recommendations.

Task 2.1 – Deliverable Reviews Artifact The IV&V Contractor must develop a Deliverable Reviews Artifact to capture the validation and verification efforts or continue to manage the Deliverable Review section of the existing MSIX Program SharePoint Site in the Department’s intranet. The Deliverable Reviews Artifact shall include at least the following elements: Issue ID, Deliverable Title & Version No., Status, Comments, Source, Responses Notes, Basis for Rejection, Evaluation Category, Page(s)/Section(s) of the Issue, and any additional data elements required to capture compliance with other IV&V-related tasks expressed on this document.

Deliverable(s):

• MSIX Deliverable Reviews Artifact

Task 2.2 – Ongoing Assessment and Analysis of MSIX Contractor’s System Operations The IV&V Contractor shall provide ongoing assessment and analysis of the MSIX Contractor’s system operations against the LCM and industry standards such as Information Technology Infrastructure Library (ITIL), Project Management Body of Knowledge (PMBOK) and Capability Maturity Model Integrated (CMMI).

Task 2.3 – Verify MSIX System Compliance with Privacy and System Security Regulations The IV&V Contractor must validate that the MSIX Contractor complies with the Department of Education’s IT security policy requirements, specifically those outlined in the Handbook for Information Assurance Security Policy (OCIO-01), and other applicable procedures and guidance. The contractor must validate that the MSIX Contractor maintains the MSIX system and the MSIX documentation in compliance with all applicable privacy and information security policies. These policies include the

Federal IT security requirements including, but not limited to, the Federal Information Security Modernization Act (FISMA) of 2014, the Privacy Act of 1974, Office of Management and Budget (OMB) Circular A-130 Appendix III, Homeland Security Presidential Directives (HSPD), the National Institute of Standards and Technology (NIST) standards and guidance, and the Federal Risk and Authorization Management Program (FedRAMP) requirements and guidance.

The IV&V Contractor shall review system design documents, architectural artifacts, and system security documentation upon completion of any updates or changes to the documents or the system by the MSIX Contractor or at least annually, to ensure the relevance and accurate depiction of the implemented system controls and to reflect changes to the system and its environment of operation.

Security documentation must be in compliance with the NIST 800 series and Department policy and guidance. The IV&V Contractor must review system security documentation for deficiencies and lack of compliance with required NIST Special Publications (SPs). System security documentation may include but are not limited to:

• Risk Management Plan

• IT Contingency and Disaster Recovery Plan

• Configuration Management Plan and Repository

• Change Management Plan

• Requirements Management Plan

• Functional Requirements Document

• System Design Document

• NIST Self-Assessment (Annually)

• Remediation Plan (POA&M)

• System Security Plan (SSP)

• Department of Education Data Sensitivity

• Incident Response Plan

• Security Controls Assessment Plan

• System Characterization Document

• System Disposal Plan

• Security Assessment Report (SAR)

• Interconnection Security Agreement (ISA) & Memorandum of Understanding (MOU)

• Privacy Impact Assessment (PIA) and other privacy-related documents

Deliverable(s):

• MSIX Deliverable Reviews Artifact

Task 2.4 – Review all MSIX Deliverables for Quality The IV&V Contractor shall review the content of all MSIX documentation and deliverables for each release associated with an approved baseline change request for an amended business case to ensure it is consistent with the MSIX contract Performance Work Statement (PWS) and the effective implementation of MSIX requirements.

Deliverable(s):

Task 2.5 - Review MSIX Deliverables Compliance with Section 508 of the Rehabilitation Act The Rehabilitation Act requires Federal agencies to make their electronic and information technology (IT) accessible to people with disabilities. Inaccessible technology interferes with an individual's ability to obtain and use information quickly and easily. Section 508 was enacted to eliminate barriers in IT, to make available new opportunities for people with disabilities, and to encourage the development of technologies that will help achieve these goals. The law applies to all Federal agencies when they develop, procure, maintain, or use electronic and information technology. Under Section 508 (29 U.S.C.

794d), agencies must give employees and members of the public with disabilities access to information that is comparable to the access available to others. The IV&V Contractor must review all deliverables developed by the MSIX Contractor for compliance with Section 508 of the “Americans with Disabilities Act” technical standards for web and software accessibility located at 36 CFR 1194.21 and 1194.22. Also, the IV&V Contractor will make sure that all deliverables under this work statement are also Section 508 compliant.

Deliverable(s):

• MSIX Deliverable Reviews Artifact

Task 2.6 – Verify Customer Relationships, Support and Service The IV&V contractor will verify the extent to which the MSIX Contractor establishes positive customer relationships and provides adequate and effective customer service. The IV&V Contractor must develop, administer, and analyze up to two (2) customer surveys annually. These instruments will be used as a tool to collect feedback on customer satisfaction, system performance, and other specific information collection needs. Also, the IV&V Contractor will be responsible for monitoring and identifying patterns related to help desk customer tickets.

Deliverable(s):

• Up to Two (2) Annual Customer Satisfaction Surveys

• Up to Two (2) Customer Satisfaction Surveys Analysis Report

• Help Desk Report and Customer Tickets Review (Monthly)

• MSIX Deliverable Review Artifact

• Monthly Performance Report

Task 2.7 – Ensure MSIX Contractor Provides and Maintains Reliability of System Components Ensure that the MSIX Contractor provides and maintains reliable system hardware that meets performance metrics of the MSIX contract. The IV&V Contractor must review hardware and software infrastructure designs and configurations to ensure that they are complete and accurate for the expected transaction volumes, data storage requirements, and security needs.

Deliverable(s):

• MSIX Database and Performance Requirements Database Report Review (Monthly)

• Monthly Performance Report

Task 2.8 – Ensure MSIX Contractor Effectively Executes Risk Management Processes The IV&V Contractor shall ensure that the MSIX Contractor establishes and executes risk management processes effectively. The IV&V Contractor shall review the MSIX project risk-management process on a continuing basis, including risk review meetings, risk logs, and issue documentation for all phases of the project. These examinations will determine whether the risk-management process is rigorous enough for early identification of significant risks and to support the development of effective mitigation strategies. The MSIX project approach for identifying, tracking, communicating, and mitigating implementation risks must be reviewed on a regular basis. Any concerns resulting from this process must be communicated promptly to the Department’s MSIX Project Manager (PM}.

Deliverable(s):

• MSIX Risk Register Review (Monthly)

• Risk Management Plans Review (Annual)

• Monthly Performance Report

Task 2.9– Verify MSIX Contractor Delivers Quality Software The IV&V Contractor shall verify that the MSIX Contractor delivers quality software developed in accordance with the Department’s LCM framework, ACS-OCIO 1-106. Review MSIX lifecycle documentation, requirements and design decks, Integration Test Scripts, and Integration Test Results for Functional Releases.

Deliverable(s):

• MSIX Deliverable Review Artifact

Task 2.10 – Ensure Effectiveness of MSIX User Training The IV&V Contractor shall evaluate and ensure the effectiveness of MSIX user training provided by the MSIX Contractor. The IV&V Contractor must review training plans and materials to assess the appropriateness of these documents for the intended users. Also, the IV&V Contractor must monitor training delivery and collect users' feedback about how well the training prepared them to perform their roles in MSIX.

Deliverable(s):

• MSIX Deliverables Reviews Artifact

• Users' Feedback Evaluation Report

Task 2.11 – Ensure MSIX Contractor Demonstrates Improved Performance, Reliability, Security, and Reduced Cost of Operating MSIX The IV&V Contractor shall ensure that the MSIX Contractor demonstrates improved performance, reliability, security, and reduced cost of operating MSIX. In addition to the initial design and review of performance measures at the beginning of the contract, performance measurements and metrics documents must be regularly reviewed to determine whether the project performance metrics are adequate and reasonable and whether they contribute to the continued effective management of MSIX.

This assessment shall include reviewing how well the project monitors and measures critical management factors, such as schedule compliance, issue resolution, work products, deliverables, and personnel. Performance measurements and metrics need to be reviewed periodically to identify potential opportunities for the project to incorporate additional industry standards and measurement and metric improvements. This task includes advising MSIX management on new industry innovations and technologies that may result in reduced operations costs.

Task 2.12 – Ensure MSIX Contractor Provides a Successful Electronic System The IV&V Contractor shall continuously oversee project activities to ensure that the MSIX Contractor provides a successful electronic system capable of linking state student record systems and facilitating the electronic exchange of timely and reliable health and educational records to benefit migrant students nationwide. The IV&V Contractor shall also evaluate the Test Readiness Review (TRR) and Production Readiness Review (PRR) reports; report issues identified from IV&V testing; provide comments and observations from IV&V review of requirements and design decks, and complete Integration Test Scripts and Integration Test Results for Functional Releases.

Deliverable(s):

• MSIX Deliverable Reviews Artifact

Task 2.13 – Provide a Risk-Based, Cost-Effective Set of IV&V Services The IV&V Contractor shall provide a risk-based, cost-effective set of IV&V services that will assist MSIX management in reducing high-impact program risks and provide proactive IT and programmatic analysis and recommendations based on proven industry practices and/or in response to evolving legislative requirements.

Task 3: MSIX Business Case Support OME requires the IV&V Contractor to provide expert advice and services in all Capital Planning activities related to the MSIX major investment. The IV&V Contractor shall serve as a Subject Matter Expert (SME) in all areas of IT investment management including earned value analysis, and be familiar with relevant OMB directives for IT projects. The SME shall prepare investment materials to support any Department IT oversight reviews for the MSIX business case. The IV&V Contractor shall ensure that the MSIX business case is well written and accurately reflects the status of the project. The Contractor shall work with the COR to ensure that the MSIX project receives the highest possible OMB score on OMB’s Federal IT Dashboard given the project’s status. The IV&V Contractor shall provide project cost and schedule information during the Department’s Control, Select and Evaluate Phase reviews as well as responses to ad hoc data requests from the Department’s Investment Assistance and Management Team (IAMT).

Task 3.1 – MSIX Business Case Updates MSIX Investment Review and Management Assistance consists of supporting the MSIX project team in the preparation of monthly, quarterly and yearly OMB 300 submissions, entering all monthly, quarterly and yearly OMB 300 submissions via eCPIC, and preparing and modifying the MSIX Business Cases as necessary to meet Department requirements and timelines. The Contractor shall perform the following specific activities supporting this task:

• Research information on the Department Enterprise Architecture (EA), the Federal Enterprise Architecture Business Reference Model (FEA BRM) and the Department’s CPIC process as necessary to complete the updates in a timely manner.

• Provide expertise in all areas of IT investment management including earned value analysis, and be familiar with relevant OMB directives for IT projects.

• Participate in the Department’s IT oversight reviews for MSIX including but not limited to technical architecture reviews, security reviews, and production readiness reviews.

• Provide expert advice and services in all investment management activities and maintain meticulous notes of all changes to MSIX documentation including the rationale for the change and the discussions that precipitated the change in the event this documentation is necessary to support an audit.

• Input all monthly and quarterly updates to the Department’s eCPIC system.

• Ensure that the MSIX business case is well written and accurately reflects the status of the project.

• Work with the Government to ensure that the MSIX project receives the highest possible score on the OMB Federal Dashboard given the project’s status.

• Provide project cost and schedule information during the Department’s Control, Select and

Evaluate Phase reviews as well as responds to ad hoc data requests from the Department’s Investment Assistance and Management Team (IAMT).

• Complete requests for MSIX information during the Department’s Select and Control phases during the Capital Planning Process.

• Assist with the annual IAMT IT budget formulation and execution for major investments.

• Complete ad hoc requests for MSIX project schedule, costs, performance, and risks.

• Attend meetings and briefings on the Capital Planning Process to keep abreast of changes and requirements.

Deliverable(s)

• MSIX Business Case Update and Submissions Evidence(Monthly, Quarterly and Yearly)

• OMB 300 Update and Submissions Evidence(Monthly, Quarterly and Yearly)

• CPIC Overview Presentation Briefing (Semiannual)

• MSIX documentation and reports required to support the Capital Planning Process

• IAMT IT Budget Formulation Document (Annual)

• ECPIC Monthly, quarterly and other updates as required

Task 3.2 – Completion of Program Assessment (PA) The IV&V Contractor shall collect supporting documentation from the primary MSIX Contractor to complete the MSIX annual PA, upload all documentation into IAMT’s SharePoint site (or other designated method of submission) and work with the IAMT Liaison to ensure that all documentation is properly uploaded and ready for review. The Contractor shall work with the IAMT Liaison and COR to respond to corrective actions in the PA Action Plan. To support this task, the Contractor shall perform the following activities:

Review the content of all MSIX documentation and deliverables for each release associated with the annual PA to ensure it meets OMB documentation requirements.

Incorporate IAMT evaluation criteria into the IV&V deliverable review process to verify that all requirements are met in post release documentation reviews.

• Program Assessment (Annual)

Task 3.3 –Completion of Operational Analysis Report (OAR) To support Operational Analysis, it is necessary to prepare and deliver an MSIX OAR. The contractor shall perform the following activities required to support the preparation of this report:

Analyze the MSIX operational system and evaluate its performance and effectiveness at meeting program goals.

Conduct Customer Satisfaction Surveys to be used as input to the OAR.

Manage action plans to address positive or negative costs or performance variances where applicable.

• Operational Analysis Report (Annual)

Task 3.4 – Completion of Analysis of Alternatives (AoA) The OME requires a Contractor to complete an AoA report and update it on following years. The activities required to support the preparation of this report include:

Identify and research alternatives to include Cloud-based solutions for new investments, modernization or enhancements, or Operational Analysis findings as appropriate.

Explain the cost-benefit associated with each alternative.

• Analysis of Alternatives (Annual)

Task 3.5 – Completion of Post-Implementation Review Independent Questionnaire The Contractor shall conduct a Post-Implementation Review (PIR) to identify whether MSIX is performing as planned, minimize the risk of future updates, and identify opportunities for continuous process improvement. The IV&V Contractor must deliver and use the PIR report and lessons learned as part of the overall proactive IV&V activities to:

• Determine how well MSIX achieves its vision.

• Survey the MSIX users to determine satisfaction by function and features.

• Determine the extent to which MSIX is performing as planned.

• Provide findings and recommendations that can be used to minimize MSIX risk issues, including those associated with COTS upgrades.

• Implement continual process improvement across the MSIX program using recommendations and lessons learned from the PIR and industry innovations.

• Gather findings to be used as input to the PIR.

• Post-Implementation Independent Questionnaire (Annual)

• Post-Implementation Review Report (Annual)