Attachment 1 - SOO PRJ0011080 - NetApp System Health Check Services.pdf

NetApp System Health Check

Statement of Objectives

1. DESCRIPTION

The 17 TRSS requires NetApp System Health Check services, which must include a comprehensive health assessment of the NetApp storage systems and provide optimization tuning as needed to these NetApp storage systems (ITS-OPS/UTS). Because this service shall be accomplished onsite and within a Sensitive Compartmented Information Facility (SCIF), on classified systems, this service shall be accomplished on-site by Top Secret (TS) Sensitive Compartmented Information (SCI) cleared personnel and the company(s) authorized to perform this work must have a Top Secret Facility Clearance Letter (FCL). This service shall support the high availability, data protection, security, and storage efficiency of the NetApp equipment (ITS- OPS/UTS). The additional support and expertise shall ensure that the 17 TRSS operational networks continue to operate at peak performance and ensure there is no training downtime and for proactive management versus of reactive.

a. Scope of Work:

i.On-site ii.NetApp System Health Check iii.ITS-Ops and UTS NetApp equipment v.High availability, data protection, security, and storage efficiency vi.Proactive versus reactive management

b. Location: All work will be performed on-site at Goodfellow AFB, San Angelo Texas, Building 523, room 113.

2. PERSONNEL: Contractor personnel shall present a neat appearance and be easily recognized. This may be accomplished by wearing distinctive clothing bearing the name of the company or by wearing appropriate badges that contain the company name and employee name. Employees must have SCI-DCID 6/4 eligibility and be indoctrinated for SI/TK access. In accordance with Department of Defense Manual (DoDM) 5105.21, volume 3, employee eligibility must be verified using the Joint Personnel Adjudication System (JPAS) (or successor system) (reference Enclosure 2, section 3, paragraph f of DoDM 5105.21, volume 3). Scattered Castles (SC) may also be used for employees deemed eligible by the non-DoD Intelligence Community (NSA, CIA, NGA, et al). The employee may be indoctrinated locally if needed as long as the employee has the appropriate eligibility. The company must possess a current Facility Clearance Letter (FCL). In accordance with DoDM 5105.21, volume 3, FCL requirements for access to SCI. Contractor personnel may not be permitted access to SCI based on an interim TOP SECRET FCL. The DoD Component or agency must have a valid contractual requirement to sponsor the contractor for a TOP SECRET FCL for access to SCI. The contractor company must possess a final TOP SECRET FCL. The CSSO must meet SCI eligibility requirements and be indoctrinated for SCI. Contractor employees, to perform work on SCI contracts, must meet SCI eligibility requirements and be indoctrinated for SCI. The contract representative must appoint a local staff member as the local representative as liaison between the company and the Special Security

Office. The contractor shall ensure personnel are compliant with REAL ID Act of 2005 for the purpose of gaining access to Goodfellow Air Force Base.

a. Suitability Investigations. Contractor personnel shall successfully complete, as a minimum, a National Agency Check with Written Inquiries (NACI) and possess current and active Top Secret SCI background investigation, before operating government furnished equipment, and before being given access to government information, or being given access to government SCIF buildings. These investigations shall be submitted by the government at no additional cost to the contractor. The contractor shall comply with the DoD 5200.2-R, Personnel Security Program.

b. Listing of Employees. The contractor shall maintain a current listing of employees. The list shall include employees’ name, social security number, and date of investigation if contract work involves unescorted entry to Air Force restricted or other sensitive areas designated by the installation commander. The list shall be validated and signed by the company Facility Security Officer (FSO) and provided to the Government Representative and ISPM prior to the contract start date. Updated listings shall be provided when an employee's status or information changes.

c. Freedom of Information Act Program (FOIA). The contractor shall comply with DoD Regulation 5400.7/Air Force Supplement, DoD Freedom of Information Act Program, requirements. The regulation sets policy and procedures for the disclosure of records to the public and for marking, handling, transmitting, and safeguarding For Official Use Only (FOUO) material.

d. Additional Security Requirements. In accordance with DoD 5200.01 and AFI 16-1404, the contractor shall comply with AFMAN 33-282, Computer Security (COMPUSEC); AFSSI 7700, Emission Security (EMSEC); applicable AFKAGs, AFIs, and AFSSIs for Communication Security (COMSEC); and AFI 10-701, Operations Security (OPSEC).

e. Controlled Unclassified Information (CUI) Requirements. The contractor shall comply with DoDI 5200.48_DAFI 16-1403 regulation which sets policy and procedures for the marking, handling, transmitting, safeguarding, and destruction of Controlled Unclassified Information (CUI). The contractor is required to protect controlled unclassified information and/or indicators that may reveal classified information, sensitive or critical information or information that can be collected in aggregate to identify vulnerabilities. Specifically, the contractor is prohibited from disclosing, without express permission from the United States Air Force, any floor plans, schematics, or any other documents containing information or information gleaned from said documents on any government facilities or its contents regardless of whether it is part of the infrastructure or otherwise.

f. OPSEC Requirements. OPSEC is a structured process that identifies critical information, analyzes friendly actions, integrates threat analysis and risk assessments, then helps personnel apply protective measures to mitigate unacceptable risk. The contractor is required to protect controlled unclassified information and/or indicators that may reveal classified information, sensitive or critical information or information that can be collected in aggregate to identify vulnerabilities. Specifically, the contractor is prohibited from disclosing, without express permission from the United States Air Force, any structured process that identifies critical information, analyzes friendly actions, integrates threat analysis and risk assessments that helps personnel apply protective measures to mitigate unacceptable risk. The basis for the OPSEC program is AFI 10-701.

3. QUALITY CONTROL: The contractor shall ensure that all work performed under this SOO meets the quality established in section 9, General Tasks, and section 11, Specific Tasks.

4. PHYSICAL SECURITY:

a. Vehicle Passes: The Contractor shall obtain vehicle passes for each vehicle used on Goodfellow AFB (GAFB) during the performance period. The necessary application for vehicle passes can be obtained by contacting the Government Representative. Before starting the work, the Contractor shall provide a list of all personnel that will work on GAFB, (including Social Security number and driver’s license number and state), to permit security screening. Any workers who are not cleared will be identified and not permitted to work on GAFB.

b. Government Property: The Contractor shall be responsible for safeguarding Government property associated with the required work. Facilities, equipment, and materials shall be secured at the close of each work period.

5. HOURS OF OPERATION: The contractor shall perform the on-site tasks of this SOO during a normal day. These hours are normally defined as 0730 to 1630 Central Standard Time, Monday through Friday, except Federal Holidays. Requests for changes or exceptions to this work schedule may be submitted to the Government Representative as required. These requests will be evaluated and approved or declined by the Government Representative, based on impact to the cost, scope, and schedule of the project.

6. CONSERVATION OF UTILITIES: The Contractor shall instruct employees in utilities conservation practices and shall be responsible for operating under conditions which preclude the waste of Government utilities.

7. GOVERNMENT FURNISHED UTILITIES AND SERVICES: The Government shall provide without costs to the Contractor, the utilities necessary (limited to water & electricity) to accomplish the tasks specified in this work description.

8. CONTRACTOR FURNISHED EQUIPMENT, PARTS, MATERIALS, and SERVICES: Except for the utilities, services and equipment specifically stated to be Government furnished, the contractor shall provide all personnel, equipment, tools, transportation, and supervision required.

9. GENERAL TASKS:

a. The Contractor shall conduct all service on site.

b. Any deviation from or changes to the terms outlined in the contract (including this SOO) are subject to the approval of the Government Representative.

c. During the performance of the work within the requirements of this contract and until final completion and acceptance thereof, the Contractor shall exercise the utmost care to avoid accident or injury to persons or property.

10. SPECIFICATIONS: It is the contractor’s responsibility to ensure equipment is modified and maintained in accordance with the manufacturers recommended methods by a professional who is knowledgeable of this specific product to prevent exclusion of manufacturer’s warranty.

11. SPECIFIC TASKS: The objective of this project is to provide the customer with NetApp System Health Check services.

NetApp Professional must include a comprehensive health assessment of their NetApp storage systems and provide optimization tuning as needed to these NetApp storage systems on ITS-OPS and UTS.

NetApp Professional shall arrive onsite 30 days from date of award and return every six months thereafter, for the span of three days, eight hours per day, for both systems.

The NetApp Professional shall conduct all NetApp System Health Check services in full coordination with on-site government staff.

The vendor will conduct all service on-site.

These NetApp storage systems are fully operational and functional and must remain in both of those states continuously during the NetApp System Health Check services, and after this service concludes.

The vendor must be an authorized reseller of the NetApp Health Check Service (Part # PS-TM-CONSULT-DAY-TE-ZA).

The vendor will provide service to be accomplished by Top Secret (TS) Sensitive Compartmented Information (SCI) cleared personnel.

The NetApp Professional shall adhere to manufacturer’s recommended methods.

At the end of the NetApp System Health Check services activities, the NetApp Professional shall provide, electronically, a copy of the Health Assessment Report and all optimization procedures executed, identifying and fully documenting all system configuration changes and updates to achieve system optimization and tuning.

The NetApp Professional shall use NetAppDocs PowerShell Module to collect configuration data, process the data against rule definitions, and export the results to an Excel file. This report will include best-practice recommendations and shall be sanitized for export prior to being removed from classified spaces.

The NetApp Professional shall provide the NetAppDocs Health Assessment Report in MS Excel and XML formats, as well as in an online format.

NetApp Professional Services will coordinate and confirm entitled systems with the applicable NetApp Support Account Manager (SAM).

NetApp shall collect system data with NetAppDocs and ConfigAdvisor, review and analyze system configuration, and deliver the NetAppDocs Health Assessment Report.

All government system data acquired by the NetApp Professionals during the execution of these tasks remain the property of the US government and shall not be retained by the NetApp Professional contractors and/or used for other purposes, unless expressly authorized by US government personnel.

12. PERIOD OF PERFORMANCE: Period of Performance will be one base year beginning on date of award, with up to four option years. NetApp Professional shall arrive onsite 30 days from date of award and return every six months thereafter, for the span of three days, eight hours per day, for both systems. In the event the contractor encounters a delay that may affect the performance of this contract, the contractor shall immediately call the Government Representative to coordinate the delay and obtain approval for the delay in writing.

Attachment 1: NetApp System Health Check – DATASHEET

NetApp Health Check Service Brief1.