FY25 CIMS 2.0 Performance Work Statement (PWS)_DRAFT.pdf

DR

AF

T

National Oceanic and Atmospheric Administration U.S. Department of Commerce

PerformanceWork Statement (PWS)

National Oceanic and Atmospheric Administration (NOAA) Office of the Chief Information Officer (OCIO) Service Delivery Division (SDD) Critical Infrastructure Management Services (CIMS)

Solicitation Number Date Version

TBD September 19, 2024 3.0

T

TABLE OF CONTENTS

PART 1. INTRODUCTION

1.1. Purpose

1.2. Background

Data Centers at NOAA Physical Access Control at NOAA Video Surveillance at NOAA Building Management, Automation, and Control Systems at NOAA Critical Facility Management and Engineering at NOAA

1.3. Critical Infrastructure Management Services (CIMS) Program

1.3.1. NOAA Enterprise Data Center (EDC) Service

1.3.2. NOAA Enterprise Physical Access Control Service (ePACS)

1.3.3. NOAA Enterprise Video Surveillance Service (eVSS)

1.3.4. NOAA Enterprise Critical Facility Management Services

1.3.5. NOAA0520 Information System

1.4. Primary Service Locations

PART 2. REQUIREMENTS

2.1. Critical Infrastructure Management Services (FFP)

2.1.1. Data Center Management

2.1.2. Data Center Engineering and Design

2.1.3. Infrastructure Monitoring and Management

2.1.4. Compliance and Standardization

2.1.5. Customer Engagement and Feedback

2.1.6. Innovation and Technology Advancement

2.1.7. Information System Management and Support

2.2. On-Site Facility Support Services (T&M)

2.3. Facility Security Support Services (T&M)

2.4. Critical Facility Systems Professional Services Support (T&M)

2.5. Critical Facility Maintenance Services (T&M)

2.6. Critical Facility Projects (T&M)

2.7. Travel (T&M)

Travel Scope and Management:

Guidelines and Compliance:

Flexibility and Responsiveness:

PART 3. STAFFING

3.1. Fairmont, WV Support

3.2. Seattle, WA On-Site Support

3.3. DC Metro On-Site Support

3.4. Boulder, CO On-Site Support

3.5. Support Expectation

3.6. Key Personnel

T

PART 4. CONSTRAINTS AND RISKS

4.1. Budgetary Constraints

4.2. Compliance and Regulatory Constraints

4.3. Security and Privacy Constraints

4.4. Operational Constraints

4.5. Resource and Staffing Constraints

4.6. Technological Constraints

4.7. Reporting and Documentation Constraints

4.8. Time Constraints

4.9. Quality Constraints

PART 5. DELIVERABLES

PART 6. PERFORMANCE METRICS

PART 7. TYPE OF ORDER

PART 8. TRAVEL

PART 9. CONTRACT PERFORMANCE REQUIREMENTS

10.1. Period of Performance

10.2. Hours of Operation and Place of Performance

10.3. After-Hours Support and On-Call Services

10.4. Recognized Holidays

10.5. Security Requirements

10.6. Contracting Officer’s Representative (COR)

10.7. Conservation of Utilities

10.8. Post Award Conference/Periodic Progress Meetings

10.9. Contract Manager

10.10. Processing and Identification of Contractor Employees

10.11. Quality Assurance

10.12. Invoicing

PART 10. DEFINITIONS AND ACRONYMS

PART 11. GOVERNMENT FURNISHED PROPERTY, EQUIPMENT, AND SERVICES

12.1. General

PART 12. CONTRACTOR FURNISHED PROPERTY, EQUIPMENT, AND SERVICES

13.1. General

13.2. Secret Facility Clearance

PART 13. APPLICABLE PUBLICATIONS

TECHNICAL EXHIBIT 1. CONTROLLED UNCLASSIFIED INFORMATION (CUI)

TECHNICAL EXHIBIT 2. EXAMPLE LIST OF ASSET TYPES

T

PART 1. INTRODUCTION

This Performance Work Statement (PWS) defines the Government's requirements in terms of the Government’s objectives and measurable outputs. The Contractor must produce a performance work statement (PWS) that satisfies the Government’s objectives.

1.1. Purpose

This Performance Work Statement (PWS) outlines the requirements for the National Oceanic and Atmospheric Administration (NOAA), Office of the Chief Information Officer (OCIO), Service Delivery Division (SDD), Critical Infrastructure Management Services (CIMS) program which includes:

● NOAA Enterprise Data Center (EDC) Service

● NOAA Enterprise Physical Access Control Service (ePACS)

● NOAA Enterprise Video Surveillance Service (eVSS)

● NOAA Enterprise Critical Facility Management Services

CIMS support will provide the services needed to maintain key NOAA mission activities.

1.2. Background

The NOAA Office of the Chief Information Officer (OCIO) and High Performance Computing and Communications (HPCC) is responsible for all NOAA information and information technology (IT) resources.

The Office of the Chief Information Officer (OCIO) provides mission-essential enterprise-wide IT services such as email, calendar, web hosting, administrative computing, networking, security monitoring, and security incident response. Through the NOAA OCIO/SDD/CIMS program, the office ensures cost-effective, enterprise-wide Critical Infrastructure support to NOAA’s mission.

The OCIO has extensive planning, reporting, and oversight responsibilities for IT investments, IT security, Information Quality, and Privacy as well as the Freedom of Information Act (FOIA). These responsibilities originate in a number of Federal laws including the Clinger-Cohen Act, the Federal Information Management Security Act (FISMA), the Information Quality Act, the Privacy Act, and the E-Government Act.

The Chief Information Officer (CIO), and the entire NOAA OCIO team are committed under a Shared Services Model to: reduce costs; improve services; and protect the mission.

Under the Enterprise Shared Service Model, NOAA's Science, Service and Stewardship mission is propelled through user-centric solutions. Leadership, through the Office of the CIO, directs the improvement of NOAA-wide IT system operations and service delivery, while promoting the effective use of IT to support the mission and ensure effective delivery of products and services to our customers within NOAA, to our partners and to the public.

Data Centers at NOAA NOAA, as an agency, operates a vast conglomeration of over 200 data center locations across the country, integral to its operational missions. These range from small facilities managed by local Line Office or Program Office staff to larger, more complex centers that include dedicated power infrastructure, chiller plants, and modular data center systems. The ongoing initiative is to enhance visibility, monitoring, and management of these centers, aligning them with enterprise-wide objectives. The focus is on consolidation where feasible, improving efficiency, and ensuring resilience. The contractor must understand that while NOAA’s OCIO manages a significant inventory of these centers, the goal is to expand control and improve the overall infrastructure to meet evolving agency

T requirements. This includes adhering to the Data Center Optimization Initiative (DCOI) and any follow-on legislation, guidance, or directive for Data Center management from the Federal Government, optimizing performance, ensuring sustainability, and improving the end-user experience.

As part of this service, CIMS provides a white glove experience for customers. Management, Monitoring, Operations, Preventative Maintenance, Remote Hands Support, and more are included in this service offering.

Physical Access Control at NOAA NOAA has more than 400 physical sites across the country, many equipped with PACS systems, numbering around 150. The Department of Commerce (DOC) Office of Security (OSY) and the Office of the Chief Administrative Officer (OCAO) handle the implementation of HSPD-12 and facility security. The CIMS team, within the OCIO, supports OSY and CAO by owning and managing the PACS system. A separate contract is in place today for the high-level administration and engineering of the PACS application (CCure 9000) with a certified CCure Integrator. CIMS supports the system by running security scans; assessing, and remediating vulnerabilities for the PACS support infrastructure; and, monitoring and maintaining the infrastructure and servers it runs on.

CIMS is also responsible for the technical implementation of administrative and operational policies, and guidance as applicable to the PACS. CIMS provides mid-level support for issues related to the day-to-day administration of the CCure 9000 system. Individual sites with issues or questions will be addressed by the CIMS team to the best of their ability and escalated to the system engineers (CCure Integrator) as needed.

Video Surveillance at NOAA NOAA's broad range of physical sites, many with independent VSS systems, presents a unique challenge. With an unknown number of disparate VSS systems in place, CIMS focuses on modernizing the security of NOAA facilities supported by the CIMS program today and those that subscribe to the service in the future by assisting in the design and management of an Enterprise Video Surveillance System. This involves building and maintaining a best-in-class Enterprise Video Surveillance System (eVSS) support infrastructure and managing the video surveillance platform (Milestone). Managing the platform includes adding/removing cameras, creating views, and basic troubleshooting of the system. CIMS is also responsible for performing security scans; assessing and remediating vulnerabilities for the VSS support infrastructure, and monitoring and maintaining the infrastructure and servers it runs on. CIMS also maintains all of the component parts (cameras) that make up the system including firmware upgrades, configuration, and maintenance. Engineering of the platform, like with the PACS, is done by a third party integrator. CIMS provides mid-level support for issues related to the day-to-day administration of the Milestone system. Individual sites with issues or questions will be addressed by the CIMS team to the best of their ability and escalated to the system engineers (Milestone Integrator) as needed.

Building Management, Automation, and Control Systems at NOAA NOAA's broad range of physical sites, many with independent control systems, also presents a unique challenge.

With an unknown number of disparate BAS/BMS systems in place. The CIMS team assists in engineering, modernization, and integration of systems across NOAA facilities supported by the CIMS program today and those that subscribe to the enterprise BAS/BMS service in the future. CIMS has built and maintains a best-in-class Enterprise Building Management System, based primarily on the JCI Metasys and Tridium N4 platform, to support, monitor, manage, and control functionality of critical facilities and mission essential infrastructure. CIMS is responsible for performing security scans; assessing and remediating vulnerabilities for the Enterprise BMS support infrastructure, and monitoring and maintaining the infrastructure and servers it runs on.

Administration and Engineering of the platform is typically done using JCI professional services. The contractor should aim for cost savings through consolidation, novel implementation strategies, standardizing processes, and enhancing support and the user experience.

T

Critical Facility Management and Engineering at NOAA NOAA's portfolio of physical sites, including NOAA-owned and GSA-leased locations, requires diverse and adaptive management strategies. The CIMS team navigates various operational parameters, and is capable of fulfilling responsibilities ranging from engineering solutions for owned facilities to collaborating with lessors for maintenance and operations at leased facilities. The criticality lies in ensuring that all facilities support NOAA’s mission effectively, safely, and efficiently. The CIMS team closely coordinates with facility managers, program managers, and other stakeholders. The aim is to enhance visibility into and improve operations, respond adeptly to critical facility issues and devise solutions to facility based IT issues, support facilities with their BMS and BAS needs; and oversee facility maintenance to ensure it meets the manufacturer’s and Government’s standards.

Understanding the current landscape of NOAA’s Critical Facility IT infrastructure and facility management is crucial for contractors preparing a comprehensive proposal. Contractors should be ready to address the following:

● Adapting to the Scale and Complexity: The contractor must be capable of providing engineering services across a diverse range of facilities, each with unique operational requirements and challenges.

● Technical Proficiency and Innovation: Proficiency in current technologies and the flexibility to adapt to emerging ones is key. The contractor should also bring innovative solutions to improve efficiency, security, and reliability.

● Compliance and Best Practices: Strict adherence to Federal regulations, security standards, and best practices in IT and facility management is essential.

● Collaborative Approach:Working in concert with various NOAA departments, federal agencies, and other stakeholders is vital for the seamless operation and management of facilities and IT systems.

● Strategic Vision for Improvement and Growth: The contractor should not only maintain current operations but also provide strategic insights for the growth and enhancement of NOAA’s facilities based IT infrastructure.

T

1.3. Critical Infrastructure Management Services (CIMS) Program The Critical Infrastructure Management Services (CIMS) program includes four major service areas:

1.3.1. NOAA Enterprise Data Center (EDC) Service

The EDC Service area is a cornerstone of NOAA’s IT infrastructure, providing robust data center and IT space management services across NOAA’s various line and staff offices. The service supports both mission-critical, mission-essential, and non-mission essential functions. This requirement includes comprehensive management of data center spaces, as well as preventative and predictive maintenance of supporting critical facility systems. The contractor is expected to possess a deep understanding of IT centric Mechanical, Electrical, and Plumbing (MEP) infrastructure, specializing in monitoring and managing functions that ensure the reliability and security of data center operations.

Key responsibilities include expert data center engineering and support services, which encompass engineering support and on-site and remote hands support such as rack/stack of servers, basic disk replacement, cabling, and hardware support. Additionally, the service manages an equipment inventory and ensures compliance with the latest industry standards and best practices in data center management. The service requires a proactive approach to maintenance, capacity planning, and contingency planning to prevent downtime and quickly respond to any service disruptions.

EDC Service offerings include:

● Data Center Assessment Services This EDC Service provides Environmental; HVAC; Fire & Life Safety; Physical Security; and Power assessments for client spaces to provide them with a comprehensive understanding of their IT or data center space. Assessments result in a comprehensive report including CFD models, one-line diagrams, recommendations for improvement, industry standard documentation, maintenance plans, repair and replacement recommendations; and other similar products.

● Data Center Colocation Services This EDC Service provides space to house customer systems. This space is managed, monitored, and professionally maintained; providing customers with a white-glove experience.

● Data Center Engineering and Design Services This EDC Service provides Subject Matter Experts (SMEs) in Data Center Operations and assists customers at all stages of their project including technical project management; requirements gathering;

oversight of architectural & engineering efforts; quality control; and commissioning activities related to data centers and related IT and MEP spaces.

● Data Center Management Services This EDC Service bridges the gap between Facilities Management and Data Center Management and supports all aspects of Data Center operations. EDC works with local facilities management staff, IT staff, and related contractors to ensure operations and maintenance activities are planned, scheduled and executed smoothly to minimize issues and service disruption.

● Data Center Monitoring This EDC Service provides monitoring, insights, and visibility into the health and wellness of the Data Center by tracking metrics and sending alerts or notifications when readings surpass thresholds.

Additionally, monitoring and alerting data is stored so that retrospective analysis can be performed to detect any historical trends that might highlight or indicate potential or existing issues. The EDC service manages and maintains an Enterprise DCIM system to achieve superior results in this service area.

T

1.3.2. NOAA Enterprise Physical Access Control Service (ePACS) ePACS is crucial for ensuring the physical security of NOAA’s campuses, facilities, and spaces. The service area focuses on delivering physical access control services including the design, installation, and management of badging systems, access control, alarm systems, and intrusion detection systems. The contractor’s role is to provide seamless integration and management of these systems, ensuring high-level security and efficient operation.

This service area requires a nuanced approach to implementing Homeland Security Presidential Directive 12 (HSPD-12) across NOAA’s facilities. This involves credential issuance, management, and visitor access management. The contractor must demonstrate expertise in both technical and policy aspects of physical security, offering innovative solutions and maintaining the highest standards of security and privacy.

NOAA is working towards a modernized, consolidated, and Enterprise approach to PACS. Consolidation (Federation) improves NOAA’s security posture, complies with directives and integrates resource, privilege, and policy management for identity based access control at an enterprise level, which achieves cost savings and efficiencies while preserving local facility access control decisions. PACS modernization involves integrating PACS at the enterprise level, which achieves cost savings and efficiencies while preserving local access control decisions. User identity and credential data from authoritative sources and are supported by enterprise management. PACS modernization includes the use of the CAC or PIV card in order to gain physical access to a federally controlled facility, in accordance with HSPD-12.

ePACS Service offerings include:

● Physical Security Systems Assessment Services This ePACS service provides customer sites with a general assessment of their existing ePACS implementation. These assessments may include on-site inspection of the existing system and review of a site’s most recent physical security assessment or FPS assessment. The output of these assessments may include recommendations for better or enhanced security controls in alignment with FISMA, FICAM, and FPS standards for Federal facilities specifically related to the physical access control system at the facility. This can also involve making recommendations for a replacement (ePACS) implementation that is on the Enterprise system.

● Physical Security System Management This ePACS service provides management of the security system at a facility including maintaining a component inventory of all security panels, badge readers, and related component parts; providing general troubleshooting; managing access requests through a developing process NOAA is implementing in ServiceNow for access requests and approvals; and related management tasks to ensure the ePACS system at sites using the NOAA ePACS system are in good working order and are meeting FICAM and Federal facility security requirements of PACS. This service supports system changes and augmentation projects to ensure the ePACS at each site is continuously improved to meet the site’s needs.

● Physical Security System Maintenance This ePACS service involves scheduling, managing, tracking, documenting, and communicating maintenance actions at sites. NOAA’s ePACS service ensures that all ePACS components are well maintained to provide the best and most reliable functionality for each site. This involves coordinating with NOAA’s PACS Integrator to ensure maintenance is performed on time; gathering documentation on maintenance work performed; storing that information in the Government’s CMMS system; ensuring notifications for maintenance are sent out; and where necessary, managing vendor relations, contract renewals for maintenance, and repair requests using the Government’s CMMS.

T

The contractor will be expected to work with the PACS integrator to monitor, maintain, improve, and expand NOAA’s ePACS system.

1.3.3. NOAA Enterprise Video Surveillance Service (eVSS)

eVSS is integral to NOAA’s overall security posture, requiring the contractor to deliver high-quality video surveillance services. This includes the guidance, design, installation, management, and maintenance of video surveillance systems. The contractor must ensure these systems are robust, resilient, and capable of addressing NOAA's unique security needs.

In addition to managing video storage systems and video-based alarm and intrusion detection systems, the contractor is responsible for the design, implementation, and maintenance of these systems across NOAA facilities. This role demands a combination of technical acumen in surveillance technology and a strategic approach to security, ensuring comprehensive coverage and rapid response to changing industry standards and technologies.

NOAA has built an eVSS that it is working to grow over the next five (5) years into a nationwide system that supports the physical security and facility based situational awareness needs of the agency.

eVSS Service offerings include:

● Video Surveillance Systems Assessment Services The eVSS service provides customer sites with a general assessment and evaluation of any existing video surveillance systems. The goal of the assessment is to ensure optimal performance, security, and compliance with industry and government standards. The output of these assessments may include recommendations for better or enhanced security controls in alignment with FISMA, FICAM, and FPS standards for Federal facilities specifically related to the physical access control system at the facility. The output of these assessments may include a detailed assessment report outlining findings and recommendations, a prioritized action plan for addressing identified issues and improving system performance, as well as consultation with experts to discuss assessment results and implementation strategies.

● Video Surveillance System Management This eVSS service provides management of the video surveillance system including a component inventory. The management services include maintenance and inspection, security monitoring, footage management, reporting and analysis. By providing general troubleshooting; managing eVSS requests through a developing process NOAA is implementing in ServiceNow for eVSS monitoring requests; and related management tasks to ensure the eVSS system at sites using the NOAA eVSS system are in good working order and are meeting FICAM and Federal facility security requirements of PACS. Ensuring the system is performing these duties and adhering to best practices, the video surveillance system can be effectively managed to enhance security, protect assets, and ensure the safety of personnel within the organization.

● Video Surveillance System Maintenance The eVSS service maintains all of the components of the Video Surveillance System. This eVSS service involves scheduling, managing, tracking, documenting, and communicating maintenance actions at sites.

NOAA’s eVSS service ensures that all eVSS components are well maintained to provide the best and most reliable functionality for each site. This involves coordinating with NOAA’s PACS Integrator to ensure maintenance is performed on time; gathering documentation on maintenance work performed; storing that information in the Government’s CMMS system; ensuring notifications for maintenance are sent out; and where necessary, managing vendor relations, contract renewals for maintenance, and repair requests using the Government’s CMMS.

T

The contractor will be expected to work with the PACS integrator to monitor, maintain, improve, and expand NOAA’s ePACS system.

1.3.4. NOAA Enterprise Critical Facility Management Services

This service area supports facilities that are essential to NOAA’s critical mission support functions. The contractor is tasked with providing guidance, design, engineering, construction, management, operations, maintenance, and support services. The role encompasses a wide range of responsibilities, including managing Building Management Systems (BMS), fire alarm systems, and critical mechanical and electrical systems.

The contractor must demonstrate capabilities in managing facility operations that vary in function and complexity, ensuring all critical systems are operational and well-maintained. This includes regular assessments, upgrades, and employing best practices in facility management. Close coordination with NOAA stakeholders and other contractors and stakeholders is essential to ensure that the facilities are managed efficiently and can support NOAA's diverse mission requirements.

The contractor should serve as the Subject matter expert for BMS systems supporting critical IT spaces and ensure that these systems are operating to reduce cost and improve efficiency.

1.3.5. NOAA0520 Information System

The NOAA0520 Information System is a pivotal component of NOAA's Critical Infrastructure Management Service (CIMS), classified as a FISMA HIGH information system and recognized as a High Value Asset (HVA). This system is instrumental in managing, supporting, operating, and maintaining the extensive array of NOAA’s campuses, facilities, buildings, and spaces.

The system is characterized by its complexity and evolution, comprising predominantly Microsoft Windows server systems running various enterprise applications. Its infrastructure includes a diverse range of components such as monitoring devices, Supervisory Control and Data Acquisition (SCADA) systems, Operational Technology (OT), and an assortment of IT infrastructure related to monitoring, managing, and controlling mechanical systems, power systems, plumbing systems, and security systems.

Key Components and Responsibilities:

Power Management Systems: This includes management of Power Distribution Units (PDUs), Automatic Transfer Switches (ATS), Manual Transfer Switches (MTS), Generators, Uninterruptible Power Supplies (UPS), Rack PDUs (rPDU), and related components.

Environmental Monitoring: The contractor is responsible for overseeing environmental monitors and Computer Room Air Conditioners (CRAC), ensuring optimal environmental conditions within data centers and critical facilities.

Surveillance Systems: The system encompasses surveillance cameras and related equipment requiring management and operational oversight to ensure security and efficient control.

Control Systems: The system encompasses SCADA, OT, and Human Machine Interface (HMI) devices, requiring management and operational oversight to ensure security and efficient control.

IT Systems and Applications: The NOAA0520 Information System integrates a range of major applications including Nlyte Data Center Infrastructure Management (DCIM), Milestone xProtect Video Surveillance System (VSS), Software House CCure 9000 Physical Access Control System (PACS), JCI Metasys Building Management System (BMS), and Tridium Niagara 4 Building Management System

T

(BMS). The Contractor is expected to ensure these systems are efficiently managed, maintained, and upgraded as necessary.

Monitoring: The NOAA0520 Information System makes use of Nagios and Nlyte for monitoring all of the information system devices, services, and component parts. The Contractor is responsible for the ongoing management, maintenance, and engineering of these systems to ensure it’s used to its full potential and all of the information system devices, services, and component parts are monitored.

Authentication and Access Management: The system's security framework is integral to its operation.

It involves managing authentication through NOAA’s Identity Credentialing and Access Management (ICAM) service using Single Sign On (SSO) based on Security Assertion Markup Language (SAML), Open Authorization (OAuth) and, in some cases, Lightweight Directory Access Protocol (LDAP).

Infrastructure Support: Support for the information system is provided by Microsoft Windows Server systems managed through an Active Directory, a service delivered by NOAA’s High Availability Enterprise Service (HAES) team. The vast majority of the infrastructure is run on Microsoft HyperV systems.

The NOAA0520 Information System, with its growing and continually evolving nature, demands a contractor capable of handling a sophisticated and multifaceted IT environment. The contractor must possess the technical expertise and strategic acumen to manage this complex system, ensuring its reliability, security, and alignment with NOAA’s mission-critical operations. This includes adapting to emerging technologies, maintaining compliance with Federal IT standards, and effectively responding to NOAA’s evolving requirements.

T

1.4. Primary Service Locations

The Contractor is expected to provide high-quality technical, management, administrative, operations, design, engineering, and support services to meet performance objectives for NOAA’s CIMS program in support of the following locations and to support NOAA’s planned future facility inventory as the CIMS program grows.

Robert H. Mollohan Research Center (RMRC), Fairmont, WV A significant NOAA facility with a lease of over 135,000 sq.ft. for office, data center, and mission support space.

The contractor is responsible for comprehensive facility management, including technical support, engineering, data center operations, and liaison with the GSA for facility improvements. Key tasks include maintenance of critical data centers, support for on-site customer needs, and management of various projects, both small and large-scale. At this facility, an Operations and Maintenance (O&M) contractor is used to provide the day-to-day support for MEP infrastructure. The Contractor will assist the Government in monitoring the performance of the O&M contractor to ensure all of the work is completed correctly and to the Government’s standards.

David Skaggs Research Center (DSRC), Boulder, CO A 405,000 square foot facility housing multiple data center spaces and office areas. Contractor responsibilities encompass oversight of operations and maintenance tasks, coordination of customer projects, and monitoring of CIMS managed rooms. Collaboration with GSA support staff for campus management and various construction and improvement projects is essential. The contractor will oversee operations and maintenance activities, support infrastructure projects, and manage the small PACS and VSS systems supporting CIMS managed rooms.

IAD-1, Ashburn, VA A commercially leased data center space requiring management of customer needs within the leased area. The contractor's role includes monitoring and maintenance of the data center to ensure smooth operations and a well-maintained environment. The contractor will oversee operations and maintenance activities, support infrastructure projects, and manage the PACS and VSS systems.

Norfolk Regional Center (NRC), Norfolk, VA The Contractor will support a small computer room, managing and monitoring its operations. This includes support for infrastructure projects and management of the PACS and VSS systems.

Western Regional Center (WRC), Seattle, WA A comprehensive NOAA owned campus requiring support for critical data center operations and related infrastructure. The contractor liaises with the Office of the Chief Administrative Officer (OCAO) and the Facility Manager’s office, providing project and construction management services as well as full oversight of two (2) roughly 5,000 sq.ft. data centers on the campus and management of the PACS and VSS systems. Two other smaller data centers exist today that will need to be consolidated into the larger ones.

NOAA Center for Weather and Climate Prediction (NCWCP), College Park, MD CIMS plans to manage a 10,000 sq. ft. data center and telecommunications infrastructure spaces.

Responsibilities include overseeing and managing the facility’s security requirements and the implementation, operations, and management of PACS, VSS, and related systems.

NOAA Satellite Operations Facility (NSOF), Suitland, MD A GSA facility where the contractor manages the facility’s security requirements and implements, operates, and manages PACS, VSS, and related systems. This facility includes a data center that may be managed under the EDC service in the future.

The aforementioned locations are the primary area of responsibility of the CIMS program today, but the CIMS program is growing rapidly and is looking to grow from this base area of support to other NOAA locations across

T the country including Hawaii and Alaska. The Contractor should have the capability and capacity to grow and manage and provide services across a multitude of additional locations as needed.

Silver Spring Metro Center 1 (SSMC1), Silver Spring, MD This facility is a GSA-owned location where NOAA leases 6 floors of space. Support involves managing telecom closets across 6 floors. The contractor will oversee operations and maintenance activities, support infrastructure projects, and manage the PACS and VSS systems. The Contractor will liaise with GSA to address MEP support needs and ensure NOAA’s MEP systems are well maintained.

Silver Spring Metro Center 2 (SSMC2), Silver Spring, MD This is a privately owned, GSA-leased facility. Similar to SSMC1, this location entails managing telecom closets and data center spaces across 19 floors. Responsibilities include monitoring operations, maintaining infrastructure, and overseeing PACS and VSS systems.

Silver Spring Metro Center 3 (SSMC3), Silver Spring, MD This is a privately owned, GSA-leased facility. Similar to SSMC2, the contractor will manage telecom closets across 15 floors, oversee a data center space, and manage operations and maintenance activities related to the data center and telecom rooms. Additionally, the role involves supporting infrastructure projects and managing and overseeing PACS and VSS systems and the small building management system used to manage the NOAA owned MEP infrastructure in the building.

Silver Spring Metro Center 4 (SSMC4), Silver Spring, MD This is a privately owned, GSA-leased facility. Similar to SSMC3, This location requires managing telecom closets across 13 floors, monitoring and overseeing operations and maintenance activities, and managing and overseeing PACS and VSS systems.

T

PART 2. REQUIREMENTS

2.1. Critical Infrastructure Management Services (FFP)

The Contractor must work to support the service areas and service offerings of the CIMS team to provide an Enterprise approach for service delivery; achieve the highest customer satisfaction; ensure service delivery meets industry standards; and that metrics required by the program and the NOAA CIO are met.

2.1.1. Data Center Management

Requirement: Ensure comprehensive management and operational excellence in data centers and critical facilities, including system upgrade planning, capacity planning, risk management, inventory management, space management, monitoring, alerting, engineering support, and compliance with industry and applicable Federal standards.

The Contractor must: Provide detailed operational reports, maintenance logs, and project updates; Establish clear communication protocols for effective stakeholder engagement; Regularly update NOAA stakeholders on operational status and any critical issues; Implement a system for timely reporting of incidents and anomalies; and Maintain transparency and accuracy in all reporting and documentation.

The Contractor must:

A. Support Infrastructure Upgrades and Capacity Analysis:

1. Conduct routine capacity and infrastructure upgrade analysis for NOAA data centers and related

Facility projects.

2. Ensure efficiency and scalability are prioritized.

3. Provide Data Center Engineering Expertise during the planning, design, construction, installation, commissioning, operations and maintenance lifecycle, and decommissioning phases of data centers.

4. Review construction drawings and proposals and provide the Government with expert analysis and feedback.

B. Facilitate Risk Management and Contingency Planning

1. Implement robust risk management protocols and contingency planning for each facility.

2. Mitigate operational risks to critical MEP infrastructure.

3. Make recommendations for facility improvements to address risks.

4. Provide engineering support for improvements and manage CP and RM projects.

C. Inform NOAA on Environmental Standards Compliance

1. Inform the Government on its compliance with environmental standards and energy efficiency benchmarks in data center operations.

2. Make recommendations for improvements and provide assessments of the current systems as requested.

D. Manage Maintenance

1. Oversee and manage preventive maintenance for critical systems to prevent downtime.

2. Ensure preventative maintenance is conducted to manufacturer’s specifications.

3. Ensure all PM work is documented in the Government’s CMMS system in a timely manner.

4. Use historical data to provide the Government with operational and maintenance recommendations to ensure systems continue to operate.

T

E. Perform Data Center Asset Management NOAA currently maintains approximately 2200 assets. NOAA expects this list to continue to grow as the program continues to expand its footprint.

1. Ensure all assets supporting the Government's Critical Facility Spaces in managed facilities are fully documented in the Government’s CMMS system. Assets may include but are not limited to the list provided in TECHNICAL EXHIBIT 2.

2. Update asset details as systems are upgraded, modified, replaced, and maintained.

3. Report on the lifespan and replacement of devices to ensure the Government is aware of aging systems.

F. Manage Cooling and Power Distribution

1. Monitor and manage cooling systems to optimize data center performance using the

Government’s BMS systems.

2. Monitor and manage power distribution systems to optimize data center performance using the

Government’s BMS systems.

3. Provide the Government with expert insight into the operations, maintenance, and performance of power and cooling systems at data centers.

G. Provide and Maintain Operational Documentation As needed, the Government may request the contractor create, provide, update, or modify operational documentation.

1. Develop and maintain detailed documentation for all operational processes and configurations including Methods of Procedure (MOP); Standard Operating Procedure (SOP); Building Operations Plans (BOP); Facility Management Plans (FMP); and related documentation.

2. Develop and maintain detailed diagrams of facility MEP systems, spaces, infrastructure, IT, and related support systems.

H. Maintain Sustainability Practices

1. Foster and implement sustainability practices in facility operations to promote environmental responsibility.

I. Data Center Management and Operational Excellence

1. Ensure 24/7 operational readiness and reliability of all in-scope data center facilities.

2. Conduct routine system upgrades, capacity analysis, and efficiency assessments.

3. Implement robust risk management and contingency planning protocols.

4. Maintain compliance with environmental standards and energy efficiency benchmarks.

5. Oversee preventive maintenance and predictive analyses for all critical systems.

6. Monitor and manage cooling, power distribution, and overall data center infrastructure.

7. Develop and maintain comprehensive documentation for all operational processes.

2.1.2. Data Center Engineering and Design

Requirement: Provide expert-level Data Center Engineering and Design services covering all stages of data center project development. This includes technical project management, engineering and architectural oversight, quality control, commissioning activities, and comprehensive assessments of critical environments.

The Contractor Must:

A. Provide Technical Project Management for Data Center Projects

1. Deliver efficient management of data center projects from initiation to completion, ensuring adherence to timelines and project specifications.

T

2. Systematically collect and analyze customer requirements to ensure data center designs meet operational needs and best practices.

3. Implement rigorous quality control processes throughout project lifecycles to ensure adherence to technical and safety standards.

B. Provide Architectural and Engineering Oversight

1. Provide expert oversight on architectural and engineering efforts, ensuring designs are efficient, scalable, compliant with industry standards, and that the best interests of NOAA are taken into account.

C. Provide Commissioning and Handover Activity Support

1. Support and manage the commissioning process to ensure data centers are operational, meet performance criteria, and are ready for client handover.

2. When needed, provide professional services to commission data center systems.

D. Provide Environmental, Power, Fire & Life Safety, and HVAC System Assessments

1. Assess and optimize environmental control systems including chillers, pumps, CRAC units, and

HVAC controls to improve efficiency and reliability.

2. Conduct comprehensive assessments of fire protection plans, including mitigation, detection, suppression, and recovery strategies.

3. Evaluate electrical service requirements, UPS systems, and power distribution to ensure efficient energy use and reliability.

E. Provide Data Center Security Compliance and Auditing Support

1. Assess security controls and policies to maintain high assurance levels for FISMA compliance and a robust security posture.

2. Support the ISSO in their efforts to document and maintain the NOAA0520 information system.

3. Respond to inquiries from assessors in a timely manner to ensure assessments are successful.

4. Generate documentation to support assessments and ensure they meet requirements.

F. Continuous Improvement Recommendations

1. Provide actionable recommendations for improvements based on assessments, focusing on enhancing safety, efficiency, and operational effectiveness.

2. Identify and address gaps or deficiencies in existing data center infrastructure and operations to align with best practices and customer requirements.

3. Stay abreast of the latest industry innovations and best practices in data center design and engineering to offer state-of-the-art solutions.

2.1.3. Data Center Infrastructure Monitoring (DCIM)

Requirement: The contractor shall provide comprehensive services for the operation, management, maintenance, and expansion of NOAA's Data Center Infrastructure Management (DCIM) system. Services include but are not limited to system monitoring, data analysis, reporting, troubleshooting, system upgrades, and the integration of new facilities into the DCIM platform. The contractor should be well versed in the NLYTE application and have a solid understanding of its operation to properly monitor, manage, maintain, update, and support the application for NOAA.

The Contractor Must:

A. Provide Operation and Management of the DCIM System

1. Ensure continuous operational capability of the DCIM system.

2. Perform regular system checks and monitoring to guarantee system integrity and data accuracy.

T

3. Manage user access and roles within the DCIM system, ensuring that only authorized personnel have appropriate access levels.

4. Provide basic end-user training to NOAA staff on the use of the DCIM tool to ensure effective usage.

5. Establish automated reporting mechanisms to provide regular insights into infrastructure health and performance.

6. Develop a centralized dashboard to provide actionable insights and a holistic view of infrastructure health.

7. Develop and provide comprehensive documentation on system operation, maintenance procedures, and any changes made to the system.

B. Provide Maintenance for DCIM

1. Conduct routine and preventive maintenance of the DCIM system to prevent downtimes and ensure optimal performance.

2. Quickly address and resolve any system faults or issues.

3. Keep the DCIM system software and hardware up to date with the latest patches and updates in accordance with NOAA policies.

4. Conduct regular audits of the infrastructure and adjust monitoring strategies as needed for optimal performance.

C. Growth and Expansion

1. Collaborate with NOAA to integrate new data center facilities or infrastructure into the DCIM system.

2. Support the scaling of the DCIM system to accommodate NOAA’s growth and evolving requirements.

3. Provide recommendations and implement enhancements to improve DCIM system capabilities and performance.

D. Ensure 24/7 Operational Monitoring

1. Ensure continuous operational readiness and reliability of all EDC maintained and monitored data center facilities.

2. Monitor all aspects of NOAA’s EDC facilities and support infrastructure using the Nlyte DCIM system.

3. Document all aspects of data center spaces in the DCIM and monitor items based on the

Government’s needs.

E. Real-Time Monitoring

1. Suggest and deploy and utilize real-time monitoring tools to track critical infrastructure performance continuously.

2. Ensure monitoring is active and that appropriate parties are alerted of any monitored points that are out of acceptable ranges.

3. Continuously monitor and manage the health and performance of network and server infrastructure.

4. Implement IoT solutions to enhance infrastructure monitoring capabilities and provide detailed insights.

5. Ensure rapid response mechanisms are in place for addressing infrastructure issues promptly and effectively.

2.1.4. Building Management System (BMS)

Requirement: The contractor shall provide comprehensive services for the operation, management, maintenance, and expansion of NOAA's Building Management Systems (BMS). Services include but are not

T limited to system monitoring, data analysis, reporting, troubleshooting, system upgrades, and the integration of new facilities into the BMS platforms. The contractor should be well versed in the JCI Metasys and Tridium N4 application and have a solid understanding of its operation to properly monitor, manage, maintain, update, and support the application for NOAA.

The Contractor Must:

A. Provide Operation and Management of the BMS Systems

1. Ensure continuous operational capability of the BMS system.

2. Perform regular system checks and monitoring to guarantee system integrity and data accuracy.

3. Manage user access and roles within the BMS system, ensuring that only authorized personnel have appropriate access levels.

4. Provide basic end-user training to NOAA staff on the use of the BMS to ensure effective usage.

5. Establish automated reporting mechanisms to provide regular insights into infrastructure health and performance.

6. Develop a centralized dashboard to provide actionable insights and a holistic view of infrastructure health.

7. Develop and provide comprehensive documentation on system operation, maintenance procedures, and any changes made to the system.

B. Provide Maintenance for BMS

1. Conduct routine and preventive maintenance of the BMS system to prevent downtimes and ensure optimal performance.

2. Quickly address and resolve any system faults or issues.

3. Keep the BMS system software and hardware up to date with the latest patches and updates in accordance with NOAA policies.

4. Conduct regular audits of the infrastructure and adjust monitoring strategies as needed for optimal performance.

C. Growth and Expansion

1. Collaborate with NOAA to integrate new data center facilities or infrastructure into the BMS system.

2. Support the scaling of the BMS system to accommodate NOAA’s growth and evolving requirements.

3. Provide recommendations and implement enhancements to improve BMS system capabilities and performance.

D. Ensure 24/7 Operational Monitoring

1. Ensure continuous operational readiness and reliability of all EDC maintained and monitored data center facilities.

2. Monitor NOAA’s EDC facilities and support infrastructure using the BMS system.

3. Document all aspects of data center spaces in the BMS and monitor items based on the

Government’s needs.

E. Real-Time Monitoring

1. Suggest and deploy and utilize real-time monitoring tools to track critical infrastructure performance continuously.

2. Ensure monitoring is active and that appropriate parties are alerted of any monitored points that are out of acceptable ranges.

3. Continuously monitor and manage the health and performance of network and server infrastructure.

T

4. Implement IoT solutions to enhance infrastructure monitoring capabilities and provide detailed insights.

5. Ensure rapid response mechanisms are in place for addressing infrastructure issues promptly and effectively.

2.1.5. Electrical Power Management System (EPMS)

Requirement: The contractor shall provide comprehensive services for the operation, management, maintenance, and expansion of NOAA's Electrical Power Management System (EPMS). Services include but are not limited to system monitoring, data analysis, reporting, troubleshooting, system upgrades, and the integration of new facilities into the BMS platforms. The contractor should be well versed in the Schneider Electric application and have a solid understanding of its operation to properly monitor, manage, maintain, update, and support the application for NOAA.

The Contractor Must:

F. Provide Operation and Management of the EPMS Systems

1. Ensure continuous operational capability of the EPMS system.

2. Perform regular system checks and monitoring to guarantee system integrity and data accuracy.

3. Manage user access and roles within the EPMS system, ensuring that only authorized personnel have appropriate access levels.

4. Provide basic end-user training to NOAA staff on the use of the EPMS to ensure effective usage.

5. Establish automated reporting mechanisms to provide regular insights into infrastructure health and…