Sol_G15PS00303.pdf

SEE ADDENDUMIS CHECKED

CODE 18a. PAYMENT WILL BE MADE BY

CODE

FACILITYCODE

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT SUCH ADDRESS IN OFFER

OFFEROR

GDB

DENVER CO 80225-0046

204 DENVER FEDERAL CENTER

PO BOX 25046

USGS OAG DENVER ACQUISITION BRANCH

CODE 16. ADMINISTERED BYCODE

X

X

X

541519

SIZE STANDARD:

100.00 % FOR:SET ASIDE:UNRESTRICTED ORGDB

RFPIFB

10. THIS ACQUISITION ISCODE

RFQ

14. METHOD OF SOLICITATION

13b. RATING

NAICS:

SMALL BUSINESS

05/29/2015 1700 MT

04/30/2015

303-236-9319Melissa Hutchison (No collect calls)

INFORMATION CALL:

FOR SOLICITATION 8. OFFER DUE DATE/LOCAL TIMEb. TELEPHONE NUMBER a. NAME

4. ORDER NUMBER3. AWARD/ 6. SOLICITATION

G15PS00303

5. SOLICITATION NUMBER

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS 1. REQUISITION NUMBER PAGE OF

1 72 0040184513OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, & 30

TELEPHONE NO.

17a. CONTRACTOR/

Golden CO 80401 1711 Illinois St USGS Geologic Hazards Team

15. DELIVER TO

DENVER CO 80225-0046

204 DENVER FEDERAL CENTER

PO BOX 25046

9. ISSUED BY

7.

2. CONTRACT NO.

EFFECTIVE DATE

$27.5

18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a UNLESS BLOCK BELOW

ISSUE DATE

DELIVERY FOR FOB DESTINA-

TION UNLESS BLOCK IS

MARKED

11.

SEE SCHEDULE

12. DISCOUNT TERMS

THIS CONTRACT IS A

RATED ORDER UNDER

DPAS (15 CFR 700)

13a.

SERVICE-DISABLED

VETERAN-OWNED

SMALL BUSINESS

HUBZONE SMALL

BUSINESS

8(A)

USGS OAG DENVER ACQUISITION BRANCH

WOMEN-OWNED SMALL BUSINESS

(WOSB) ELIGIBLE UNDER THE WOMEN-OWNED

SMALL BUSINESS PROGRAM

EDWOSB

24.

AMOUNT

23.

UNIT PRICE

22.

UNIT

21.

QUANTITY

20.

SCHEDULE OF SUPPLIES/SERVICES

19.

ITEM NO.

Period of Performance: 07/26/2015 to 07/25/2020

00010 Base Year

Services, non-personal, to provide all plant, equipment, labor and materials (unless otherwise provided herein) necessary to provide outside-of-hours support at the National Earthquake Information Center in accordance with the attached Statement of Work.

(Use Reverse and/or Attach Additional Sheets as Necessary)

HEREIN, IS ACCEPTED AS TO ITEMS:

X

XX

DATED

Melissa Hutchison

. YOUR OFFER ON SOLICITATION (BLOCK 5),

INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE SET FORTH

COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND DELIVER

ARE

ARE

31c. DATE SIGNED

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA

31a. UNITED STATES OF AMERICA (SIGNATURE OF CONTRACTING OFFICER)

30c. DATE SIGNED 31b. NAME OF CONTRACTING OFFICER (Type or print)

ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND ON ANY ADDITIONAL

SHEETS SUBJECT TO THE TERMS AND CONDITIONS SPECIFIED.

27a. SOLICITATION INCORPORATES BY REFERENCE FAR 52.212-1, 52.212-4. FAR 52.212-3 AND 52.212-5 ARE ATTACHED. ADDENDA

26. TOTAL AWARD AMOUNT (For Govt. Use Only)

OFFER

STANDARD FORM 1449 (REV. 2/2012)

Prescribed by GSA - FAR (48 CFR) 53.212

ARE NOT ATTACHED.

ARE NOT ATTACHED.

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

30b. NAME AND TITLE OF SIGNER (Type or print)

30a. SIGNATURE OF OFFEROR/CONTRACTOR

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN

25. ACCOUNTING AND APPROPRIATION DATA

29. AWARD OF CONTRACT:

REF.

32e. MAILING ADDRESS OF AUTHORIZED GOVERNMENT REPRESENTATIVE

32c. DATE 32b. SIGNATURE OF AUTHORIZED GOVERNMENT REPRESENTATIVE

ACCEPTED, AND CONFORMS TO THE CONTRACT, EXCEPT AS NOTED:

32a. QUANTITY IN COLUMN 21 HAS BEEN

RECEIVED INSPECTED

40. PAID BY39. S/R VOUCHER NUMBER38. S/R ACCOUNT NUMBER

37. CHECK NUMBER

FINALPARTIAL

36. PAYMENT

FINALPARTIAL

35. AMOUNT VERIFIED

CORRECT FOR

34. VOUCHER NUMBER33. SHIP NUMBER

COMPLETE

32g. E-MAIL OF AUTHORIZED GOVERNMENT REPRESENTATIVE

42d. TOTAL CONTAINERS42c. DATE REC'D (YY/MM/DD)

42b. RECEIVED AT (Location)

42a. RECEIVED BY (Print)

41c. DATE41b. SIGNATURE AND TITLE OF CERTIFYING OFFICER

41a. I CERTIFY THIS ACCOUNT IS CORRECT AND PROPER FOR PAYMENT

STANDARD FORM 1449 (REV. 2/2012) BACK

24.

AMOUNT

23.

UNIT PRICE

22.

UNIT

21.

QUANTITY

20.

SCHEDULE OF SUPPLIES/SERVICES

19.

ITEM NO.

Offeror shall quote firm-fixed monthly price.

Period of Performance: 07/26/2015 to 07/25/2016

00020 Option Year One

Services, non-personal, to provide all plant, equipment, labor and materials (unless otherwise provided herein) necessary to provide outside-of-hours support at the National

Earthquake Information Center in accordance with the attached Statement of Work.

Offeror shall quote firm-fixed monthly price.

(Option Line Item)

07/26/2016

Period of Performance: 07/26/2016 to 07/25/2017

00030 Option Year Two

Services, non-personal, to provide all plant, equipment, labor and materials (unless otherwise provided herein) necessary to provide outside-of-hours support at the National

Continued ...

32f. TELEPHONE NUMBER OF AUTHORIZED GOVERNMENT REPRESENTATIVE

32d. PRINTED NAME AND TITLE OF AUTHORIZED GOVERNMENT REPRESENTATIVE

72 2 of

ITEM NO. SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

NAME OF OFFEROR OR CONTRACTOR

3 72

CONTINUATION SHEET

REFERENCE NO. OF DOCUMENT BEING CONTINUED PAGE OF

(A) (B) (C) (D) (E) (F)

G15PS00303

Earthquake Information Center in accordance with the attached Statement of Work.

Offeror shall quote firm-fixed monthly price.

(Option Line Item)

07/26/2017

Period of Performance: 07/26/2017 to 07/25/2018

00040 Option Year Three

Services, non-personal, to provide all plant, equipment, labor and materials (unless otherwise provided herein) necessary to provide outside-of-hours support at the National

Earthquake Information Center in accordance with the attached Statement of Work.

Offeror shall quote firm-fixed monthly price.

(Option Line Item)

07/26/2018

Period of Performance: 07/26/2018 to 07/25/2019

00050 Option Year Four

Services, non-personal, to provide all plant, equipment, labor and materials (unless otherwise provided herein) necessary to provide outside-of-hours support at the National

Earthquake Information Center in accordance with the attached Statement of Work.

Offeror shall quote firm-fixed monthly price.

(Option Line Item)

07/26/2019

Period of Performance: 07/26/2019 to 07/25/2020

NSN 7540-01-152-8067 OPTIONAL FORM 336 (4-86)

Sponsored by GSA

FAR (48 CFR) 53.110

Table of Contents

Background / ANSS Description Statement of Work

FISMA

52.252-2 Clauses Incorporated by Reference. (FEB 1998) 52.212-4 Contract Terms and Conditions - Commercial Items. (DEC 2014) 52.212-5 Contract Terms and Conditions Required To Implement Statutes or Executive Orders - Commercial Items. (MAR 2015) 52.217-8 Option to Extend Services. (NOV 1999) 52.217-9 Option to Extend the Term of the Contract. (MAR 2000) 52.223-2 Affirmative Procurement of Biobased Products Under Service and Construction Contracts. (SEP 2013) GS0919 Legal Holidays. (JAN 2002) GS1102 Contracting Officer’s Representative – Technical Direction. (JUL 2001) GS1305 Contractor Performance Assessment Reporting System (CPARS) GS1330 Key Personnel. (JUL 2001) GS1338 Notice to the Government of Delays. (JUL 2001) GS1348 Accident Reporting. (APR 2003) GS1362 Nonpersonal Services. (DEC 2001) GS1371 Availability of IT Security Standards, Guides and Other Publications. (OCT 2005) GS1406 Confidentiality of Data. (OCT 2005) GS1414 Contractor Personnel Clearance and Identity Credentials. (NOV 2005) GS1420 Use of Government Computers. (OCT 2005)

1452.201-70 AUTHORITIES AND DELEGATIONS (SEPT 2011)

Deobligation of Unexpended Funds Electronic Invoicing and Payment Requirements - Invoice Processing Platform (IPP) (April 2013) 52.252-1 Solicitation Provisions Incorporated by Reference. (Feb 1998) 52.203-2 Certificate of Independent Price Determination. (APR 1985) 52.204-17 Ownership or Control of Offeror. (NOV 2014) 52.209-5 Certification Regarding Responsibility Matters. (APR 2010) 52.212-2 Evaluation - Commercial Items. (OCT 2014) 52.212-3 Offeror Representations and Certifications-Commercial Items. (MAR 2015) 52.215-6 Place of Performance. (OCT 1997) 52.216-1 Type of Contract. (APR 1984) 52.219-1 Small Business Program Representations. (OCT 2014) 52.222-22 Previous Contracts and Compliance Reports. (FEB 1999) 52.222-25 Affirmative Action Compliance. (APR 1984) 52.233-2 Service of Protest. (SEP 2006) 52.237-1 Site Visit. (APR 1984) Certification Regarding a Felony Conviction Under Any Federal Law or an Unpaid Federal Tax Liability.

(FEB 2012)

GS2101 Inquiries. (FEB 2007) GS2102 Incurring Costs. (JUL 2001) GS2107 Electronic Transmission of Offers. (JUL 2001) GS2130 Use of PPIRS Past Performance Data. (JAN 2003) GS2150 Proposal Format and Submission Instructions. (AUG 2001) GS2160 Technical Proposal Instructions. (AUG 2001) GS2182 Price Proposal Instructions. (AUG 2001) GS2330 Competitive Range Determination. (AUG 2001) Addendum to Provision 52.212-1 Question Cut-Off

Background / ANSS Description

General Description/Purpose The mission of the ANSS is to provide accurate and timely data and information products for seismic events, including their effects on buildings and structures, employing modern monitoring methods and technologies. This mission serves a basic function of the National Earthquake Hazards Reduction Program (NEHRP) and drives the four basic goals of the planned system:

Establish and maintain an advanced infrastructure for seismic monitoring throughout the United States that operates with high performance standards, gathers critical technical data, and effectively provides information products and services to meet the Nation's needs. An Advanced National Seismic System should consist of modern seismographs, communication networks, data processing centers, and well-trained personnel; such an integrated system would constantly record and analyze seismic data and provide timely and reliable information on earthquakes and other seismic disturbances.

Continuously monitor earthquakes and other seismic disturbances throughout the United States, including earthquakes that may cause a tsunami or precede a volcanic eruption, with special focus on regions of moderate to high hazard and risk.

Thoroughly measure strong earthquake shaking at ground sites and in buildings and critical structures. Focus should be in urban areas and near major active fault zones to gather greatly needed data and information for reducing earthquake impacts on buildings and structures.

Automatically broadcast information when a significant earthquake occurs, for immediate assessment of its impact. Where feasible, for sites at distance from the epicenter, broadcast an early warning seconds before strong shaking arrives. Provide similar capabilities for automated warning and alert for tsunamis and volcanic eruptions.

To achieve these goals, ANSS will establish nationwide network of over 7000 earthquake sensor systems, serving all areas of the country subject to earthquake hazards and providing dense coverage in 26 at-risk urban areas (Figure 1). Sensors will be located both in the ground and in buildings and other structures.

FIGURE 1 AT-RISK URBAN AREAS OF THE UNITED STATES.

The system will provide real-time earthquake information for emergency response personnel, provide engineers with information about building and site response to strong shaking, and provide scientists with high-quality data needed to understand earthquake processes and structure and dynamics of the solid earth.

As part of its monitoring activities, the ANSS includes a national Backbone network, the National Earthquake Information Center (NEIC), the National Strong Motion Project, and 15 regional seismic networks operated by USGS and its partners. When earthquakes strike, ANSS delivers real-time information, providing situational awareness for emergency-response personnel. In regions with sufficient seismic stations, that information includes, within minutes, a seismic event notification sent out over the Earthquake Notification Service (ENS), a ShakeMap showing the distribution of potentially damaging ground shaking, a PAGER Map showing population exposure and damage estimates, and a suite of informational pages on the World Wide Web. All this information is used to target post-earthquake response efforts, as well as to inform the public.

When fully implemented, ANSS will provide such dense station coverage for all at-risk urban areas. Information from ANSS are key inputs to the USGS National Seismic Hazard Maps, which help communities in earthquake-prone regions develop safer building practices.

The ANSS Information System supports the mission of the ANSS.

At the core of the ANSS are two legacy operations, the U.S. National Seismographic Network (USNSN) and the NEIC. Together, these operations are responsible for detecting and reporting on earthquakes anywhere in the continental United States. With only small seed funding to date, the ANSS effort has focused on upgrading the legacy components underlying these operations and positioning them as the national center for earthquake monitoring. Accordingly, the USNSN has been renamed the ANSS Backbone and is currently being expanded from approximately 55 stations to 85 stations, with an ultimate goal of 100 stations. Similarly, modernization efforts are underway to evolve the NEIC into the ANSS National Operations Center (NOC). As additional ANSS funding becomes available, regional and international monitoring networks will be brought in under the ANSS umbrella. Figure 1, ANSS Components, depicts the major components and overall architecture.

FIGURE 2 ANSS COMPONENTS

Information System Environment

Physical Infrastructure The system is housed at the following facilities:

USGS National Earthquake Information Center, Golden, Colorado (primary location) Albuquerque Seismological Laboratory, Albuquerque, New Mexico USGS Menlo Park, California USGS Pasadena, California Caltech Seismological Lab, Pasadena, California Denver Federal Center, Building 25, Room 1846; Building 53 BLM Data Center EROS Datacenter, Sioux Falls, South Dakota

The National Earthquake Information Center (NEIC) in Golden houses the primary acquisition and processing infrastructure as well as servers that handle data distribution to select cooperating organizations. The USGS occupies the entire building, and access into the building is restricted by a federally controlled card key lock system, and unrestricted public access is prohibited. The ANSS servers, along with telecommunications equipment and networking gear are kept in a secure, state-of-the art data center. Access to the room is granted through a separately maintained card-key lock system (Lenel On-Guard). All critical equipment are on enterprise UPS’s housed within the computer room and an automatically triggered backup generator that is tested weekly.

The Albuquerque Seismological Laboratory (ASL) is the USGS’s installation and maintenance depot for the Global Seismic Network (GSN) and for the ANSS backbone. The facility is accessible only through the Kirtland Air Force Base with no unmonitored public access. As in Golden, the equipment at ASL is stored in a locked room with restricted access. System components are connected to a UPS and backup generator.

The Pasadena facilities house some of the computing infrastructure of the ENS, and for Legacy EIDS system. These provide backup/contingency roles to servers at the other sites. As with the Golden and Albuquerque facilities, the equipment is located in locked rooms with restricted access. Generators provide backup power at both facilities and critical computing systems are on small UPS units to provide continuity between power failure and generator startup.

The Menlo Park facility houses components of the Did You Feel It?, ENS, Legacy EIDS, and PDL systems, including backup and contingency. All ANSS equipment is located in a locked computer room with restricted access.

The USGS Data Center in Building 25 at the Denver Federal Center houses the servers and network connections comprising the ANSS contingency system. The building is located on the restricted Denver Federal Center Campus, and access to the facility is restricted by a federally controlled card key lock system.

The BLM Data Center in Building 53 at the Denver Federal Center houses the infrastructure that supports the public website, PDL system, and public data distribution servers. The building is located on the restricted Denver Federal Center Campus, and access to the facility is restricted by a federally controlled card key lock system.

The EROS Data Center in Sioux Falls hosts the backup/contingency public website infrastructure.

The facility is located on a federally managed campus, and access to the facility is restricted by a federally controlled card key lock system.

Computer Networking Architecture ANSS systems at the various geographical sites are mutually interconnected across the Internet.

Public-facing servers are within isolated security zones (DMZ’s).

At the NEIC, where most of the system resides, each server or workstation is located within one of several security zones behind the Internet firewall. The zones are organized in a logical ring structure, ranging from the innermost rings containing the most sensitive systems to the outermost rings containing the most exposed services.

Some of the internal (non-DMZ) servers are dual or multi-homed onto other networks. Some of these are totally internal and private to the NEIC. Others are on private dedicated telecommunications circuits with drop points in the NEIC telecommunications room. A dedicated lines firewall protects ANSS systems from all such circuits. Data from the ANSS Backbone Seismic Network are received by way of satellite feeds to two network operations centers (NOCs) of a satellite provider. Ordinarily, the data are sent from the NOCs to the NEIC by way of a land-based VPN entering through the Internet firewall. In the event of loss of Internet service, these tail segments can be re-routed by way of secondary satellite hops.

Two VPNs over Internet, one at the NEIC, the other at ASL, are used to exchange data with one of the cooperating organizations (CTBTO).

Hardware and Software Security Infrastructure Presently, the entire legacy system is protected by one or more of the enterprise security systems outlined below. The new system consists of many interconnected computers operating Agency-developed seismic acquisition, monitoring, processing, and analytical software. The security controls protecting system resources are implemented in a hierarchical manner. Software and hardware in use at the Department or Bureau level to help create a secure operating environment includes, but is not limited to:

DOI Enterprise Services Network (ESN) “Gauntlet”, which includes:

o Hardware firewall and DOI policies o ActiveScout Intrusion Detection and Prevention (IDP) o Juniper IDP (See “Development Phase” below for more information) DOI Enterprise Remote Access (eRAS) USGS Enterprise Vulnerability Management System eVMS.

Symantec Anti-virus USGS IT Security Operations Team (ITSOT) Firewall Change Request website

Additional security software implemented on site:

Deny-all-allow-permit by exception irewall policies and rule at all sites Secure Socket Layer (SSL) protocol for remote access into the NEIC Secure shell (SSH) protocol. Two factor authentication using SSH DSA key technology is enforced for alternate remote access into the NEIC TCPwrappers (IP access restriction) Enterprise Security Manager (ESM) Microsoft Active Directory for an internal domain Windows Server Update Services (WSUS) DOI Federal Desktop Core Configuration (FDCC) STIGs Audit trail logging using UNIX/Linux syslog and Windows Snare

Modems are not used for access into ANSS security zones.

The USGS regional email servers, along with their security measures, are used for email services.

The ANSS has setup a secondary slave Domain Name Service (DNS) server, named ”gldsurvey”, to help alleviate DNS related problems for critical ANSS systems. During DOI upgrades, maintenance, or outages of their DNS servers, the VMS systems experienced many problems and outages due to slow or non-existence name resolution. Having a slave name server on the local ANSS network allows for quicker name resolution and guarantees stability during DOI upgrades maintenance or outages to their DNS servers. All DNS zone changes are still controlled by the DOI because the server is setup in a slave configuration.

Computing Platforms The ANSS has adopted a “platformity” standard, based on using Red Hat Enterprise Linux (RHEL) and Microsoft Windows on Intel hardware. A small number of servers running legacy operating systems VMS, Solaris, and FreeBSD, are in process of being converted to either RHEL or Windows. Some servers are clustered in mutually interdependent configurations.

Applications Comprising the Information System The ANSS system, as designed, consists of eight application areas:

1. Real-time data acquisition system (DAS)

2. Database Management Systems (DBMS) and DBMS-associated middleware

3. Real-time processing

4. Analysis

5. Rapid response production

6. Web services

7. Dedicated real-time and by-request exports

8. System monitoring and response.

The real-time DAS receives real-time global seismic sensor data and disseminates automatic estimates of earthquake locations and magnitudes. The modules within this application are designed to perform the following general functions

Managing the IP connections to the various data sources Automatically verify link integrity and data flows Perform re-connection attempts as required.

Writing the incoming sensor data to continuous waveform buffers for the dedicated export applications Staging the incoming sensor data to the DBMS for real-time processing

The DBMS system receives Seismic sensor data from the real-time DAS for temporary storage during processing Parametric data concerning automatic earthquake estimates from real-time processing Analytical earthquake results from analysis

The modules of the real-time processing system:

Retrieve sensor data from the DBMS Perform seismic phase-arrival determination on those data. These algorithms attempt to determine the time of arrival of seismic waves at the sensors Perform event association-- Given the above arrival times, compute the location and origin time of the seismic source that produced the observed arrivals Compute magnitude estimates-- Execute various algorithms that provide estimates of the magnitude of the observed seismic event Insert these results into the DBMS.

Issue automatic earthquake alarms to specified users

From the available data, the processing system will produce human-reviewed earthquake notifications and processed seismic events for insertion into an archiving system. Its functions include:

Running redundant Oracle DBMS instances that stage sensor data for the real-time processing

State-driven processing of earthquakes, wherein the processing steps executed on an earthquake are determined by the nature of the earthquake

Supporting the DBMS Application Programming Interface (API) between the application modules and the DBMS tables.

Altering the processing of an earthquake as directed by the human's interactions with an evolving seismic event

Running redundant Oracle DBMS instances for temporary storage of automated and analyzed earthquake parameters

Running various State of Health (SOH) monitors to detect software and hardware malfunctions and exception conditions

The analysis system receives earthquake parameters from the DBMS system and commands from human analysts. It inserts into the DBMS human-directed earthquake parameters and human-specified processing directives. Its functions include:

Supporting various displays of automatically computed earthquake data Accepting user interactions with such displays Executing the processing steps implied by such interactions Inserting re-processed earthquake data into the DBMS Inserting modified processing directives into the DBMS to provide adaptive behavior of the state-driven processing.

Rapid response production involves software developed through the USGS to aid emergency responders, decision makers, and researchers in assessing the extent of ground shaking, fatalities and casualties, and infrastructure damage likely to have resulted from a major earthquake. This system runs and disseminates products as soon as initial estimates on the location and magnitude of the earthquake come out of the real-time processing system. Its results are repeatedly revised and updated, both automatically and through review by experienced seismologists, as more data and improved parameters on the earthquake become available. Components of the rapid response system include:

“ShakeMaps” of estimated ground shaking (seismic intensity) levels surrounding the epicenter

Customizable reports of estimated damage and losses in specific geographic areas, based on shaking intensity and known information about infrastructure and population densities

CIIM, also called DYFI. These applications solicit information about an earthquake through the Web from the general public and use it to help improve the other rapid response products.

The Web interfaces use in-house developed sites running on off-the-shelf software to disseminate information about significant earthquakes to the general public. This information includes the earthquake solutions and rapid response products described above as well as other more research-oriented products. The system provides robust availability in times of high user response by taking advantage of commercially owned (Level 3) server farms feeding off of a base of geographically redundant USGS servers.

Several servers at the NEIC use USGS developed applications to provide continuous or by request exports of seismic waveform (sensor) data and “metadata” (sensor parameters) to a number of cooperating organizations. Most of those organizations reciprocate by contributing data from their own seismic networks to the real-time processing system at the NEIC. Connections are firewall-and/or software-restricted to specific IP addresses on specific non-standard ports. Applications include:

“Earthworm” for continuous exports to the National Oceanic and Atmospheric Administration (NOAA) Tsunami Warning Centers and regional seismic networks and for by-request exports to more general users

“Ring Replicator Protocol” (RRP) for continuous exports over private circuit and Internet to multiple cooperators

“Continuous Waveform Buffers” for by-request exports to various organizations, particularly researchers

The monitoring and response system runs at the NEIC to monitor ANSS state of health and alert IT support staff to system failures on a 24x7 basis. It uses both open source and custom software developed at the facility. The open source products consist of:

Icinga - an automated monitoring and alerting application (http://www.icinga.org/) Trac - a bug/issue tracking system, used for trouble-ticket management

(http://trac.edgewall.org/)

The in-house software is referred to as the Alarm Sub-system. It provides a front end to Icinga for the real-time DAS servers.

Statement of Work Performance-based Service Contract Statement of Work

A. Introduction:

The U.S. Geological Survey Advanced National Seismic System (ANSS) National Operations Center (NOC) in Golden, CO conducts research in geology, geophysics, seismology, engineering seismology, and geomagnetism in order to assess seismic hazards and risk, geomagnetic hazards, and ground failure hazards on regional, national, and international scales. ANSS also supports web servers, earthquake notification systems, and network data exchange systems for several major national programs of the USGS. The NOC is a 24x7, 365 day operation, which requires IT support for the NOC network, web, data exchange and notification systems, servers and desktops during hours when the permanent ANSS IT staff is not in the office.

The USGS Advanced National Seismic Network (ANSS) Project is a major national initiative led by the US Geological Survey that serves the needs of the earthquake monitoring, engineering, and research communities as well as national, state, and local governments, emergency response organizations, and the general public.

The ANSS National Operations Center (NOC) is a National resource that operates with high performance standards (99.999% uptime), gathers critical technical data, and effectively provides timely and reliable earthquake products, information, and services to meet the Nation’s needs. The ANSS will automatically broadcast timely and authoritative products describing the occurrence of earthquakes, earthquake source properties, the distribution of ground shaking, and, where feasible, broadcast early warnings and alerts for the onset of strong ground shaking. Most importantly, the ANSS will provide earthquake data, derived products, and information to the public, emergency responders, officials, engineers, educators, researchers, and other ANSS partners rapidly and in forms that are useful for their needs.

The ANSS Program involves the exchange of real-time data among many cooperating institutions including the National Earthquake Information Center (NEIC). Because of seismic monitoring and rapid response aspects, the ANSS backbone and cooperative data must be received, processed, and archived and ANSS/NEIC products distributed 24 hours/day, 7 days/week.

From the support point of view, the NOC system consists of three groups of computers. One group is approximately 150 computers plus network devices and firewalls that are responsible for detecting and reporting on earthquakes anywhere in the world. This group is physically housed at the National Earthquake Information Center (NEIC) in Golden, Colorado and stored in a single locked room with floor-to ceiling walls, and card keyed access. The United States Geological Survey occupies the entire building and unrestricted public access is prohibited. The system consists of many interconnected computers operating USGS-developed seismic monitoring software. Presently the NOC system is protected by enterprise security systems implemented in a hierarchical manner.

The second group consists of the NEIC contingency site, located at the Denver Federal Center in Lakewood, Colorado. These computers are a basic (stripped down) version of the system at the NEIC, and are located in a secure data center on the Federal Center.

The third group consists of approximately 30 additional computers located at four (Sioux Falls, Menlo Park, Pasadena, and Reston) other USGS sites in the United States. These computers are used to distribute the earthquake information via email and the web.

The ANSS expects the number of computers covered in this contract to grow by approximately 10% over the next five years.

The number of response incident at ANSS over the last year has varied between 10 and 50 per month.

B. Performance Requirements

Overview:

The scope of this contract is limited to the Outside of Hours (OOH) support on the full range of computer equipment and applications. The ANSS computing architecture is highly heterogeneous. Computers consist of Intel-based workstations and servers running Windows Server2003, Windows Server 2012, Windows7, Red Hat Enterprise Linux, and Scientific Linux. Networking components include Cisco routers, Juniper and Netscreen firewalls, and Hewlett Packard Procurve and Netgear switches. Contractor shall be competent in all operating systems used by the NOC, including MS-Windows, and Linux as well as operating systems of network components. Contractor shall have knowledge, understanding, and experience with Department of Interior (DOI) and USGS security regulations and Standard Operating Procedures, as well as industry best practices. Note that these documents are internal USGS documents, so they cannot be accessed outside of USGS. Therefore a copy of these documents will be given at time of award. In addition, the contractor shall monitor the ANSS systems and network via existing automatic monitoring software, iCinga, and provide Tier 1 emergency response to critical IT infrastructure and network problems.

Tier 1 response means that the contractor will receive the initial notification of a critical system problem or security breach from ANSS automated notification systems and/or ANSS staff members. Tier 1 responsibilities include understanding the problem, coordinating the resolution of the problem, analyzing and correcting faults, and/or notifying ANSS subject matter experts if the faults cannot be resolved by the Contractor. Problems are expected to be responded to and resolved in time frames as described in the Requirements description given below.

The Tier 1 responder is required to communicate effectively in order to coordinate with multiple individuals in troubleshooting and resolution efforts, as well as the ability to adequately document response events, including any system modifications using the ANSS ticketing system. All details necessary for permanent ANSS staff to thoroughly retrace and investigate of such events shall be recorded.

Description of the USGS Response Structure o The USGS monitors its systems using the iCinga Monitoring Software and tracks all issues in a Ticketing System.

o Contractor OOH personnel will be notified by iCinga of critical system failures or by

USGS personnel.

o Contractor will be provided with remote access to USGS computers in order to use the iCinga Monitoring System and USGS Ticketing System, access online documentation, and access to ANSS systems in order to perform corrective actions.

o Contractor personnel will be responsible for isolating the problem to a specific computer, application, or networking component. Contractor shall follow NOC procedures for performing corrective action, where documented and other attempted procedures as necessary to correct problems.

o Contractor will escalate to Tier 2 USGS IT staff and/or application experts when documented procedures and other attempted procedures fail to correct the problem. The USGS will provide a Tier 2 contact list to the contractor, upon award.

o In the event that USGS Tier-2 responders are unable to correct the problem and/or are unable to come on site to the USGS offices in the Denver-metro area, the contractor shall respond by going on site to physically access the systems and continue with troubleshooting within ONE hour of determining a site visit is needed. (Note, this situation generally occurs one or two times a year).

REQUIRED SERVICE PERFORMANCE STANADRD MONITORING METHOD

Contractor shall respond to notifications of system failures.

Contractor shall respond within 30 minutes of notification, and shall enter a ticket in the USGS ticketing system.

USGS COR will monitor iCinga notifications and acknowledgements to verify timeliness of response.

The Contractor will use the USGS ticketing system to provide reporting on all OOH activities.

For all iCinga notifications, the contractor will enter a ticket in the USGS system to include date/time of failure event, servers or network devices involved, description of the problem, names of individuals involved in response, steps taken and changes made to the system, any special information (e.g., vendor helpdesk ticket IDs, circuit IDs, unusual contact information, etc.), and date/time of service restoration.

USGS COR will monitor the iCinga notifications and ticket system entries to verify reporting requirement is being met.

If problem cannot be resolved remotely, contractor personnel will be on-site within one hour of determination that on-site presence is required. Contractor will notify USGS Tier 2 Staff when on-site presence is required.

Contractor personnel will enter the time of arrival at USGS, Golden in the ticketing system.

The on-site requirement applies ONLY to systems located in the Denver-metro area.

USGS COR will review iCinga and the ticketing system for required on-site visits, as well as, verify with the Tier 2 USGS staff when on-site work was performed.

Contractor personnel will be responsible for isolating the problem to a specific computer, application, or networking component. If the problem is documented with remedial action, the contractor will follow these actions.

Contractor will isolate problem to a specific computer, application, or networking component in 95% of incidences. If remedial documentation is available, contractor will follow procedures 100% of time.

USGS COR will monitor tickets to access the success of contractor performance.

Provide Tier 1 off-hours support OOH (OOH is 12 hours a day (6 PM – 6AM), Monday through Friday, 24 hours on weekends and Federal holidays (approximately 440 hours/month).

Contractor will respond to notifications from USGS personnel or notification system, 100% of the time.

USGS COR will review the iCinga notifications to insure that no notifications went unacknowledged.

A representative of the contractor will participate in monthly conference calls to review support issues and discuss any technical support concerns.

A contractor representative will participate in 100% of calls.

USGS COR will participate and monitor attendance at conference calls.

Security incidents will be reported according to USGS and DOI policies and guidelines for computer security incident response. The policies and guidelines will be provided to the contractor at time of award.

In the event of a security incident, contractor will report the incident using USGS and DOI policies and guidelines 100% of the time.

Handling of all security incidents will be reviewed by the USGS COR for compliance with USGS/DOI policies.

If problem cannot be resolved remotely, Contractor will notify USGS Tier 2 Staff when on-site presence is required within one hour of notification issued by the iCinga system and/or USGS staff.

Contractor personnel will enter the time of notification of USGS Tier 2 staff in the ticketing system. If the system is unavailable, contractor will report to a backup email address and/or phone messaging system provided by USGS.

USGS COR will review tickets for required Tier 2 notification by contractor.

C. Documents Required The documents required as part of performance of this contract may include, but are not limited to, the following:

Current version of the U.S. Geological Survey Computer and Network Security Handbook Current version of the Automated Information Systems Security - General Requirements, Survey

Manual Section 600-5 Current version of the Compliance with DOI Web-Related Directives Current IT Directional Memorandums

Documents will be provided to contractor at time of award.

D. Transition Plan:

Contractor will be required to tour the NEIC facilities in Golden, CO (2-3 hours) and attend five training classes (2-3 hours each). During the training classes, ANSS staff will provide an overview of the ANSS production architecture and systems, and ANSS response procedures.

FISMA

Out-of-Hours Support

Work Statement Attachment - Information Technology Security Requirements Summary

1. Background Investigation

Contractor employees who will have access to Federal information technology (IT) systems are subject to background investigations by the Federal Office of Personnel Management. Procedures for investigations and obtaining identity credentials are described in clause GS 1414 (or GS 1419 if working on the Denver Federal

Center). The level of investigation required will be the same as would be required for Federal employees holding positions involving similar duties.

Based on the risk and sensitivity of duties performed and system access authorities to be granted, the following type of background investigations will be required:

Duties – Tier 1 Support

Investigation Level – Moderate http://www.usgs.gov/usgs-manual/600/600-5.html http://www.usgs.gov/usgs-manual/600/600-5.html http://www.usgs.gov/usgs-manual/600/600-5.html http://www.usgs.gov/usgs-manual/600/600-5.html http://www.usgs.gov/usgs-manual/600/600-5.html http://www.usgs.gov/usgs-manual/600/600-5.html http://www.usgs.gov/usgs-manual/600/600-5.html http://www.usgs.gov/usgs-manual/600/600-5.html http://www.usgs.gov/usgs-manual/600/600-5.html http://www.usgs.gov/usgs-manual/600/600-5.html http://www.usgs.gov/usgs-manual/600/600-5.html http://www.usgs.gov/usgs-manual/600/600-5.html http://www.usgs.gov/usgs-manual/600/600-5.html

2. Non-disclosure Agreement

Prior to receiving access to USGS computers, contractor employees are required to sign non-disclosure or other system security agreements, depending on the systems to be used and level of access granted.

3. Training

Contractor employees shall complete USGS-defined Federal Information Systems Security Awareness computer security training before being granted system access and must renew the training annually. Failure to complete training within the required timeframe may result in loss of system access for that user.

Contractor employees with significant IT security responsibilities shall also complete specialized role-based training.

4. Personnel Changes

This is not required for Support contractors. All personnel must go through the DOIAccess process to be allowed to work on USGS systems.

5. Contractor Location

No portion of the services to be performed hereunder may be performed outside the United States without the express written permission of the Contracting Officer. If a contractor proposes to perform services outside the

United States, the contractor must submit a Security Plan to address mitigation of security issues due specifically to location. The Security Plan Template is available upon request from the Contracting Officer.

Such proposals will not be accepted unless the contractor can demonstrate that the Government systems or data would be no more vulnerable than if work were performed domestically.

6. Applicable Standards

Contractors do follow the DOI System Development Life Cycle (SDLC), NIST SP 800-64, (http://csrc.nist.gov/publications/nistPubs/800-64/NIST-SP800-64-PdH and the DOI SDLC Security

Integration Guide.

7. Asset Valuation

The contractor has been made familiar with the ANSS Asset Valuation Guide (AVG) to understand risk levels and system criticality. The ANSS has been defined as a Major Application, and is defined by the Bureau as a separate enclave for the purposes of Certification and Accreditation (C&A).

8. Property Rights http://csrc.nist.gov/publications/nistPubs/800-64/NIST-SP80064-PdH

The contractor is aware that the DOI will own the intellectual property rights to any software developed on its behalf to the maximum extent practical. Generally, FAR 52.227-14, Rights in Data-General, and its alternates will be used in the contract.

9. Independent Verification and Validation (IV & V)

The ANSS has instituted a Change and Configuration Management system to verify and validate software updates prior to being moved into production. The contractor follows the procedures developed by the ANSS

CCM committee.

10. Certification & Accreditation

The ANSS will perform the C&A and provide documents to the COR in electronic form. The contractor is aware of and does follow guidance outlined in NIST SP 800-37, 800-18, 800-30, 800-60, 800-53A, (http://csrc.nist.gov/publications/nistpubs/index.html) Federal Information Processing Standard (FIPS) 199 and 200 (http://csrc.nist.QOv/publications/fjps/fipsl99/FIPS-PUB-199-final.pdn , the associated DOI guides/templates, the DOI Security Test & Evaluation (ST&E) Guide , and the DOI Privacy Impact

Assessment (http://www.doi.aov/ocio/privacv/DOI%20PIA 03.01.04.docl

(http://wwwrcolka.cr.usqs.gov/uo/comp/usqscna.htmn . While the solicitation did not originally include all of the references stated above, these documents are available on-site and the contractor has full access to hard-copies of said documents.

11. Internet Logon Banner

This is not required of remote contractors.

12. Incident Reporting

Contractor employees must report any computer security incidents (viruses, intrusion attempts, system compromises, offensive e-mail, etc.) which may affect Government data or systems in accordance with the

DOI Computer Incident Response Guide. Report computer security incidents to USGS help desk or Security

Point Of Contact (SPOC). In many cases, your local system administrator is your Security Point Of Contact.

The help desk or SPOC will investigate and coordinate with the Computer Security Incident Response Team

(CSIRT).

13. Quality Control (Malicious Code)

All software and hardware shall be free of malicious code.

14. Self-Assessment

For requisitions to provide this task, the contractor shall conduct the annual self assessment in accordance with

NIST SP 800-26 on systems identified by the Government for testing. NIST documents are available on the http://csrc.nist.gov/publications/nistpubs/index.html http://csrc.nist.gov/publications/nistpubs/index.html http://csrc.nist.gov/publications/nistpubs/index.html http://csrc.nist.gov/publications/nistpubs/index.html http://csrc.nist.gov/publications/nistpubs/index.html http://csrc.nist.gov/publications/nistpubs/index.html http://csrc.nist.qov/publications/fjps/fipsl99/FIPS-PUB-199-final.pdn http://www.doi.aov/ocio/privacv/DOI%20PIA http://wwwrcolka.cr.usqs.gov/uo/comp/usqscna.htmn

Internet at http://csrc.nist.gov/publications/nistpubs/,. Both hard copy and electronic copies of the assessment will be provided to the COR

15. Vulnerability Analysis

ANSS performs monthly scans with a vulnerability analysis tool that is compatible with the software in use by the OCIO at the time. All "safe" or "non-destructive" checks are turned on.

At least annually, all high risk systems and systems accessible from the Internet are independently tested for penetration.

The government will reserve the right to conduct un-announced and prearranged independent vulnerability scans using Government personnel or another contractor.

The contractor will take appropriate and timely action to correct or mitigate any weaknesses discovered during such testing.

16. Logon Banner

When presented with the USGS logon banner, contractor employees shall read and acknowledge a Government approved logon warning.

17. Security Controls

Contractors are required to ensure compliance with the security control requirements of the current version of

NIST SP 800-53 (even if it is in draft) or Federal Information Processing Standard (FIPS) 200 that are appropriate to the sensitivity and criticality of the data or system. FIPS 199 and the DOI Asset Valuation

Guide will be used to determine sensitivity and criticality.

18. Contingency Plan

The contractor will follow the USGS Contingency Plan. Documents and instructions will be provided.

52.252-2 Clauses Incorporated by Reference. (FEB 1998) This contract incorporates one or more clauses by reference, with the same force and effect as if they were given in full text. Upon request, the Contracting Officer will make their full text available. Also, the full text of a clause may be accessed electronically at this/these address(es):

http://www.acquisition.gov/far/ http://www.doi.gov/pam/aindex.html

52.202-1 Definitions. (NOV 2013)

52.203-3 Gratuities. (APR 1984) http://csrc.nist.gov/publications/nistpubs/ http://csrc.nist.gov/publications/nistpubs/ http://csrc.nist.gov/publications/nistpubs/ http://csrc.nist.gov/publications/nistpubs/ http://csrc.nist.gov/publications/nistpubs/ http://www.acquisition.gov/far/ http://www.doi.gov/pam/aindex.html

52.203-12 Limitation on Payments to Influence Certain Federal Transactions. (OCT 2010)

52.203-17 Contractor Employee Whistleblower Rights and Requirement To Inform Employees of Whistleblower Rights. (APR 2014)

52.204-4 Printed or Copied Double-Sided on Postconsumer Fiber Content Paper. (MAY 2011)

52.204-13 System for Award Management Maintenance. (JUL 2013)

52.204-18 Commercial and Government Entity Code Maintenance. (NOV 2014)

52.204-19 Incorporation by Reference of Representations and Certifications. (DEC 2014)

52.223-6 Drug-Free Workplace. (MAY 2001)

52.223-17 Affirmative Procurement of EPA-designated Items in Service and Construction Contracts. (MAY 2008)

52.227-1 Authorization and Consent. (DEC 2007)

52.227-2 Notice and Assistance Regarding Patent and Copyright Infringement. (DEC 2007)

52.227-17 Rights in Data--Special Works. (DEC 2007)

52.229-3 Federal, State, and Local Taxes. (FEB 2013)

52.232-1 Payments. (APR 1984)

52.232-17 Interest. (MAY 2014)

52.232-23 Assignment of Claims. (MAY 2014)

52.232-39 Unenforceability of Unauthorized Obligations. (JUN 2013)

52.232-40 Providing Accelerated Payments to Small Business Subcontractors. (DEC 2013)

52.233-1 Disputes. (MAY 2014)

52.239-1 Privacy or Security Safeguards. (AUG 1996)

52.242-13 Bankruptcy. (JUL 1995)

52.242-15 Stop-Work Order. (AUG 1989)

52.246-25 Limitation of Liability - Services. (FEB 1997)

1452.203-70 Restriction on Endorsements (JUL 1996)

52.212-4 Contract Terms and Conditions - Commercial Items. (DEC 2014)

(a) Inspection/Acceptance. The Contractor shall only tender for acceptance those items that conform to the requirements of this contract. The Government reserves the right to inspect or test any supplies or services that have been tendered for acceptance. The Government may require repair or replacement of nonconforming supplies or reperformance of nonconforming services at no increase in contract price. If repair/replacement or reperformance will not correct the defects or is not possible, the Government may seek an equitable price reduction or adequate consideration for acceptance of nonconforming supplies or services. The Government must exercise its postacceptance rights (1) within a reasonable time after the defect was discovered or should have been discovered; and (2) before any substantial change occurs in the condition of the item, unless the change is due to the defect in the item.

(b) Assignment. The Contractor or its assignee may assign its rights to receive payment due as a result of performance of this contract to a bank, trust company, or other financing institution, including any Federal lending agency in accordance with the Assignment of Claims Act (31 U.S.C. 3727). However, when a third party makes payment (e.g., use of the Governmentwide commercial purchase card), the Contractor may not assign its rights to receive payment under this contract.

(c) Changes. Changes in the terms and conditions of this contract may be made only by written agreement of the parties.

(d) Disputes. This contract is subject to 41 U.S.C.