Gateway_SOO.pdf

Bureau of Trust Funds Administration Office of Information Resources

Electronic Records Management Project Digital Center of Excellence

“Gateway” Project

Statement of Objectives

4400 Masthead Street Albuquerque, NM 87109

Statement of Objectives – Digital Center of Excellence Gateway Page: 2

Table of Contents

1. Purpose

2. Background

3. Scope

4. Tasks

5. Operating Constraints

a. Functional Areas

b. Operating Constraints: Gateway System

c. Operating Constraints: Accounting Reconciliation Tool (ART)

6. Section 508 Accessibility Requirements

7. Government Furnished Equipment (GFE) and Information

8. Contractor Personnel Security Requirements

9. Security Controls

10. Asset Valuation

11. Data and Intellectual Property Rights

12. Security of Code

13. Non-Disclosure Agreement (NDA)/Organizational Conflict of Interest (OCI)

14. Order Type

15. Period and Place of Performance:

16. Travel

17. Personnel

18. Compliance and Work Products Development

19. Deliverables

20. Transition-Out Plan

Statement of Objectives – Digital Center of Excellence Gateway Page: 3

1. Purpose

The purpose of this contract is to obtain an internal/external web portal solution in support of the Bureau of Trust Funds Administration (BTFA), Office of Trust Records (OTR), Digital Center of Excellence (DCE).

The portal herein known as the “Gateway” will serve as the main digital records interface for BTFA’s American Indian Records Repository (AIRR). This project shall continue efforts and support in the transition of the AIRR from its current paper-based operation to one that is electronic, and address mission changes affected by COVID-19. This includes both vertical and horizontal functions defined in the Statement of Objectives (SOO), Constraints section.

2. Background

BTFA is responsible for the financial management of Indian trust funds, including receipt, investment, disbursement, and reporting of trust funds on behalf of individual Native American Indians and Tribes.

BTFA manages approximately $5.5 billion, held in roughly 3,600 trust accounts for more than 250 Indian Tribes and about 406,000 open Individual Indian Money (IIM) accounts. BTFA’s Office of Trust Analysis and Research provides litigation and document production support for lawsuits related to those accounts.

BTFA is also responsible for managing all Indian Trust records for the Department of the Interior. The BTFA OTR is responsible for managing a records and information program that upholds the legal obligation of the trust relationship between the Federal government and Native American Indians and Alaska Natives.

OTR is responsible for implementation and maintenance of the records management program for BTFA as well as coordination of the management and disposition of all Indian Trust Records with the National Archives and Records Administration (NARA). The Director of OTR reports to the BTFA Associate Chief Information Officer. OTR has staff in Washington, D.C.; Albuquerque, NM; strategic BTFA Field locations; and at the AIRR in Lenexa, KS.

The AIRR uses a Versatile Database system for records indexing. The AIRR is the location of the BTFA’s Digital Center of Excellence (DCE) which is digitizing the paper records to manage and provide secure access to authorized federal employees and contractors for all Indian Trust records research, litigation and document production support. AIRR has 810,000 cubic feet of paper-based Indian Trust records and over

1.7 billion pages of related records for BTFA, Assistant Secretary Indian Affairs, the Bureau of Indian Affairs (BIA) and the Bureau of Indian Education (BIE). The AIRR is currently growing at a rate of approximately 27,000 cubic feet of new paper records each year. While the DCE continues to pursue its mission to move from a paper-based to an electronic-based records management program, federal law requires the retention of all Indian trust paper records.

The BTFA Office of Trust Analysis and Research (OTAR) has the responsibility to plan and execute the historical accounting of Tribal Trust and IIM accounts; resolve ownership of residual balances in Youpee Escheat accounts and Special Deposit Accounts and the distribution of those account balances; and provide litigation and document production support for lawsuits related to Tribal Trust and IIM Accounts.

BTFA created an Electronic Records Management Program (ERMP) to modernize and digitize its records holdings and business processes. The result includes a more efficient system, reduced record storage, and more flexible record search capabilities. The challenge of this project is the complexity of the scope in support of the Versatile records indexing system which shall always be made available, and other BTFA program systems used for historical accounting, litigation, document production and reporting.

Statement of Objectives – Digital Center of Excellence Gateway Page: 4

Each year the AIRR processes a large number of search requests (below) for OTAR (formerly OHTA) and other offices including Indian Tribal Litigation Office (ITLO) and the Department of Justice While the COVID-19 pandemic is unprecedented in its impact on government operations; a review of the number of requests and current pending actions, we anticipate a significant increase in the immediate number of requests as well as a tighter timeline to respond to these requests once the AIRR facility is open and employees return to the facility.

For FY2017-FY2020, the AIRR facility pulled an average of 12,468 boxes to address requests per year which averaged 1,039 boxes per month. While they are in the middle of a massive transformation from paper to digitized records, the lack of the information technology (IT) hardware and software that is needed to move forward and increase the digitization process will present a critical high risk to the mission of BTFA and impact the Department’s ability to respond and provide evidence to other Department Offices and the Department of Justice in any timely manner.

Given a scenario where the Government may open the physical locations as of October 1, 2021 and assuming that the immediate opening will anticipate a workforce return of between 25%-50%, it is imperative that BTFA have a Baseline Gateway solution implemented as soon as possible but no later than this potential opening date of the Government.

3. Scope

The goal of this contract is the creation and delivery of the Gateway utilizing Agile processes through continuous capability enhancements, minimal downtown, prompt response to emerging needs, demonstrated reliability, and optimized performance with resource utilization minimized; and provide a requirements evaluation report on the Account Reconciliation Tool (ART) System. The Gateway system will be an internal /external web portal solution in support of the OTR, DCE. It will serve as the main digital records interface for BTFA’s AIRR. The Gateway will function as a digital research and distribution center for those seeking access to digital fiduciary tribal records and general records. The Gateway will also serve as the main interface for the DCE and reside in a Federal Information Security Modernization Act (FISMA)-moderate cloud instance provided by the BTFA. The Gateway will replace existing commercial platforms and address operational and programmatic changes impacted by COVID-19. The Gateway should have a Service Oriented Architecture (SOA) so other BTFA applications can access the data.

4. Tasks

The Gateway project has two tasks with the included expectation of associated management services during the project and software development support areas:

TASK NO. 1 - Gateway The Contractor shall redevelop the Versatile system as the Gateway within the Enterprise Business Services (EBS) Amazon Web-Service environment. The Contractor shall migrate all the existing Versatile data, approximately 1.5TB, workflows and like content structures to the Gateway. The Contractor shall provide a Web-Services data interface to cross-pollinate information from the Gateway to other applications. The Contractor shall develop common use visual dashboards1 for users and administrative staff of the Gateway. The visual displays shall show selected reports from

1 Common Reference Microsoft BI https://docs.microsoft.com/en-us/power-bi/create-reports/service-dashboards

Statement of Objectives – Digital Center of Excellence Gateway Page: 5 production to statistics to trends analysis and other items as identified. The Contractor shall build the DCE Gateway database Web Services definition Language (WSDL) for the Single Truth data structure working with the Contracting Officer’s Representative (COR) and EBS Director.

• The contractor will work in a team-based Agile environment. The contractor will create and maintain system roadmaps, project plans, and product and release backlogs that will be the basis for the contractor’s work. The BTFA will specify high-level requirements to the Agile team. As in typical Scrum-based Agile processes, the BTFA will work together with the team to develop and estimate user stories and establish acceptance criteria. These acceptance criteria will specify expected functionality for a user story, as well as any non-functional requirements that must be met in the development of the story. The BTFA will determine whether or not acceptance criteria have been satisfied.

• The contractor shall create a technical architecture which integrates with the BTFA’s existing systems.

• The contractor shall work with BTFA stakeholders and technology professionals to properly understand business requirements and develop an industry best practice approach to technology solutions.

• The contractor shall develop or configure, test, stage, and release of the Gateway business application by applying iterative processes utilizing the proposed Agile methodology and a frequent release cycle.

• The contractor shall recommend customer-friendly open source solutions that provide ease of use for non-technical Government users.

• The contractor shall ensure commercial best practices workflows shall come bundled with the solutions.

• The contractor shall design solutions that offer role or attribute-based identity management, authorization, and authentication.

• The contractor shall ensure all content is preserved according to federal record retention requirements and applications shall have the ability to protect personally identifiable information (PII).

• The contractor shall ensure the Gateway application is developed such that response times for fall within best practice levels.

• The contractor shall provide comprehensive documentation and information necessary to analyze processes, procedures, and/or policies that were implemented in the creation of the Gateway application.

• The contractor shall provide secure mechanisms to allow data exchange and interaction with external systems.

• The contractor shall provide business process analysis expertise with regard to optimizing the utilization and adoption of the software platform among Government users.

• The contractor shall develop system configuration in such a manner as to leverage maximum re-use and sharing across the platform by other federal agencies.

• The contractor shall provide incremental documentation through sprint cycles that results in full technical and end-user documentation or configuration for all software development efforts and product releases with all information necessary to document processes, procedures, code artifacts, and/or policies that were implemented in the creation of the development work.

Statement of Objectives – Digital Center of Excellence Gateway Page: 6

• The contractor shall move all versatile data into the Gateway development environment by October 1, 2021.

• The contractor shall develop minimum functionality of the Gateway system in EBS’ development environment as defined in the submitted and approved project plan by October 1, 2021.

TASK NO. 2 - ART Evaluation and Report The Contractor shall perform a requirements evaluation of the ART and provide a report to BTFA’s Office if Information Resources (OIR) and OTAR on those results. The Contractor shall evaluate the ART reconciliation tool requirements. The Contractor shall have access to OTAR staff and will provide an independent report using an approach that is evidence-based and provides a future-state, best of breed solution. The Contractor will not perform any redevelopment of ART.

5. Operating Constraints

a. Functional Areas

The Gateway project has six functional areas as well as applicable statutory and departmental requirements. The following depiction indicates the Information Technology vertical and horizontal functional areas as well as statutory and departmental requirements for the Gateway project.

The Contractor shall work with the BTFA Lead Project Manager to identify the requirements of the six functional areas and shall ensure compliance is incorporated as part of the Gateway development plan.

b. Operating Constraints: Gateway System

• All versatile data must be moved into the Gateway development environment by 10/1/2021.

• The contractor shall develop minimum functoriality of the Gateway system in EBS’ development environment as defined in the submitted and approved project plan by 10/1/21

• Perform all software development in the BTFA development cloud.

Statement of Objectives – Digital Center of Excellence Gateway Page: 7

• Coordinate all software development with the BTFA’s EBS office to ensure enterprise standards and protocols are maintained.

• All data will comply with all standards of the BTFA’s Ground Truth Data2 initiative All project artifacts shall be kept in the ERMP Team site.

• The phased development shall include supporting the BTFA Lead Project Manager in all aspects of vertical and horizontal IT Information Technology Framework as it relates to this requirement.

• The contractor shall work to leverage best practices and standards such as Systems and Software Quality Requirements and Evaluation (SQuaRE)3 to its methodology for performing various aspects of this contract.

• The Contractor shall ensure all development follows EBS standards and protocols around, Agile and Capability Maturity model Integration (CMMI) Level 3.

• The Contractor shall ensure the inclusion of U.S. Web Design System (USWDS)4 and reflect the important guidance codified in the 21st Century Integrated Digital Experience Act.

• The contractor shall include integrated help in all Gateway business process modules as well as integrated training via snip-it video. The Contractor shall ensure software development compliance for statutory and departmental regulations.

• The Contractor shall develop and perform a complete software test with EBS Director approval leveraging V model, Agile, Spiral, or Rapid Application Development (RAD) as approved by the COR and EBS Director.

• The Contractor shall review the draft OIR redesign specifications of the Versatile platform and develop a phased timeline to implement the design which best supports BTFA’s operational mission needs post-COVID-19.

• The Contractor shall potentially leverage the use one of the Departments toolsets such as Microsoft Power Automate, Power BI, Power Apps, and AI Builder, as a value-add to the Gateway Project.

• The Contractor shall leverage the use of the Departments toolsets such as Power BI or Tableau for statistical and analytical data isolation and dashboarding unless otherwise agreed to by the BTFA Lead Project Manager.

• The Gateway shall reside in the BTFA Amazon Web Services Cloud or designated development environment and shall be integrated with the departments Microsoft's Active Directory Federation Services (ADFS).

2 Ground Truth Data

3 ISO/IEC 25041:2012

4 U.S. Web Design System https://digital.gov/resources/21st-century-integrated-digital-experience-act/ https://en.wikipedia.org/wiki/Single_source_of_truth https://www.iso.org/standard/35766.html https://designsystem.digital.gov/

Statement of Objectives – Digital Center of Excellence Gateway Page: 8

• All development shall be performed within BTFA’s On-Premise/Amazon Web Services (AWS) infrastructure, developed using Agile development, and work in the integration of BTFA’s data analytic environment. Case Complete shall be used to develop requirements. EBS Team Foundation Server (TFS) for development projects and associated Epics, Features, User Stores, Test Plans and other Agile Methodology. The Gateway System shall be developed with BTFA approved data sources (Trust Funds Accounting System (TFAS), Versatile, Trust Asset Accounting Management System (TAAMS), and others as determined by BTFA).

c. Operating Constraints: Accounting Reconciliation Tool (ART)

The approach must meet the mission needs of OTAR and leverages current BTFA, Department, or government available technologies based on three scenarios:

o No changes: Do not alter the ART platform.

o Modification: Modify the ART to interactively work with the various other systems and comply with statutory and departmental mandates.

o Total Rebuild: Redevelop the ART platform leveraging a best of breed internal composite of products and platforms which meet BTFA, statutory, and Departmental mandates and future mission needs.

• The report shall include a complete phased recommended requirements document for the ART.

• The presentation shall include estimated costs broken out by recommended phases of development and include a Cost Benefit Analysis (CBA), Risk Assessment, and Requirements to support the findings shall be provided to the OIR and OTAR.

6. Section 508 Accessibility Requirements Section 508 of the Rehabilitation Act, as amended by the Workforce Investment Act of 1998 (P.L.

105‐220) requires that when Federal agencies develop, procure, maintain, or use information and communication technology (ICT), it shall be accessible to people with disabilities. Federal employees and members of the public who have disabilities shall have access to, and use of, information and data that is comparable to people without disabilities.

Products, platforms, and services delivered as part of this SOO that are ICT, or contain ICT, must conform to the Revised 508 Standards, which are available at 36 CFR Section 1194.1 & Apps A, C & D.

Applicable Functional Performance Criteria: All functional performance criteria in Chapter 3 apply to when using an alternative design or technology that results to achieve substantially equivalent or greater accessibility and usability by individuals with disabilities than would be provided by conformance to one or more of the requirements in Chapters 4 and 5 of the Revised 508 Standards, or when Chapters 4 or 5 do not address one or more functions of ICT.

Statement of Objectives – Digital Center of Excellence Gateway Page: 9

Applicable 508 requirements for electronic content features and components (including Electronic training materials): All requirements in E205 apply, including all Web Content Accessibility Guidelines (WCAG) 2.0 Level AA Success Criteria Apply.

Applicable 508 requirements for software features and components: All requirements in Chapter 5 apply, including all WCAG 2.0 Level AA Success Criteria, 502 Interoperability with Assistive Technology, and 503 Application.

Applicable 508 requirements for hardware features and components: All requirements in Chapter 4 apply.

Applicable 508 requirements for support services and documentation: All requirements in Chapter 6 apply.

When providing installation, configuration or integration services for ICT, the Contractor shall not reduce the original ICT item’s level of Section 508 conformance prior to the services being performed.

When providing maintenance upgrades, substitutions, and replacements to ICT, the Contractor shall not reduce the original ICT’s level of Section 508 conformance prior to upgrade, substitution or replacement. The agency reserves the right to request an Accessibility Conformance Report (ACR) for proposed substitutions and replacements prior to acceptance.

Quoters shall provide an ACR for each commercially available ICT item offered through this contract. The ACR should be created using the Voluntary Product Accessibility Template (VPAT) Version 2.4Rev 508 (or later), located at https://www.itic.org/policy/accessibility/vpat.

To ensure conformance with the Revised 508 Standards, provide an Accessibility Conformance Report (ACR) for each commercially available ICT product or service delivered as part of this PWS. Create the ACR using the Voluntary Product Accessibility Template (VPAT) version 2.4Rev

508. Complete each ACR in accordance with the instructions provided in the VPAT. Each ACR must address the applicable Revised 508 Standards referenced in the PWS. Each ACR shall state exactly how the ICT meets the applicable standards in the remarks/explanation column or through additional narrative. Address each standard individually and with specificity and clarify whether conformance is achieved throughout the entire ICT, or only in limited areas of the ICT. Provide a description of the evaluation methods used to support Section 508 conformance claims.

When developing or modifying ICT for the government, the Quoter shall ensure the ICT fully conforms to the applicable Section 508 Standards. When modifying a commercially available or government-owned ICT, the Quoter shall not reduce the original ICT Item’s level of Section 508 conformance.

When developing or modifying web and software ICT, the Quoter shall demonstrate Section 508 https://www.itic.org/policy/accessibility/vpat

Statement of Objectives – Digital Center of Excellence Gateway Page: 10 conformance by providing Section 508 test results based on the versions of the DHS Trusted Tester Methodology currently approved for use, as defined at https://www.dhs.gov/compliance-test-processes. The Quoter shall use testers who are certified by DHS on how to use the DHS Trusted Tester Methodology (e.g. “DHS Certified Trusted Testers”) to conduct accessibility testing.

Information on how testers can become certified is located at:

https://www.dhs.gov/publication/trusted-tester-resources.

Quoter personnel shall possess the knowledge, skills and abilities necessary to address the applicable revised Section 508 Standards for each ICT.

Exceptions for this work statement have been determined by DOI and only the exceptions described in 375 Departmental Manual (DM) 8 DOI Section 508 Program and Responsibilities dated February 5, 2016 may be applied. Any request for additional exceptions shall be sent to the Contracting Officer and a determination will be made according to 375 DM 8.

Where ICT conforming to one or more requirements in the Revised 508 Standards is not commercially available, the agency shall procure the ICT that best meets the Revised 508 Standards consistent with the agency’s business needs, in accordance with 36 CFR 1194 E202.7 and 375 DM 8. Any selection of a product or service that meets less accessibility standards due to a significant difficulty or expense shall only be permitted under an undue burden claim and requires authorization from the DOI Section 508 Office according to 375 DM 8 and 36 CFR 1194 E202.6.

The agency reserves the right, prior to making an award decision to perform testing on the Quoter’s proposed ICT to validate Section 508 conformance claims made in the ACR. Before final acceptance of products or services, including updates and replacements, if the Quoter claims its products or services satisfy the applicable Revised 508 Standards specified in the PWS and contracting officer determines that any furnished product or service is not in compliance with such requirements, the contracting officer will promptly inform the Quoter in writing of the noncompliance. The Quoter shall, at no cost to the agency, repair or replace the non-compliant products or services within the period specified by the contracting officer.

7. Government Furnished Equipment (GFE) and Information

All development shall be performed on BTFA networks utilizing BTFA GFE. Work products may be completed and managed and/or maintained at the Contractors facility with approval from the COR. Laptop provided GFE shall be returned to the BTFA COR, or their designee, no later than 5 days after completion of the work performed. DOI shall own all intellectual property rights to any software developed on its behalf.

The contractor shall be responsible for safeguarding all government property provided for contractor use. At the end of normal duty hours and/or after normal duty hours, all government facilities, equipment and materials must be secured. In performance of work under this award, the contractor must, without additional expense to the Government, be responsible for obtaining any necessary licenses and permits, and for complying with any federal, state, and municipal laws, codes, and regulations applicable to the performance of the work.

https://www.dhs.gov/publication/trusted-tester-resources

Statement of Objectives – Digital Center of Excellence Gateway Page: 11

All development shall be performed within BTFA’s On-Premise/Amazon Web Services (AWS) infrastructure, developed using Agile development, and work in the integration of BTFA’s data analytic environment. Case Complete shall be used to develop requirements. EBS TFS for Application Projects and associated Epics, Features, User Stores, Test Plans and other Agile Methodology. Applications shall be developed with BTFA approved data sources. TFAS is BTFA’s major data source. This data source is managed by Innotrust. InnoTrust provides SOA/Application Program Interface (API) to allow for development of application.

8. Contractor Personnel Security Requirements

Performance of this contract requires contractor personnel to have Federal government-issued personal identification card before being allowed unsupervised access to a DOI (facility and/or information system). The Contracting Officer's Representative (COR) will be the sponsoring official, and will make the arrangements for personal identify verification and card issuance.

At least two weeks before start of contract performance, the Contractor will identify all contractor and subcontractor personnel who will require (physical and/or logical) access for performance of work under this contract. The Contractor must make their personnel available at the place and time specified by the COR in order to initiate screening and background investigations. The following forms, or their equivalent, will be used to initiate the credentialing process:

• OPM Standard Form 85 or 85P

• OF 306

• Fingerprint card (local procedures may require the fingerprinting to done at a police station;

in this case, any charges are to be borne by the contractor)

• Release to Obtain Credit Information

• PIV card application (web-based)

Contractor employees are required to give, and to authorize others to give, full, frank, and truthful answers to relevant and material questions needed to reach a suitability determination. Refusal or failure to furnish or authorize provision of information may constitute grounds for denial or revocation of credentials. Government personnel may contact the contractor personnel being screened or investigated in person, by telephone or in writing, and the Contractor agrees to make available for such contact.

Alternatively, if an individual has already been credentialed by another agency through OPM, and that credential has not yet expired, further investigation may not be necessary. Provide the COR with documentation that support the individual's status.

During performance of the contract, the Contractor will keep the COR apprised of changes in personnel to ensure that performance is not delayed by compliance with credentialing processes.

Cards that have been lost, damaged, or stolen must be reported to the COR and Issuing Office within 24 hours. Replacement will be at the contractor's expense. If reissuance of expired credentials is needed, it will be coordinated through the COR.

At the end of contract performance, or when a contractor employee is no longer working under this contract, the Contractor will ensure that all identification cards are returned to the COR.

Statement of Objectives – Digital Center of Excellence Gateway Page: 12

The Contractor shall ensure employees of information resources and those specifically involved in systems development for the federal government shall abide by the following:

1) Contractors as authorized users of BTFA’s information resources shall not share any work products of any kind to unauthorized Contractor employees without BTFA Lead Project Manager approval.

2) Contractors as authorized users of BTFA’s information resources shall not provide access or share computers, computer software, computer data or information, or networks without BTFA’s Lead Project Manager approval.

3) Contractors as authorized users of BTFA’s information systems shall follow all safeguarding regulations related development software, code, internet protocol addresses, and documentation.

4) Any Contractor developed software is the property of the United States Government. This includes any intellectual property.

Contractor employees must take DOI’s end-user computer security awareness training prior to being granted access to DOI data or being issued a user account. Training must be renewed annually. Training modules – subject to change.

1) Federal Information System Security Awareness, Rules of Behavior for Network Access

2) Privacy Awareness Training

3) Records Management Training.

9. Security Controls The Contractor shall ensure compliance with the following minimum-security controls:

• National Institute of Standards and Technology (NIST) publication NIST 800-53 (Rev 4) “Recommended Security Controls for Federal Information Systems and Organizations”

• Information Technology Management Reform Act of 1996 (Public Law 104-106), August 1996

• Federal Information Security Management Act of 2002 (Public Law 107-347), December 2002

• Federal Information Technology Acquisition Reform Act, December 2014

• FIPS 199 “Standards for Security Categorization of Federal Information and Federal Information

Systems”

• DOI System Development Life Cycle (SDLC) 5

• DOI SDLC Security Integration Guide

10. Asset Valuation The Contractor must use the DOI Asset Valuation Guide (attached) for all systems to determine mission impact, data sensitivity, risk level, bureau/departmental/national criticality and whether the system is a Major Application, Minor Application, or General Support System.

11. Data and Intellectual Property Rights

5 https://www.doi.gov/sites/doi.opengov.ibmcloud.com/files/uploads/sdlc_guide_09302005final.pdf

Statement of Objectives – Digital Center of Excellence Gateway Page: 13

DOI will own the intellectual property rights to any software developed on its behalf to the maximum extent practical. Generally, FAR 52.227-14, Rights in Data-General and its alternates will be used in the Order. However, deviation from this policy may be necessary as circumstances warrant.

All documents produced under this BPA are the property of the U.S. Government and cannot be reproduced, or retained by the Contractor, even if the contract is revoked by either party for any reason. All appropriate project documentation will be given to the agency during and at the end of this contract in an acceptable and usable format, which may include the original format, at no additional cost to DOI. The Contractor shall not release any information without the written consent of the CO.

The Government retains unrestricted rights to all Government data. DOI retains ownership of any and all user created/loaded data and applications hosted on the Contractor’s infrastructure, as well as maintains the right to request full copies of these at any time.

The preliminary and final deliverables and all associated working papers and other material deemed relevant by the agency that have been delivered by the Contractor in the performance of this contract, are the property of the U.S. Government and shall be submitted to the COR at the conclusion of the contract in an acceptable and usable format, which may include the original format, at no additional cost to DOI. The U.S. Government has unlimited data rights to all deliverables and associated working papers and materials in accordance with FAR 52.227-14.

The Contractor acknowledges DOI’s exclusive right of ownership of the information and is required to transfer or return (or delete) all agency data collected, processed, stored or maintained by the Contractor on behalf of DOI upon termination of services, and shall provide written certification and supporting documentation attesting to the return of agency data collected, processed, maintained, or stored by the Contractor. Contractor shall provide DOI logical and physical access to Contractor’s facilities, installations, technical capabilities, operations, records, and databases upon request to verify the Contractor’s certification for the return or removal of agency data.

DOI information stored in the Contractor’s or Service Provider (SP) network and computing environments remain the property of DOI, not the Contractor or SP. DOI retains ownership of the information and any media type that stores Government information. The Contractor or SP do not have rights to the DOI information for any purpose other than those explicitly stated in the contract.

The Contractor and SP shall protect DOI information from unauthorized access by Contractor and SP personnel, other Contractors, or other SP subscribers. The Contractor and SP shall allow DOI full access to DOI information including data schemas, metadata, and other associated data artifacts that are required to ensure DOI can fully and appropriately retrieve DOI information from all of the Contractor or Service Provider environments that have been utilized to store, read, or process DOI’s information.

The Contractor shall treat all deliverables under the contract as the property of the U.S.

Statement of Objectives – Digital Center of Excellence Gateway Page: 14

Government for which DOI and any of its designated officials shall have unlimited rights to use, dispose of, or disclose such data contained therein. The Contractor shall not retain, use, sell, or disseminate copies of any deliverable without the express permission of the CO or COR.

The Contractor is required to obtain the CO’s approval prior to engaging in any contractual relationship (sub-Contractor) in support of this contract requiring the disclosure of information, documentary material and/or records generated under, or relating to this contract. The Contractor (and any subcontractor) is required to abide by Government and DOI guidance for protecting sensitive and proprietary information, classified, and controlled unclassified information.

12. Security of Code All software products developed for the DOI must be certified by the provider to be free of malicious code. The provider will be held liable for any damage or loss of business as a direct result of malware or malicious code embedded within software licensed to or developed for the DOI under the authority of the purchase/work order.

13. Non-Disclosure Agreement (NDA)/Organizational Conflict of Interest (OCI) Contractor employees who will have access to DOI information or will develop custom applications must sign an NDA/OCI prior to gaining access to any information or the DOI system.

Copies of the signed NDA/OCI will be maintained in the contract file.

All information regarding the work products developed and made available to the contractor under the contract and resulting orders must be regarded as sensitive information by the contractor and not be disclosed or used in any other way than on the performance of this contract to anyone outside the contractor’s organization or outside the DOI without the written permission of the Government. This includes, conference calls, in person meetings, and other various means of communications.

All contractor personnel shall sign a non-disclosure agreement and organizational conflict of interest (OCI) certification. The contractor shall take all reasonable precautions not to divulge information about the requirement and/or use this information for the contractor’s gain and shall not divulge any information to any other organization (outside the DOI) without written permission from the Government.

14. Order Type

This contract shall be a Firm Fixed Price type order.

15. Period and Place of Performance:

This contract shall be for one 12-month base year with a 6-month option priced month to month and 6-month phase-out period. The Place of Performance will be at the contractor’s site and employees are required to be located in the United States. The contractor shall be available to BTFA from 8 a.m. to 5 p.m.

Mountain Time, for meetings and communication.

Statement of Objectives – Digital Center of Excellence Gateway Page: 15

16. Travel

Travel to Government facilities or other contractor facilities may be required. All travel shall be in accordance with Federal Travel Regulations (FTR) and Federal Acquisition Regulation (FAR) 31.205- 46 Travel. Local travel, within a 50-mile radius, is not reimbursed.

All travel requests shall be submitted on a request for travel/approval form to the COR for approval. Travel costs with proper documentation (e.g., receipts, copy of credit card statement, etc.) shall be submitted for contractor reimbursement with the applicable invoice. Invoices for travel shall include the name of the traveler, travel itinerary, purpose of travel (event, exercise, workshop, etc.), and any other documentation requested by the Contracting Officer (CO) or COR.

17. Personnel

Key Personnel: The contractor shall identify key personnel, as identified in the staffing position table below, and provide statements of qualifications for these key personnel as well as all other team members.

Key personnel shall be current full-time employees, contingent hires will not be accepted as key personnel submissions. These individuals must have expertise in the Agile development methodology and relevant experience and knowledge in line with this Statement of Objective. The program management lead shall ensure that all work on this contract complies with contract terms and conditions and shall have access to contractor corporate senior leadership when necessary. The contractor’s management lead shall be the primary interface with the COR and shall attend status meetings and ad hoc meetings with stakeholders as required.

Key Contract Personnel can only be replaced with the approval of the Government’s CO and COR in accordance with the substitution of personnel. The Contractor shall notify the CO and the COR prior to making any changes in Key Personnel. No changes in Key Contract Personnel shall be made unless the Contractor can demonstrate that the qualifications of prospective replacement personnel are equal to, or better than the qualifications listed in the staffing descriptions. The CO and the COR shall be notified in writing of any proposed substitution at least 30 calendar days in advance of the proposed substitution. Such notification shall include:

• An explanation of the circumstances necessitating the substitution;

• A complete resume of the proposed substitute; and

• Any other information requested by the CO and/or the COR to enable them to determine whether or not the Contractor is maintaining the same high quality of personnel that provided the partial basis for award. The CO will promptly notify the Contractor of the approval or disapproval in writing. All disapprovals will require resubmission of another substitution within 30 calendars by the Contractor.

The Contractor must notify the COR immediately when ANY employee working on a DOI system is reassigned or leaves the Contractor’s employ, and prior to an unfriendly termination.

The following depicts qualifications of suggested staffing positions:

Statement of Objectives – Digital Center of Excellence Gateway Page: 16

Staff Position Description Key QTY Remote Travel6 Project Manager

Mandatory qualifications are listed below:

• 5 years hands on executive level (10M+ Valued) program management. 3 years recent experience in large scale federal records management. Extensive knowledge if PMBOK, ITIL Foundation, CMMI Level 3, Agile, Waterfall, Cloud, Microsoft, tableau, SQL Management, and cross-system IT.

Extensive knowledge in managing a Microsoft Azure environment.

• 4 years hands on experience with large (7M+ valued) federal contracting. 3 years in detailed project management experience leveraging PMBOK or like. Extensive knowledge of workforce planning, management, logistics, communications. PMP certified or equivalent.

• Manage the day to day operations for contract.

Y 1 Y Y

Senior Developer

Mandatory qualifications are listed below:

• Minimum of 5 Years senior development experience leveraging C#, Microsoft, Cold Fusion, WSDL, SSRS and other like technologies.

• Minimum of 5 Years’ experience in reviewing code work for accuracy and functionality, creating and implementing software design plans.

Y 2 Y

Data Analyst • Minimum of 5 Years as a Data Analyst with a clear understanding of Single Source Truth Data (SOTT), strong cloud development and storage knowledge to include specifically Microsoft Azure and Amazon Web Services.

• Minimum of 5 Years in working with Data governance.

• Minimum of 5 Years in working with Relational Database Management Systems, developing Data Warehouses

• Minimum of 5 Years in working with Solving Problems and Process frameworks such as the HDEIP Framework.

• Minimum of 5 Years in Data expertise in using Issue Trees, Hypotheses Trees, and Value Driver Trees.

1 Y

Systems • Minimum of 3 Years’ experience in federal system 1 Y

6 Travel locations are identified as any site within the United States.

Statement of Objectives – Digital Center of Excellence Gateway Page: 17

Engineer design frameworks within FEDRAMP Low, Medium and High designations.

• Minimum of 3 years in designing systems with applicable aspects of A-130, OMB Memorandum M-15-14, Federal information Technology Reform Act.

• Minimum of 3 years in design and development of new systems to increase efficiencies and leverage economies of scale within high-computing environments.

• Minimum of 3 Years in advising on technological changes for long term strategic planning, development of processes, policies, and operating procedures.

• Minimal required certification in one or more of the following: CCNA Tech Level (CWT), Remote (Test Drive LAN/WAN), CCNP Engineer Level

(CWA).

Systems Designer

• Minimum of 3 Years’ experience in computer system design work on large scale federal systems with cloud and cloud related Information Technology review, design, implement, and manage computer software and programs for internal and external use.

• Minimum of 3 Years’ experience in IT projects encompassing the design, deployment, maintenance, & evolution of AWS cloud-based systems, Code deployments to production environments, design and implementation of data warehouse utilizing database management systems such as PostgreSQL, MySQL, MSSQ, Electronic Security Systems and features.

• Minimum of 3 Years’ experience in overseeing the integration of new technologies in support of the DCE, Configuration management experience, either with windows or open-source tools.

• Minimum of 5 Years’ experience in developing cloud-based system and environments such as Microsoft Azure and Amazon AWS.

• Minimal required Certifications in one of the following: AWS, CCNA, CASP, Azure Administrator Associate certification or Microsoft Power Platform Solution Architect certification.

• Minimum of 3 Years in DEVOPS utilizing scripting technologies on Windows (such as WMI, Statement of Objectives – Digital Center of Excellence Gateway Page: 18

WS), and/or Linux (such as Bash) Perl, Ruby on Rails, RabbitMQ, Redis, and Solr, ADSI, VBS and PowerShell,

• Minimum of 3 Years’ experience with Cisco Firewalls and load balancers like AWS ELB, F5, A10, Management of (Active Directory, Exchange, SharePoint, WSUS).

Business Process Engineer

• Minimum of 5 years’ lead experience in implementing Quality Assurance reviews in a team-oriented environment. Extensive experience in Microsoft Power BI and Tableau type technologies.

• Minimum of a green belt in Six Sigma.

• Minimum of 5 years’ of using Six Sigma principles and methodologies to standardize system and business process, analysis to identify bottlenecks and processing inefficiencies, facilitate and coordinate multiple business process management and re-engineering initiatives for IT.

• Minimum of 5 years’ in leading and participated in mission critical Six Sigma projects, using DMAIC and DFSS like processes to achieve process improvement.

• Minimum of 5 years’ in leading collaboration with multiple business groups to understand business processes/needs and detailed requirements to drive design and development of required solutions design and created process documents to elevate efficiency and effectiveness of business processes that existed across the organization.

• Minimum of 5 years in developing enterprise process maps for the federal agencies which highlighted opportunities to improve business processes and systems utilization.

• Minimum of 5 years’ in using Agile project management methodology

1 Y

Computer Engineer

• Minimum of 5 Years in understanding computer hardware architectures related to integrated programs.

• Minimum of 5 Years familiarity with software test procedures or scripts

• Minimum of 5 years’ experience in programming languages such as C++, Java, and other object-oriented languages and scripting languages. coding levels and formats

Statement of Objectives – Digital Center of Excellence Gateway Page: 19

• Minimum of 5 years of experience in designing databases and data warehouse.

• Minimum of 5 years of experience in implementing and integrating commercial off the shelf comprehensive software solutions such as

SAP

• Minimal certifications in one of the following:

Cisco CCNA Certification, Cisco CCNP certification, CompTIA Network+, Aws cloud certification, Microsoft Cloud certification, Cloudera Certified Administrator for Apache Hadoop (CCAH), Cloudera Certified Professional:

Data Scientist (CCP: DS)

Systems Analyst

• Minimum of 10 years’ system or business process analysis and user requirement development

• Minimum of 5 years’ experience in systems management lifecycle or Agile methodology (Agile is currently used within OIR).

2 Y

Database Administrator

• Minimum 7 years’ database coding/administration experience using relational databases and Transactional SQL (SQL and Access).

• Minimum 5 years’ experience in systems management lifecycle or Agile methodology.

• Minimum 5 years in implementing complex data models, database designs, data access, table maintenance codes, designing and developing data warehouse and OLAP solutions, developing complex ETL procedures to load a data warehouse and OLAP cubes.

18. Compliance and Work Products Development

Contractor shall ensure compliance with all applicable areas outlined in the Order. All Government work products drafted or produced in any other form, or the use of outside technologies, either corporate or personal, in relation to contractual work products, is strictly prohibited. Code, or system design materials shall not be shared outside of the Departments network or non-DOI badged persons. Software development oversight, and general management will be led by the Office of Enterprise Business Services.

19. Deliverables

All deliverables will be done using federally provided computers and software.

Name Description Type Due Dates Background The Contractor shall provide the names of all DOCX 2 weeks before

Statement of Objectives – Digital Center of Excellence Gateway Page: 20

Name Description Type Due Dates Investigation Information contractor and subcontractor personnel who will require (physical and/or logical) access for performance of work under this contract.

start of contract performance

Kick Off Meeting

The COR will hold a kickoff meeting no later than 5 days post award.

DOCX 5 days after award date

Project Plan The Contractor shall provide a project plan which captures the needs of the SOO. This will be adjusted as agreed to.

DOCX 10 days after award date

Weekly Brief The Contractor shall provide a weekly report to BTFA’s Lead Project Manager and COR each Friday before close of business. The weekly brief should be limited to three sections: one summarizing progress; the second summarizing challenges and the last page to track action items.

PPTX COB Friday (weekly)

Gateway Design Plan

Phased design and layout for the development of the Gateway application. This includes the Agile Implementation Strategy; Roles and Responsibilities; Product Development Roadmap;

Release Planning; Release Strategy; and Agile Requirements Management

PPTX/

DOCX

45 days after award date

Gateway Portal

ART

Evaluation Report

Provide a report on the ART platform as noted in the SOO

PPTX 120 Days after award date

Transition-Out Plan

Draft Transition-Out Plan / Final Transition-Out Plan prior to end of contract.

DOCX 180/195 days after award date

• After the contract kick-off meeting, the Contractor shall have ten (10) days to create a Project Plan and submit it to the COR for approval. The Project Plan should be simple and in layman terms for all Milestones Key Deliverables and all tasks. An initial meeting to review and update the Project Plan will be held within 5 days after submitting the Project Plan to the COR.

• Weekly meetings will be held every Tuesday. Each meeting shall include an agenda based on a presentation of accomplishment and tasks for the following week predicated on the Project Plan.

The presentation of the Weekly Brief should include the status of the Gateway development in terms of % Complete; Risks, and Challenges to Success and shall be provided at least one day ahead of the meeting in each meeting invite.

20. Transition-Out Plan

The contractor shall provide transition-out support…