PWS_RFQ_for_GSA_GECO_Server_Upgrades_Jun_12_2019_FINAL.pdf

REQUEST FOR QUOTE

PERFORMANCE WORK STATEMENT (PWS)

GSA Enhanced Check Out (GECO) 2/Store Portal (SP)

Server Upgrades

In support of:

General Services Administration (GSA) Office of Information

Technology (IT)

GSA Supplies and Services (GSS)

Conducted under: FAR 6.302-1 (See attached J&A)

[With intent to sole source to: nChannel, Inc.]

Issued by:

General Services Administration (GSA) OAS

Office of Internal Acquisition (OIA)

1800 F Street NW

Washington, DC 20405

Issue Date: June 12, 2019

Section C – Performance Work Statement PWS for

GECO2/Store Portal Server Upgrades

Table of Contents

1 BACKGROUND

2 OBJECTIVE

3 MISSION

4 SCOPE OF WORK

4.1 NON-PERSONAL SERVICES

4.2 CONTRACTOR PERSONNEL

4.3 SCOPE OF SERVERS TO BE UPGRADED

5 CURRENT INFORMATION TECHNOLOGY (IT)/NETWORK ENVIRONMENT

6 DELIVERABLES SCHEDULE AND MILESTONE DATES

7 QUALITY ASSURANCE

8 OPERATIONAL REQUIREMENTS

8.1 KICK-OFF MEETING

8.2 PROVIDE UPGRADE SCHEDULE

8.3 EXECUTE UPGRADE

8.4 UPDATE AND SUBMIT DOCUMENTATION

8.5 DELIVERY INSTRUCTIONS

9 INSPECTION AND ACCEPTANCE OF SERVICES

9.1 SCOPE OF INSPECTION

9.2 BASIS OF ACCEPTANCE

9.3 DRAFT DELIVERABLES

9.4 WRITTEN ACCEPTANCE/REJECTION BY THE GOVERNMENT (IAW PWS

“QUALITY ASSURANCE”)

10 SPECIAL CONTRACT REQUIREMENTS

10.1 KEY PERSONNEL

10.2 KEY PERSONNEL SUBSTITUTION

10.3 GOVERNMENT FURNISHED EQUIPMENT (GFE)

10.4 SECURITY REQUIREMENTS

10.5 PERSONNEL SECURITY

10.6 PROCESSING OF BACKGROUND INVESTIGATION PACKAGES

11 ORGANIZATIONAL CONFLICT OF INTEREST AND NON-DISCLOSURE

REQUIREMENTS

11.1 ORGANIZATIONAL CONFLICT OF INTEREST

11.2 NON-DISCLOSURE REQUIREMENTS

11.3 SECTION 508 COMPLIANCE REQUIREMENTS

12 TRAVEL

13 INTELLECTUAL PROPERTY RIGHTS

14 OTHER REQUIREMENTS

14.1 ORDER TYPE

14.2 PERIOD OF PERFORMANCE

14.3 PLACE OF PERFORMANCE

14.4 HOURS OF OPERATION

14.5 OBSERVANCE OF LEGAL FEDERAL HOLIDAYS

14.6 PUBLIC RELEASE OF CONTRACT DOCUMENTS REQUIREMENT

14.7 DELIVERABLES MEDIA

14.8 PLACE OF DELIVERY

14.9 NOTICE REGARDING LATE DELIVERY/PROBLEM NOTIFICATION REPORT

(PNR) (IAW “Quality Assurance” of the PWS unless otherwise specified)

15 FEDERAL ACQUISITION REGULATION (48 CFR CHAPTER 1) 52.252-1

SOLICITATION PROVISIONS INCORPORATED BY REFERENCE

16 ADMINISTRATION AND GOVERNMENT POINTS OF CONTACT

16.1 CONTRACTOR SITE AND TELEWORK CONSIDERATIONS

16.2 INVOICING SUBMISSION

17 EVALUATION METHODOLOGY/VEVALUATION FACTORS FOR AWARD

17.1 BASIS OF AWARD

17.2 TECHNICAL EVALUATION

17.3 PRICE EVALUATION

18 QUOTE INSTRUCTIONS/DUE DATES

18.1 SUBMISSION OF QUESTIONS

18.2 SUBMISSION OF QUOTES

18.3 FORMAT FOR TECHNICAL QUOTE

18.4 FORMAT FOR PRICE QUOTE

18.5 ASSUMPTIONS

18.6 PRICE QUOTE EXPIRATION

18.7 TASK ORDER AWARD

1 BACKGROUND

The current GECO2 platform is comprised of multiple internal and external facing servers.

These servers currently run on Windows Server 2008 R2 and SQL Server 2008 R2. Both of these applications are approaching the end of life (EOL) support from Microsoft and will no longer be compliant with GSA security requirements. Continuing to run GECO2 on these platforms outside of Microsoft support will create potential security vulnerabilities for the externally facing servers and therefore require remediation.

2 OBJECTIVE

GSA requires the upgrade of Windows Server 2008 R2 and SQL Server 2008 R2 on each of the eight (8) public facing servers used for Store Portal and nChannel Portal.

These eight (8) servers represent twenty (20) of the current one hundred seventy-plus servers currently hosting the GECO2/SP application. The remaining balance of these servers will be retired by Spring 2021 as part of the GECO3 implementation project. The contractor shall work with the GSA server support team, Business

Operations Development (BOD) and any other teams with vested interest or subject matter expertise to schedule and coordinate the required upgrades, testing, security scans and documentation update, in order to ensure the minimization of any potential disruptions to normal business operations.

3 MISSION

The following is a brief description of Store Portal and nChannel Portal:

● Store Portal is a standalone environment built on the ASPDOTNETStorefront

(aspdnsf) Commercial Off The Shelf (COTS) platform. Data within this system is defined in the GECO2 Interface Control Document (ICD) and contains no Payment

Card Industry (PCI) or Personally Identifiable Information (PII) related data. This is a web-based system that displays items available to customers for purchase at a

GECO2 physical store location. The customer can build a shopping list using Store

Portal, but purchasing can only occur at the associated GECO2 physical store. Store

Portal interfaces into the GECO2 environment via Application Programming

Interfaces (APIs), which are not accessible by the public. Store Portal specific-passwords and associated identification (user ID, email) are the only data passed and that data is encrypted.

● nChannel Portal is the point of access for administering the nChannel framework.

This provides GSA, store managers and other designated personnel the tools needed to manage workflow, review order status, and other administrative tasks

(e.g., password changes) related to user management and application configuration. While the nChannel Portal can be accessed publicly, it contains no

PCI or PII related data, only nChannel Portal specific-passwords, which are stored as encrypted data.

4 SCOPE OF WORK

4.1 NON-PERSONAL SERVICES

The Government has determined that in order to satisfy the requirements in this PWS, the use of an Open Market Purchase Order is in the best interest of the Government, economic and other factors considered, and this Purchase Order is not being used to procure personal services prohibited by the Federal Acquisition Regulation (FAR) Part 37.104 titled "Personal Services Contract”.

4.2 CONTRACTOR PERSONNEL

The contractor shall not supervise, direct, or control the activities of Government personnel or the employee of any other contractor. The Government shall not exercise any supervision or control over the contractor in the performance of contractual services under this contract. The contractor is accountable to the Government for the actions of its personnel. Contractor employees shall not represent themselves as

Government employees, agents, or representatives. Contractor employees shall not state orally or in writing, at any time, that they are acting on behalf of the Government.

In all communications with third parties, the contractor must ensure that all of its employees identify themselves as contractor employees, identify the name of the company for which they work, and must not carry out any direction that violates the terms and conditions of this contract. This includes all signatory lines within emails and formal letters.

The contractor shall ensure that all of its employees, including subcontractor employees, working under this contract are informed of the substance of this section.

If the contractor believes any action or communication has been given that would create a personal services relationship between the Government and any contractor employee or any other potential supervision or duty violation, the contractor must notify CO immediately of this communication or action.

4.3 SCOPE OF SERVERS TO BE UPGRADED

The following table identifies the thirteen (13) servers listed in the table directly below to be upgraded and indicates the current versions of the operating system (OS) and SQL Server. The OS for all servers will be upgraded to Windows Server 2012 R1 and those that currently host SQL Server 2008 R2 Enterprise will be upgraded to SQL

Server 2016 R1 Enterprise.

Table (Servers):

Name Type Production unless otherwise indicated

GS300SQLDC01 SQL Server Test SQL

GS100DC01 Domain controller NA

GS100DC02 Domain controller NA

GS100SQLDC01 SQL Server nChannel Portal SQL

GS100SQLDC02 SQL Server nChannel Portal SQL

GS100SQL01 SQL Server Store Portal SQL

GS100SQL02 SQL Server Store Portal SQL

GS300PAR01 Public Facing Test

GS300PAR02 Public Facing Test

GS100PAR01 Public Facing nC Portal SQL

GS100PAR02 Public Facing nC Portal SQL

GS100SP01 Public Facing Store Portal

GS100SP02 Public Facing Store Portal

5 CURRENT INFORMATION TECHNOLOGY (IT)/NETWORK

ENVIRONMENT

The following diagram depicts the GECO Retail Systems store servers, the data center servers and the TCP network communication amongst them. The network communication is illustrated starting at the Microsoft Retail Management Systems (RMS) store application server, where a transaction is entered into the system; the transaction is saved to the

Retail Systems store database (SQL) server after it is finalized. Once a change is made in the Retail Systems store data base (SQL) server, the nChannel Sync Manager program communicates the transaction to the file server (GS100CLDSYNCFS01) and API server

(GS100PAR01) in the data center. The file (GS100CLDSYNCFS01) server then communicates to the API server (GS100PAR01), after which the API server (GS100PAR01) communicates to the Store Portal server (GS100SP01).

6 DELIVERABLES SCHEDULE AND MILESTONE DATES

All deliverables shall be delivered to the COR and CO no later than the dates specified in the Deliverables Table below. All deliverables must be submitted via email and become the property of the U.S. Government upon submission.

MILESTONE/

DELIVERABLE

CONTRACT

IMPLEMENTATION TIMELINE

Kickoff Meeting Within 3 Business days after award of task order.

Provide Upgrade Schedule Within 7 Business days after award of task order.

Execute Schedule

Begin within 2 Business days of GSA approval of

Upgrade Plan schedule and complete all upgrades within 60 days.

Update and Submit

Documentation

Deliver to the CO and to the COR 10 business days after upgrade, scans and penetration are complete.

7 QUALITY ASSURANCE

Quality Assurance is a required and vital aspect for all requirements in this PWS. FAR Part

46 describes the responsibilities of both the Government and the Contractor to ensure the quality of the services to be provided to the Government.

In compliance with clause 52.246-4 Inspection of Services - Fixed Price, the contractor shall provide to the CO and to the COR a Quality Control Plan (QCP) with its RFQ response. This plan shall be submitted to the Government within ten (10) business days after the award of the task order. The COR shall notify the contractor of acceptance or required modifications and obtain acceptance of the plan by not later than thirty (30) calendar days after the award of the task order. The QCP shall include the following minimum requirements:

• A description of the inspection system to cover all services and deliverables. The description shall include specifics as to the areas to be inspected on both a scheduled and unscheduled basis, and frequency of inspections

• A description of the methods to be used for identifying and preventing defects in the quality of service performed

• A description of the records to be kept to document inspections and corrective or preventive actions taken

• All records of inspections performed shall be retained and made available to the

Government upon request throughout the task order performance period, and for the period after task order completion, until final settlement of any claims under this task order

The Government shall regularly evaluate the contractor’s performance. The COR shall evaluate the contractor’s performance through inspections of deliverables identified herein this PWS; note that it is the contractor’s responsibility to ensure adherence to the submitted QCP to ensure acceptable performance under the task order. The Government may inspect each task as completed or increase the number of quality control inspections if deemed appropriate because of repeated failures discovered during quality control inspections or deliverables. Likewise, the

Government may decrease the number of quality control inspections if merited by performance. The CO shall make the final determination of the validity of COR complaint(s) in cases of disagreement between the contractor and the COR.

The Government shall create a Quality Assurance Surveillance Plan (QASP) for the above internal surveillance purposes and this document will be updated at the sole discretion of the Government. As the Government views this document as internal guidance for quality assurance as per FAR Subpart 46.4, it may change at any time without notification to the contractor. However, as per FAR 46.407, the CO has the authority to reject services not conforming in all respects to task order requirements.

The Quality Assurance Surveillance Plan (QASP) provides a systematic method to evaluate performance. This QASP explains the following:

• Deliverable or Required Service(s)

• Performance Standard(s)

• Acceptable Quality Level (AQL)

• Method of surveillance

The QASP does not detail how the contractor accomplishes the work. Rather, the QASP is created with the premise that the contractor is responsible for management and quality control actions to meet the terms of the task order. It is the Government’s responsibility to be objective, fair, and consistent in evaluating performance. In addition, the QASP should recognize that unforeseen and uncontrollable situations may occur.

The Contractor shall be evaluated using the Contractor Performance Assessment

Reporting System (CPARS) format. Business days are used unless stated otherwise.

Deliverable or

Required

Service(s)

Performance Standard(s)

Acceptable Quality Level

(AQL)

Method of

Surveillance

Kickoff Meeting

The contractor program manager, technical lead and system administrator shall participate in the Kick-off meeting and present the schedule submitted in the proposal. The kickoff shall be conducted within 3 days of contract award.

The contractor attends the kick-off meeting and presents the schedule for discussion.

100%

Inspection

Update to

Schedule

The Contractor shall provide an updated schedule delivered via email to the GSA Contracting

Officer Representative (COR) and Program Manager (PM) within 2 days of the kick-off meeting, if any updates are required.

Deliver updated schedule within 2 days of kick-off meeting, if changes are required.

100%

Inspection

Execute Upgrade

Schedule

The Contractor shall initiate upgrades within 2 days of GSA final approval of Upgrade

Schedule and complete within

60 working days.

Satisfactory: Upgrades initiated with 2 days of Plan

Approval and completed within 60 working days.

100%

Inspection

Deliverable or

Required

Service(s)

Performance Standard(s)

Acceptable Quality Level

(AQL)

Method of

Surveillance

Update

Documentation

The Contractor shall update the server inventory, SSP and other documents identified in the

PWS. They shall be delivered via email to the Government

Project Manager (PM),and the

COR

Updates shall be completed within 10 working days of completing the server upgrades.

100% Inspection

8 OPERATIONAL REQUIREMENTS

8.1 KICK-OFF MEETING

Within three (3) business days of task order award, the contractor program manager, technical lead and system administrator shall participate in a virtual kick-off meeting. GSA will schedule a meeting with the contractor and GSA stakeholders.

Team members will be introduced and there shall be a review of the contractor-proposed schedule.

8.2 PROVIDE UPGRADE SCHEDULE

The Contractor shall provide an upgrade schedule with their quote that identifies the servers to be upgraded and the date of each planned upgrade. This schedule shall include details on conducting unit, system, integration, security testing and remediation plans following the upgrades. The schedule shall also include a timeline for documentation updates. The contractor shall provide an updated plan, if required, within seven (7) days of the kick-off meeting.

8.3 EXECUTE UPGRADE

The Contractor shall work with GSA stakeholders to schedule and coordinate server upgrades to minimize any potential impact to GSA store operations. Specific system components to be upgraded include:

● Windows Server 2008 R2 to Windows 2012 R1.

● SQL Server 2008 R2 Enterprise to SQL Server 2016 R1 Enterprise.

● No other system components shall be upgraded or modified during this upgrade (for example ASPDOTNET or Internet Information Services (IIS)).

The Contractor shall execute the upgrade plan and provide all testing and validation results. Testing should include unit, system & integration testing to verify system operation, communication and functionality respectively. In addition, the contractor shall support subsequent GSA validation testing, perform security scans, execute penetration testing and remediate all findings as needed/required.

8.4 UPDATE AND SUBMIT DOCUMENTATION

The Contractor shall author and provide updates to all associated Assessment and

Authorization documentation (detailed below). Final package shall be submitted to the CO and COR and forwarded to the ISSO/ISSM for review and approval.

The following documents shall be created or updated within 10 business days after upgrade, scans and penetration are complete.

● System Security Plan (SSP) Documents to include updates to impacted security controls and architecture

● Server Inventory

● Network Architecture and Topology Diagrams/Documents

● Security Assessment Report (SAR) that provides the results of testing against the changes in security controls and architecture to support the server upgrades.

● Authenticated security vulnerability and compliance scans on the upgraded servers.

● Authenticated web application scans of the upgraded nChannel and Store portals

● Penetration test reports of the nChannel and Store portals

8.5 DELIVERY INSTRUCTIONS

One copy of each report/deliverable in table 6.0 above will be submitted to the

Contracting Officer and a copy to the Contracting Officer’s Representative (COR). The contractor shall deliver each deliverable electronically or in a mutually agreed format between the COR and the Contractor. Deliverables are to be transmitted with a cover letter, describing the contents.

9 INSPECTION AND ACCEPTANCE OF SERVICES

Inspection and acceptance of all work performance, reports, and other deliverables under this Task Order shall be performed by the Contracting Officer’s

Representative (COR) in coordination with the Project Manager and Contracting

Officer. The name and contact information for the CO, PM and COR can be found in the section named “ADMINISTRATION AND GOVERNMENT POINTS OF CONTACT below.

9.1 SCOPE OF INSPECTION

All deliverables shall be inspected for content, completeness, accuracy, and conformance to the requirements by the COR. Inspection may include validation of information through the use of automated tools or inspections of the deliverables, as specified in the Contract. The scope and nature of this inspection will be sufficiently comprehensive to ensure the completeness and quality of all deliverables. The Government requires a period NTE 15 working days after receipt of final deliverable items for inspection and acceptance or rejection unless otherwise documented in the Deliverables table.

9.2 BASIS OF ACCEPTANCE

The basis for acceptance shall be compliance with the requirements set forth in the

Contract, the Contractor’s proposal, and relevant terms and conditions of the

Contract. Deliverable items rejected shall be corrected by the Contractor in accordance with the applicable clauses.

Reports, documents, and narrative-type deliverables shall be accepted when all discrepancies, errors, or other deficiencies identified in writing by the Government have been corrected.

9.3 DRAFT DELIVERABLES

The Government shall provide written acceptance, comments, and/or change requests, if any, within 15 workdays (IAW the PWS sections “DELIVERABLES

SCHEDULE AND MILESTONE DATES” and “QUALITY ASSURANCE”) from

Government receipt of the draft deliverable. Upon receipt of the Government comments, the Contractor shall have 10 workdays to incorporate the Government's comments and/or change requests and to resubmit the deliverable in its final form.

If the draft deliverable meets the requirements, then the Government may approve the draft and request the document be finalized (e.g., “Draft” references removed from the document) and resubmit as the final deliverable.

All of the Government's comments shall either be incorporated, or the Contractor must explain to the Government's satisfaction why such comments should not be incorporated.

If the Government finds that a draft or final deliverable contains spelling errors, grammatical errors, improper format, or otherwise does not conform to the requirements stated within the contract, then the document may be immediately rejected without further review and returned to the Contractor for correction and resubmission. If the Contractor requires additional Government guidance to produce an acceptable draft, the Contractor shall email or arrange a meeting with the COR and PM or CO.

9.4 WRITTEN ACCEPTANCE/REJECTION BY THE GOVERNMENT (IAW

PWS “QUALITY ASSURANCE”).

The CO and/or COR will provide written notification via email of acceptance or rejection of all final deliverables within 15 workdays (unless otherwise specified).

All notifications of rejection shall be accompanied with an explanation of the deficiencies causing the rejection.

10 SPECIAL CONTRACT REQUIREMENTS

10.1 KEY PERSONNEL

The following is the minimum personnel who shall be designated as “Key.” The

Government does not intend to dictate the composition of the ideal team to perform this PWS. Therefore, the Government encourages and will evaluate additional Key

Personnel as proposed by the Contractor.

● Program Manager/Business Subject Matter Specialist (SMS)

The Contractor shall identify a Program Manager/Business SMS to perform the following:

● Serve as the Government’s primary point of contact and provide overall leadership and guidance for all Contractor personnel assigned to the Task

Order.

● Establishes goals and plans that meet project objectives and has domain and expert technical knowledge.

● Directs and controls activities for the Task Order, having overall responsibility for financial management, methods, and staffing to ensure that requirements are met.

● Demonstrated experience managing and supervising employees in labor categories and with skills applicable to projects similar in size and scope as referenced in this PWS.

● Provide technical and management leadership.

● Information Technology Infrastructure Library (ITIL) Foundation Level certification is desired. All professional certifications shall include the certification number.

10.2 KEY PERSONNEL SUBSTITUTION

Individuals proposed for key personnel positions under this Contract are expected to remain dedicated to the Contract. Substitutions will not be accepted unless specifically agreed upon and shall be made in accordance with this provision. All proposed substitutions of key personnel must be submitted in writing, at least fifteen (15) days (thirty (30) days if a security clearance is to be obtained), in advance of the proposed substitution to the CO. All requests for substitutions must provide a detailed explanation of the circumstances necessitating the proposed substitution(s), a resume of the proposed substitute(s), and any other information requested by the CO to make a determination as to the appropriateness of the proposed substitution(s). Substitution requests shall clearly identify how the proposed replacement meets or exceeds applicable standards established in the solicitation (i.e. evaluation criteria minimum qualifications), the Contract, and any betterment made thereto by the Contractor via its proposal. All proposed substitutes must have qualifications at least equal to the person being replaced. The Government will evaluate requests for substitutions and the CO will notify the Contractor of approval or disapproval.

10.3 GOVERNMENT FURNISHED EQUIPMENT (GFE)

Government furnished equipment will not be provided.

10.4 SECURITY REQUIREMENTS

The Contractor shall meet and comply with all GSA IT Security Policies and all applicable GSA and NIST standards and guidelines, other Government-wide laws and regulations, and GSA and Federal Acquisition Services (FAS) directives, guidelines, and requirements for protection and security of Information Technology.

Such directives and guidelines include but are not limited to:

Federal Information Security Management Act (FISMA)

● OMB Circular A-130

● OMB Memorandum M-04-04

● HSPD-7 & 12

● GSA Order CIO 2100.1 “IT Security Policy”

● NIST Special Publication 800 series

GSA will provide any of the above documents upon request.

10.5 PERSONNEL SECURITY

Background investigations are required for access to GSA information systems

(including Contractor operations that design, operate, test, and/or analyze GSA systems). The Contractor shall provide personnel who already have (or can obtain) a current Minimum Background Investigation (Tier 2S). No access will be given to

Government computer information systems and Government sensitive information before the background investigations determine a favorable Enter on Duty and/or favorable final fitness determination email.

HSPD-12 applies to any Contractor personnel staffing this Contract and as such performance shall require access to internal Government IT systems. HSPD-12 was issued to implement the policy of the United States to enhance security, increase

Government efficiency, reduce identity fraud, and protect personal privacy by establishing a mandatory, Government-wide standard for secure and reliable forms of identification issued by the Federal Government to its employees and Contractors

(including Contractor personnel). Under this directive, the heads of executive departments and agencies are required to implement programs to ensure that identifications issued by their departments and agencies to Federal employees and

Contractors meet the standards.

As a result of HSPD-12 applicability to the requirements of this PWS, the Contractor shall ensure all Contractor personnel requiring physical access to Federal facilities and access to Federally-controlled information technology systems have identification that complies with HSPD-12 policy. Immediately upon award the clearance process shall commence.

SAFEGUARDING SENSITIVE DATA AND INFORMATION TECHNOLOGY

RESOURCES

The following GSA policies must be followed. These policies can be found at http://www.gsa.gov/directives or https://insite.gsa.gov/directives.

Security Clauses:

1. Attachment A - CIO 09 -48, IT Security Procedural Guide: Security and

Privacy IT Acquisition Requirements

2. Attachment B - CIO 12-2018, IT Policy Requirements Guide

10.6 PROCESSING OF BACKGROUND INVESTIGATION PACKAGES

The Contractor shall work with the COR to ensure the correct investigation packages and processes are followed for on-boarding and off-boarding contractor personnel.

1. The Contractor shall complete Section 1 of the contractor information worksheet (CIW) and emails to the COR (encrypted if not using a GSA email account).

2. The COR completes the application and sends it to the GSA IT on-boarding team.

3. The on-boarding team reviews and initiates an investigation that systematically sends an email to the contractor to complete the Electronic

Questionnaires for Investigations Processing (e-QIP) application.

4. When the initial investigation is completed, the COR, PM, contractor point of contact and contractor employee receive notification that the contractor received a favorable Enter on Duty determination.

5. The COR requests GSA emails, network accounts, and GFE so the contractor can begin work.

6. The COR, PM, contractor point of contact and contractor employee receive notification when the investigation has been completed. This may be a favorable final fitness determination or notification a favorable final determination was not granted. In the case of the latter, the contractor becomes ineligible to work on the contract.

Additional details regarding the background investigation process will be provided after contract award.

11 ORGANIZATIONAL CONFLICT OF INTEREST AND NON-DISCLOSURE

REQUIREMENTS

11.1 ORGANIZATIONAL CONFLICT OF INTEREST

If the Contractor has or is currently providing support or anticipates providing support to the GSA IT that creates or represents an actual or potential organizational conflict of interest (OCI), the Contractor shall immediately disclose this actual or potential OCI in accordance with FAR Subpart 9.5. The Contractor is also required to complete and sign an Organizational Conflict of Interest

Statement in which the Contractor (and any subcontractors, consultants, or teaming partners) agrees to disclose information concerning the actual or potential conflict with any proposal for any solicitation relating to any work in this Contract. All actual or potential OCI situations shall be identified and addressed in accordance with FAR Subpart 9.5.

If the Contractor is given access to proprietary information of other Government

Contractors, the Contractor agrees to protect this information from unauthorized use or disclosure and to refrain from using the information for any purpose other than that for which it was furnished. The Contractor shall complete and sign the agreement regarding the protection of proprietary information. A copy of this agreement shall be provided to the Contracting Officer and the COR.

11.2 NON-DISCLOSURE REQUIREMENTS

If the Contractor acts on behalf of, or provides advice with respect to any phase of an agency procurement, as defined in FAR 3.104-4, then the Contractor shall execute and submit a Nondisclosure Agreement (NDA) Form and ensure that all its personnel (to include subcontractors, teaming partners, and consultants) who will be personally and substantially involved in the performance of the Contract:

a. Sign Non-Disclosure Agreement (NDA) Form prior to the commencement of any work on the Contract,

b. Are instructed in the FAR 3.104 requirements for disclosure, protection, and marking of Contractor bid or proposal information, or source selection information, and

c. Are instructed in FAR Part 9 for third party disclosures when acting in an advisory capacity.

All proposed replacement Contractor personnel also must be listed on a signed

Addendum to Corporate NDA and be instructed in the requirements of FAR 3.104.

Any information provided by Contractors in the performance of this PWS or obtained by the Government is only to be used in the performance of the Contract.

The Contractor shall put in place appropriate procedures for the protection of such information and shall be liable to the Government for any misuse or unauthorized disclosure of such information by its personnel, as defined above.

11.3 SECTION 508 COMPLIANCE REQUIREMENTS

Unless the Government invokes an exemption, all Electronic and Information

Technology (EIT) products and services proposed shall fully comply with Section

508 of the Rehabilitation Act of 1973, per the 1998 Amendments, 29 United States

Code (U.S.C.) 794d, and the Architectural and Transportation Barriers Compliance

Board’s Electronic and Information Technology Accessibility Standards at 36 Code of Federal Regulations (CFR) 1194. The Contractor shall identify all EIT products and services proposed, identify the technical standards applicable to all products and services proposed, and state the degree of compliance with the applicable standards. Additionally, the Contractor must clearly indicate where the information pertaining to Section 508 compliance can be found (e.g., Vendor’s or other exact web page location).

Note: The Contractor must ensure that the list is easily accessible by typical users beginning at the time of award.

12 TRAVEL

Travel is not anticipated during the performance of this PWS; however, video conferencing tools such as Google hangouts, and hangouts meet should be expected for meetings.

13 INTELLECTUAL PROPERTY RIGHTS

All slides, notes, and other documentation and intellectual property created as a result of this document shall become the property of GSA. The Contractor shall not attempt to copyright any of the materials created, nor shall the Contractor reuse or repurpose any of the information or functionality contained in the deliverables, without the express written consent of GSA.

14 OTHER REQUIREMENTS

14.1 ORDER TYPE

Firm Fixed Price (FFP)

14.2 PERIOD OF PERFORMANCE

Three (3) months/90 days from Date of Award (DOA)

14.3 PLACE OF PERFORMANCE

The primary Place of Performance for this requirement is anticipated to be remote at the contractor site. Telecommuting is permitted under this PWS.

14.4 HOURS OF OPERATION

The Contractor shall work Monday – Friday, from 8:00 a.m. – 5:00 p.m. Eastern Time

(ET) excluding Federal holidays or as agreed between the Contractor and GSA.

14.5 OBSERVANCE OF LEGAL FEDERAL HOLIDAYS

The Government observes the following holidays:

● New Year's Day

● Martin Luther King, Jr.'s Birthday

● Columbus Day

● President's Day

● Veterans Day

● Memorial Day

● Independence Day

● Labor Day

● Thanksgiving Day

● Christmas Day

● Any other day designated by Federal statute, Executive order, or the

President's proclamation in which the Federal Government is closed.

With the exception of Thanksgiving that always falls on a Thursday, when any other federal holiday falls on a Saturday, the preceding Friday is observed. When any holiday falls on a Sunday, the following Monday is observed. Observance of such days by Government personnel shall not by itself be cause for an additional period of performance or entitlement of compensation.

14.6 PUBLIC RELEASE OF CONTRACT DOCUMENTS REQUIREMENT

The Contractor agrees to submit, within 10 workdays from the date of the CO’s execution of the initial Contract, or any modification to the Contract (exclusive of

Saturdays, Sundays, and Federal holidays), a portable document format (PDF) file of the fully executed document with all proposed necessary redactions, including redactions of any trade secrets or any commercial or financial information that it believes to be privileged or confidential business information, for the purpose of public disclosure at the sole discretion of GSA. The Contractor agrees to provide a detailed written statement specifying the basis for each of its proposed redactions, including the applicable exemption under the Freedom of Information Act (FOIA), 5

U.S.C. § 552, and, in the case of FOIA Exemption 4, 5 U.S.C. § 552(b) (4), shall demonstrate why the information is considered to be a trade secret or commercial or financial information that is privileged or confidential. Information provided by the Contractor in response to the Contract requirement may itself be subject to disclosure under the FOIA. Submission of the proposed redactions constitutes concurrence of release under FOIA. GSA will carefully consider the entire

Contractor’s proposed redactions and associated grounds for nondisclosure prior to making a final determination as to what information in such executed documents may be properly withheld.

14.7 DELIVERABLES MEDIA

The Contractor shall deliver all electronic versions via email. The following are the required electronic formats, whose versions must be compatible with the latest, commonly available version on the market that is approved by GSA. Software and approved versions will be provided after contract award.

● Spreadsheets MS Excel

● Briefings MS PowerPoint

● Drawings MS Visio

● Schedules MS Project

● Text MS Word

14.8 PLACE OF DELIVERY

Unclassified deliverables or correspondence shall be delivered to the CO at the following address (only if electronic delivery is not available or otherwise specified by the CO and COR):

GSA/OAS

Office of Internal Acquisition (OIA)

ATTN: Denise D. Young

1800 F Street

Washington, DC 20405

Telephone: 202-69-8165

Email: denise.young@gsa.gov

Copies of all deliverables shall also be delivered electronically to the COR at the following address:

GSA IT IQSC

ATTN: Vickie Szewczyk, COR

1800 F Street NW

Washington, DC 20405

Telephone: 571-969-8734

Email: vickie.szewczyk@gsa.gov

14.9 NOTICE REGARDING LATE DELIVERY/PROBLEM NOTIFICATION REPORT

(PNR) (IAW “Quality Assurance” of the PWS unless otherwise specified).

The Contractor shall notify the CO, PM and the COR in writing via email as soon as it becomes apparent to the Contractor that a scheduled delivery will be late. The

Contractor shall include in the notification the rationale for late delivery, the expected date for the delivery, and the project impact of the late delivery. The CO, PM and the COR will review the rationale and the estimated project impact and provide guidance to the Contractor. Notwithstanding this notification, the

Government may terminate the task order for the convenience of the Government if determined to be in the best interest of the Government.

15 FEDERAL ACQUISITION REGULATION (48 CFR CHAPTER 1)

52.252-1 SOLICITATION PROVISIONS INCORPORATED BY

REFERENCE.

Clauses Incorporated By Reference (FAR 52.252-1). This contract incorporates one or more clauses by reference, with the same force and effect as if they were given in full text.

Upon request, the CO will make their full text available. Also, the full text may be accessed electronically at the following Internet address: http://www.acquisition.gov/far/.

Clause No Clause Title Date

52.203-16 Preventing Personal Conflicts of Interest. (DEC 2011)

52.203-17 Contractor Employee Whistleblower Rights and

Requirement

To Inform Employees of Whistleblower Rights.

(APR 2014)

52.203-19 Prohibition on Requiring Certain Internal

Confidentiality Agreements or Statements

(JAN 2017)

52.204-7 System for Award Management. (OCT 2016)

52.204-9 Personal Identity Verification of Contractor

Personnel.

(JAN 2011)

52.204-13 System for Award Management Maintenance. (OCT 2016)

52.204-14 Service Contract Reporting Requirements. (OCT 2016)

52.204-16 Commercial and Government Entity Code

Reporting.

(JUL 2016)

52.204-17 Ownership or Control of Offeror. (JUL 2016)

52.204-18 Commercial and Government Entity Code

Maintenance.

(JUL 2016)

52.204-19 Incorporation by Reference of Representations and Certifications.

(DEC 2014)

52.204-21 Basic Safeguarding of Covered Contractor

Information Systems.

(JUN 2016)

52.209-12 Certification Regarding Tax (FEB 2016)

52.212-1 Instructions to Offerors— Commercial Items. (JAN 2017)

52.212-2 Evaluation—Commercial Items, in solicitations for commercial items (see 12.602)

(OCT 2014)

52.212-3 Offeror Representations and Certifications—

Commercial Items

(NOV 2017)

52.212-4 Contract Terms and Conditions -- Commercial (JAN 2017)

Clause No Clause Title Date

Items

52.212-5 Contract Terms and Conditions Required To

Implement Statutes or Executive Orders—

Commercial Items

(NOV 2017)

52.222-56 Certification Regarding Trafficking (MAR 2015)

52.223-18 Encouraging Contractor Policies to Ban Text

Messaging While Driving

(AUG 2011)

52.227-14 Rights in Data – General Alternate II and III (DEC 2007)

52.232-35 Designation of Office for Government Receipt of

Electronic Funds Transfer Information.

(JUL 2013)

52.232-38 Submission of Electronic Funds Transfer

Information with Offer

(MAY 1999)

52.233-4 Applicable Law for Breach of Contract Claim. (OCT 2004)

52.239-1 Privacy or Security Safeguards (AUG 1996)

The full text of a provision may be accessed electronically at: GSAM website:

https://www.acquisition.gov/gsam/gsam.html.

Clause No Clause Title Date

552.203-71 Restriction on Advertising (SEP 1999)

552.212-71 Contract Terms and Conditions Applicable to

GSA

Acquisition of Commercial Items

(JUN 2016)

552.212-72 Contract Terms and Conditions Required to Implement

Statutes or

Executive Orders Applicable to GSA Acquisition of

Commercial

Items

(JUN 2015)

552.232.25 Prompt Payment (Nov 2009) (Deviation FAR 52.232-25) (NOV 2009)

552.232-78 Commercial Supplier Agreements—Unenforceable

Clauses.

(FEB 2018)

552.239-70 Information Technology Security Plan and Security

Authorization (JUN 2011)

552.239-71 Security Requirements for Unclassified Information

Technology Resources

(JAN 2012)

LIST OF ATTACHMENTS

* To be provided by the Contractor upon submission of quote

**To be provided in the FINAL Contract Award

ATTACHMENT

NAME

A **COR Appointment Letter (Issue upon award)

B **CIW_Form 850_03.29.2017 – Final (if required)

C *Nondisclosure Agreement

16 ADMINISTRATION AND GOVERNMENT POINTS OF CONTACT

Management of this Contract will be performed by the Contracting Officer and the

COR, and other designated representative for all meetings, tasks, and deliverables.

This section describes the roles and responsibilities of the Government and the

Contractor after Contract award. Unless otherwise specified, the Contracting

Officer has overall oversight of the Contract.

Individuals Authorized to Commit the Government. For purposes of the resultant Contract, only GSA Contracting Officer (CO), acting within the scope of their warrant authority, are empowered to execute Contract actions, as well as any modifications thereto.

The CO on this Contract is:

CONTRACTING OFFICER:

Denise Young

GSA, Office of Internal Acquisition

1800 F. ST., N.W.

Washington, DC 20405

(202) 694-8165 denise.young@gsa.gov

The CO will appoint a COR in writing through a COR Appointment Letter that will be provided to the Contractor after award. The COR will receive, for the

Government, all work called for by the Contract and will represent the CO in the technical phases of the work. The COR will provide no supervisory or instructional assistance to Contractor personnel. The COR is not authorized to change any of the terms and conditions, scope, schedule, and the price of the

Contract. Changes in the scope of work will be made only by the CO by properly executed modifications to the Contract. Responsibilities and limitations on authority specific to the resultant Contract shall be identified within the COR appointment letter. Any changes to the COR or assigned duties therein shall be made in writing by the CO. The COR on this Contract is:

CONTRACTING OFFICER’S REPRESENTATIVE (COR)

GSA IT IQSC

ATTN: Vickie Szewczyk, COR

1800 F Street NW

Washington, DC 20405

Telephone: 571-969-8734

Email: vickie.szewczyk@gsa.gov

PROGRAM MANAGER (PM)

GSA GSS BOD

ATTN: Justin Corsetti

1800 F Street NW

Washington, DC 20405

Telephone: 571-305-0853

Email: justin.corsetti@gsa.gov

16.1 CONTRACTOR SITE AND TELEWORK CONSIDERATIONS

It is the expectation of the Government that the Contractor will perform all tasks associated with this Contract remotely (not on-site in a Government facility). If necessary to be on a Government site, all Contractor personnel shall comply with established security procedures for entering an installation and its facilities, including special security procedures for entry to restricted or controlled areas.

The Contractor shall obtain necessary badges or documents required for entry to restricted or controlled areas, if applicable, to meet the requirements of the

Contract. The Contractor shall coordinate with the COR to obtain and return temporary badges.

Performance of work by Contractor personnel during inclement weather, unique situations, Continuity of Operations (COOP) drills, actual emergency events such as flooding, earthquake, power outages, or otherwise may be required where determined necessary and appropriate by the Government (i.e., as authorized by the CO). The Government shall only be responsible to provide access (i.e., via

Virtual Private Network (VPN), Virtual Desktop, or Citrix connections) to allow the users to securely continue working in a telework environment.

Note: Additional resources such as physical computers, telephones, monitors, keyboards, mice, etc., will not be furnished by the Government for telework purposes. In a telework situation, Contractor personnel shall provide their own high speed data connection and have available to them an adequate space to allow them to work efficiently during all work hours.

16.2 INVOICING SUBMISSION

Funding and Payment

Prompt Payment Requirements: Payments will be processed in accordance with FAR

Clause 52.212-4(i) Payments as supplemented and deviated from in GSAM Clause

552.212-4.

INVOICES: The Contractor shall submit billings monthly in accordance with the

Government’s requirements in the [PWS].

Submission of Original Invoices:

Invoices shall be submitted no later than fifteen calendar days following performance and/or delivery. The invoice must be accompanied by any applicable monthly status reports submitted during that period. The COR and CO shall receive a copy of the invoice and all supporting documentation. This can be done before, but no later than, the same time as invoice submission to the GSA Financial Operations and Disbursement Center.

Invoices are authorized for payment upon the Government’s receipt and acceptance of deliverables specified in the contract and the receipt of a valid invoice. Invoices, to be proper and payable, must include the following information:

1. Name and address of the Contractor, and

2. Invoice date and number, and

3. Contract/Order Number (as listed in Block 4 on Form SF1449) and Pegasys Document

Number (PDN) (GD followed by [PIID Number as listed in Block 4 on Form SF1449]), any Contract Line Item Numbers (CLINs), and the Program/Project Title (GSA

Enhanced Check Out (GECO) 2/Store Portal (SP) Server Upgrades) and

4. Description of the services/products provided including CLIN number and description, quantity, unit of measure, unit price and extended price of the item(s) delivered; period of service and/or dates that services were provided, etc., and;

5. Name and address of the contractor’s authorized representative to whom payment is to be sent, and;

6. Name, title, and phone number of the contractor’s PoC to be notified in the event of defective invoice; and

7. Taxpayer Identification Number (TIN). The Contractor shall include its TIN on the invoice and ensure the SAM.gov profile for the contractor is complete including the payment remittance address and bank details.

In accordance with FAR 52.212-4 (Alternate 1) - January 2017, for any payment requests involving the optional labor-hour tasks on the [purchase order] award, when requested by the Contracting Officer or the authorized representative, the Contractor shall substantiate invoices (including any subcontractor hours reimbursed at the hourly rate in the schedule) by evidence of actual payment, individual daily job timecards, records that verify the employees meet the qualifications for the labor categories specified in the contract, or other substantiation specified in the contract.

The Contractor shall submit an original invoice for payment to GSA Financial Operations and Disbursement Center.

P.O. Box 419279

Kansas City, MO

Copies of invoices shall be emailed to the designated Contracting Officer Representative

(COR) that will be appointed following award of this [purchase order].

Copies of invoices shall be emailed to the designated Contract Specialist and Contracting

Officer.

Please Note: Failure to send both copies could delay your payment.

When invoicing GSA, ensure all data listed in Items 1-7 above are present on the invoice. All invoices shall be submitted electronically. Password and electronic invoice access is obtained through VCSS, https://vcss.ocfo.gsa.gov.

For assistance with how to setup electronic invoicing or payment related information, please contact GSA Finance Customer Support (800) 676-3690 or kc-acctspayable.vcss@gsa.gov.

A copy of the invoice must be sent to the COR/Program Office POC, [Vickie Szewczyk, @ email: Vickie.szewczyk@gsa.gov] for approval. A courtesy copy of the invoice must also be sent to the Contracting Officer [Denise Young, @ email: denise.young@gsa.gov] for the official contract file.

FINAL INVOICE: The Contractor shall submit with a GSA Form 1142- Release of

Claims with submission of the final invoice at the end of the period of performance. A copy of the form should be sent via email to the Contracting Officer and to the Contract Specialist and COR identified as the Government POCs in the

[PWS].

17 EVALUATION METHODOLOGY/VEVALUATION FACTORS FOR

AWARD

17.1 BASIS OF AWARD

The RFQ will be issued based on “the intent to sole source” (non-competitive) to nChannel, Inc., a small disadvantaged business. The basis for award shall be the overall best value to the government in consideration of all price and non-price factors. Lowest

Price Technically Acceptable (LPTA) Source Selection Process will be the methodology used for this effort.

17.2 TECHNICAL EVALUATION

Each Technical Factor will be evaluated on a (Acceptable/Non-Acceptable) basis, with the exception of the past performance evaluation factor will be based on (Acceptable, Non-

Acceptable or Neutral). The technical quote should consist of the company's response to meeting the requirements of the PWS and address each technical evaluation factor.

FACTOR 1 - Technical Approach (Acceptable/Non-Acceptable)

The evaluation will be based on the Government’s level of confidence in your company’s understanding, capability, and approach to performing all of the requirements detailed in the PWS. The level of confidence will be based on:

Methodology for achieving all of the requirements found throughout the PWS;

Ability to fully support the deliverables.

FACTOR 2- Past Performance (Acceptable/Non-Acceptable, or Neutral)

Past Performance document shall NOT exceed more than one (1) page per project.

Company shall describe two projects currently in process or completed within the last 24 months which is equal to, or similar, in scope to this PWS/RFQ.

Past performance shall demonstrate the Offeror’s experience in accomplishing all tasks in the RFQ. While the government may elect to consider data from other sources, the burden of providing detailed, current, accurate and complete past performance information rests with the Offeror.

The currency and relevance (as determined by the Contracting Officer) of past performance information, source of the information, context of the data, and general trends in Offerors’ performance will be considered. The Offeror should show that it has a track record of satisfactory performance of relevant prior experience.

For each project listed in response to Evaluation Factor 2, Company must include contact information for at least two (2) points of contact per contract. The

Company is responsible for ensuring that the names, telephone numbers, e-mail addresses and addresses of all references provided are correct. The

Government may submit an evaluation questionnaire to all references provided.

The quote shall be scored…