MAS - Science Applications International Corporation - GS35F486BA

GSA MAS Price List

1 | P a g e

GENERAL SERVICES ADMINISTRATION

Federal Acquisition Service

Authorized Federal Supply Schedule FSS Price List

On-line access to contract ordering information, terms and conditions, up-to-date pricing, and the option to create an electronic delivery order are available through GSA

Advantage!®, a menu-driven database system. The INTERNET address GSA

Advantage!® is: GSAAdvantage.gov.

Multiple Award Schedule

FSC Group: Information Technology FSC Class: D399

Contract number: GS-35F-486BA

Contract period: August 22, 2014 – August 21, 2029

Science Applications International Corporation

12010 Sunset Hills Rd

Reston, VA 20190

Contractor’s internet address/web site where schedule information can be found: www.saic.com

SAIC GSA PROGRAM MANAGEMENT OFFICE:

Program Manager: Sarah E. Rootes Phone: (703) 676-7988 E-mail: Sarah.E.Rootes@saic.com

Contract Manager: Timothy E. Bodnar, Jr.

Phone: (301) 401-3440 E-mail: Timothy.E.Bodnar.Jr@saic.com

Business size: Large

For more information on ordering go to the following website https://www.gsa.gov/schedules.

Price list current as of Modification PS–0046 effective August 05, 2024

Prices Shown Herein are Net http://www.saic.com/ mailto:Sarah.E.Rootes@saic.com mailto:Timothy.E.Bodnar.Jr@saic.com https://www.gsa.gov/schedules

2 | P a g e

CUSTOMER INFORMATION

1a. Table of awarded special item number(s) with appropriate cross-reference to item descriptions and awarded price(s).

SINs SIN Title

54151S Information Technology Professional Services

54151HACS Highly Adaptive Cybersecurity Services (HACS)

54151HEAL Health Information Technology Services

518210C Cloud and Cloud-related IT Professional Services

OLM Order-Level Materials (OLM’s)

1b. Lowest Priced Model Number and Price for each SIN: See SIN-specific pricing tables.

SIN Model Price

54151S SEE PRICE LIST BELOW

54151HACS SEE PRICE LIST BELOW

54151HEAL SEE PRICE LIST BELOW

518210C SEE PRICE LIST BELOW

OLM Determined at the delivery/task order level

1c. Hourly Rates.

SIN Model Price

54151S SEE DESCRIPTION, JOB TITLES, RESPONSIBILITIES, EXP/EDU BELOW

54151HACS SEE DESCRIPTION, JOB TITLES, RESPONSIBILITIES, EXP/EDU BELOW

54151HEAL SEE DESCRIPTION, JOB TITLES, RESPONSIBILITIES, EXP/EDU BELOW

518210C SEE DESCRIPTION, JOB TITLES, RESPONSIBILITIES, EXP/EDU BELOW

2. Maximum order:

SINs Maximum Order

54151S $500,000 per order

54151HACS $500,000 per order

54151HEAL $500,000 per order

518210C $500,000 per order

OLM $250,000 per order

3. Minimum order: $100

4. Geographic coverage (delivery area). SAIC worldwide locations.

3 | P a g e

5. Point(s) of production (city, county, and State or foreign country). SAIC worldwide locations.

6. Discount from list prices or statement of net price. Government Net Prices (IFF added)

7. Quantity discounts. Discounts may be negotiated at the delivery/task order level.

8. Prompt payment terms. None. Net 30 Days. Information for Ordering Offices: Prompt payment terms cannot be negotiated out of the contractual agreement in exchange for other concessions.

9. Foreign items (list items by country of origin). Not Applicable

10a. Time of delivery. (Contractor insert number of days.) Specified in negotiated delivery/task orders.

10b. Expedited Delivery. Items available for expedited delivery are noted in this price list.

Specified in negotiated delivery/task orders.

10c. Overnight and 2-day delivery. Specified in negotiated delivery/task orders.

10d. Urgent Requirements. Contact Contractor. Time of delivery is specified in negotiated delivery/task orders.

11. F.O.B. point(s). Destination

12a. Ordering address(es).

Science Applications International Corporation (SAIC)

12010 Sunset Hills Road

Reston, VA 20190

ATTENTION: Timothy E. Bodnar, Jr.: Phone: 301-401-3440, E-mail:

timothy.e.bodnar.jr@saic.com

12b. Ordering procedures: See Federal Acquisition Regulation (FAR) 8.405-3.

13. Payment address(es).

Should Electronic Funds Transfer (EFT) payment be available, SAIC requests that the

EFT remittance be specified as follows:

Science Applications International Corporation (SAIC)

Bank: Bank of America

Account #1291244241

ABA Routing Number: 122000030

Should EFT not be available, the remittance address is as follows:

Science Applications International Corporation (SAIC)

P. O. Box 742497

Atlanta, GA 30374-2497

Reference Information for all Checks:

mailto:timothy.e.bodnar.jr@saic.com

4 | P a g e

-The name of the customer making payment

-The contract number/delivery order number

-The invoice number

-If available, project number

14. Warranty provision. Provision for any appropriate and applicable warranties shall be specifically identified in individual orders. Such warranties are subject to the negotiations between the ordering agencies and the contractor.

15. Export packing charges, if applicable. Not Applicable

16. Terms and conditions of rental, maintenance, and repair (if applicable). Not Applicable

17. Terms and conditions of installation (if applicable). Not Applicable

18a. Terms and conditions of repair parts indicating date of parts price lists and any discounts from list prices (if applicable). Not Applicable

18b. Terms and conditions for any other services (if applicable). Not Applicable

19. List of service and distribution points (if applicable). Not Applicable

20. List of participating dealers (if applicable). Not Applicable

21. Preventive maintenance (if applicable). Not Applicable

22a. Special attributes such as environmental attributes (e.g., recycled content, energy efficiency, and/or reduced pollutants). Not Applicable

22b. If applicable, indicate that Section 508 compliance information is available on Information and Communication Technology (ICT) supplies and services and show where full details can be found (e.g. contractor’s website or other location.) The ICT standards can be found at:

www.Section508.gov/.

Not Applicable

23. Unique Entity Identifier (UEI) number. MMLKPW9JLX64

24. Notification regarding registration in System for Award Management (SAM) database.

Contractor registered and active in SAM http://www.section508.gov/

5 | P a g e

SIN 54151S Information Technology Professional Services

54151S IT Professional Services and/or labor categories for database planning and design; systems analysis, integration, and design; programming, conversion and implementation support; network services, data/records management, and testing.

NOTE: Subject to Cooperative Purchasing

Cooperative Purchasing: Yes

Set Aside: No

FSC/PSC Code : DA01

Maximum Order : $500,000

NAICS

Number Description Business Size

541519 Other Computer Related Services $34 million

Instructions:

1. Specific Instructions for SIN 54151S - Information Technology Professional Services:

* All services shall be billed in arrears in accordance with 31 U.S.C. 3324.

6 | P a g e

SIN 54151HEAL Health Information Technology Services

54151HEAL Includes a wide range of Health IT services to include connected health, electronic health records, health information exchanges, health analytics, personal health information management, innovative Health IT solutions, health informatics, emerging Health IT research, and other Health IT services.

Set Aside: No

FSC/PSC Code : DA01

1. Specific Instructions for SIN 54151HEAL - Health Information Technology Services

a. Services offered SIN 54151HEAL shall be in accordance with the following laws and standards when applicable to the specific task orders, including but not limited to:

i. Health Information Technology for Economic and Clinical Health Act of 2009

(HITECH)

ii. The Health Insurance Portability and Accountability Act of 1996 (HIPAA)

iii. The National Institute of Standards and Technology (NIST) Federal Information Processing Standards (FIPS) and Special Publications

iv. Federal Information Security Management Act (FISMA) of 2002

b. All services shall be billed in arrears in accordance with 31 U.S.S 3324.

7 | P a g e

SIN 54151HACS Highly Adaptive Cybersecurity Services (HACS)

SAIC is eligible for and awarded all five HACS subcategories:

1) High Value Asset (HVA) Assessment

2) Risk and Vulnerability Assessment (RVA)

3) Penetration Testing

4) Incident Response

5) Cyber Hunt

54151HACS Includes a wide range of fields such as, the seven-step Risk Management Framework services, information assurance, virus detection, network management, situational awareness and incident response, secure web hosting, and backup, security services and, Security Operations Center (SOC) services. HACS vendors are cataloged under the 5 subcategories of High Value Asset Assessments; Risk and Vulnerability Assessments, Cyber Hunt, Incident Response, and Penetration Testing.

FSC/PSC Code : DJ01

Additional SIN Description: Includes proactive and reactive cybersecurity services that improve customer enterprise-level security posture. Services to identify and protect a customer's information resources, detect and respond to cybersecurity events or incidents, and recover capabilities or services impaired by any incidents that emerge.

It encompasses a wide range of fields that include, but are not limited to, Risk Management Framework

(RMF) services, information assurance (IA), virus detection, network management, situational awareness and incident response, secure web hosting, and backup and security services.

8 | P a g e

The seven-step RMF includes preparation, information security categorization; control selection, implementation, and assessment; system and common control authorizations; and continuous monitoring.

RMF activities may also include Information Security Continuous Monitoring Assessment (ISCMA), which evaluate organization-wide ISCM implementations, and also Federal Incident Response

Evaluations (FIREs), which assess an organization's incident management functions.

It also includes Security Operations Center (SOC) services. The SOC scope includes services such as:

24x7x365 monitoring and analysis, traffic analysis, incident response and coordination, penetration testing, anti-virus management, intrusion detection and prevention, and information sharing.

Find the requirements for SIN 54151HACS oral technical evaluation and other guidance for offerors on our HACS page.

1. Specific Instructions for SIN 54151HACS - Highly Adaptive Cybersecurity Services (HACS)

a. Offerors may request to be placed in the following subcategories.

i. High Value Asset (HVA) Assessments include Risk and Vulnerability Assessment (RVA) which assesses threats and vulnerabilities, determines deviations from acceptable configurations, enterprise or local policy, assesses the level of risk, and develops and/or recommends appropriate mitigation countermeasures in operational and non-operational situations. The services offered in the RVA sub-category include Network Mapping, Vulnerability Scanning, Phishing Assessment, Wireless Assessment, Web Application Assessment, Operating System Security Assessment (OSSA), Database Assessment, and Penetration Testing. Security Architecture Review (SAR) evaluates a subset of the agency’s HVA security posture to determine whether the agency has properly architected its cybersecurity solutions and ensures that agency leadership fully understands the risks inherent in the implemented cybersecurity solution. The SAR process utilizes in-person interviews, documentation reviews, and leading practice evaluations of the HVA environment and supporting systems. SAR provides a holistic analysis of how a

HVA’s individual security components integrate and operate, including how data is protected during operations. The SAR uses the RMF when designing and implementing the seven tenets of zero trust architecture by describing how the steps in the RMF map to similar steps described in NIST Special

Publication (SP) 800-207, Zero Trust Architecture. Systems Security Engineering (SSE) identifies security vulnerabilities and minimizes or contains risks associated with these vulnerabilities spanning the

Systems Development Life Cycle. SSE focuses on, but is not limited to the following security areas:

perimeter security, network security, endpoint security, application security, physical security, and data security.

ii. Risk and Vulnerability Assessment (RVA) assesses threats and vulnerabilities, determines deviations from acceptable configurations, enterprise or local policy, assesses the level of risk, and develops and/or recommends appropriate mitigation countermeasures in operational and non-operational situations. The services offered in the RVA sub-category include Network Mapping, Vulnerability Scanning, Phishing

Assessment, Wireless Assessment, Web Application Assessment, Operating System Security Assessment

(OSSA), Database Assessment, and Penetration Testing.

iii. Penetration Testing is security testing in which assessors mimic real-world attacks to identify methods for circumventing the security features of an application, system, or network.

iv. Incident Response services help organizations impacted by a cybersecurity compromise determine the extent of the incident, remove the adversary from their systems, and restore their networks to a more secure state.

https://www.gsa.gov/technology/it-contract-vehicles-and-purchasing-programs/multiple-award-schedule-it/highly-adaptive-cybersecurity-services https://csrc.nist.gov/pubs/sp/800/207/final

9 | P a g e

v. Cyber Hunt activities respond to crises or urgent situations within the pertinent domain to mitigate immediate and potential threats. Cyber Hunts start with the premise that threat actors known to target some organizations in a specific industry or with specific systems are likely to also target other organizations in the same industry or with the same systems.

b. Services offered SIN 54151HACS shall be in accordance with the following laws and standards when applicable to the specific task orders, including but not limited to:

i. Federal Acquisition Regulation (FAR) Part 52.204-21

ii. OMB Memorandum M-17-12 - Preparing for and Responding to a Breach of Personally Identifiable

Information (PII)

iii. OMB Memorandum M- 19-03 - Strengthening the Cybersecurity of Federal Agencies by enhancing the High Value Asset Program

iv. 2017 Report to the President on Federal IT Modernization

v. The Cybersecurity National Action Plan (CNAP)

vi. NIST SP 800-14 - Generally Accepted Principles and Practices for Securing Information Technology

Systems

vii. NIST SP 800-27A - Engineering Principles for Information Technology Security (A Baseline for

Achieving Security)

viii. NIST SP 800-30 - Guide for Conducting Risk Assessments

ix. NIST SP 800-35 - Guide to Information Technology Security Services

x. NIST SP 800-37 - Risk Management Framework for Information Systems and Organizations: A

Systems Life Cycle Approach for Security and Privacy

xi. NIST SP 800-39 - Managing Information Security Risk: Organization, Mission, and Information

System View

xii. NIST SP 800-44 - Guidelines on Securing Public Web Servers

xiii. NIST SP 800-48 - Guide to Securing Legacy IEEE 802.11 Wireless Networks

xiv. NIST SP 800-53 – Security and Privacy Controls for Federal Information Systems and Organizations

xv. NIST SP 800-61 - Computer Security Incident Handling Guide

xvi. NIST SP 800-64 - Security Considerations in the System Development Life Cycle

xvii. NIST SP 800-82 - Guide to Industrial Control Systems (ICS) Security

xviii. NIST SP 800-86 - Guide to Integrating Forensic Techniques into Incident Response xix NIST SP 800-115 - Technical Guide to Information Security Testing and Assessment

xx. NIST SP 800-128 - Guide for Security-Focused Configuration Management of Information Systems

xxi. NIST SP 800-137 - Information Security Continuous Monitoring (ISCM) for Federal Information

Systems and Organizations

10 | P a g e

xxii. NIST SP 800-153 - Guidelines for Securing Wireless Local Area Networks (WLANs)

xxiii. NIST SP 800-160 - Systems Security Engineering: Considerations for a Multidisciplinary Approach in the Engineering of Trustworthy Secure Systems

xxiv. NIST SP 800-171 - Protecting Controlled Unclassified Information in non-federal Information

Systems and Organizations.

xxv. NIST SP 800-207 - Zero Trust Architecture

c. All professional labor categories under SIN 54151S Information Technology Professional Services may remain there, unless the labor categories are specific to SIN 54151HACS.

2. Oral Technical Evaluation for SIN 54151HACS - Highly Adaptive Cybersecurity Services (HACS)

a. Unless otherwise specified, the offeror shall participate in an oral technical evaluation that will be conducted by a Technical Evaluation Board (TEB). The oral technical evaluation will be held at the unclassified level and will be scheduled by the TEB. The oral technical evaluation will be used to assess the offeror's capability to successfully perform the services within the scope of each subcategory as set forth in this solicitation, excepting those service components awarded through the submission of the

Service Self-Attestation. The Self-Attestation form is available at gsa.gov/hacs.

An offeror may only be awarded SIN 54151HACS upon successful completion of the Highly Adaptive

Cybersecurity Services oral technical evaluation. If the offeror elects to be cataloged under the "Cyber

Hunt" and/or "Incident Response" subcategories, additional questions related to those areas will be asked during the HACS Oral Technical Evaluation.

i. ORAL TECHNICAL EVALUATION CONSTRAINTS: The offeror shall identify up to five key personnel, by name and association with the offeror, who will field questions during the oral technical evaluation. The HACS SIN consists of 5 subcategories. The base HACS Oral Technical Evaluation consists of questions related to the 3 subcategories of, High Value Asset Assessments, Risk and

Vulnerability Assessments and Penetration Testing. One (1) hour and 40 minutes is allotted for the base

HACS Oral Technical Evaluation. The evaluation will be stopped precisely after 1 hour and 40 minutes.

Should the offeror elect to be considered for the additional subcategories of Incident Response and Cyber

Hunt, an additional 10 minutes will be allotted for each of those subcategories. The total base evaluation session is expected to last up to 1 hour and 40 minutes, depending on the number of subcategories the offeror is proposing. The TEB Chairperson will be responsible for ensuring the schedule is met and that all offerors are given the same opportunity to present and answer questions.

ii. ORAL TECHNICAL EVALUATION SCHEDULING: The TEB will contact the offeror's authorized negotiator or the signatory of the SF 1449 via email to schedule the oral technical evaluation. Evaluation time slots will be assigned on a first-come-first-served basis. The Government reserves the right to reschedule any offeror's oral technical evaluation at its sole discretion. The oral technical evaluation will be held at facilities designated by the TEB. The exact location, seating capacity, and any other relevant information will be provided when the evaluations are scheduled. The Government may also make accommodations for vendors to participate in the oral evaluations virtually.

iii. PROHIBITION OF ELECTRONIC RECORDING OF THE ORAL TECHNICAL EVALUATION:

The offeror may not record or transmit any of the oral evaluation process. All offeror's electronic devices shall be removed from the room during the evaluation. The offeror is permitted to have a timer in the room during the evaluation, provided by the TEB.

gsa.gov/hacs

11 | P a g e

iv. RESUBMISSION RESTRICTIONS FOR UNSUCCESSFUL VENDORS UNDER THIS

EVALUATION FACTOR: The TEB will afford the offeror multiple opportunities to achieve the "pass" criteria under this evaluation factor through "clarification" questioning, during the Oral Technical

Evaluation. Any offeror whom the TEB has found to have not passed under this evaluation factor shall be failed and shall be ineligible to re-submit under the SIN to participate in this evaluation factor for a period of six (6) months following the date of FAILURE.

v. FOR REJECT AND WITHDRAWN OFFERS OR MODIFICATIONS: An offeror or contractor can re-apply for SIN 54151HACS if they are rejected or withdrawn.

1. If an offeror or contractor PASSES the oral technical evaluation but their offer or modification is rejected or withdrawn, they can re-apply within six (6) months after the oral technical evaluation completion date without having to participate in the oral technical evaluation again. When documentation is resubmitted for review for a new offer/modification, include a statement in the cover letter that the capabilities remain current, accurate, and complete as stated during the oral technical evaluation.

2. If an offeror or contractor PASSES the oral technical evaluation but their offer or modification is rejected or withdrawn and they do not re-apply within six (6) months after the oral technical evaluation completion date, they must participate in a new oral technical evaluation in order to add SIN

54151HACS.

vi. HIGH VALUE ASSET (HVA) ASSESSMENTS SUBCATEGORY PLACEMENT: Any offeror previously awarded all of the following four SINs: 132-45A Penetration Testing, 132-45B Incident

Response, 132-45C Cyber Hunt, and 132-45D Risk and Vulnerability Assessment, shall not be subject to a Highly Adaptive Cybersecurity Services oral technical evaluation, so long as they provide in the modification package to the GSA contracting officer a Service Self-Attestation acknowledging their ability to perform Security Architecture Review (SAR) and Systems Security Engineering (SSE) services in their entirety. The Self-Attestation form is available at gsa.gov/hacs.

b. Oral Technical Evaluation Procedures: The offeror will be evaluated on their knowledge of the proposed services. The oral technical evaluation will require the offeror to respond to a specific scenario and general questions to assess the offeror's expertise. The competencies, criteria and evaluation minimums for the questions are below: All new offerors and modifications must participate in and PASS the HACS Oral Technical Evaluation. The Oral Technical Evaluation will include, at a minimum, questions on Risk and Vulnerability Assessment (RVA), Security Architecture Review (SAR), Systems

Security Engineering (SSE), and Penetration Testing. At the time of submission, all new offerors and modifications can also elect to be cataloged in one or both of the additional subcategories of Cyber Hunt or Incident Response (IR). Should this election be taken, additional questions related to these subcategories will be included in their HACS evaluation and these additional subcategory topics must be

PASSES as well.

c. Oral Technical Evaluation Criteria: The offeror's responses to the government's questions during the oral technical evaluation session shall be used to determine whether the offeror has the requisite experience and expertise to perform tasks expected to be performed within the scope of the SIN. The oral technical proposal will be evaluated and rated on a pass/fail basis. The rating definitions provided below will be used for the evaluation of the offeror's responses to questions during the oral evaluation.

d. SIN Subgroups: Upon completion of the oral technical evaluation for both offers and modifications, the government will determine which of the following 5 SIN subgroups apply:

gsa.gov/hacs

12 | P a g e

1. High value Asset (HVA) Assessments

2. Risk and Vulnerability Assessment (RVA)

3. Cyber Hunt

4. Incident Response

5. Penetration Testing

Following notification that they are eligible for one or more of the 5 SIN subgroups, awarded contractors may select the corresponding subgroups by following the instructions below:

1. Login to eBuy

2. From the top menu, select "Profile"

3. Click "Modify Subgroups"

4. Select the applicable subgroups according to the instructions

All contractor selections will be monitored by GSA for compliance and action will be taken against your contract if you select Subgroups that have not been awarded under your contract.

Note: All services shall be billed in arrears in accordance with 31 U.S.C. 3324.

TECHNICAL RATINGS

Rating Definition

PASS The proposal clearly meets the minimum requirements of the solicitation.

FAIL The proposal does not clearly meet the minimum requirements of the solicitation.

13 | P a g e

SIN 518210C Cloud Computing and Cloud Related IT Professional Services

518210C Includes commercially available cloud computing services such as Infrastructure as a Service

(IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS) and emerging cloud computing services. IT professional services that are focused on providing the types of services that support the

Government's adoption of, migration to, or governance/management of cloud computing. Specific cloud related IT professional labor categories and/or fixed-price professional services solutions that support activities associated with assessing cloud solutions, refactoring workloads for cloud solutions, migrating legacy or other systems to cloud solutions, providing management/governance of cloud solutions, DevOps, developing cloud native applications, or other cloud oriented activities are within scope of this

SIN.

NOTE: Subject to Cooperative Purchasing

Cooperative Purchasing: Yes

Set Aside: No

FSC/PSC Code : DB10

Maximum Order : $500,000

NAICS

Number Description Business Size

518210 Data Processing, Hosting, and Related Services $40 million

Instructions:

Additional SIN Description: This SIN provides access to cloud (e.g., IaaS, PaaS, SaaS) computing services across public, community, and hybrid deployment models. Cloud computing services shall comply with National Institute of Standards and Technology (NIST) Definition of Cloud Computing

Essential Characteristics (NIST SP 800-145). Cloud computing that does not meet all NIST essential characteristics are outside the scope of this SIN and shall be assigned to other SINs, where applicable.

Cloud related IT professional labor categories are within scope of this SIN. Cloud related IT professional labor categories are not subject to adherence to the NIST definition of cloud computing; therefore, no technical response is required for a labor proposal. Non-professional labor categories subject to Service

Contract Labor Standards (SCLS) (e.g., IT help desk support) that are incidental to and used solely to support specific Cloud related IT professional labor categories and/or fixed-price professional services solutions must be offered under a different SIN that specifically covers the proposed services.

Ancillary products and services are not within scope of this SIN. Any items that are not within the scope of this SIN must be offered under a SIN that specifically covers the proposed services.

The following are out of scope for this SIN: cloud “token,” “gift card,” “credit,” or other similar types of prepaid offerings:

1.) Cloud computing services (e.g., IaaS, PaaS, SaaS) are sometimes offered commercially as a cloud

“token,” “gift card,” “credit,” or require purchase of a prepaid offering; these are out of scope for this

SIN.

https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-145.pdf https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-145.pdf

14 | P a g e

2.) Credits for cloud computing services (e.g., IaaS, PaaS, SaaS) that are paid for in advance and spent or used at a later time are commonly termed commercially as a cloud “token,” “gift card,” or “credit”, and are out of scope for SIN 518210C.

Physical hardware, non-cloud software per the NIST definition, and other artifacts acquired to support the physical construction of a private or other cloud are not within the scope of this SIN.

1) Specific Instructions for SIN 518210C – Cloud Computing and Cloud Related IT Professional

a) Offerors shall follow instructions and guidance for cloud computing services located on these resource pages: cloud computer and cloud-related IT professional services and SIN 518210C Specific Information for Offerors.

b) Offerors may propose:

i) Cloud computing services only (i.e., IaaS, PaaS, SaaS) per NIST standards as defined in NIST Special

Publication 800-145 “The NIST Definition Cloud Computing”,

ii) Cloud related IT professional services and/or fixed-price cloud professional services solutions that are not subject to NIST standards only; or

c) The offeror must state which cloud computing service model(s), if any, is/are being proposed (i.e., IaaS, PaaS, SaaS).

d) The offeror must state which cloud computing deployment model(s), if any, is/are being proposed (i.e., public, community, and hybrid).

e) Pricing increment of offerings:

i) For all offers of IaaS/PaaS/SaaS and cloud related IT professional services, pricing shall be per a unit of measure.

ii) For all offers of SaaS, regardless of length of license term, pricing to support upfront payment is allowed as long as the software licenses are delivered via SaaS and meet the criteria listed in this

Information Technology Category attachment.

f) Acceptance Testing: Acceptance testing shall be performed of the systems for ordering activity approval in accordance with the approved test procedures.

g) Training

i) If training is provided in accordance with standard commercial practices, the offeror shall provide normal commercial installation, operation, maintenance, and engineering interface training on the system.

ii) If there are separate training charges, they should be included in the GSA Price List (I-FSS-600

CONTRACT PRICE LISTS (DEC 2022).

h) Information Assurance/Security Requirements: Offerors shall meet information assurance/security requirements in accordance with the ordering activity requirements.

i) Reporting: Offerors shall provide to the ordering activity any general reporting capabilities available to verify performance, cost and availability. In accordance with commercial standard practice, the offeror may furnish the ordering activity with a monthly summary report.

https://www.gsa.gov/technology/it-contract-vehicles-and-purchasing-programs/multiple-award-schedule-it/cloud-and-cloud-related-it-services https://www.gsa.gov/buy-through-us/purchasing-programs/multiple-award-schedule#SIN-table https://www.gsa.gov/buy-through-us/purchasing-programs/multiple-award-schedule#SIN-table

15 | P a g e

j) Cloud related IT professional services may be listed on SIN 54151S - Information Technology

Professional Services. The cloud related IT professional services on this SIN (518210C) shall be cloud specific titles and descriptions. At a minimum, the word “cloud” shall appear both in the title and the description of each labor category or fixed-price professional services solutions proposed for this SIN.

The relevant past performance projects must demonstrate that the cloud related IT professional services were utilized in the IaaS, PaaS, and/or SaaS environment. NOTE: Identical labor categories cannot be on both SINs 54151S and 518210C. It is recommended that cloud related IT professional services and/or fixed-price professional services solutions that are not subject to NIST standards should be offered under

SIN 518210C.

k) Offerors may optionally select a single service model that best fits a proposed cloud computing offering. Only one service model may be selected per each proposed cloud computing offering. Offerors may elect to submit multiple cloud computing offerings, each with its own single service model.

l) Deployment model selection within this SIN is optional for any individual cloud computing offering.

Offerings may be included without a deployment model selection so long as they comply with all the essential characteristics of cloud computing as outlined by NIST SP 800-145. The three NIST deployment models within the scope of this SIN are: Public, Community, and Hybrid.

m) All current pricing requirements in provision SCP-FSS-001 apply. At the current time, there is no provision for reducing or eliminating standard price list posting requirements to accommodate rapid cloud price fluctuations.

n) All pricing models for cloud computing services must have the core capability to meet the NIST

Essential Cloud Characteristics, particularly with respect to on-demand self-service, while allowing alternate variations at the task order level at agency discretion, pursuant to the guidance on NIST

Essential Characteristics.

o) Evaluation factors for cloud related IT professional services, specific cloud labor categories and/or fixed-price professional services solutions are found within this same document under Section II

Instructions for all IT Offerors under 6) Relevant Project Experience Evaluation.

2) Specific Evaluation Factor for Cloud Computing Services Adherence to the NIST Essential Cloud

Characteristics per NIST SP 800-145.

Within a two-page limitation for each cloud computing service (e.g., IaaS, PaaS, SaaS) submitted, provide a description of how the cloud computing service meets each of the five essential cloud computing characteristics as defined in National Institute of Standards and Technology (NIST) Special Publication

800-145 and subsequent versions of this publication. This standard specifies the definition of cloud computing for use by Federal agencies. Each cloud computing service must be capable of satisfying each of the five NIST essential characteristics as follows:

• On-demand self-service

• Broad network access

• Resource pooling

• Rapid elasticity

• Measured service cloud (Pay per use, or pay as you go)

Refer to 518210C. Specific Information for Offerors available on the Multiple Award Schedule page for guidance on meeting the NIST essential characteristics. For the purposes of the cloud computing and cloud related IT professional services SIN, meeting the NIST essential characteristics is concerned

16 | P a g e primarily with whether the underlying capability of the commercial service is available, and whether or not an ordering activity actually requests or implements the capability.

3) Cloud Consumption

Offerors must identify in their GSA price List (I-FSS-600 CONTRACT PRICE LISTS) all cloud computing services that are available to be ordered on a consumption basis.

SIN Level Regulations:

Regulation Number Regulation Title/Comments

552.238-81 PRICE REDUCTIONS (DEC 2021) (DEVIATION)

552.238-199 SPECIAL ORDERING PROCEDURES APPLICABLE WHEN PROCURING

CLOUD COMPUTING ON A CONSUMPTION BASIS (MAR 2022)

17 | P a g e

SIN OLM Order-Level Materials (OLM)

OLMs are supplies and/or services acquired in direct support of an individual task or delivery order placed against a Federal Supply Schedule (FSS) program contract or BPA. OLM pricing is not established at the FSS contract, but at the order level. Since OLMs are identified and acquired at the order or BPA level, the ordering contracting officer (OCO) is responsible for making a fair and reasonable price determination for all OLMs using FAR 15.404 techniques for commercial price determinations.

Using this procedure, ancillary supplies and services that are unknown at the time of the Schedule contract award may be included and priced at the order level or BPA level.

OLM SIN-Level Requirements/Ordering Instructions:

OLMs are:

- Purchased under the authority of the FSS Program as a special ordering procedure

- Identified at the order or BPA level (either at the time the order is placed or as the requirement for OLMs develop during the course of performance)

- Defined and priced at the ordering activity level in accordance with GSAR clause 552.238-115 Special

Ordering Procedures for the Acquisition of Order-Level Materials.

- Only authorized for use in direct support of another awarded SIN.

- Only authorized for inclusion at the order level under a Time-and-Materials (T&M) or Labor-Hour (LH)

Contract Line Item Number (CLIN)

- Subject to a Not To Exceed (NTE) ceiling price limited to 33.33% of the total value of the order or BPA

OLMs are not items awarded under ancillary supplies/services or other direct cost (ODC) SINs (these items are defined, priced, and awarded at the FSS contract level)

NOTE: When used in conjunction with a Cooperative Purchasing eligible SIN, this SIN is Cooperative

Purchasing Eligible.

FSC/PSC Code : 0000

Maximum Order : $250,000

000000 Generic NAICS Code for special SINs

The use of the Order Level Materials (OLM) SIN is limited to 60 OLM-eligible subcategories under the

MAS program. Supplies and/or services provided utilizing OLM authority must be acquired in direct support of an individual task or delivery order that is placed under an OLM-eligible subcategory as identified below:

18 | P a g e

1) Apparel

2) Audio Visual Products

3) Audio Visual Services

4) Awards

5) Background Investigations

6) Business Administrative Services

7) Compensation and Benefits

8) Document Services

9) Electronic Commerce

10) Environmental Services

11) Facilities Maintenance and Repair

12) Facilities Services

13) Facilities Solutions

14) Financial Services

15) Fire/Rescue/Safety/Environmental Protection Equipment

16) Fitness Solutions.

17) Flags

18) Flooring

19) Fuel Management

20) Furniture Services

21) Healthcare Furniture

22) Household, Dormitory & Quarters Furniture

23) Human Resources

24) Identity Protection Services

25) Industrial Products

26) Industrial Products and Services Maintenance and Repair

27) IT Hardware

28) IT Services

29) IT Software

30) IT Solutions

31) IT Training

32) Language Services

33) Legal Services

34) Logistical Services

35) Machinery and Components

19 | P a g e

36) Mail Management

37) Marine and Harbor

38) Marketing and Public Relations

39) Medical Equipment

40) Miscellaneous Furniture

41) Musical Instruments

42) Office Furniture

43) Office Management Maintenance and Repair

44) Office Services

45) Packaged Furniture.

46) Printing and Photographic Equipment

47) Protective Equipment

48) Records Management

49) Search and Navigation

50) Security Animals and Related Services

51) Security Services

52) Security Systems

53) Signs

54) Social Services

55) Structures

56) Technical and Engineering Services (non- IT)

57) Telecommunications

58) Testing Equipment

59) Training

60) Transportation of Things

NOTE: More information related to the Order Level Materials SIN is available at gsa.gov

SIN Level Regulations:

Regulation Number Regulation Title/Comments

552.238-115 SPECIAL ORDERING PROCEDURES FOR THE ACQUISITION OF ORDER-

LEVEL MATERIALS (April 2022)

SCP-FSS-007 SPECIAL PROPOSAL INSTRUCTIONS FOR ORDER-LEVEL MATERIALS

SPECIAL ITEM NUMBER (DEC 2019)

gsa.gov

20 | P a g e

SAIC SIN 54151S: Functional Duties and Job Specifications

Administrative Support I

Functional Duties

Provides general administrative support to relieve department managers or staff of administrative details. Performs routine and non-routine tasks including special projects. May be responsible for inventory control, scheduling and making arrangements for meetings, for researching and securing requested information, and for researching, compiling and proofing of various reports and studies. May take and/or transcribe confidential or technical information, take and distribute meeting minutes, order supplies, distribute mail, answer phones, respond to customer/client/employee inquiries, and other office administrative duties. Interacts with other support staff and departments to gather, supply, or coordinate information. Specializes in coordinating and planning office administration and support.

Understands and provides documentation planning and support, project administration, general office support, executive secretarial support, human resource planning, event planning and administration, office relocation planning, etc. required in changing office environments. May perform other duties as assigned.

Job Specifications

High School Diploma or G.E.D. or other equivalent degree program and one (1) year of business relevant experience.

Administrative Support II

Functional Duties

Provides general administrative support to relieve department managers or staff of administrative details. Performs routine and non-routine tasks including special projects. May be responsible for inventory control, scheduling and making arrangements for meetings, for researching and securing requested information, and for researching, compiling and proofing of various reports and studies. May take and/or transcribe confidential or technical information, take and distribute meeting minutes, order supplies, distribute mail, answer phones, respond to customer/client/employee inquiries, and other office administrative duties. Interacts with other support staff and departments to gather, supply, or coordinate information. Specializes in coordinating and planning office administration and support.

Understands and provides documentation planning and support, project administration, general office support, executive secretarial support, human resource planning, event planning and administration, office relocation planning, etc. required in changing office environments. May perform other duties as assigned.

Job Specifications

High School Diploma or G.E.D. or other equivalent degree program and two (2) years of business relevant experience.

Executive Administrative Support I

Functional Duties

Provide analytical and specialized support to relieve, assist, and, in delegated matters, act on behalf of senior and executive management. Exercises frequent judgment, initiative, diplomacy and tact. Makes administrative decisions and takes action on behalf of the organization. Acts as primary liaison with administration and various support functions (i.e., Accounting, Human Resources, Security and Facilities). Responsible for coordinating the implementation of procedures and programs pertaining to these administrative specialties. Prioritizes and carries out special projects and complex assignments.

Exercises frequent judgment, initiative, diplomacy and tact. Makes administrative decisions and takes action on behalf of the organization.

21 | P a g e

Job Specifications

Bachelor’s degree in Business Administration (or related field) or equivalent experience and five (5) years of specialized administrative support experience of an increasingly responsible nature at a senior level.

Executive Administrative Support II

Functional Duties

Provide analytical and specialized support to relieve, assist, and, in delegated matters, act on behalf of senior and executive management. Exercises frequent judgment, initiative, diplomacy and tact. Makes administrative decisions and takes action on behalf of the organization. Acts as primary liaison with administration and various support functions (i.e., Accounting, Human Resources, Security and

Facilities). Responsible for coordinating the implementation of procedures and programs pertaining to these administrative specialties. Prioritizes and carries out special projects and complex assignments.

Exercises frequent judgment, initiative, diplomacy and tact. Makes administrative decisions and takes action on behalf of the organization.

Job Specifications

Bachelor’s degree in Business Administration (or related field) or equivalent experience and seven (7) years of specialized administrative support experience of an increasingly responsible nature at a senior level.

Bus Sys /Process Analyst I

Functional Duties

Responsible for analyzing user business problems to be solved with automated systems. May formulate and define information system scope and objectives through research, analysis, testing and fact finding with a basic understanding of business systems and industry requirements. May prepare communications and make presentations on recommendations on system enhancements or alternatives.

May act as functional expert.

Provides problem definition, evaluation of requirements, and implementation of systems to meet business, user, and cost requirements.

May prepare communications and make presentations on recommendations on system enhancements or alternatives.

May act as functional expert.

Job Specifications

Bachelor’s degree or equivalent and two (2) years of relevant experience.

Bus Sys /Process Analyst II

Functional Duties

Responsible for analyzing user business problems to be solved with automated systems. May formulate and define information system scope and objectives through research, analysis, testing and fact finding with a basic understanding of business systems and industry requirements. May prepare communications and make presentations on recommendations on system enhancements or alternatives.

May act as functional expert.

Provides problem definition, evaluation of requirements, and implementation of systems to meet business, user, and cost requirements.

May prepare communications and make presentations on recommendations on system enhancements or alternatives.

May act as functional expert.

22 | P a g e

Job Specifications

Bachelor’s degree or equivalent and four (4) years of relevant experience.

Bus Sys /Process Analyst III

Functional Duties

Responsible for analyzing user business problems to be solved with automated systems. May formulate and define information system scope and objectives through research, analysis, testing and fact finding with a basic understanding of business systems and industry requirements. May prepare communications and make presentations on recommendations on system enhancements or alternatives.

May act as functional expert.

Provides problem definition, evaluation of requirements, and implementation of systems to meet business, user, and cost requirements.

May prepare communications and make presentations on recommendations on system enhancements or alternatives.

May act as functional expert.

Job Specifications

Bachelor’s degree or equivalent and seven (7) years of relevant experience.

Bus Sys /Process Analyst IV

Functional Duties

Responsible for analyzing user business problems to be solved with automated systems. May formulate and define information system scope and objectives through research, analysis, testing and fact finding with a basic understanding of business systems and industry requirements. May prepare communications and make presentations on recommendations on system enhancements or alternatives.

May act as functional expert.

Provides problem definition, evaluation of requirements, and implementation of systems to meet business, user, and cost requirements.

May prepare communications and make presentations on recommendations on system enhancements or alternatives.

May act as functional expert.

Job Specifications

Bachelor’s degree or equivalent and nine (9) years of relevant experience.

Bus Sys /Process Analyst V

Functional Duties

Responsible for analyzing user business problems to be solved with automated systems. May formulate and define information system scope and objectives through research, analysis, testing and fact finding with a basic understanding of business systems and industry requirements. May prepare communications and make presentations on recommendations on system enhancements or alternatives.

May act as functional expert. Provides problem definition, evaluation of requirements, and implementation of systems to meet business, user, and cost requirements. May prepare communications and make presentations on recommendations on system enhancements or alternatives. May act as functional expert.

Job Specifications

Bachelor’s degree and twelve (12) years of relevant experience; Master’s Degree and eight (8) years of relevant experience; Doctorate and six (6) years of relevant experience.

23 | P a g e

Bus Sys Programmer / Program Analyst I

Functional Duties

Responsible for performing complex program assignments in analyzing, defining, coding in the design, and implementing cost effective information technology solutions. Develops and review operator and control instructions. Prepares and conducts system and programming tests requiring interfacing of hardware and software. Conducts system programming activities such as program language codes, processing routines and report generators. Develops flow charts and diagrams outlining process and steps in operation; prepares documentation of program development, conducts program test and makes modification to code as needed. May analyze system capabilities to resolve input/output problems.

Job Specifications

Bachelor’s degree in a related field and two (2) years of systems program experience. Includes working knowledge of this technical field and the ability to complete moderately complex assignments.

Bus Sys Programmer / Program Analyst II

Functional Duties

Responsible for performing complex program assignments in analyzing, defining, coding in the design, and implementing cost effective information technology solutions. Develops and review operator and control instructions. Prepares and conducts system and programming tests requiring interfacing of hardware and software. Conducts system programming activities such as program language codes, processing routines and report generators. Develops flow charts and diagrams outlining process and steps in operation; prepares documentation of program development, conducts program test and makes modification to code as needed. May analyze system capabilities to resolve input/output problems.

Job Specifications

Bachelor’s degree in a related field and six (6) years of systems program experience. Includes working knowledge of this technical field and the ability to complete moderately complex assignments.

Bus Sys Programmer / Program Analyst III

Functional Duties

Responsible for performing complex program assignments in analyzing, defining, coding in the design, and implementing cost effective information technology solutions. Develops and review operator and control instructions. Prepares and conducts system and programming tests requiring interfacing of hardware and software. Conducts system programming activities such as program language codes, processing routines and report generators. Develops flow charts and diagrams outlining process and steps in operation; prepares documentation of program development, conducts program test and makes modification to code as needed. May analyze system capabilities to resolve input/output problems.

Job Specifications

Bachelor’s degree in a related field and eight (8) years of systems programming experience, including leadership skills. Includes comprehensive knowledge of this field and the ability to complete highly complex assignments.

Bus Sys Programmer / Program Analyst IV

Functional Duties

Responsible…