Attachment 5 - Exit Plan _2 Sep 10_.pdf

H92222-10-R-0044 Attachment 5

Exit Plan 02 Sep 2010

Plan Element Element Requirements

Approach, activities, milestones, schedule, and risk identification and mitigation strategies

• Acceptance Criteria, and if appropriate any testing, to be applied by SITEC Government Organization(s) and/or Successor Contractor(s)

• Proposed transition organization structure for SITEC (e.g., Program Manager, Transition Lead)

• Proposed approach to transferring services to the successor without interruption including, the proposed phase-in period and all relevant steps and tasks for each service or activity required to transfer responsibility

• Migration of IT processes and procedures from the Provider to SITEC Government Organization(s) and/or Successor Contractor(s)

• A list of assets and Intellectual Property, which will be transferred to the SITEC Government Organization(s) and/or Successor Contractor(s)

• Activities and corresponding timeline for handing over to USSOCOM sole use and shared assets. Applicable assets could include, but are not limited to, the following:

o Customer and other records (including subcontractor agreements that are required to provision the IT Services) o Configuration Information o Databases o Documentation o Asset Registers o Programs o Knowledge Databases o Fault Databases o Asset Maintenance History and Status o Manuals o Process and procedure documentation o Operational Run books for all systems and applications o All other similar items that SITEC used or produced during the course of, or for the purpose of, provisioning the Services or relating to the configuration or control of the Services o Help Desk support scripts o Software tools and utilities used to manage and monitor the environment o Source code for all custom-developed software applications, tools, and utilities o WAN/LAN Data network interconnect diagrams, topologies, and schematics o Voice/Video network interconnect diagrams, topologies, and schematics o Data center room layouts and interconnect diagrams o Disaster recovery records, test reports, and procedures o Information assurance records, logs, vulnerability testing results o Escalation processes and procedures with contacts o Spares inventory and locations o Maintenance schedules for data center and network devices o Database schemas, topologies, data structures, stored procedures, dependencies, etc.

o Application interdependencies diagrams, configuration manuals, technical & user manuals o Architecture and Models

• Approach to Migrating systems and data flows to Successor Contractors

• Approach to Migrating reporting and analytics to SITEC Government

Organization(s) and/or Successor Contractor(s)

• Approach to Migrating in-scope data clean-up, data conversion and transfer of data to SITEC Government Organization(s) and/or Successor Contractor(s)

• Approach to Migrating in-scope security plans and measures (for transfer and transition of hard copy and electronic information, including backups and disaster recovery) to SITEC Government Organization(s) and/or Successor Contractor(s)

• Approach to Migrating in-scope documentation to SITEC Government Organization(s) and/or Successor Contractor(s)

• Approach to Migrating in-scope regulatory compliance procedures and guidance to USSOCOM and/or SITEC Successor Contractor(s)

• Approach to Migrating in-scope mission continuity activities, plans and measures from Provider to SITEC Government Organization(s) and/or Successor Contractor(s)

• Approach to Migrating in-scope audit functions from Provider to SITEC Government Organization(s) and/or Successor Contractor(s)

• Approach to Migrating in-scope quality assurance and quality control functions from Provider to SITEC Government Organization(s) and/or Successor Contractor(s)

• Approach to Migrating in-scope governance processes and procedures from Provider to SITEC Government Organization(s) and/or Successor Contractor(s)

• Approach to Migrating in-scope change management functions from Provider to SITEC Government Organization(s) and/or Successor Contractor(s)

• Approach to Completing due diligence on assets, contracts and other resources

• Schedule of briefings on the status and comprehensive nature of all items handed over

• Approach to knowledge transfer of the Services

• Approach to providing Services without interruption, or a reduction in service levels, during the handover period, and during transfer to SITEC Government Organization(s) and/or Successor Contractor(s)

• Approach to Identifying and completing the transfer to USSOCOM (for the remainder of the term of the relevant license) of all USSOCOM-owned Software and other licenses used in the provision of the Services by Provider (if applicable)

Roles and Responsibilities:

Roles and responsibilities, for full-time and part-time Provider personnel, who will assist in the transition and the allocation of responsibilities between all parties

Organization Chart to include:

• Reporting lines of USSOCOM, Provider, other 3rd Parties and the SITEC

Contractor(s), as appropriate

• The relationships between USSOCOM, Provider, other SITEC Contractor(s), and other 3rd Parties, as appropriate

• Provider service and management transition leads Documented Processes:

• Approval processes for all documentation and knowledge bases submitted as part of the Exit Plan and planning process, to include timelines, formats and deliverables

• Definitions and flowcharts of all escalation procedures and who within Provider is responsible, including direct contact information

Approach to Service Provisioning, including, but not limited to:

• Approach to providing services up to the Termination Date

• Approach to providing services on the Termination Date

• Approach to providing services when required for an extended, defined period after the Termination Date

• Approach to providing services in parallel with the Successor Contractor when required

• Approach to determining responsibility during preparation and transfer of:

1. Assets (Sole Use and Shared) including USSOCOM Intellectual Property

2. Subcontracts and associated subcontractor relationships

3. Operational documentation, including customer records and databases, configuration documentation, and manuals

4. Software licenses, including specific references to the software owner's requirements

5. Tactical documentation, including but not limited to, the following:

a. Service-level reports

b. Service catalog

c. Service delivery plans

d. Incident and change register

e. Change and project calendar

f. Current and scheduled project documents

g. Release schedules

h. Performance and capacity management planning

i. Innovation and service creation plans related to the involved Services

j. Communication plans and all current and scheduled communication documentation (online and offline)

6. Strategic documentation, including but not limited to, enterprise architecture and governance documentation Facilities:

• Approach to continuing services using the Providers premises, if applicable; the plan shall address access, security, space utilization, and modification requirements required to allow continued use of facilities, for as long as required Approach to provisioning of a physical data room into which information shall be placed, for the Government and the Successor Contractors to inspect and make copies for removal

Resources:

• Approach to transferring personnel, including communications, briefing and negotiation, applicable to such personnel who are required for the continuation of the involved Services, and within the boundaries of applicable law

• Final handover and acceptance criteria, and the required failover provisions Documentation:

• Asset maintenance history and status

• Control process and procedure documentation

• Copies of all strategic, tactical and operational control framework reports

• Process management and maintenance manuals

• Work instructions and workflows

• System and equipment fault databases

• Copies of all knowledge bases

• Spare equipment and parts inventory purchased to provide the Service or part of the Service

• Agreements with 3rd-Party suppliers of goods and services, which are to be transferred to USSOCOM or the Successor Contractor(s)

• Key support contact details for 3rd-Party supplier personnel

• Information regarding other services and associated unresolved faults in progress at the start of the Transition Period, as well as those expected to be in progress at the end of the Transition Period; the Provider shall update this information at the end of the Transition Period

• Documentation covering service incidents, disaster recovery events and service levels achieved during the past 12 months, and the service-level measurement method

• Software-related documentation:

1. Status of 3rd-Party software covering supplier, version, upgrade status, license and maintenance fees, expiration dates

2. Status of custom-developed programs, including source code and documentation

3. Operator and user manuals for USSOCOM applications developed or maintained by Provider Human Resource Data:

• Data on personnel as defined and required by any government regulations, as referenced in the contract

• Full contract documentation for Provider’s subcontractors, which will be notated to the Government or the Successor Contractor(s)

• The list of subcontracts that Provider will notate to the Successor Contractor(s) Risk and Issue Data:

• Overall approach for managing transition risk and issues

• Comprehensive identification of risks and issues related to the successful transition of all in-scope services before, during, and after transition execution

• Likelihood of occurrence and potential impact for each risk

• Mitigation approaches, action steps, and other information required to manage overall transition risks and issues Timetable:

timeline components of the Exit Plan

Disentanglement Plan (as a component of the Exit Plan)

• Detailed program (including a timetable with milestones, processes and critical controls) for the transfer of the provision of the Services from the Provider to the Successor Contractor, or back to the Government, in coordination with the Exit Plan

• The management structure plan to execute Disentanglement

• Details of Provider personnel and other resources that will provide

Disentanglement Services, including a list of Provider subject matter experts and other personnel who will be engaged within 10 days of starting the Termination Period

• Approach to handover of activities and the required Provider resource profiles to support the relevant handover activities

• Proposed activities for proper and timely execution of the Disentanglement Plan

• Documents or knowledge base elements to be delivered to the Government and/or the Successor Contractors during the handover process

• Transfer of Services Timetable: all dates in the timetable shall relate to days or weeks prior to, on, or after the Termination Date. The timetable shall include:

o Transfer milestones (the transfer from the Provider to the Government and/or the Successor Contractors), identifying dates, events and criteria to be met for completion of the transfer, including who determines that the transfer has been completed successfully o Dependencies among the Government, Provider, Successor Contractor and 3rd parties o The time frame in which the Provider proposes to provide and make available data and assets that will be handed over, so that the Government can inspect them o The time the Provider proposes that the Government and the Successor Contractor take to review data, and inspect, receive and purchase assets, including due diligence o The timing for transfer of personnel activities o The timing and obligations of third parties that will need to be involved in the transfer of the Services