HC1028-16-T-0132_RFQ.pdf

SEE ADDENDUM

(No Collect Calls)

HC1028-16-T-0132 21-Jun-2016

b. TELEPHONE NUMBER

618-229-9651

8. OFFER DUE DATE/LOCAL TIME

12:00 PM 21 Jul 2016

5. SOLICITATION NUMBER 6. SOLICITATION ISSUE DATE

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

STANDARD FORM 1449 (REV. 2/2012)

Prescribed by GSA – FAR (48 CFR) 53.212

(TYPE OR PRINT)

(SIGNATURE OF CONTRACTING OFFICER)

ADDENDA X ARE

26. TOTAL AWARD AMOUNT (For Gov t. Use Only )

23.

CODE 10. THIS ACQUISITION IS

SUCH ADDRESS IN OFFER

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT

BELOW IS CHECKED

TELEPHONE NO.

HC10289. ISSUED BY

18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a. UNLESS BLOCK

7. FOR SOLICITATION

INFORMATION CALL:

a. NAME

MARTY D. BOST

2. CONTRACT NO. 3. AWARD/EFFECTIVE DATE 4. ORDER NUMBER

(TYPE OR PRINT)

30b. NAME AND TITLE OF SIGNER 30c. DATE SIGNED 31b. NAME OF CONTRACTING OFFICER

30a. SIGNATURE OF OFFEROR/CONTRACTOR 31a.UNITED STATES OF AMERICA

27a. SOLICITATION INCORPORATES BY REFERENCE FAR 52.212-1. 52.212-4. FAR 52.212-3. 52.212-5 ARE ATTACHED.X

25. ACCOUNTING AND APPROPRIATION DATA

1. REQUISITION NUMBER

20.

ADDITIONAL SHEETS SUBJECT TO THE TERMS AND CONDITIONS SPECIFIED.

OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, AND 30

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS

ARE NOT ATTACHED

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA ARE ARE NOT ATTACHED

(BLOCK 5), INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE

SET FORTH HEREIN, IS ACCEPTED AS TO ITEMS:

. YOUR OFFER ON SOLICITATION

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN

% FOR:SET ASIDE:UNRESTRICTED OR X

SMALL BUSINESSX

17a.CONTRACTOR/ CODE FACILITY

OFFEROR CODE

DISA/DITCO-SCOTT-PL83

2300 EAST DRIVE

SCOTT AFB IL 62225-5406

18a. PAYMENT WILL BE MADE BY CODE

RATED ORDER UNDER

DPAS (15 CFR 700)

13a. THIS CONTRACT IS A

13b. RATING

CODE15. DELIVER TO CODE 16. ADMINISTERED BY

SEE SCHEDULE

12. DISCOUNT TERMS11. DELIVERY FOR FOB DESTINA-

TION UNLESS BLOCK IS

MARKED

SEE SCHEDULE

14. METHOD OF SOLICITATION

RFQ IFB RFPX

FAX:

TEL: SERVICE-DISABLED

VETERAN-OWNED

SMALL BUSINESS

8(A)

HUBZONE SMALL

BUSINESS

SIZE STANDARD:

$27,500,000

NAICS:

493110

X

OFFER DATED

29. AWARD OF CONTRACT: REF.

DELIVER ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND ON ANY

COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND

EMAIL:

TEL:

31c. DATE SIGNED

SEE SCHEDULE

SCHEDULE OF SUPPLIES/ SERVICESITEM NO. QUANTITY UNIT UNIT PRICE AMOUNT

24.22.21.19.

WOMEN-OWNED SMALL BUSINESS (WOSB)

ELIGIBLE UNDER THE WOMEN-OWNED

SMALL BUSINESS PROGRAM

EDWOSB

32g. E-MAIL OF AUTHORIZED GOVERNMENT REPRESENTATIVE

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS

(CONTINUED)

PAGE 2 OF87

ACCEPTED, AND CONFORMS TO THE CONTRACT, EXCEPT AS NOTED: ______________________________________________________

32a. QUANTITY IN COLUMN 21 HAS BEEN

RECEIVED INSPECTED

32b. SIGNATURE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32c. DATE 32d. PRINTED NAME AND TITLE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32e. MAILING ADDRESS OF AUTHORIZED GOVERNMENT REPRESENTATIVE 32f . TELEPHONE NUMBER OF AUTHORIZED GOVERNMENT REPRESENTATIVE

37. CHECK NUMBER

FINALPARTIALCOMPLETE

36. PAYMENT35. AMOUNT VERIFIED

CORRECT FOR

34. VOUCHER NUMBER

FINAL

33. SHIP NUMBER

PARTIAL

38. S/R ACCOUNT NUMBER 39. S/R VOUCHER NUMBER 40. PAID BY

41a. I CERTIFY THIS ACCOUNT IS CORRECT AND PROPER FOR PAYMENT

41b. SIGNATURE AND TITLE OF CERTIFYING OFFICER 41c. DATE

42a. RECEIVED BY (Print)

42b. RECEIVED AT (Location)

42c. DATE REC'D (YY/MM/DD) 42d. TOTAL CONTAINERS

STANDARD FORM 1449 (REV. 2/2012) BACK

Prescribed by GSA – FAR (48 CFR) 53.212

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

SEE SCHEDULE

20.

SCHEDULE OF SUPPLIES/ SERVICES

21.

QUANTITY UNIT

22. 23.

UNIT PRICE

24.

AMOUNT

19.

ITEM NO.

HC1028-16-T-0132

Section SF 1449 - CONTINUATION SHEET

ITEM NO SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

0001 1 Lot Contractor Delivery and Pickup

FFP

Non-Personal Services - Contractor Delivery and Pickup Transportation Charges in accordance with the Statement of Work dated 06 April 2016. Cost will be developed for transportation between the DISA CSD Site and the Contractor's

Storage Facility.

For a complete breakout of the anticipated locations, please see Attachment A.

The period of performance is 01 October 2016 - 30 September 2017.

FOB: Destination

NET AMT

0002 1 Lot Container Handling Fees

FFP

Container Handling Fees - Closed Containers in accordance with the Statement of

Work dated 06 April 2016. Priced the same for all DISA locations.

0003 1 Lot Media Handling Fees

FFP

Media Handling Fees - Individual Slotted Media in accordance with the Statement of Work dated 06 April 2016. Priced the same for all DISA locations.

0004 1 Lot Contractor-Provided Transport Containers

FFP

Contractor-Provided Transport Containers in accordance with the Statement of

Work dated 06 April 2016. Different sizes of transport containers, used to transport

Media that is slotted for storage at the Contractor's Facility. Priced according to size. Priced the same for all DISA locations.

0005 1 Lot Contractor Storage, Slotting, Vaulting

FFP

Contractor Storage, Slotting, Vaulting in accordance with the Statement of Work dated 06 April 2016. Storage of Individual Slotted Media at Contractor's Facility.

Priced the same for all DISA locations.

0006 1 Lot Container and Vault Storage

FFP

Container and Vault Storage in accordance with the Statement of Work dated 06

April 2016. Storage of Closed Containers at Contractor's Facility. Priced according to size. Priced the same for all DISA locations.

0007 1 Lot Contractor Invoicing

FFP

Contractor Invoicing in accordance with the Statement of Work dated 06 April

2016. Priced the same for all DISA locations.

0008 1 Lot Unscheduled & Emergency/Critical Service

FFP

Unscheduled Delivery- Media returned to Site or Designated Alternate Site within

4 hours of notification in accordance with the Statement of Work dated 06 April

2016. Priced the same for all DISA locations identifed by Site or Designated

Alternate Site.

Price Per Occurence: $___________

Emergency/Critical Service - Media returned to Site or Designated Alternate Site within 8 hours of notification in accordance with the Statement of Work dated 06

April 2016. Priced the same for all DISA locations identified by Site or Designated

Invoice only if used.

0009 1 Lot Recovery test - Move Media

FFP

Standard Emergency Recovery Test-Move Media Between DISA Site and

Contractor's Facility within 4 hours of notification in accordance with the

Statement of Work dated 06 April 2016.

Price Per Test: $__________

Standard Disaster Recovery Test-Move Media to Alternate DISA Site within 24 hours of notification in accordance with the Statement of Work dated 06 April

2016.

Mid-Tier Disaster Recovery Test-Move Media to Alternate DISA Site within 24

Capacity Disaster Recovery Test-Move Media to Alternate DISA Site within 24

Price Per Test: $_________

0010 1 Lot Additional Services

FFP

The Government will provide a SOW defining the requested additional work.

Additional services under this contract shall be negotiated by contract modification if and when those services are required. It is the Government’s intent to request a proposal each time, with the pricing to be no higher than the awarded amounts for these hours/materials.

For additional information, please see Attachment A.

1001 1 Lot OPTION Contractor Delivery and Pickup

FFP

Non-Personal Services - Contractor Delivery and Pickup Transportation Charges in accordance with the Statement of Work dated 06 April 2016. Cost will be

The period of performance is 01 October 2017 - 30 September 2018.

1002 1 Lot OPTION Container Handling Fees

FFP

1003 1 Lot OPTION Media Handling Fees

FFP

1004 1 Lot OPTION Contractor-Provided Transport Containers

FFP

Contractor-Provided Transport Containers in accordance with the Statement of

Work dated 06 April 2016. Different sizes of transport containers, used to transport

1005 1 Lot OPTION Contractor Storage, Slotting, Vaulting

FFP

Contractor Storage, Slotting, Vaulting in accordance with the Statement of Work

1006 1 Lot OPTION Container and Vault Storage

FFP

Container and Vault Storage in accordance with the Statement of Work dated 06

1007 1 Lot OPTION Contractor Invoicing

FFP

1008 1 Lot OPTION Unscheduled & Emergency/Critical Service

FFP

Unscheduled Delivery- Media returned to Site or Designated Alternate Site within

4 hours of notification in accordance with the Statement of Work dated 06 April

1009 1 Lot OPTION Recovery test - Move Media

FFP

Standard Emergency Recovery Test-Move Media Between DISA Site and

1010 1 Lot OPTION Additional Services

FFP

The Government will provide a SOW defining the requested additional work.

Additional services under this contract shall be negotiated by contract modification if and when those services are required. It is the Government’s intent to request a

2001 1 Lot OPTION Contractor Delivery and Pickup

FFP

Non-Personal Services - Contractor Delivery and Pickup Transportation Charges in accordance with the Statement of Work dated 06 April 2016. Cost will be

The period of performance is 01 October 2018 - 30 September 2019.

2002 1 Lot OPTION Container Handling Fees

FFP

2003 1 Lot OPTION Media Handling Fees

FFP

2004 1 Lot OPTION Contractor-Provided Transport Containers

FFP

Contractor-Provided Transport Containers in accordance with the Statement of

Work dated 06 April 2016. Different sizes of transport containers, used to transport

2005 1 Lot OPTION Contractor Storage, Slotting, Vaulting

FFP

Contractor Storage, Slotting, Vaulting in accordance with the Statement of Work

2006 1 Lot OPTION Container and Vault Storage

FFP

Container and Vault Storage in accordance with the Statement of Work dated 06

2007 1 Lot OPTION Contractor Invoicing

FFP

2008 1 Lot OPTION Unscheduled & Emergency/Critical Service

FFP

Unscheduled Delivery- Media returned to Site or Designated Alternate Site within

4 hours of notification in accordance with the Statement of Work dated 06 April

2009 1 Lot OPTION Recovery test - Move Media

FFP

Standard Emergency Recovery Test-Move Media Between DISA Site and

2010 1 Lot OPTION Additional Services

FFP

The Government will provide a SOW defining the requested additional work.

Additional services under this contract shall be negotiated by contract modification if and when those services are required. It is the Government’s intent to request a

3001 1 Lot OPTION Contractor Delivery and Pickup

FFP

Non-Personal Services - Contractor Delivery and Pickup Transportation Charges in accordance with the Statement of Work dated 06 April 2016. Cost will be

The period of performance is 01 October 2019 - 30 September 2020.

3002 1 Lot OPTION Container Handling Fees

FFP

3003 1 Lot OPTION Media Handling Fees

FFP

3004 1 Lot OPTION Contractor-Provided Transport Containers

FFP

Contractor-Provided Transport Containers in accordance with the Statement of

Work dated 06 April 2016. Different sizes of transport containers, used to transport

3005 1 Lot OPTION Contractor Storage, Slotting, Vaulting

FFP

Contractor Storage, Slotting, Vaulting in accordance with the Statement of Work

3006 1 Lot OPTION Container and Vault Storage

FFP

Container and Vault Storage in accordance with the Statement of Work dated 06

3007 1 Lot OPTION Contractor Invoicing

FFP

3008 1 Lot OPTION Unscheduled & Emergency/Critical Service

FFP

Unscheduled Delivery- Media returned to Site or Designated Alternate Site within

4 hours of notification in accordance with the Statement of Work dated 06 April

3009 1 Lot OPTION Recovery test - Move Media

FFP

Standard Emergency Recovery Test-Move Media Between DISA Site and

3010 1 Lot OPTION Additional Services

FFP

The Government will provide a SOW defining the requested additional work.

Additional services under this contract shall be negotiated by contract modification if and when those services are required. It is the Government’s intent to request a

4001 1 Lot OPTION Contractor Delivery and Pickup

FFP

Non-Personal Services - Contractor Delivery and Pickup Transportation Charges in accordance with the Statement of Work dated 06 April 2016. Cost will be

The period of performance is 01 October 2020 - 30 September 2021.

4002 1 Lot OPTION Container Handling Fees

FFP

4003 1 Lot OPTION Media Handling Fees

FFP

4004 1 Lot OPTION Contractor-Provided Transport Containers

FFP

Contractor-Provided Transport Containers in accordance with the Statement of

Work dated 06 April 2016. Different sizes of transport containers, used to transport

4005 1 Lot OPTION Contractor Storage, Slotting, Vaulting

FFP

Contractor Storage, Slotting, Vaulting in accordance with the Statement of Work

4006 1 Lot OPTION Container and Vault Storage

FFP

Container and Vault Storage in accordance with the Statement of Work dated 06

4007 1 Lot OPTION Contractor Invoicing

FFP

4008 1 Lot OPTION Unscheduled & Emergency/Critical Service

FFP

Unscheduled Delivery- Media returned to Site or Designated Alternate Site within

4 hours of notification in accordance with the Statement of Work dated 06 April

4009 1 Lot OPTION Recovery test - Move Media

FFP

Standard Emergency Recovery Test-Move Media Between DISA Site and

4010 1 Lot OPTION Additional Services

FFP

The Government will provide a SOW defining the requested additional work.

Additional services under this contract shall be negotiated by contract modification if and when those services are required. It is the Government’s intent to request a

REQUEST FOR QUOTE

This is a commercial purchase using FAR Part 12 and Part 13 procedures. The following information, as required per FAR 12.603(c) (2) applies:

(i) This is a combined synopsis/solicitation for commercial items prepared in accordance with FAR Part 12.6, as supplemented with additional information included in this notice. This announcement constitutes the only solicitation, proposals are being requested and a written solicitation will not be issued.

(ii) The solicitation reference number is HC1028-16-T-0132; it is being issued as a Request for Quotation (RFQ).

(iii) The solicitation document and incorporated provisions and clauses are those in effect through the Federal

Acquisition Circular 2005-88 effective 15 Jun 16, and the Defense Federal Acquisition Regulation Supplement DPN

20160607 Edition effective 07 Jun 16.

(iv) This acquisition is 100% Small Business Set Aside under North American Industry Classification System

(NAICS) code 493110. For the purpose of this procurement the small business size standard is $27.5M.

The Government is seeking discounted pricing to obtain these nonpersonal services to provide Off-Site Storage of

Unclassified and Classified Computer-Generated Media as identified in the attached Statement of Work (SOW).

The Period of Performance (POP) for this effort is 01 October 2016 through 30 September 2017 with (4) one-year option periods.

Award will be made to the offeror who presents the Lowest Price Technically Acceptable (LPTA) to the

Government in accordance with the criteria in the RFQ. The proposal must comply in all material respects with the requirements of the law, regulation and conditions set forth in the solicitation. The proposal must meet all mandatory solicitation requirements. The offeror must be determined responsible according to the standards of FAR

Part 9, Subpart 1. The agency intends to award a firm-fixed price order/contract using the Lowest Price Technically acceptable methodology. The Quotes must represent best value from selection of the technically acceptable quote in accordance with the stated requirements and delivery, with lowest evaluated price. All proposals will be forwarded to the customer for evaluation; however, if the lowest priced quote is determined technically acceptable, no further technical review will be required.

The award will be a single award Firm Fixed Price (FFP) based on the technically acceptable offer. Pricing should be based on fully burdened labor rates to perform this work.

**Contractor must have active facility clearance, level – Secret, at time of proposal submission. **

TECHNICAL PROPOSAL

The technical proposal should include all information you want the Government to consider/evaluate, regarding capability of your company to perform the required tasks. The proposal should address information such as personnel skills and experience, descriptions of the qualifications; level of knowledge; number of years of experience for the labor categories proposed for the potential candidates; proposed resumes management/technical approach to accomplishing these tasks; demonstrate understanding of the tasks at hand; past performance of the company for similar type work and complexity; and any additional pertinent information.

When addressing past performance/experience in the proposal, the Government considers some experience/contracts more significant than others, e.g. due to their close similarity to the requirements and the more recent nature of the past performance.

The technical proposal (including technical, management, relevant experience, past performance, and adherence to security requirements if applicable) shall be limited to no more than twenty (20) single-sided pages.

SUBMISSION INSTRUCTIONS

As a minimum, your pricing information should include:

--Proposed pricing for basic performance required under the Statement of Work (SOW). Price proposal should be submitted in Microsoft Excel and itemized by labor categories, estimated labor hours, rate, number of employees for each labor category, what percentage of discount has been given, and total proposed cost for the requirement.

Additional services under this contract shall be negotiated by contract modification if and when those services are required. It is the Government’s intent to request a proposal each time, with the pricing to be no higher than the awarded amounts for these hours/materials.

This procurement will be conducted entirely electronically. All information submitted must be presented in software applications which are readable by Government systems (generally, Microsoft Office such as Word, Excel, etc.). All submissions must be made to this email address: marty.d.bost.civ@mail.mil.

The Government reserves the right to award without discussions. Therefore, the Offeror’s initial proposal shall contain the Offeror’s best terms based on past performance, technical/management approach, and cost.

The Government will entertain questions on this procurement until 10:00 am CST, Tuesday, July 5, 2016. No late questions will be accepted. No questions will be accepted via phone calls. Responses to all questions posed will be provided to all interested parties. Please send all questions via email to marty.d.bost.civ@mail.mil.

Proposals are due by 12:00 pm CST Wednesday, July 21, 2016. The Government reserves the right to award without discussions.

Please send all questions/quotes to Marty Bost at marty.d.bost.civ@mail.mil.

STATEMENT OF WORK

mailto:marty.d.bost.civ@mail.mil

As of 06 April 2016

Contract Number:

1. Contracting Officer Representative (COR)

a. Primary COR

Name:

Organization:

DODAAC:

Address:

Phone Number:

Fax Number:

E-Mail Address:

2. Contract Title. Off-Site Tape Media Storage

3. Background. Defense Information System Agency (DISA) provides a broad range of Information Technology support services to Department of Defense (DOD) components. This support consists primarily of mainframe, mid-tier and client server data processing. DISA currently staffs and operates multiple sites in the United States. The sites have varying computing power configurations, with larger sites supporting other larger sites and smaller sites.

The current site locations requiring off-site tape media storage are as follows: Columbus, OH, Mechanicsburg, PA, Montgomery, AL, Ogden, UT, Oklahoma City, OK, San Antonio, TX, and St. Louis, MO. Additional locations may be added at DISAs request during the contract.

4. Objectives. DISA must provide its customers, mainframe, mid-tier, client server and desktop recovery capabilities to ensure continuity of operations in the event that a DISA site is disabled or nonfunctional. DISA has a requirement for off-site storage management of Unclassified and Classified media and rotation and retrieval services to ensure availability of critical customer data to minimize the impact of a catastrophic service interruption. The tape media retention period is determined by the customer.

5. Scope. The Contractor shall furnish all labor, facilities and transportation to pick up and deliver tape media and documentation from and to a DISA site based on a predetermined schedule. The Contractor must be able to provide off-site storage management of unclassified and classified tape media and rotation, retrieval and recovery services to all DISA sites. The Contractor shall also provide, in the event of a disaster or a disaster recovery test, transportation of the stored tape media and associated documentation from a specified DISA Site and ensure emergency shipment of the tape media and documentation to an alternate designated DISA processing site within the time limits identified in the SOW.

6. Specific Tasks.

6.1 Task 1-Contractor’s Delivery and Pickup-Transportation: The Contractor’s personnel shall pick up and deliver shipments of outgoing and incoming classified and unclassified tape media from the DISA site (based on specific

DISA site schedule that will be provided upon contract award) 24x7x365 days as scheduled by the Government.

Regular deliveries and pickups will be scheduled between 0700 and 1700 local time. Bar code reader or similar technology will be utilized to ensure accurate tracking and scanning of all media transports.

6.1.1 The Contractor’s personnel shall notify the DISA site Point of Contact (POC) within 2 hours prior or 30 minutes following the scheduled pickup if the Contractor cannot meet the scheduled pick-up and delivery times due to weather conditions, road conditions, or mechanical failure of the contractor’s vehicle. The missed pick-up and/or delivery time will be rescheduled within 24 hours.

6.1.2 The Government will have authority to cancel or change the time of any regular scheduled pick-up or delivery by notifying the Contractor no later than 2 hours prior to the scheduled pick-up or delivery time on the day of the requested change to the schedule.

6.1.3 The Contractor shall proceed directly to the storage facility immediately following the tape media pickup from a DISA facility. The Contractor shall also proceed directly to all DISA facilities immediately following loading of the media to be returned to the DISA facility. Other route stops are not permitted. Classified media must be accompanied at all times by a cleared (Secret) Contractor until turnover of media to a cleared, authorized employee at the DISA site or Contractor’s facility. The Contractor shall comply with DOD 5220.22-M (NISPOM) anytime the Contractor’s personnel are handling, packaging and transporting media, which is Classified at the Confidential or

Secret level.

6.1.4 The Contract employees, upon arrival at the Contractor’s facility, shall store the slotted media and the storage cases. Segregated storage racks will be provided for each customer. All tapes will be filed and containers moved to the appropriate secured area by the close of business that same day. The Contractor shall provide shelf storage space for classified media cases. The storage space shall meet the minimum requirements for storage of Classified national security information at the Secret level, as specified in DOD 5220.22-M, National Industrial Security

Program Operating Manual (NISPOM).

6.1.5 Open Container Storage/Slotted Media: Contractor will rotate individual tapes by their retention date. The

Contractor picks up the locked container from the DISA site, unlocks the container at the vaulting facility, and the media is slotted inside the customer's designated vault space. Contractor has interaction with the media. Each tape within the transport container can have its own retention date. Contractor can provide exact labeling information on the media stored at their facility.

6.1.6 Closed Container Storage: Contractor will rotate the container by its retention date. Contractor will pick up the locked container from the DISA site and store it unopened at its vaulting facility. Contractor will not interact with the tapes inside the closed container. The container and its entire contents have a single retention date. The details of the containers’ contents are the Government’s responsibility.

6.1.7 Contractor-Provided Transport Containers: Contractor will use containers designed to minimize the risk of potential data loss. Containers and carts must remain locked at all times during transit. Containers must be water, shatter and fire-resistant, foam lined and specific for each type of tape. Containers must have a unique customer identification label that does not identify the customer name or the contents.

6.1.8 The Contractor shall provide access to the storage facility for the purpose of a media audit within 24 hours of request by DISA. All DISA-owned tape media stored in the segregated storage areas of the facility shall be accessible to approved DISA personnel for audit.

6.1.9 The Contractor’s personnel may be asked, on an unscheduled basis, to bring a specific tape/container back to the DISA site, within 8 hours of recall notification for operational recovery. If a disaster occurs at the DISA site, the

Contractor shall be required to ensure emergency/critical delivery of the back-up media to the designated recovery sites marked on the storage cases within 4 hours of a declaration of any disaster or emergency.

6.2 Task 2-Contractor’s Vehicle Requirements: The Contractor shall provide a vehicle with a verified license, insurance and separate cargo area with automatic latches/locks. The Contractor’s vehicle used to transport media covered by this contract must be used only for the transportation of computer media and be retrofitted for protecting magnetic media. The Contractor’s vehicle should be unmarked and have an audible security alarm system that is active at all times. The cargo area will remain locked at all times except during loading/unloading. The storage area of the Contractor’s vehicle must be temperature controlled and maintained at the same temperature and humidity requirements as listed in paragraph 8.1.3. All vehicles used to transport government tape media will be equipped with Global Positioning Tracking (GPS) systems and be able to provided vehicles with real time tracking within thirty minutes.

6.3 Task 3-Contractor’s Reporting and Communication Requirements:

6.3.1 The Contractor must immediately notify the government of any situations regarding missing tape media and/or containers at the contractor’s offsite facility or during transportation. Immediate notification will be accomplished by contacting the government POC at each site provided on attachment A (under revision), or the contract COR listed in paragraph 1.a of this SOW. Contractor can also contact the DISA Helpdesk (844) 347-2457 and request the

DISA site storage team be notified of the incident.

6.3.2 The Contractor shall provide a monthly report to the DISA site storage POC within ten working days after the end of the month. The monthly report will record actual pick-up times, times in route (to/from), number of cartons transported, number of tapes hand-filed, any procedural deviations and/or security problems encountered during the reporting period. The Contractor shall notify the DISA site POC if any problems arise while performing the duties outlined in this SOW.

6.4 Task 4-Contractor’s Recovery and Testing Requirements: Recovery testing requirements shall be met in accordance with general guidelines for testing requirements; specific changes to these guidelines may be requested by DISA. The DISA site POCs will be responsible for requesting, scheduling and evaluating the results with the

Contractor.

6.4.1 Emergency Test: On an emergency basis, the Contractor may be asked to bring back tapes to the DISA site.

The shipment could consist of all mainframe media and mid-tier media. If an emergency test occurs, the Contractor shall return the media within 4 hours of notification.

6.4.2 Standard Disaster Recovery Test: The Contractor shall ship media to the alternate processing site. The shipment shall consist of mainframe media and/or mid-tier media shipped to and returned from the alternate processing site. The media shall be delivered to the alternate processing site within 24 hours of notification to the

Contractor by DISA.

6.4.3 Mid-Tier Disaster Recovery Test: The Contractor shall ship mid-tier media to and return them from the alternate processing site. The media shall arrive at the alternate processing site within 24 hours of notification to the

Contractor by DISA.

6.4.4 Capacity Disaster Recovery Test: The Contractor shall ship all mainframe media and mid-tier media to and return them from the alternate processing site. The media shall be delivered to the alternate site within 24 hours of notification to the Contractor by DISA.

6.5 Task 5-Contractor’s Personnel Requirements: Contractor employee must be able to receive and follow English verbal and/or written instructions.

6.5.1 Contractor personnel shall be insured/bonded for a minimum of $25,000 for liability, negligence and loss and/or damage of media/data, in accordance with all governing Federal and/or State laws. Bond verification shall be provided to the DISA Contracting Officer within 3 workdays of personnel hiring action. All costs associated with the bonding shall be the responsibility of the Contractor. Guidance concerning these areas and material is contained in the most recent versions of DOD 5200.1-R, Information Security Program, DOD 5200.2-R, Personnel Security

Program, and DOD 5200.8-R Physical Security Program. The Contractor shall provide documentation (i.e.

Certificate of Insurance) to the DISA Contracting Officer.

6.5.2 The Contractor shall provide each DISA site POC and the COR with telephone number for emergency response 24x7x365 to be able to respond to designated site emergencies within 15 minutes of being contacted. In the event a voice message is left, the contractor will respond to the call within 15 minutes.

6.6 Task 6-Contractor’s Invoice Requirements: The Contractor shall provide a monthly invoice for certification and payment no later than 10 working days after the end of the month. The invoice shall include the month end date;

period being billed for; site name and amount being charged; number of trips, number of media (identified by type) picked-up and delivered, and number of media (identified by type) stored; any site required emergency trips and/or site test requirements; dollar amount being charged; unique customer generated invoice number; and total for all sites. Some DISA sites may have multiple accounts.

6.7 Task 7-Contractor’s Miscellaneous Requirements:

6.7.1 Contractor will provide web-based tracking software and training as required, to each DISA site to allow the

Government real-time online access to media retention information and to be able to process personnel access changes, changes in media retention and disaster recovery updates.

6.7.2 The Contractor must have a backup storage facility of their own in compliance with the above listed requirements and the Contractor shall have a Disaster Recovery Plan for their facility. A copy of this plan will be provided to the Government along with any relevant updates during the life of the contract.

6.8 Task 8-Contractor’s Transition Plan: Transition service includes the planning, support necessary to move stored tapes, transportation and supporting documentation. The local DISA storage teams will administratively facilitate the transfer, but the contractor is responsible for the actual relocation of stored tapes. The contractor will provide a written transition plan with their proposal. Contract transition will be completed within 60 days of award.

6.8.1 The Contractor shall be responsible for preparing a transition plan that demonstrates a non-disruptive strategy of how the workload shall be obtained from the current Contractor. If the workload is transitioned to another contract provider, it may first be recalled back to the originating DISA facility or directly transferred to the new contract facility. The workload transition will be coordinated between the current contractor, the new contractor and the Government to maintain the chain of custody.

6.8.2 If the contracted service is transitioned to another facility or contract provider – or the current contract is terminated, the current contract provider shall provide all support necessary to move all the stored tapes back to a

DISA facility or the new contract facility. The Contractor shall be responsible for the safety and security of all

Government equipment and materials until officially transferred, in writing with a full inventory listing, to the

Government or to the follow-on Contractor. The implementation of the transition strategy will begin immediately upon award of the contract.

6.9 Task 9- Cyber Threat Security Plan

a) Handling of Non-Public Information

In performance of this contract, the contractor may have access to Department of Defense (DoD) information. The contractor agrees (a) to use and protect such information from unauthorized disclosure IAW DoD Instruction

8582.01: Security of Unclassified DoD Information on Non-DoD Information Systems; (b) to use and disclose such information only for the purpose of performing this contract and to not use or disclose such information for any personal or commercial purpose; (c) to comply with other current Federal and DoD information protection and reporting requirements for specified categories of information (e.g., medical, proprietary, critical program information (CPI), personally identifiable information, export controlled); (d) to obtain permission of the

Government Requiring Activity before disclosing/discussing such information with a third party; (e) to return and

/or electronically purge, upon Government request, any DoD information no longer required for contractor performance; and (f) to advise the Contracting Officer and/or Contracting Officer’s Representative of any unauthorized release of such information.

b) Cyber Threat Security Plan

In conjunction with the Defense Federal Acquisition Regulation Supplement (DFARS) Subpart 204.73, Safeguarding Unclassified Controlled Technical Information, DFARS Clause 252.204-7012, Safeguarding unclassified controlled technical information, and DoD, DISA, NIST, and other Federal mandated regulations, instructions, procedures, and laws, the contractor shall develop, submit, and implement upon approval a Cyber

Threat Security Plan (plan).

The contractor shall submit the plan 30 days after contract award to the Contracting Officer and COR for acceptance. The Contracting Officer and COR have 10 working days to provide an acceptance or feedback to the contractor. If no written acceptance is received within the 10 working days, then the contractor can consider the plan accepted. If the contractor receives feedback within the 10 working days, then the contractor has 10 working days to provide the Contracting Officer and COR an updated plan based on comments provided by the Government.

This plan shall be consistent with and further detail the approach contained in the contractor’s proposal that resulted in the award of this contract and in compliance with the requirements stated in the clause mentioned under this task.

This plan shall describe the processes and procedures that will be followed to ensure appropriate security of IT resources that are developed, processed, or used under this contract. This plan shall contain the following:

(a) Vulnerability Management: evaluate network components, security procedures, and processes for potential exploitation from attack.

(b) Cyber Threat Intelligence: provide policy enforcement and end-point protection against unwarranted attacks on the network.

(c) Analytics Monitoring: provide scalable analytics solution capable of combining potential risk indicators and developing leads.

(d) Mitigation and Response: provide the process on how the threat will be mitigated and responded to upon discovery.

(e) Lessons Learned and Action Plan: provide lessons learned and an action plan that will help all interested parties avoid repeated and similar attacks.

(f) Subcontractors: explain how your subcontractors will be required to implement this requirement within their processes in support of this task.

Annually, anniversary date of acceptance of the plan, the contractor shall submit verification to the Contracting Officer and COR that the plan remains valid.

c) Contractor Furnished Equipment

There will be no Contractor Furnished Equipment (CFE) employed for remote access to a Government network

7. Performance Standards.

7.1 The Government will periodically evaluate the Contractor’s performance in accordance with the Quality

Assurance Surveillance Plan (QASP). The purpose of the QASP is to ensure reliable, uninterrupted services are provided in accordance with the SOW. The plan ensures an acceptable performance level with a minimum of unnecessary complaints. The Government’s QASP elements include (1) periodic inspection/random monitoring of the Contractor’s performance and facilities, (2) progress meetings with the Contractor and (3) customer feedback.

7.2 This contract and its associated delivery/task orders are subject to the Federal SCRM policies and regulation including the Defense Federal Acquisition Supplement (DFARS) 252.239-7017 Notice of Supply Chain Risk, DFARS 252.239-7018 Supply Chain Risk, DoD Instruction 5200.44 Protection of Mission Critical Functions to

Achieve Trusted Systems and Networks, Section 806 of the FY2011 NDAA Requirements for Information Relating to Supply Chain Risk, and internal DISA SCRM Processes and Procedures.

The contractor shall submit a SCRM plan as part of its technical proposal that describes how the contractor will reduce and mitigate Supply Chain Risk using the security controls outlined below (further described in CNSSI

1253, Appendix D and NIST SP 800-53), as applicable to your contract.

Control

Number

HW SW Srvc

SA-12 Supply Chain Protection x x x

SA-12(1) Supply Chain Protection / Acquisition Strategies / Tools / Methods x x x*

SA-12(2) Supply Chain Protection / Supplier Reviews x x x*

SA-12(5) Supply Chain Protection / Limitation of Harm x x x*

SA-12 (7) Supply Chain Protection Assessments Prior to Selection / Acceptance/ Update x x x*

SA-12 (8) Supply Chain Protection / Use of All-Source Intelligence x x x*

SA-12 (9) Supply Chain Protection / Operations Security x x x

SA-12 (10) Supply Chain Protection / Validate as Genuine and Not Altered x x x*

SA-12 (11) Supply Chain Protection / Penetration Testing / Analysis of Elements, Processes, and Actors x x x

SA-12 (12) Supply Chain Protection / Inter-Organizational System Components x x x

SA-12 (13) Supply Chain Protection / Critical Information System Components x x x*

SA-12 (14) Supply Chain Protection / Identity and Traceability x x x*

SA-12 (15) Supply Chain Protection / Process to Address Weaknesses or Deficiencies x x x

IR-4 (10) Incident Handling / Supply Chain Coordination x x x*

IR-6 (3) Supply Chain Protection / Incident Reporting / Coordination With Supply

Chain x x x*

SA-11 Developer Security Testing and Evaluation x x x*

SA-14 Criticality Analysis x x x*

SA-15 Development Process, Standards, and Tools x x x*

SI-7 Software, Firmware, and Information Integrity x x x*

CM-4 Security Impact x x x*

PM-16 Threat Awareness Program x x x

*Not required if there will be no procurement of hardware, firmware, or software systems.

8. Place of Performance. All work shall be performed either at the DISA Sites, Alternate Designated Sites, the

Contractor’s approved storage facilities and in route between authorized primary and alternate transport routes, between the 2 sites. Primary sites are those identified as having a current requirement for the contracted service and are listed in paragraph 3. Primary sites will be transitioned upon award of the contract. As workload dictates, additional sites and accounts can be added to the contract upon request by the Government and acceptance by the

Contractor.

8.1 Contractor’s Facilities. To ensure the viability and compliance of the Contractor’s storage facilities, the

Government may perform inspections and tests in a manner that will not delay the work to be performed by the

Contractor under this contract or any related contract. The Contractor shall provide access to DISA Site personnel for compliance verification. The access will be coordinated with the facility prior to the visit. Deficiencies will be provided in written form to the Contractor for resolution. The Contracting Officer may require the Contractor to correct or repair facilities or work that is defective or does not conform to contract requirements. Unacceptable performance will be recorded and the Contractor shall be required to correct the unacceptable condition within a 48-hour time period. This includes making rapid repairs to ensure safe work conditions and facility security. Written verification shall be provided by the Contractor to the Contracting Officer when remedial action has been completed. If the Contractor does not correct the unacceptable condition within 48 hours, the COR will notify the

Contracting Officer who will take appropriate administrative action for unacceptable performance.

8.1.1 Location: The Contractor’s facility must be removed from high-risk areas including flood plains, earthquake fault zones, and know landslide or mudslide geographical hazards. The off-site facility must be a sufficient distance from the primary (DISA ) site to significantly reduce the likelihood of a single catastrophic event or terrorist attack affecting both sites. The prevailing standard within the Disaster Recovery industry is a minimum of 25 miles between sites. The 25-mile standard is endorsed by DISA as minimally acceptable, but it is recommended that each site review the potential for a regional disaster (i.e., hurricane, flood, earthquake, etc.) to determine if the 25-mile minimum is a sufficient distance from the primary processing site to safeguard critical backup resources. Waivers to the minimum distance requirements will be considered on a case-by-case basis when advantageous to the

Government.

8.1.2 Contractor’s Storage Space Requirements: The Contractor will provide dedicated storage space to store closed containers and open container/slotted storage for tapes. Contractor may be required to accommodate long-term storage of specific media that needs to remain in the Contractor’s storage facility for an extended period. The

Contractor shall be responsible for identifying any media with an expired retention date, pulling that media out of the rotation, and returning it to the responsible DISA Site. The DISA Sites may provide the following types of media:

a) 3480/3490 cartridge tapes (mainframe storage)

b) 9840/9940/3590 cartridge tapes

c) 4mm and 8mm cartridges

d) Digital Linear Tape (DLT), Super Digital Linear Tape (SDLT), Linear Tape-Open (LTO) cartridge tapes

8.1.3 Environmental Controls: The Contractor shall maintain temperature and humidity levels to maintain and preserve the integrity of the media/data contained within the designated storage area of the Contractor’s facility.

Temperature must be maintained between 60 and 70 degrees Fahrenheit. Humidity must be maintained between 35 and 45 percent. Temperature and humidity levels must be continually monitored to detect variances from these standards. The Contractor’s facility must be capable of being restored to stated environmental levels within 8 hours of any alternate site storage facility environmental failure.

8.1.4 Fire Suppression and General Maintenance: The Contractor’s facility shall be equipped with professionally guarded or off-site, central station monitoring systems for (1) fire alarm and suppression system; (2) environmental system with controls located in the storage floor space area, including an air filtration system; (3) back-up power source to guarantee emergency lighting during a power failure.

8.1.5 Security Provisions: The Contractor’s facility shall be equipped with a professionally guarded or off-site, central station security monitoring system including independent security in the designated storage area.

Contractor’s facility must be guarded by an Intrusion Detection System (IDS) and electronic access controls. The

Contractor’s facilities shall be accessible at least once per month for an unannounced security audit of vaults and storage areas by DISA Site Security Division Personnel. DOD 5220.22-M (NISPOM) addresses provisions for security inspection without advance notice. The Contractor, at the Contractor’s expense, shall correct any noted deficiencies and provided written verification to the Contracting Officer. Complete records of all security inspections performed by the Contractor shall be maintained and made available to the Government upon request during contract performance and for as long as the contract requires.

9. Period of Performance. The period of performance is 01 October 2016 - 30 September 2017, plus four (4) one-year option periods. As requested by the COR, the Contractor shall continue performance during emergency or mission essential conditions.

10. Deliverable/Delivery Schedule.

SOW

Task#

Deliverable

Title

Format Due Date Distribution/

Copies

Frequency and Remarks

Task 1 Pick up and deliver outgoing and

DISA Sites will provide their schedule

Frequency is set by each

DISA Site incoming media and containers

Task 1 Unscheduled

Recall of

Media

As requested by the DISA Site for

Disaster Recovery

DISA Site POCs Infrequent, within 8 hrs of notification

Task 1 Emergency

Recall of

Media

As requested by the DISA Site for

Disaster Recovery

DISA Site POCs Infrequent, within 4 hrs of notification

Task 3 Daily

Discrepancy

Report

Contractor-

Determined Format

Daily DISA Site POCs Daily–as discrepancies are noted

Task 3 Monthly

Report

Contractor-

Determined Format

Monthly DISA Site POCs By 10th work day of following month

Task 4 Recovery

Testing

As requested by the DISA Site for

Recovery Testing

DISA Site POCs Infrequent, As requested by DISA

Task 5 Certificate of

Insurance

Commercial Format 30 days following award

KO Initial and when updated

Task 5 POC Listing Contractor-

Determined Format

10 days following award

DISA Site POCs and COR

Initial and when updated

Task 6 Monthly

Invoice

Contractor-

Determined Format incorporating requirements of 6.13

Monthly COR By 10th work day of following month

Task 7 Provide software and training

10 days following award

DISA Site POCs Coordinate with Site

Security

Managers and IA program

Manager

Task 7 Disaster

Recovery

Plan

30 days after contract award

Copy to KO and

COR

Initial and when updated

Task 8 Transition

Plan

60 days after

Copy to KO and

COR

Initial and when updated

Task 9 Cyber Threat

Security Plan

Contractor-

Determined Format incorporating requirements of 6.9

30 days after

Copy to KO and

COR

Initial and

Annual

Para

7.2

Supply Chain

Risk

Management

Plan Update

Within 5 business days whenever there is a change that affects one or more security

Copy to Program

Manager and COR

Initial and when updated controls as described in the

Committee on

National Security

Systems

Instructions

(CNSSI) 1253

Appendix D

(companion publication to

National Institute of Standards. At a minimum, the following events substantiate the need for an update:

changes in company ownership, changes in senior company leadership, supplier changes, subcontractor changes, and ICT supply chain compromises.

11. Security Requirements: The work supporting this contract will be up to and including the Secret Level.

Security Requirements: This section shall be considered a supplement to block 13 of the Government provided DD

254, Contract Classification Specification.

References:

a. DOD 5200.2-R, DOD Personnel Security Program.

b. DISAI 240-110-36, Personnel Security.

c. DOD 5220.22-M, National Industrial Security Program Operating Manual.

d. DOD 5220.22-R, Industrial Security Regulation.

e. DISA Computing Services Directorate (CSD) Security Handbook.

f. DODM 5200.01, Information Security Program, 24 February 2012

11.1 Facility Security Clearance. The work to be performed under this contract is up to the Secret level. Therefore, the company must have a final Secret Facility Clearance (FCL) from the Defense Security Service (DSS) Facility

Clearance Branch (FCB).

11.2 Security Clearance and Information Technology (IT) Level. All personnel performing on this contract will be U.S. citizens. There are two levels of personnel security requirements under this contract covering two types of positions:

11.2.1 Secret Security Clearance. The following Courier/Driver position requires a minimum of interim Secret security clearance when contract performance starts. Immediately upon hire, the incumbents will require unescorted building/area access with no IT access to DISA systems. The work to be performed under the classified portion of this contract requires access to government facilities and/or access to containerized classified government tape media.

- Courier/Driver, Classified Unclassified Access and a Position of Trust. The following Courier/Driver position requires a minimum of a favorably completed Position of Trust when performance starts. Immediately upon hire, the incumbents will require escorted building/area access with no IT access to DISA systems. The work to be performed under the unclassified portion of this contract requires access to government facilities and/or have access to containerized unclassified government tape media.

- Courier/Driver, Unclassified

11.3 Investigation Requirements.

11.3.1 All personnel requiring Secret under this contract must undergo a favorably adjudicated National Agency Check, Local Agency Check and Credit Check (NACLC) as a minimum investigation. The NACLC will be maintained current within 10-years and requests for Secret Periodic Reviews (SPRs) will be initiated prior to the 10-year anniversary date of the previous NACLC or SPR.

11.4 Adjudication for IT access. There is no IT access to DISA systems for this contract effort.

11.5 Interim IT access.