Amd 04 final.pdf

DESPR

AMENDMENT OF SOLICITATION/MODIFICATION OF CONTRACT

Except as provided herein, all terms and conditions of the document referenced in Item 9A or 10A, as heretofore changed, remains unchanged and in full force and effect.

15A. NAME AND TITLE OF SIGNER (Type or print)

30-105-04EXCEPTION TO SF 30

APPROVED BY OIRM 11-84

STANDARD FORM 30 (Rev. 10-83) Prescribed by GSA

FAR (48 CFR) 53.243

See SECTION SF 30 - BLOCK 14 CONTINUATION PAGE.

1. CONTRACT ID CODE PAGE OF PAGES

J 1 41

16A. NAME AND TITLE OF CONTRACTING OFFICER (Type or print)

16C. DATE SIGNED

BY 27-Jan-2021

16B. UNITED STATES OF AMERICA15C. DATE SIGNED15B. CONTRACTOR/OFFEROR

(Signature of Contracting Officer)(Signature of person authorized to sign)

8. NAME AND ADDRESS OF CONTRACTOR (No., Street, County, State and Zip Code) X HC104720R0014

X 9B. DATED (SEE ITEM 11)

08-Dec-2020

10B. DATED (SEE ITEM 13)

9A. AMENDMENT OF SOLICITATION NO.

11. THIS ITEM ONLY APPLIES TO AMENDMENTS OF SOLICITATIONS

X The above numbered solicitation is amended as set forth in Item 14. The hour and date specified for receipt of Offer X is extended, is not extended.

Offer must acknowledge receipt of this amendment prior to the hour and date specified in the solicitation or as amended by one of the following methods:

(a) By completing Items 8 and 15, and returning copies of the amendment; (b) By acknowledging receipt of this amendment on each copy of the offer submitted;

or (c) By separate letter or telegram which includes a reference to the solicitation and amendment numbers. FAILURE OF YOUR ACKNOWLEDGMENT TO BE RECEIVED AT THE PLACE DESIGNATED FOR THE RECEIPT OF OFFERS PRIOR TO THE HOUR AND DATE SPECIFIED MAY RESULT IN

REJECTION OF YOUR OFFER. If by virtue of this amendment you desire to change an offer already submitted, such change may be made by telegram or letter, provided each telegram or letter makes reference to the solicitation and this amendment, and is received prior to the opening hour and date specified.

12. ACCOUNTING AND APPROPRIATION DATA (If required)

13. THIS ITEM APPLIES ONLY TO MODIFICATIONS OF CONTRACTS/ORDERS.

IT MODIFIES THE CONTRACT/ORDER NO. AS DESCRIBED IN ITEM 14.

A. THIS CHANGE ORDER IS ISSUED PURSUANT TO: (Specify authority) THE CHANGES SET FORTH IN ITEM 14 ARE MADE IN THE

CONTRACT ORDER NO. IN ITEM 10A.

B. THE ABOVE NUMBERED CONTRACT/ORDER IS MODIFIED TO REFLECT THE ADMINISTRATIVE CHANGES (such as changes in paying office, appropriation date, etc.) SET FORTH IN ITEM 14, PURSUANT TO THE AUTHORITY OF FAR 43.103(B).

C. THIS SUPPLEMENTAL AGREEMENT IS ENTERED INTO PURSUANT TO AUTHORITY OF:

D. OTHER (Specify type of modification and authority)

E. IMPORTANT: Contractor is not, is required to sign this document and return copies to the issuing office.

14. DESCRIPTION OF AMENDMENT/MODIFICATION (Organized by UCF section headings, including solicitation/contract subject matter where feasible.)

10A. MOD. OF CONTRACT/ORDER NO.

2. AMENDMENT/MODIFICATION NO. 5. PROJECT NO.(If applicable)

6. ISSUED BY

3. EFFECTIVE DATE

27-Jan-2021

CODE

DISA/CONTRACTS-NCR

6914 COOPER AVE

FORT MEADE MD 20755-7090

HC1047 7. ADMINISTERED BY (If other than item 6)

4. REQUISITION/PURCHASE REQ. NO.

CODE

See Item 6

FACILITY CODECODE

EMAIL:TEL:

HC104720R0014

SECTION SF 30 BLOCK 14 CONTINUATION PAGE

SUMMARY OF CHANGES

SECTION SF 30 - BLOCK 14 CONTINUATION PAGE

The following have been added by full text:

SUMMARY OF CHANGES

The purpose of this amendment is to:

1. Include Attachment 32 Q&A RFP

2. Provide the following revised attachments:

Attach 8 IDIQ Labor Rates 01272021 (v1) (PROTECTED) Attach 9 TO 0001 SOO 01272021 Attach 11 SOO Appendix B DES IDIQ places of performance 01272021 Attach 14 SOO Appendix E - DES IDIQ PWS Template 01272021 Attach 15 SOO Appendix F DES IDIQ DAFA Data Calls 01272021 Attach 17 SOO Appendix B DES TO 0001 Places of Performance 01272021 Attach 21 SOO Appendix F DES TO 0001 DAFA Data Calls 01272021 Attach 22 SOO Appendix G DES TO 0001 Glossary 01272021 Attach 23 TO 0001 DD254 01272021 Attach 27 Labor Category Descriptions 01272021 Attach 28 DES TO 001 CLIN Structure 01272021 (DON) Attach 29 SOO Appendix A Services Summary 01272021 Attach 31 SOO Appendix A-DES TO 001 Services Summary 01272021 Reading Library 11-DISANet Authorized Software List NIPR-SIPR 01272021 Reading Library 13-DISA High Performing Sites 01272021

3. Revise Section B.3. TRAVEL PRICING (ALL ORDER TYPES)

4. Revise Section C (13) – Place of Performance

5. Revise Section L.2.1.1. Point(s) of Contact

6. Revise Section L.2.2 Table 1.1

7. Revise Section L.4.2.4 Part C and Part D

8. Revise Section L.5.1 General

9. Revise Section L.5.2 Part A – Past Performance Information for Recent and Relevant Contracts

10. Revise Section M.2.1.1. Subfactor 1: Staffing and Transition plan

11. Revise Section M.2.2.4. Subfactor 4: Innovations and Emerging Technology

12. Add updated clause 52.204-24 (OCT 2020)

12. Extend the proposal due date to February 11, 2021 at 10:00 am EST.

For your convenience, edits have been marked in red. All other Terms and Conditions remain unchanged and in full force and effect.

SECTION A - SOLICITATION/CONTRACT FORM

The required response date/time has changed from 08-Feb-2021 10:00 AM to 11-Feb-2021 10:00 AM.

SECTION B - SUPPLIES OR SERVICES AND PRICES

The following have been modified:

SECTION B

B.1. TASK ORDER CONTRACT TYPES

This is a single award IDIQ contract for the Department of Defense (DoD) Defense Information Systems Agency (DISA) Defense Enclave Services (DES) - based requirements that utilizes firm-fixed price (FFP) Contract Line Item Number (CLIN) for Labor, cost type CLINs for Travel, Surge and Labor Hour (LH) CLIN for emergency and/or urgent services. Task orders can be any combination of FFP, LH, and Cost Reimbursement (CR). Task order contract types permitted include FAR 16.2 Fixed-Price and FAR 16.3 Cost-Reimbursement. Task orders may incorporate FAR 17.2 Option periods procuring Commercial items. These contract types can be used individually or in combination within a single task order comprising multiple CLINs.

B.2. FIXED PRICE (FP) LABOR RATES

The FFP Labor Rates proposed represent the Offeror’s fully-burdened FFP hourly labor rates. The rates have been broken down into three categories (1) work performed at Government facilities in the Contiguous United States (CONUS); (2) work performed at contractor facilities in the CONUS; and, (3) work performed at Government facilities Outside the Contiguous United States (OCONUS). The rates provided in the pricing template will be used as ceiling labor rates for pricing of all labor proposed under future FFP priced, or hybrid tasks issued under this IDIQ contract. At time of award, the Contractor’s FFP ceiling labor rates will be incorporated into the contract.

B.3. TRAVEL PRICING (ALL ORDER TYPES)

Contractor personnel may be required to travel to support the requirements of this contract as stated in individual task orders. Local travel and travel outside of the local area may be required both in the CONUS and OCONUS. For those task orders requiring travel, the specific travel requirements will be included in the order’s request for proposal. Travel will be considered local travel within 50 miles of the individual’s main place of performance/duty station and will not be reimbursed. The Government will not reimburse for local travel between the Contractor facility (or facilities) and the DISA facility at Ft. Meade, MD. Non-local travel shall be approved in writing by the COR prior to the travel occurring. Travel shall not commence without prior written consent in accordance with instructions in the task orders.

If authorized in the task order, travel will be reimbursed at actual cost in accordance with the limitations set forth in FAR Subpart 31.205-46, Travel Costs and the Travel Regulation (JTR). Profit shall not be applied to travel costs.

To the extent authorized by the task order, the Contractor may apply indirect costs to travel in accordance with the Contractor’s usual accounting practices consistent with FAR 31.2. If the awardee does not have an approved accounting system at the time of award, upon award the awardee shall immediately initiate an accounting system review by DCAA and provide verification of such to the contracting officer. Reimbursement of travel costs under DES task orders will be paid in accordance with the Joint Travel Regulation (JTR). No profit shall be paid on travel.

However, if the awardee has an approved accounting system, DCAA approved burden rates are authorized on travel.

Burdened travel rates are impermissible if the awardee does not possess an approved accounting system.

B.4 WORK OUTSIDE THE CONUS

Task orders issued under this IDIQ may require performance OCONUS. CONUS means the 48 contiguous States and the District of Columbia. Any applicable clauses for OCONUS work will be added to the task orders, as applicable.

OCONUS includes:

1. OCONUS. Outside of the contiguous United States.

2. NON-FOREIGN OCONUS AREA. The states of Alaska and Hawaii, the Commonwealths of Puerto Rico and the Northern Mariana Islands, Guam, and U.S. territories and possessions.

3. FOREIGN AREAS. It is anticipated that there may be task orders under this contract for work outside the United States. The Contractor will be compensated for work performed OCONUS pursuant to the task order, including any applicable Status of Forces Agreements (SOFA) or Technical Expert Status Accreditation (TESA). Standard references for OCONUS pricing include:

The U.S. Department of State’s Bureau of Administration, Office of Allowances, (https://aoprals.state.gov/) publishes quarterly report indexes of living costs abroad, per-diem rate maximums, quarter’s allowances, hardship differentials, and danger pay allowances for Contractors to follow when proposing on OCONUS efforts. No allowances, other than those listed by the U. S. Department of State, shall be allowed on task orders.

The Department of State Standardized Regulations (DSSR) are the controlling regulations for allowances and benefits available to all U.S. Government civilians assigned to foreign areas; however, for task orders issued under the Base Contract, Contractor civilians assigned to foreign areas shall not exceed the allowances and benefits in the DSSR as well. For OCONUS task orders, the Government will not provide additional reimbursement outside of the loaded labor rates negotiated into the contract. The contractor should take that into consideration when proposing the ceiling loaded labor rates.

SECTION C - DESCRIPTIONS AND SPECIFICATIONS

SOO

Defense Information Systems Agency (DISA)

Defense Enclave Services (DES)

Government Statement of Objectives (SOO)

01 December 2020

1. Overview

DISA desires to partner with industry to provide commercial Information Technology (IT) services, decrease redundant IT costs, enhance cybersecurity posture, and standardize IT services across disparate networks. Defense Enclave Services will unify the 4th Estate’s Common Use IT systems, personnel, functions, and program elements associated with the support of those systems and technologies under a Single Service Provider (SSP) architecture managed, operated, and supported by DISA.

2. Purpose

The specific purpose of this SOO is to receive standardized, responsive and innovative (IT) services focused on mission value and user network experience, while improving security, network availability, and reliability.

3. Scope

DES will provide all required transition, infrastructure, network operations and management, engineering and innovation, cybersecurity, and technical refresh support services for a SSP network environment with all 4th Estate users. The network will consist of Non-classified Internet Protocol Router Network (NIPRNet) and Secure Internet Protocol Router Network (SIPRNet) domains, and will use the DISA DoDNet as the technical baseline for standardization between agencies upon transition. DES will also support the legacy Operations and Sustainment requirements of Defense Agency and Field Activities (DAFA) mission partners as separate task orders until such time that the DAFA is ready to fully implement standardized DES operations and management.

Twenty-two (22) 4th Estate agencies have been identified to be included in this Fourth Estate Network Optimization (4ENO) effort. The agencies are separated into two (2) phases; it is the intent of the 4ENO program to complete integration and sustainment of Phase I agencies by Fiscal Year (FY) 2025, and migration of Phase II agencies by FY2026. Within the Phase I agencies, two (2) agencies (Defense Technical Information Center (DTIC) and Defense Prisoner of War/Missing In Action Accounting Agency (DPAA)) and DISA-Head Quarter (HQ) will require only sustainment services, as migration were completed under a separate DoDNet Services contract, which was awarded in FY2020.

For the purposes of this SOO, all references to 4th Estate agencies will be these twenty-two (22) agencies.

4. Constraints and Risks

a. Current operations across the 4th Estate environment include a disparate mixture of government/contractor owned IT hardware (HW) (e.g. servers, desktops, laptops, routers, thin clients, printers) and IT software (SW) (e.g. desktop and application SW) as well as a combination of government and contractor operated services. Some government locations may use thick clients, Virtual Desktop Infrastructure environments, or kiosk/shared workstations in their respective facilities.

b. Sample DAFA enterprise architecture is included in Appendix C; the accuracy of this information may change between the Request For Proposal and actual start of DAFA migrations.

c. The 4th Estate Common Use IT services are required to be 24x7 with core hours M-F, 8 am to 5 pm local time. Some Common Use IT services may require a Continuity of Operations Plan, which includes surge support requirements for Disaster Recovery and reconstitution activities.

d. Network operations and service availability are paramount to migration; DISA and its mission partners should not experience delays or degradation of services in the SSP environment.

Phase Agency FY22‐FY25 FY26‐FY31

Defense Information Systems Agency (DISA‐HQ) S S

Defense Technical Information Center (DTIC) S S

Defense Prisoner of War/Missing in Action Accounting Agency (DPAA) S S

Defense Microelectronics Activity (DMEA) M S

Defense Media Activity (DMA) M S

Defense Information Systems Agency (DISA‐Field Sites) M S

Defense Contract Management Agency (DCMA) M S

Defense Contract Audit Agency (DCAA) M S

Defense Human Resources Agency/Defense Manpower Data Center

(DHRA/DMDC)

M S

Defense Finance and Accounting Service (DFAS) M S

Defense Threat Reduction Agency (DTRA) M S

Defense Logistics Agency (DLA) M S

Defense Advanced Research Projects Agency (DARPA) M S

Missile Defense Agency (MDA) M S

Nine additional DoD agencies are included in the scope of the DES procurement:

Phase Agency

Defense Health Agency (DHA)

Defense Legal Services Agency (DLSA)

Defense Security Cooperation Agency (DSCA)

Defense Technology Security Agency (DTSA)

Joint Chiefs of Staff (JCS)

Office of Secretary of Defense (OSD)

Personnel Force Protection Agency (PFPA)

Washington Headquarters Services (WHS)

Joint Service Provider (JSP)

Table 1, DES Integration Timeline {M= Migration, S= Sustainment}

P ha se I A g en ci e s

Ph as e

II

A ge nc ie s

e. Network architecture shall not contain proprietary elements or closed architecture; the overall architecture must be open to allow for the rapid integration of new and cost-efficient technologies.

f. The procurement of end devices, peripherals, network equipment, and SW is not in scope of this DES contract. The DES provider will plan for the lifecycle and technical refresh of all infrastructure and endpoint nodes, which the Government will procure through competitive means. The provisioning and maintenance of the Government-procured devices are within the scope of DES.

g. Physical site attributes (such as Layer 1 cabling, etc.) may impact whether NIPR and SIPR networks have concurrent or separate migration schedules.

h. At the direction of DISA, additional 4th Estate agencies may be identified and included in this effort.

5. Schedule

Within ten (10) business days of task order award the contractor shall deliver to the Government a schedule in a format that is typically used in commercial network migrations such as this at high velocity. This schedule shall be reviewed at the Kick Off meeting, “baselined” and incrementally evolved per the Contractor’s recommended process.

At a minimum, the schedule shall identify major project capability milestones, dependencies, communication and related activities associated with the project. In addition, the Contractor shall provide management plans and reports, technical issues, resolutions, and mitigation strategies for the base year at the Kick Off meeting.

6. Transition

A. The Contractor shall begin the phase-in efforts immediately after task order award. The Contractor shall submit a Transition Plan as part of their proposal. In this plan, the Contractor shall specify how it will phase in seamless personnel staffing and support so that no delays or degradation of services is experienced by DISA and its mission partners. In the plan, the Contractor shall include adequate time to hire appropriate personnel, conduct inventories, assume network control, issue subcontracts, etc. after task order award. The contractor shall commence implementation of the proposed Transition Plan immediately upon task order award. During the phase-in period, the contractor shall be responsible for finalizing all employee clearance requirements. The contractor shall complete the necessary steps for assumption of the operation during the phase-in period and shall meet all requirements as specified in the SOO with the beginning of full performance. The phase-in period shall be no more than 90 calendar days.

B. To ensure a smooth phase-out to the next service provider in the event that an Option Period is not exercised or a new contractor is selected at contract re-compete, and to prevent possible decreases in productivity or service quality, the Contractor shall provide a 90 calendar day phase-out period prior to contract conclusion date. During this period, the Contractor shall make available incumbent contractor personnel who are versed in the established operation of the functions to be performed to key incoming contractor personnel. This service shall be made available to explain procedures for conducting government business, show the next contractor various work sites, introduce the contractor to customer representatives, etc. During this period, the incumbent contractor shall provide required training pertaining to the current status and pending transactions and conduct material, equipment, and tools transfers. Inventories shall be conducted jointly with the Government representatives and representatives of the incoming contractor.

7. Objectives

DES is a Government-owned contractor-operated service model. The objectives of DES include providing singular Command and Control (C2) focus across DAFAs for Common Use IT operations, decreasing redundant costs and enhancing cybersecurity:

A. Consolidate, integrate and optimize disparate Local Area Network IT Support Services.

Provide a single flexible contract vehicle that includes service desk support, end-user technical support, engineering, asset management, and operational project support;

Implement an integrated network operations center management of services across all aspects of the environment;

Manage desktop engineering and image configuration management;

Report service performance metrics in real time, identify root cause of service outages, scope areas of service improvement and reduce user downtime.

B. Reduce contract overhead through the consolidation of multiple support contracts.

Implement a program that incorporates the full management of HW and SW provisioning and service operations leveraging industry best practices;

Eliminate redundant SW and HW assets;

Generate innovative service delivery techniques that will increase cost savings;

Utilize industry best tools, processes, and procedures to enhance customer services, reliability and efficiencies to reduce the number of needed service technicians.

C. Generate and identify opportunities for new technology insertion to enhance the cybersecurity posture of DISA and its mission partners.

Promote innovation and delivery of new technology, including the performance of pilots and proof of concepts on emerging technologies related to Common Use IT services;

Ensure solutions proposed operate in a compatible, non-vendor lock-in, competitive environment.

8. Performance Metrics

The Contractor shall deliver services in accordance with Table 2 (Network Operations) and Table 3 (Global Service Desk) below.

Performance Standard (Network Operations) Acceptable Quality Levels (AQLs)

System and Tool Availability for High Performing Sites

>=99.99% system uptime for supported systems, not to include Authorized Service Interruptions (ASI)/routine maintenance or higher level outages

System and Tool Availability for Standard Sites >=99% system uptime for supported applications, not to include Authorized Service Interruptions (ASI)/routine maintenance or higher level outages

Change and Release without Incident >=95% of changes and releases result in no adverse impact on production services, or require significant re-work with the application of additional resources/time

Alert detection and escalation >=90% 24 x 7 x 365; Priority 1 alerts detected and reported (via trouble ticket) to the service desk within 30 minutes of initial occurrence

Decrease customer interactions >=5% decrease in customer interactions, to begin after 1 year and reported every 6 months thereafter

Performance Standard (Network Operations) Acceptable Quality Levels (AQLs)

Cybersecurity Support Risk Management Framework (RMF) documentation will be maintained and updated daily, to include cybersecurity architecture, requirements, objectives and policies, and maintaining DoDNet security posture with minimal re-work at least 95% of the time

Table 2 - Network Operations

Performance Standard (Global Service Desk) Acceptable Quality Levels (AQLs)

Tier I – Average Speed to Answer >= 80% of calls answered in <= 30 seconds or less 24x7x365

Tier I – Call Abandonment Rate <=4 % of total calls are abandoned

Tier I – First Contact Resolution >=65% 24x7x365

Tier I - Average Time to respond to chat (Does not include automatic acknowledgement of message)

Within 1 Minute for all Chats

Tier I – Ensures interactions are coded using wrap up codes

>=90%

Tier I – Average Handle Time of Emails

Respond or escalate >=90% of the time within 4 hours for all priorities

Tier I & II – Ticket Creation Create Ticket >=100% of the time.

Tier I & Tier II – Accurate Ticket Assignment Assign Tickets accurately >= 95% of the time

Tier I & Tier II – Author, Review and/or Update of Knowledge Management Documents

Initial – 100% reviewed in first 60 calendar days following the 90 calendar day transition period.

100% - of documents need to be updated biannually

Tier II – Command Cyber Readiness Inspection (CCRI) Compliance

Site score of 3.0 or less

Tier II – Average Time to Resolve Incidents and Service Requests

80% of incidents and service requests escalated from Tier I resolved within 2 business days

Table 3 - Global Service Desk

9. Deliverables

The list of deliverables below describes deliverables that will be required in individual task orders. No deliverables are required for the base IDIQ contract. The Contractor shall deliver data items in accordance with Table 4 - Deliverables below, as specified by each task order. All deliverables shall be provided to the Government for review and approval. Furthermore, the Contractor shall propose additional documentation they believe will help the program operate effectively. The Government will give notice of approval/disapproval within an agreed to amount of time after delivery. The Contractor shall resubmit within an agreed to amount of time after receipt of Government notice of disapproval.

Deliverable Format Due Date Distribution/Copies Frequency and Remarks

Non- Disclosure Agreement

GOV

Format

5 business days after award and at the inclusion of a new FTE.

Emailed to Contracting Officer’s Representative (COR)/Contracting Officer

(KO)

As required

Project Management Plan

Approved Contractor Format

10 business days after award

Emailed to COR/KO Kick Off Meeting

Integrated Master Schedule

MS Project 10 business days after award

Emailed to COR/KO Kick Off Meeting

Phase-In Transition Plan

Approved Contractor Format

10 business days after award

Emailed to COR/KO Kick Off Meeting

DoD Contract Manpower Report (Former ECMRA Contract Record)

GOV

Format (online)

15 business days after task order award

Email confirmation to COR/KO Initial; Annual updates as required by DFARS/DARS

Employee Roster & Certification Status Report

Approved Contractor Format

30 business days after award

Emailed to COR/KO Monthly

Monthly Status Report

Approved Contractor Format

7 business days after end of month

Emailed to COR/KO Monthly

Quarterly Program Review (QPR) Presentation

Approved Contractor Format

10 business days after end of quarter

Emailed to COR/KO Quarterly, based on DoD fiscal year

Quality Control Plan

Approved Contractor Format

30 calendar days after award

Emailed to COR/KO Once upon task order award and within 30 calendar days of start of option period.

Life-cycle Management Plan

Approved Contractor Format

45 calendar days after task order award.

Emailed to COR/KO Once upon task order award with monthly updates

Knowledge Management Plan

Approved Contractor Format

45 calendar days after task order award.

Emailed to COR/KO Once upon task order award with a minimum of 1 update quarterly or as requested by the COR

Risk Management Framework Plan

Approved Contractor Format

75 calendar days after task order award.

Emailed to COR/KO Once upon task order award with monthly updates

Migration Plan

Format

NLT 30

calendar days prior to start of task

Emailed to COR/KO As required for each agency

Sustainment Plan

Format

NLT 30

calendar days prior to start of task

Emailed to COR/KO As required for each agency

Phase-Out Transition Plan

Approved Contractor Format

Meet with the Government within 120 calendar days of the end of the last option period;

written plan due 90 calendar days prior to the end of last option period

Emailed to COR/KO Once

Site Survey Report

Format

NLT 15

business days after task completion

Emailed to COR/KO As required for each agency

Architecture Diagrams (DoDAF Compliant)

Visio NLT 30 calendar days prior to start of successor task

Emailed to COR/KO As required for each agency

Audit and Accountability Plan

Approved Contractor Format

NLT 30

calendar days prior to start of successor task

Emailed to COR/KO, Cyber Lead

As required for each agency / Prior to Authority to Operate (ATO) expiration

Identification and Authentication Plan

Approved Contractor Format

30 calendar days after task order award

Emailed to COR/KO, Cyber Lead

As required for each agency / Prior to ATO expiration

HW/SW List Approved Contractor Format

30 calendar days after task order award

Emailed to COR/KO, Cyber Lead

As required for each agency / Prior to ATO expiration

RMF Access Control Plan

Approved Contractor Format

30 calendar days after task order award

Emailed to COR/KO, Cyber Lead

As required for each agency / Prior to ATO expiration

Network Diagram/Topology

Approved Contractor Format

30 calendar days after task order award

Emailed to COR/KO, Cyber Lead

As required for each agency / Prior to ATO expiration

Security Assessment Report

(SAR)

Approved Contractor Format

30 calendar days after task order award

Emailed to COR/KO, Cyber Lead

As required for each agency / Prior to ATO expiration

Security Plan (SP) Approved Contractor Format

30 calendar days after task order award

Emailed to COR/KO, Cyber Lead

As required for each agency / Prior to ATO expiration

Documents/artifacts required for accreditation packages

Approved Contractor Format

90 calendar days prior to submitted date for new system

Emailed to COR/KO, Cyber Lead

As required for each agency / Prior to ATO expiration

Accreditation Packages for NIPRNet and SIPRNet eMass NLT 180 calendar days prior to existing ATO expiration; or 90 calendar days prior to submitted date for new system

Emailed to COR/KO, Cyber Lead

NIPRNet and SIPRNet

Cybersecurity Status Report

Approved Contractor Format

Weekly Emailed to COR/KO/Cyber Lead

Weekly

STIGs Approved Contractor Format

90 calendar days prior to submitted date for new system

Emailed to COR/KO/Cyber Lead

Maintenance - Weekly

ACAS Scan Approved Contractor Format

90 calendar days prior to submitted date for new system

Emailed to COR/KO/Cyber Lead

Maintenance - Daily

BURP Scan (if applicable)

Approved Contractor Format

90 calendar days prior to submitted date for new system

Emailed to COR/KO/Cyber Lead

System and Interface Design Specifications

Approved Contractor Format

NLT 30

calendar days prior to start of successor task

Emailed to COR/KO As required for each agency

Authority to Connect (ATC) Re-accreditation Packages for NIPRNet and SIPRNet

Approved Contractor Format

NLT 180

calendar days prior to existing ATC expiration

Emailed to COR/KO NIPRNet and SIPRNet at contractor facilities

DoDNet Status & Outage Update Report

Format

Within 30 minutes of event or notification of event

Emailed to COR/KO As required; rolled up to Monthly Status Report and

QPR

EVIF Validation Report

Approved Contractor Format

30 calendar days after task order award

Emailed to COR/KO 30 calendar days after task order award with weekly updates

Operational Performance Metrics & Analysis Report

Approved Contractor Format

30 calendar days after task order award

Emailed to COR/KO 30 calendar days after task order award with daily updates

Asset Report Approved Contractor Format

30 calendar days after task order award

Emailed to COR/KO 30 calendar days after Task Order award with weekly updates

Incident, Problem, and Change Trend Analysis Report

Format

30 calendar days after task order award

Emailed to COR/KO 30 calendar days after task order award with weekly updates rolled up to Monthly Status Report and QPR

PKE/PKI Status Report

Approved Contractor Format

30 calendar days after task order award

Emailed to COR/KO 30 calendar days after task order award with weekly updates rolled up to Monthly Status Report and QPR

Final Asset Report Approved Contractor Format

Report due

NLT 90

calendar days prior to the

Emailed to COR/KO Once end of task order performance

Change & Request Fulfillment Management TTP

Government determined format.

60 calendar days of task order award

Emailed to COR/KO Once upon task order award with quarterly updates or as requested by the COR.

IdM TTP Government determined format.

60 calendar days of task order award

Standard Distribution

Once upon task order award with quarterly updates or as requested by the COR.

Daily Operational Performance Brief

Government determined format.

60 calendar days of task order award

Standard Distribution

Daily

Incident Management TTP

Government determined format.

60 calendar days of task order award

Emailed to COR/KO Once upon task order award with quarterly updates or as requested by the COR.

Problem Management TTP

Government determined format.

60 calendar days of task order award

Emailed to COR/KO Once upon task order award with quarterly updates or as requested by the COR.

Lifecycle Management Project Plan

Government determined format.

60 calendar days of task order award

Emailed to COR/KO Monthly

Configuration Management Data Base (CMDB) SOP

Contractor determined format with

COR

approval.

60 calendar days of task order award

1 copy/ Standard Distribution*

Once upon task order award with quarterly updates or as requested by the COR.

Patch Deployment for all Devices TTP

Contractor determined format with

COR

approval.

60 calendar days of task order award

1 copy/ Standard Distribution*

Once upon task order award with quarterly updates or as requested by the COR.

Quarterly DEPS Site Update

DEPS

SharePoint

30 calendar days after task order award

Standard distribution and then uploaded to the DEPS site after COR approval.

30 calendar days after task order award, then 1st business day of each quarter month (Jan, Apr, Jul, Oct).

Table 4 - Deliverables

10. Reserved

11. Government Furnished Material and Equipment

The Government shall provide access to requisite program and technical information that is necessary to carry out the requirements of this SOO. The Government shall provide access to facilities, equipment, software tools, and technical information necessary for the performance of this contract. Items may include office space, desk, telephone, printer, access to electronic mail, and computers, when deemed appropriate by the Government. In addition, the Government shall provide access to appropriate systems. Contractor personnel will not use government resources in violation of any federal, State, or Local statute, regulation or policy.

12. Travel Requirements

The Contractor shall support government directed meetings as needed. All Travel costs (lodging, per diem, airfare, rental car etc.) shall be reimbursed at cost via the travel contract line item. Contractors shall be responsible for making their own travel and lodging arrangements as necessary to support requirements. Contractors shall plan to support travel to CONUS and OCONUS locations, as necessary.

13. Place of Performance

The contractor may utilize their own facilities when planning the work associated with this SOO.

Appendix B contains location information for 4th Estate mission partners. The Contractor shall identify the Contractor’s place(s) of performance in their Performance Work Statement (PWS). At the direction of the DISA, additional 4th Estate agencies (and locations) to those listed in Appendix B may be identified and included in this effort.

14. Period of Performance

The contract will consist of a 4-year Base Period + (3) two-Year Option Periods.

15. Data Rights

The Government will have unlimited rights to use/modify/share all information, technical data, computer software, and computer software documentation developed and utilized under this contract.

The Contractor shall deliver to the Government all databases, scripts, source code, configuration documentation, and any information relevant and pertinent to host, manage and support new, modified and/or existing systems or applications under this contract.

16. Security

DES will provide standardized delivery and management of NIPRNet and SIPRNet services; reference the pre-solicitation DD Form 254, Contract Security Classification Specification. The nature of this acquisition requires access to, handling, receiving and storing classified (Secret and Confidential) and Controlled Unclassified Information (CUI), Personally Identifiable Information, Personal Health Information, unclassified information, documents, hardware and software using the applicable standards of DoD 5220.22-M National Industrial Security Program.

The nature of this contract requires access to Secret and unclassified data, information, and spaces. The Contractor shall be required to attend meetings at classified and unclassified levels. The work to be performed under this contract is up to the Top Secret level and will require Sensitive Compartmented Information access eligibility for some personnel; this data is included in Appendix F and will be further refined at the task order level. The work performed by the Contractor will require access to Secret and Controlled Unclassified Information facilities and work spaces, as well as Sensitive Compartmented Information Facilities. The Contractor must have an interim Top Secret Facility Clearance from the Defense Counterintelligence and Security Agency. Appendix E provides a PWS template with current security language; changes to the SOO and/or PWS template with regard to security must be approved by DISA Safety, Security & Counterintelligence Division (MP6) prior to award of the contract.

17. Cybersecurity Maturity Model Certification (CMMC)

The Government reserves the right to require CMMC Level 3 certification once the standards are available.

The certification timeline will be established by the Government at the task order level.

Appendix A: Solicitation HC1047-20-R-0014 Services Summary Appendix B: Places of Performance Appendix C: Agency Size Designations and Sample IT Architecture Appendix D: Service Desk Workload History Appendix E: DISA PWS Template Appendix F: DAFA Data Calls Appendix G: Glossary Appendix H: Quality Assurance Surveillance Plan (QASP)

SECTION H - SPECIAL CONTRACT REQUIREMENTS

The following have been added by reference:

52.204-24 Representation Regarding Certain Telecommunications and

Video Surveillance Services or Equipment.

OCT 2020

SECTION I - CONTRACT CLAUSES

The following have been deleted:

52.204-24 Representation Regarding Certain Telecommunications and

Video Surveillance Services or Equipment.

AUG 2020

SECTION L - INSTRUCTIONS, CONDITIONS AND NOTICES TO BIDDERS

SECTION L

INFORMATION TO OFFERORS AND INSTRUCTIONS FOR PROPOSAL PREPARATION

L.1.0 Defense Information Systems Agency (DISA) Defense Enclave Services (DES), Indefinite Delivery, Indefinite Quantity (IDIQ) Contract

L.1.1. Contract Information

The following information is provided to guide proposal development:

L.1.1.1. This Request for Proposal (RFP) seeks competitive proposals, utilizing full and open competition and a best-value trade-off evaluation method (BVTO), to award a single-award IDIQ contract with Hybrid (FFP CLINs for labor), cost type CLIN for Travel, and surge, and a Labor Hour CLIN for emergency and/or urgent services.

Task orders can be any combination of FFP, LH, and Cost Reimbursement for travel and surge. The applicable North American Industry Classification System (NAICS) Code is 541512.

L.1.1.2 A Top Secret Facility Site Clearance from the Defense Counterintelligence Security Agency Facility Clearance Branch is required for this solicitation and contract. The DD254 is at Attachment 1. The work to be performed under this contract is up to the Top Secret (TS) level and will require Sensitive Compartmented Information (SCI) access eligibility for some personnel, to include subcontractors and Independent Consultants.

Personnel requiring TS/SCI clearance must possess a current INTERIM or FINAL TS/SCI security clearance granted by the U.S. Government. The Top Secret Facility Site Clearance is required at the time proposals are due.

An Offeror that does not meet this requirement will be removed from consideration and not evaluated. Please note that the Offeror named and submitting the proposal is required to possess the clearance. If the Offeror is a joint venture, partnership or other entity, that joint-venture, partnership or entity must possess the clearance to be eligible.

It is not acceptable for each company in the joint-venture, partnership or entity to possess the clearance individually.

L.1.1.3 Places of performance are worldwide. Work performed may be at either secure or non-secure sites.

L.1.1.4 The proposal shall describe the capability of the Offeror to perform the resulting contract. The proposal shall be specific and complete in every detail as well as be prepared simply and economically, providing a straightforward and concise description of capabilities to satisfactorily perform the contract.

L.2.0 General Instructions

L.2.0.1 This section of the Information to Offerors provides general guidance for preparing proposals, as well as specific instructions on the format and content of the proposal. The Offeror's proposal must include all data and information requested by the RFP and must be submitted in accordance with these instructions. The Offeror’s proposal shall be compliant with the requirements as stated in the IDIQ and Task Order 0001. Non-conformance with the instructions provided in this solicitation may result in removal of the proposal from further evaluation.

L.2.0.2 The proposal shall be clear, concise, and include sufficient detail for effective evaluation and for substantiating the validity of stated claims. The proposal should not simply rephrase or restate the Government's requirements but rather shall provide convincing rationale to address how the Offeror intends to meet these requirements. Offerors shall assume that the Government has no prior knowledge of their facilities and experience and will base its evaluation solely on the information presented in the Offeror's proposal.

L.2.0.3 Elaborate brochures or documentation, detailed artwork or other embellishments are unnecessary and are not desired.

L.2.0.4 The proposal acceptance period is 180 days. The Offeror shall make a clear statement in Volume I - Contract Documentation that the proposal is valid through this date. Failure to do so, may result in removal of the proposal from further evaluation. See compliance statement section below.

L.2.0.5. In accordance with FAR Subpart 4.8 (Government Contract Files), the Government will retain an electronic copy of all unsuccessful proposals.

L.2.1 General Information

L.2.1.1. Point(s) of Contact

The Contracting Officer (KO) and the Contracting Specialist(s) (CS) are the sole points of contact for this procurement. Address any questions or concerns you may have to the KO & CS. Written requests for clarification must be sent to Adelis Rodriguez, Veronica Peters, and Trang Tran, and Chelsea Reese at disa.meade.PLD.mbx.defense-enclave-services@mail.mil. This is the only email address that will be used for communications. Oral communications are not permissible. No telephonic communications will be permitted.

L.2.1.2 Debriefings

The KO will notify Offerors of any decision to exclude them from the competitive range; whereupon, they may request and receive a debriefing in accordance with FAR Subpart 15.505. Offerors excluded from the competitive range may request a pre-award debriefing or they may choose to wait until after the source selection decision to request a post- award debriefing. Offerors excluded from the competitive range are entitled to no more than one debriefing. The KO will notify unsuccessful Offerors in the competitive range of the source selection decision in accordance with FAR Subpart 15.506. Upon such notification, unsuccessful Offerors may request and receive a debriefing. Offerors desiring a debriefing must make their request in accordance with the requirements of FAR Subpart 15.505 or 15.506, as applicable.

L.2.1.3 Discrepancies

If an Offeror believes that the requirements in these instructions contain an error, omission, or are otherwise unsound, the Offeror shall immediately notify the KO in writing with supporting rationale. The Offeror is reminded that the Government reserves the right to award this effort based on the initial proposal, as received, without discussion; therefore, the Offeror’s initial proposal should contain the Offeror’s best terms from a cost/price and technical standpoint.

L.2.1.4 Electronic Reference Documents

All referenced documents for this solicitation are available on the Beta.Sam website at https://beta.sam.gov/.

Potential Offerors are encouraged to subscribe to Beta.Sam, for real-time e-mails notifying interested parties that solicitation information has been posted to the website. The Government will communicate all formal information regarding this solicitation via the Beta.Sam website. This is the only mechanism by which Offerors will have access to solicitation documentations released by the Government. It is the exclusive responsibility of interested/prospective Offerors to gain access to and retain an account with Beta.Sam. Any and all technical, connectivity, or other access-related issues (electronic or physical) regarding Beta.Sam must be directed to the Beta.Sam systems administrators, Federal Service Desk (FSD) by phone at 1- 866-606-8220. The KO for this solicitation has no influence over Beta.Sam regulations, policy and protocol.

L.2.1.5 Communications

Exchanges of source selection information between Government and Offerors will be controlled by the KO. Email may be used to transmit such information to Offerors. Offerors shall provide a viable email address to be used by the Government for official correspondence.

L.2.1.6 Competitive Range Determination

The Government reserves the right to make award without discussions or to establish a competitive range. In the event a competitive range is established and the KO determines that the number of proposals that would otherwise be in the competitive range, exceeds the number at which an efficient competition can be conducted, the KO may limit the number of proposals in the competitive range to the greatest number that will permit efficient competition.

In accordance with FAR Subpart 15.306(c)(2), Offerors are advised that the competitive range may be reduced for purposes of efficiency.

L.2.1.7 Special Notice to Offerors

The Government's obligation under this contract for all option periods is contingent upon the availability of funds from which payment for contract purposes can be made. No legal liability on the part of the Government for any payment may arise until funds are made available to the KO for this contract and until the Contractor receives notice of such availability, to be confirmed in writing by the KO. The Government reserves the right to begin services for the contract based upon funds availability. The award will be based on the successful Offeror's proposal submitted in accordance with Section L herein and evaluated based on Section M.

Funds are not presently available for this effort and no award will be made under this solicitation until funds are available.

L.2.2. Organization / Number of Copies / Page Limits

The offeror shall prepare the proposal as set forth in the Proposal Organization Table below. The titles and contents of the volumes shall be as defined in this table, all of which shall be within the required page limits and with the number of copies as specified. The contents of each volume are described in the information to offerors paragraph as noted in the table below. To the greatest extent possible, each volume shall be written on a stand-alone basis so that its contents may be evaluated with a minimum of cross referencing to other volumes of the proposal. Information required for proposal evaluation which is not found in its designated volume will be assumed to have been omitted from the proposal. Cross-referencing within a proposal volume is permitted where its use would conserve space without impairing clarity. Each volume may contain a more detailed table of contents to delineate the subparagraphs within that volume. Table of contents do not count against the page limitations for their respective volumes.

Additionally, each volume may contain a glossary of all abbreviations and acronyms used, and with an explanation for each. Glossaries do not count against the page limitations for their respective volumes.

Table 1.1 - Proposal Organization

VOLUME VOLUME TITLE PAGE LIMIT – Not to Exceed

I Contract Documentation

Part A Coversheet Shall not exceed 6 pages

Part B Master Table of Contents No Limit

Part C EEO Pre-Award Information No Limit

Part D Compliance Statement No Limit

Part E Other Contract Documentation No Limit

Part F DD Form 254 Security Classification No Limit

Part G Organizational Conflicts of Interest (OCI) Mitigation Plan No Limit

II Technical/Management Volume

Part A Table of Contents and List of Tables and Drawings No Limit

Part B Executive Summary 5 pages

Part C Acceptable/Unacceptable Factor – Subfactors 1, 2, and through 4 75 pages

VOLUME VOLUME TITLE PAGE LIMIT – Not to Exceed

Part D BVTO Factor, excluding IDIQ and Task Order 0001 PWSs. 30 Pages

Part E PWS IDIQ 45

Part F PWS Task Order 0001 45

III Past Performance Volume

Part A Past Performance Information for Recent and Relevant Contracts 3 pages max per reference

Part B Consent Letters One Page per partner / subcontractor

IV Cost/Price Volume

Part A Cost/Price Narrative No Limit

Part B Attachment 8 IDIQ Labor Rates No Limit

Part C Attachment 28 CLIN Structure Task 0001 No Limit

V Small Business

Part A Small Business Participation and Commitment Plan No Limit

Part B Small Business Subcontracting Plan, if required No Limit

Part C Small Business Subcontracting Review Checklist No Limit

L.2.2.1 Page Limitations

Page limitations shall be treated as maximums. If exceeded, the excess pages will not be read or considered in the evaluation of the proposal. Should the Government engage in discussions with Offerors, page limitations may be placed on responses to Evaluation Notices (ENs). The specified page limits for EN responses will be identified in the letters forwarding the ENs to the Offerors. Page limitations shall not be circumvented by including inserted text boxes/pop-ups or internet links to additional information; such inclusions are not acceptable and will not be considered part of the proposal. The Government reserves the right to not consider any proposal for award that does not adhere to the administrative requirements of this solicitation. Each page shall be counted except as identified above. Pages shall be numbered per volume.

L.2.2.2. Page Size and Format

L.2.2.2.1 A page is defined as each face of a sheet of paper containing information. Page size shall be 8.5 x 11 inches. Pages shall be single spaced with space between paragraphs. Except for the reproduced sections of the solicitation document and the RFP Attachments, the text size shall be no less than 11 point Arial or Times New Roman font for all text. RFP Attachment text size shall be no less than 10 point Arial or Times New Roman font for all text. Tracking, kerning, and leading values shall not be changed from the default values of the word processing or page layout software. Use at least one inch margins on the top and bottom and side margins. Pages shall be numbered sequentially by volume. These page format restrictions shall apply to responses to ENs. These limitations shall apply to electronic proposals.

L.2.2.2.2 Legible tables, charts, graphs and figures shall be used wherever practical to depict organizations, systems and layout, implementation schedules, plans,…