Attachment_1_SOO_-_DTRA_Core_IT_Services.docx

Statement of Objectives for DTRA Agency-Wide Information Technology Support Services Base Contract – DTRA Core IT Services

1. Purpose: The purpose of this Statement of Objectives (SOO) is to define the scope of work to be performed and the expected performance outcomes to be achieved by the contractor in support of the Defense Threat Reduction Agency Information Integration and Technology Services (I2TS) Directorate and Chief Information Officer’s (CIO) mission to transform how the agency uses knowledge, technologies, and capabilities to meet the critical mission of safeguarding the United States and its allies from global weapons of mass destruction and improvised threats.

2. Introduction

2.1. Vision Statement: The Defense Threat Reduction Agency (DTRA) is the government’s premier counter weapons of mass destruction (CWMD) and improvised threats workforce and solutions provider. In support of this Agency vision, the DTRA CIO vision is to lead an Agency-wide information technology transformation, enabling our workforce to be the premier DoD provider of CWMD expertise and solutions.

2.2. Mission Statement: The DTRA mission is to safeguard the United States and its allies from global weapons of mass destruction and improvised threats by integrating, synchronizing and by providing expertise, technologies and capabilities. Established in 1998, DTRA provides the Department of Defense’s core intellectual, technical, and operational support expertise for countering threats posed by weapons of mass destruction (chemical, biological, radiological, and nuclear) and high-yield explosives. As a defense agency, DTRA has a mission that includes nonproliferation, counter- proliferation, consequence management, countering WMD planning support, and support to a safe, secure and effective U.S. nuclear deterrent. In support of this DTRA mission, the CIO’s mission is to project the Agency’s knowledge and capability in order to counter the threat of WMDs.

2.3. Background: The CIO is responsible for providing Agency-wide information management services, supporting in excess of 5,000 world-wide Agency customers utilizing Unclassified, Secret, and Top Secret/Special Compartmented Information (TS/SCI) Networks. DTRA personnel supporting the Agency’s mission require common IT support services in areas such as, but not limited to, help desk support, systems administration, networks and application administration and design, engineering, and architecture support. Although the support requirements are common in nature, the DTRA mission needs are vastly different. Various short and long-term efforts must be undertaken to continually modernize, integrate and secure these systems. Continuous IT support must meet the needs of the Agency and other internally (to include JIDO) and externally supported customers to include first responders, Combatant Commands (COCOMS) and other U.S. Government entities. The CIO intent is to provide seamless and integrated communications among all supported elements, for the purposes of office automation, data collaboration and knowledge management, support of exercises, experimentation and operational support across three principle security domains: Sensitive but Unclassified (SBU), Secret and Top Secret/SCI. The DTRA mission dictates a diverse set of customers and unique mission requirements. As the organization evolves, the demands on information technology (IT) and associated cybersecurity controls increase accordingly.

The CIO supports DTRA’s mission by serving as a mission partner, transforming how the agency uses knowledge, technologies, and capabilities to achieve the following strategic goals as defined in the DTRA J6, CIO Information Operations Strategic Plan:

2.3.1. Evolve IT in support of WMD mission performance

2.3.2. Enhance knowledge sharing and communications across the CWMD workforce

2.3.3. Enable and maintain robust and effective communications and computing capabilities, and,

2.3.4. Establish governance to effectively track and utilize information resources.

2.4. Scope Statement: The scope of this SOO is to provide the full range of Core IT Services to ensure the I2TS delivers reliable, secure and effective IT capabilities and services as described in, but not limited to, the items listed in the Service Catalog. In the performance of this SOO, the contractor shall provide support services necessary to meet the J6 strategic goals consistent with DoD policies and industry best practices.

3. Applicable Documents

3.1. DoD Directive 5200.01; Information Security Program,

3.2. DTRA Directive 5200.1R; DTRA Information Security Program,

3.3. DoD Instruction 8510.01; Risk Management Framework (RMF) for DoD Information Technology (IT)

3.4. DoD Instruction 8500.2; Information Assurance Implementation Document

3.5. DTRA Strategic Plan, 2016 - 2020

3.6. DTRA J6, CIO Information Operations Strategic Plan 2017 – 2020

3.7. DTRA Cloud Strategy

4. Objectives

4.1. DTRA Core IT Services Objectives: Within the “as is” and evolving DTRA IT Enterprise, the contractor shall deliver reliable, secure and effective IT capabilities and services such as those listed in the IT Service Catalog, and common IT industry definitions for IT Service Operations and Delivery. Such capabilities and services shall be delivered consistent with the performance standards included in this SOO and any resulting task order performance standards. These IT capabilities and services shall be delivered consistent with industry best practices and DoD security compliance standards. As selected IT capabilities, applications, and data repositories transition from DTRA owned/operated data centers and systems to cloud services, the contractor shall ensure the transition is transparent for all end users. A critical element of this work will involve physical movement of systems to the cloud along with appropriate conversion of workforce to support the evolving IT enterprise.

In support of this overarching Core IT Services Objective, and in support of Goal 1 of the Information Operations Strategic Plan (Evolve IT in support of the CWMD mission performance), and Goal 3 (Enable and maintain robust and efficient communications and computing capabilities), the contractor shall appropriately plan for and execute support and service solutions to satisfy the following Core IT Service Operations Objectives;

4.1.1. Core IT Services Specific Objective 1; IT Service Provisioning and Operations: In support of Goal 3 of the Information Operations Strategic Plan (Enable and maintain robust and efficient communications and computing capabilities), the contractor shall plan, develop, implement, operate, maintain and monitor a DTRA IT infrastructure operations and maintenance program to provide robust, reliable, efficient, and secure IT networks access and availability across all security levels. The contractor shall develop, implement, and maintain repeatable processes and controls, and exercise the level of discipline required to ensure consistent performance. This objective includes the fully integrated and non-segregable objectives related to network operations and maintenance, service desk support, asset management, and technical management. Details of these sub-objective are listed below:

4.1.1.1. Core IT Services Specific Objective 1.1; IT Network Operations and Systems Administration: In support of Goal 3 of the Information Operations Strategic Plan (Enable and maintain robust and efficient communications and computing capabilities), the contractor shall plan, develop, implement, operate, maintain and monitor network operations and associated systems to provide robust, reliable, efficient, and secure IT service access and availability across all security levels with distributed operations between the National Capital Region (NCR) and DTRA Albuquerque, NM. This objective includes the full scope of IT systems administration, application delivery (i.e. Sharepoint), and content management. The contractor shall support the Network Operations and Security Center (NOSC) for the Agency on a 24x7x365 basis, in accordance with requirements for a Defense Agency NOSC and appropriate DoD Directives. Included in this objective the contractor shall maintain real-time situational awareness of the DTRA IT infrastructure and supported environments; shall lead restorative actions to ensure all networks remain up and operational. Additionally, the contractor shall plan, maintain, enhance and execute (as directed) disaster recovery plans and capabilities; shall provide formalized roles, designation of a dedicated recovery team, backup procedures, and facilities; and shall ensure that proactive measures are taken to avoid or lessen the impact of a disruption as necessary to maintain DTRA operations. The measure of success for this objective will be based on network and system availability, network security, security patch deployment and installations, and reliable system back-ups. Performance metrics for this objective will be further defined at the task order level.

4.1.1.2. Core IT Services Support Specific Objective 1.2; Service Desk Support: The DTRA workforce relies heavily on availability of the communications and computing systems, and on access to the associated data repositories to allow information technology to support the CWMD mission performance. In support of Goal 3 of the Information Operations Strategic Plan (Enable and maintain robust and efficient communications and computing capabilities), the contractor shall plan, implement, monitor, and continuously evolve an Agency-wide IT Service Desk function to ensure interruptions in individual or collective users’ availability of systems or data are resolved promptly and reliably. Service Desk Support includes support for in-processing new team members, user equipment exchanges, and out-processing support for departing team members. The measure of success for this objective will be based on call response time, first contact resolution rates, and user service restoration times. Performance metrics for this objective will be further defined at the task order level.

4.1.1.3. Core IT Services Support Specific Objective 1.3; Applications and Asset Management: In support of Goal 1 of the Information Operations Strategic Plan; “evolve information technology in support of the WMD mission performance”, the contractor shall implement best industry practices to improve the overall quality of IT software and hardware through the asset life-cycle. This objective also includes software asset management (SAM). SAM is the practice of integrating people, processes, and technology to allow software licenses and usage to be systematically tracked, evaluated, and managed. This includes the DoD reporting requirements for Internal Use Software (IUS). The goal of SAM is to reduce IT expenditures, human resource overhead and risks inherent in owning and managing software assets. The contractor shall also, inventory, track, analyze and recommend hardware upgrades and replacements. The measure of success for this objective will be based on the consistency with which IT assets (software or hardware components) are upgraded, patched, or replaced before they exceed their usefulness and serviceability and impact mission availability or effectiveness. Performance metrics for this objective will be further defined at the task order level.

4.1.1.4. Core IT Services Support Specific Objective 1.4; Technical Management: In support of Goal 3 of the Information Operations Strategic Plan (Enable and maintain robust and efficient communications and computing capabilities), the contractor shall provide technical expertise and support for the management of the IT infrastructure. This process plays an important role in the technical aspects of designing, testing, operating and improving IT services, as well as in developing the skills required to operate the IT infrastructure. The measure of success for this objective will be based on the consistency with which network provides consistent, reliable, secure and effective delivery of the services available in the Service Catalog. Performance metrics for this objective will be further defined at the task order level.

4.1.2. Core IT Services Specific Objective 2; Cybersecurity and Computer Network Defense: In support of the J6 CIO Information Operations Strategic Plan Sub-Goal 3.2 (Protect and define our critical information systems, technology, and resources), the contractor shall support the CIO’s requirement to provide secure and compliant IT systems by protecting, defending, and monitoring information critical to both mission and business functions within the Agency. In direct support of this objective the contractor shall provide the full range of IT security and technical expertise necessary to plan, operate, and maintain a Tier 2 Cybersecurity Service Provider (CSSP). Included in this objective the contractor shall maintain real-time situational awareness of the DTRA IT infrastructure and supported environments; shall provide information related to IT threats; shall identify and reduce IT vulnerabilities within the DTRA networks/systems; and shall monitor the health and security posture of DTRA’s IT infrastructures to ensure they remain within acceptable limits for performance and information security. The contractor shall support the J6 Senior Information Security Officer (SISO) by coordinating Agency information assurance tasks, controls and activities per Agency and DoD policies. The contractor shall also support the full range of cybersecurity to include Assessments and Authorizations, Cross Domain Solutions, and Supply Chain Risk Management (SCRM). As used in this SOO, cybersecurity includes the full range of Information Assurance support across the agency. The measure of success for this objective will be based on Cyber Command Readiness Inspection (CCRI) scoring, and on vulnerability solution and implementation. Performance metrics for this objective will be further defined at the task order level.

4.1.3. Core IT Services Specific Objective 3: IT Test, Transition, and Integration Support Services; In support of Goal 3 (Enable and maintain robust and effective communications and computing capabilities), and Goal 4 (Establish governance to effectively track and utilize our information resources), the contractor shall plan for and support the logical and seamless transition and integration of approved system, software, security and cloud solutions onto the DTRA IT enterprise and into productive usage with the target end user group(s). This objective includes a technical function where performance and security tests are either validated or accomplished, and a change management function that prepares the environment for the deployment of a new service and, thus, accelerates its adoption and usage. The measure of success in this objective will be based on evidence of compliant performance and security testing, the transparency of the introduction of new services, and the rate of adoption of the new services. Performance metrics for this objective will be further defined at the task order level.

4.1.4. Core IT Services Specific Objective 4; Incidental Hardware/Software Procurement: In support of Goal 3 (Enable and maintain robust and efficient communications and computing capabilities), the contractor shall also analyze and recommend hardware upgrades and replacements, and, with the government contracting officer’s approval, implement the replacement actions consistent with the following constraints:

- Procure hardware and software and/or systems required to accomplish the tasks specifically defined in the contract to maintain current operations (i.e. bench stock items and/or mission critical items that are in-service, fail/failing).

- Enable a critical function. The enablement of a critical function is an item that supports provision of service to the existing infrastructure or poses a critical risk to Agency mission such as enhanced security, storage capacity (i.e. disk space), etc.

- Supports a time sensitive mission requirement.

4.1.5. Core IT Services Specific Objective 5; IDIQ Contract Management: The contractor shall carefully plan for and properly integrate the resources (e.g. contract authority, budget, and personnel) necessary to fulfill the performance objectives identified in this SOO. The personnel supporting this effort must have appropriate security clearances, education, experience and skills commensurate with the work scope and operations tempo. The contractor shall properly integrate the work among all task orders issued under this SOO to minimize duplications of effort and ensure timely/ quality performance and deliveries. The contractor shall develop necessary reports summarizing the accomplishments of the previous month, any issues requirement government attention, and a consolidated financial summary. (CDRL A001) The measure of success in this objective will be based on timeliness of performance and deliveries IAW baseline schedule or specific contract milestones; and consistency, availability, and qualifications of the personnel engaged to provide required support and services. Performance metrics for this objective will be further defined at the task order level.

5. Constraints: The flexibility available to the contractor to plan and implement innovative approaches and solutions are constrained by the following: DoD Security requirements specific to the DoD and DTRA mission, the current DTRA IT infrastructure, and migration to the cloud. Regarding the current IT infrastructure, while this infrastructure is dynamic and will continue to evolve, changes to the infrastructure must be carefully planned, analyzed and approved by the DTRA staff. The migration to the cloud during the period of performance of this effort will influence the way new capabilities and services are developed and integrated in the DTRA IT infrastructure as well has how the day-to-day IT infrastructure will be maintained and operated. Within the parameters of these constraints the contractor is encouraged to be innovative to find efficiencies and improvements in the IT service transitions, integration, operations, and cybersecurity.

6. Place of Performance:

6.1. The majority of these tasks will be performed at the Defense Threat Reduction Center, 8725 John J. Kingman Road, Fort Belvoir, VA 22060-6201, however; DTRA maintains a global mission, and contractor personnel may be required to work at locations other than Fort Belvoir. As mentioned in Paragraph 4.1.1.1 above, DTRA relies on distributed operations between the NCR and DTRA Albuquerque, NM. For situational reasons, contractor personnel may work at an alternate location/worksite using Government Furnished Equipment (GFE). Details regarding place of performance will be further defined at the individual task order level. With the implementation of the cloud-based IT solutions, there will be opportunities for a more dispersed workforce.

6.2. Travel: Travel may be required based on Agency requirements to any DTRA facility/mission requirement world-wide. The Contractor shall provide a detailed estimate of any desired travel in advance to the COR in writing via hard copy or e-mail. All travel costs shall not exceed the maximum per diem rates in effect at the time of travel as set forth in the Joint Travel Regulations. All travel shall be approved by the COR in writing via hard copy or e-mail prior to the contractor incurring any travel expenses and prior to any departure.

7. Deliverables DD Form 1423, Contract Data Requirements Lists (CDRL): Contract data requirements will be defined at the IDIQ and task order levels. All deliverables shall be provided in accordance with the CDRLs. All deliverables shall include on the cover or first page: Contractor Name, Contract Number, and Order Number (Find it on the face of the award document), and Deliverable Number (When report is prepared several times, as Monthly or Quarterly reports). See Contract Data Requirement Lists (CDRL), DD Form 1423s.

8. Government Furnished Property, Equipment, or Materials (GFP, GFE, GFM): The Government may provide (identified on each Task Order) office space, desks, computers, use of telephone, copier, fax, paper, and other administrative materials on-site for personnel assigned to this contract/task order. The government will issue the items as Government Furnished Property and will be required to report on a monthly basis as the Master Government Property List. The Government may also provide Government equipment to the contractor for use offsite. The contractor shall comply with the contract clauses for accountability of Government Property in the possession of contractor.