Amendment_0001_for_CTE_8-22-2019.pdf

PDF 328 KB Posted

Attached to
RESOURCES FOR THE CYBERSECURITY CAREER PATHWAY CTE Federal contract opportunity
Solicitation number
HE1254-19-Q-0034
Issued by
Department of Defense Education Activity

About this file

See attached Amendment 0001.

View the file

Other files for this federal contract opportunity

Other files attached to RESOURCES FOR THE CYBERSECURITY CAREER PATHWAY CTE, newest first.
File Type Posted
Amendment_0002_8-29-2019.pdf PDF
Attachment_2_0001_Shipping_CYBER_8-21-2019.pdf PDF
Attachment_4_Pricing_Sheet.xlsx XLSX spreadsheet
Attachment_1_0001_QandA_Response_8-21-19.xlsx XLSX spreadsheet
Attachment_2_Governement_Product_Accessibility_Template_(GPAT).docx DOCX document
Attachment_3_Terms_of_Service_Addendum.docx DOCX document
Attachment_1_CloudInformationQuestionnaire-17Jan18.docx DOCX document
RFQ_HE1254-19-Q-0034_CTE_8-14-2019.pdf PDF
Attachment_4_Pricing_Sheet.xlsx XLSX spreadsheet

On GovTribe

Work with this file on GovTribe

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

AMENDMENT OF SOLICITATION/MODIFICATION OF CONTRACT

Except as provided herein, all terms and conditions of the document referenced in Item 9A or 10A, as heretofore changed, remains unchanged and in full force and effect.

15A. NAME AND TITLE OF SIGNER (Type or print)

30-105-04EXCEPTION TO SF 30

APPROVED BY OIRM 11-84

STANDARD FORM 30 (Rev. 10-83) Prescribed by GSA

FAR (48 CFR) 53.243

The purpose of this amendment is to provide the response to the Q and A (see Attachment 1 0001), and update the SOW section 2.2.1 to include the specif ications for the follow ing kits; Raspberry Pi Credit Card Computer Kit, Raspberry Pi Senor Kit (or equivalent/similar functionalty), and Etron Basics Kit (See Summary of Changes). Additionally, this amendment w ill include an update to Technical Exhibit 3, w hich w ill include the shipping addresses (see Attachment 2 0001) and a revision to Attachment 4 Pricing Sheet to change the header to read "Attachment 4" and remove the "option years" to reflect the CLIN structure in the solicitation.

1. CONTRACT ID CODE PAGE OF PAGES

J 1 13

16A. NAME AND TITLE OF CONTRACTING OFFICER (Type or print)

16C. DATE SIGNED

BY 22-Aug-2019

16B. UNITED STATES OF AMERICA15C. DATE SIGNED15B. CONTRACTOR/OFFEROR

(Signature of Contracting Officer)(Signature of person authorized to sign)

8. NAME AND ADDRESS OF CONTRACTOR (No., Street, County, State and Zip Code) X HE125419Q0034

X 9B. DATED (SEE ITEM 11)

14-Aug-2019

10B. DATED (SEE ITEM 13)

9A. AMENDMENT OF SOLICITATION NO.

11. THIS ITEM ONLY APPLIES TO AMENDMENTS OF SOLICITATIONS

X The above numbered solicitation is amended as set forth in Item 14. The hour and date specified for receipt of Offer is extended, X is not extended.

Offer must acknowledge receipt of this amendment prior to the hour and date specified in the solicitation or as amended by one of the following methods:

(a) By completing Items 8 and 15, and returning 1 copies of the amendment; (b) By acknowledging receipt of this amendment on each copy of the offer submitted;

or (c) By separate letter or telegram which includes a reference to the solicitation and amendment numbers. FAILURE OF YOUR ACKNOWLEDGMENT TO BE RECEIVED AT THE PLACE DESIGNATED FOR THE RECEIPT OF OFFERS PRIOR TO THE HOUR AND DATE SPECIFIED MAY RESULT IN REJECTION OF YOUR OFFER. If by virtue of this amendment you desire to change an offer already submitted, such change may be made by telegram or letter, provided each telegram or letter makes reference to the solicitation and this amendment, and is received prior to the opening hour and date specified.

12. ACCOUNTING AND APPROPRIATION DATA (If required)

13. THIS ITEM APPLIES ONLY TO MODIFICATIONS OF CONTRACTS/ORDERS.

IT MODIFIES THE CONTRACT/ORDER NO. AS DESCRIBED IN ITEM 14.

A. THIS CHANGE ORDER IS ISSUED PURSUANT TO: (Specify authority) THE CHANGES SET FORTH IN ITEM 14 ARE MADE IN THE

CONTRACT ORDER NO. IN ITEM 10A.

B. THE ABOVE NUMBERED CONTRACT/ORDER IS MODIFIED TO REFLECT THE ADMINISTRATIVE CHANGES (such as changes in paying office, appropriation date, etc.) SET FORTH IN ITEM 14, PURSUANT TO THE AUTHORITY OF FAR 43.103(B).

C. THIS SUPPLEMENTAL AGREEMENT IS ENTERED INTO PURSUANT TO AUTHORITY OF:

D. OTHER (Specify type of modification and authority)

E. IMPORTANT: Contractor is not, is required to sign this document and return copies to the issuing office.

14. DESCRIPTION OF AMENDMENT/MODIFICATION (Organized by UCF section headings, including solicitation/contract subject matter where feasible.)

10A. MOD. OF CONTRACT/ORDER NO.

2. AMENDMENT/MODIFICATION NO. 5. PROJECT NO.(If applicable)

6. ISSUED BY

3. EFFECTIVE DATE

22-Aug-2019

CODE

DOD EDUCATION ACTIVITY

ATTN: PROCUREMENT DIVISION

4800 MARK CENTER DRIVE

SUITE 05F09-02

ALEXANDRIA VA 22350-1400

HE1254 7. ADMINISTERED BY (If other than item 6)

4. REQUISITION/PURCHASE REQ. NO.

CODE

See Item 6

FACILITY CODECODE

EMAIL:TEL:

HE125419Q0034

SECTION SF 30 BLOCK 14 CONTINUATION PAGE

SUMMARY OF CHANGES

SECTION SF 1449 - CONTINUATION SHEET

The following have been modified:

SOW

STATEMENT OF WORK (SOW)

Resources for the Cybersecurity Career Pathway

1. General Information

1.1 Agency: The Department of Defense Education Activity (DoDEA) serves the educational needs of the dependents of military and civilian employees by providing pre-kindergarten (PK)-Grade 12 instruction to about 71,000 students in 163 brick-and-mortar schools. Student enrollment varies based primarily on the deployment of military troops worldwide. DoDEA's curriculum, resources, and student achievement scores on standardized assessments compare favorably to those of high-performing US public school systems. In North America DoDEA operates 51 schools located in seven states, Puerto Rico, and Cuba. In Europe and the Middle East, DoDEA operates 65 schools located in Germany, England, Netherlands, Belgium, Italy, Spain, Turkey and Bahrain. In the Pacific, DoDEA operates 48 schools located in Korea, Japan (mainland and Okinawa), and Guam. DoDEA also operates a fully accredited Virtual High School with hubs in Virginia, Europe, and Pacific.

1.2 Background: In order to support and improve the DoDEA Career and Technical Education (CTE) program, the Cybersecurity Career Pathway was initiated in school year ((SY) 2017-18 at selected high schools systemwide.

Over the next five years DoDEA expects to fully implement this college-and-career-readiness program.

1.3 Scope of Work

DoDEA requires resources to fully implement Cybersecurity Career Pathway at 16 high schools. DoDEA prefers to award one contract but may make multiple contracts. The period of performance is five years. The estimated resources required over the contract period are shown below:

Categories Units Year 1

Units Year 2

Units Year 3

Units Year 4

Units Year 5

Raspberry Pi Credit Card Computer Kits 400 400 200 160 80

SunFounder Raspberry Pi Sensor Kits 400 400 200 160 80

ETron The Basics Kit 800 400 200 160 80

Storage Container 6qt 2400 1200 600 480 240

Antistatic Mat 40 30 20 10 10

2. Requirement

2.1 Quantities: The Contractor shall provide the resources listed in the table above per the ordering procedures outline in the contract. DoDEA expects to provide the resources to the 16 high schools and two offices listed below and in Technical Exhibit 3: Voltage Requirements in SY19-20:

Europe (9): Kaiserslautern, Naples, Stuttgart, Vilseck, Brussels, AFNorth, SHAPE, Wiesbaden, and

Europe East District Office Pacific (6): Daegu, Humphreys, Kubasaki, Zama, Kinnick, and Perry Americas (3): Fort Campbell, Antilles, and DoDEA HQ.

5 years: Additional high schools may be added over the course of the contract.

2.2 Specifications—The Contractor shall:

2.2.1 Provide Raspberry Pi Credit Card Computer Kits or equal.

Rasperry Pi 4 model B (1 GB) Power Adaptor Pi 15.3W USB-C Power Supply with appropriate Voltage/Plug Adapters "hard drive" (MicroSD Card with NOOBS pre-loaded) Display cables 2 Micro HDMI --> Full Keyboard USB Mouse USB Case Raspberry Pi Computer Case Monitor(s) Raspberry Pi 7 - inch touch display Monitor Case Raspberry Pi 7 - inch touch display case Documentation Raspberry Pi Starter Guide

2.2.2 Provide SunFounder Raspberry Pi Sensor Kits or equal.

1 * Dual-Color LED Module

1 * RGB LED Module

1 * Auto Flash LED Module

1 * Relay Module

1 * Laser Emitter Module

1 * Button Module

1 * Tilt-Switch Module

1 * IR Receiver Module

1 * Active Buzzer Module

1 * Passive Buzzer Module

1 * Reed Switch Module

1 * Photo-interrupter Module

1 * AD/DA Converter PCF8591 Module

1 * Rain detection board Module

1 * Joystick PS2 Module

1 * Potentiometer Module

1 * Analog Hall Sensor Module

1 * Switch Hall Module

1 * Analog Temperature Sensor Module

1 * Thermistor Module

1 * Sound Sensor Module

1 * Photoresistor Module

1 * Flame Sensor Module

1 * Gas Sensor Module

1 * IR Remote Control Module

1 * Touch Switch Module

1 * Ultrasonic Ranging Module

1 * Temperature DS18B20 Module

1 * Rotary Encoder Module

1 * Humiture Sensor Module

1 * IR Obstacle Module

1 * I2C LCD1602 Module

1 * Barometer-BMP180 Module

1 * MPU6050 Module

1 * RTC-DS1302 Module

1 * Tracking Module

1 * Breadboard

1 * GPIO Extension Board

2 * 2-Pin Anti-reverse Cable

5 * 3-Pin Anti-reverse Cable

5 * 4-Pin Anti-reverse Cable

5 * 5-Pin Anti-reverse Cable

1 * 2-Pin Ribbon Cable (Female to Female)

20 * Jumper wires (Male to Female)

Documentation for educationally appropriate labs utilizing each sensor with Raspberry Pi 4 Controller

2.2.3 Provide ETron: The Basics Kit or equal.

40+ Basic Solderless Electronics Lab kit including lab guides and hardware components for students including the following (or similar skill equivalent):

Basic Electronic Component Inventory

Basic Electronics Circuits

Resistor Color Codes

Solderless Circuit Boards

Reading/Understanding Capacitor Values

Intro to Resistors

Intro to Potentiometers

Intro to Photocells

Intro to Speakers

Intro to Diodes

Intro to SCRs

Intro to Transistors (NPN & PNP)

2 Transistor Oscillator

555 Integrated Circuit

Dual Burglar Alarm

Automatic Night Light

DC to DC Power Supply

Electronic Metronome

Electronic Motorcycle

Railroad Crossing Lights

Variable Speed Lights

Continuity Tester

Audio Generator

Police Siren

Screaming Box

Variable Timer

Moisture Detector

Mosre Code Oscillator

Nose Beeper

British Siren

Insanity Alarm

Electronic Organ

OHMs Law

Resistors in Series

Resistors in Parallel

Measuring Voltage

Watts Law

Kirchhoffs Voltage Law

Kirchhoffs Current Law

2.2.4 Provide storage containers with the following specifications:

1) Capacity: 6 quarts

2) Material: Plastic, thickness equivalent to Sterlite 17511712

3) Lid: Latched

4) Shape: Rectangle

2.2.5 Provide antistatic floor mats with the following specifications:

1) Size: 6-7 square feet, e.g., 2 feet x3 feet

2) Material: Proven antistatic material like rubber or plastic.

2.3 General—The Contractor shall:

2.3.1 Post-Award Conferences

1) Participate in a video- or teleconference with the COR five business days after award in accordance with FAR Subpart 42.5.

2) Convene a video- or teleconference with DoDEA Information Technology staff ten business days after award for the Raspberry Pi Credit Computer Kits and the Raspberry Pi Sensor Kits only. (See TE #2: 4.3.5.)

3) Provide the medium through which each conference occurs, record each meeting’s minutes, and submit them to the COR within two business days of the event.

2.3.2 Other Post-Award Meetings

1) Meet with the Contracting Officer, COR, and/or other Agency personnel, as appropriate to review

Contractor performance, as required by DoDEA. At these meetings the Contracting Officer may discuss the Government’s view of Contractor performance, and the Contractor shall apprise the Government of problems, if any, being experienced. The Contractor shall take appropriate action to resolve any outstanding issues raised by the Government.

2) Attend virtual meetings at no additional cost to the Government. Note: Costs associated with attendance at face-to-face meetings, if any, shall be handled/paid for as stated in the contract.

2.3.3 Section 508 Compliance—Ensure Contractor resources, if applicable, meet the following requirements:

1) IT Requirement: Provide technical support during the testing window. DoDEA requires instant response from Contractor technical support staff during that brief period. Ensure all electronic hardware and soft-ware procured under this contract/purchase order comply with Section 508 of the Rehabilitation Act of 1973, as amended, (29 U.S.C. 794d) and the Architectural and Transportation Barriers Compliance Board Electronic Information Technology (EIT) Accessibility Standards (36 CFR part 1194). Further information may be found at the following URL:

http://www.section508.gov.

2) Deliverable Requirements: Ensure outputs/deliverables do not adversely affect accessibility features of existing EIT technologies. Ensure EIT related to the requirements of the contract are accessible to people with disabilities, per 29 U.S.C 794(d). Ensure outputs/deliverables to include functional performance, information, documentation, and support requirements are considered. Standards from 36 CFR Part 1194 Subpart B, C, and D apply to this acquisition.

2.3.4 Availability: Make resources available throughout the period of performance.

2.3.5 Anti-Bias: Provide resources free of racial, color, national origin, age, disabling conditions, sexual, religious, and ethnic bias, and shall present a balanced coverage of multi-cultural contributions and representation, where appropriate.

2.3.6 OCR Requirement: Provide, upon request, two digital Optical Character Resolution (OCR) copies of all print materials. A digital copy of these materials shall be provided in one or more of the following formats:

▪ Digital Accessible Information System (DAISY)/ National Instructional Materials

▪ Accessibility Standard (NIMAS) with cascading style sheet

▪ HyperText Markup Language (HTML)

▪ Portable Document Format (PDF), (unlocked, embedded fonts, single page)

▪ Rich Text Format (RTF)/Word document

2.3.7 Technical Support: Provide industry-standard technical support for its technical/digital resources for the life of the contract via telephone or by email within one business day or less from the initial contact to include but not limited to assisting with service problems, product setup, upgrades, and troubleshooting.

2.3.8 Voltage: Provide hardware, as required, that meets each school’s voltage requirement, per Technical Exhibit 3, Voltage Requirements (below).

2.3.9 Shipping: Ship all resources to the Americas by commercial carriers or USPS, and ship all resources to Europe or the Pacific by a commercial carrier. Note: The delivery order will include door-to-door addresses.

3. Deliverables The Contractor shall furnish all services to be performed and all items to be delivered in accordance with the following delivery schedule:

TECHNICAL EXHIBITS

Technical Exhibit 1: Acronyms & Definitions Technical Exhibit 2: Technical Requirements Technical Exhibit 3: Voltage Requirements

TECHNICAL EXHIBIT 1 - Acronyms & Definitions.

Acceptance of Services – Acceptance” means the act of an authorized representative of the Government by which the Government for itself or as agent of another (1) assumes ownership of existing identified supplies tendered or (2) approves specific services rendered as partial or complete performance of the contract. The term, conditional acceptance, means acceptance of supplies or services that do not conform to contract quality requirements or are otherwise incomplete, that the contractor is required to correct or otherwise complete by a specified date.

College and Career Ready Standards (CCRS) Commercial Off-The-Shelf (COTS) Contract Line Item Number (CLIN) – Basic structural element in a procurement instrument describing and organizing the required product or service for pricing, delivery, inspection, acceptance, invoicing, and payment. The use of the term “line item” includes “subcontract line number”, (SLIN), as applicable.

Contract Discrepancy Report (CDR) – The Government’s formal process/format, normally tied into the Government’s QASP (definition below), that notifies the contractor of and tracks any observed quality or performance discrepancy between the contractor’s performance and the quality/performance objectives of this PWS. CDRs are formally written and tracked on any number of official documents/forms (e.g., DD Form 1772, DA Form 5479, etc.), and require timely responses from both the contractor and Government personnel to address/resolve.

Contracting Officer (KO) – The only individual with expressed authority to obligate (bind) the Government by means of entering, administering, and terminating contracts within the limits of authority delegated via a Contracting Officer’s warrant.

Contracting Officer’s Representative (COR) – Qualified and trained Government employee, nominated by the requiring activity (RA) and appointed in writing by a KO primarily to perform specific technical or administrative functions on a specific contract(s); serves as the ‘eyes and ears’ of a KO to assure the Government’s best interests are protected via the terms and conditions of the contract(s) appointed. COR’s do not have authority to obligate (i.e., bind) the Government.

Contract Specialist (CS) – Contracting career field professionals without the authority (i.e. not warranted) to enter into contracts on behalf the Government.

Contractor - Supplier or vendor having a contract to provide specific supplies or service to the Government. The term used in this contract refers to the prime.

Defense Federal Acquisition Regulation (DFAR)

Deliverable Frequency # of Copies Medium / Format Submit To

Deliverable #1 - Post-Award Conferences, SOW 2.3.1 (1)

Five days after award

Meeting minutes

– 1 copy to COR

Word/Excel or PDF COR

Deliverables #2 – IT Meeting, if required, sow 2.3.1 (2) Technical Exhibit 2: 4.3.5

Ten days after award, if required

Meeting minutes

– 1 copy to COR

Word/Excel or PDF COR

Deliverables #3, SOW 2.2 --Credit Card Computer Kits, SOW 2.2.1 After receipt of delivery order:

US sites: 30 days Overseas: 45 days

1 copy of any documentation or notifications

Word/Excel or PDF COR --Sensor Kits, SOW 2.2.2

--The Basic Kits, SOW 2.2.3 --Storage Containers, SOW 2.2.4 --Antistatic Mats, SOW 2.2.5 Deliverables #4, Technical Support, SOW 2.3.8

Ongoing after IT Meeting N/A N/A COR review

Defense Federal Acquisition Regulation Supplement (DFARS) Department of Defense (DoD/DOD) Defective Service - A service output that does not meet the standard of performance associated with the Performance Work Statement.

Deliverable - Anything that can be physically delivered but may include non-physical things such as digital reports.

Federal Acquisition Regulation (FAR) Subcontractor - One that enters into a contract with a prime contractor. Note: The Government is not privy to the contract(s) with the subcontractor.

Technical Exhibit (TE)

TECHNICAL EXHIBIT 2 - Technical Requirements

4.1 Software and Cloud Security Requirements – The Contractor shall:

4.1.1 Ensure all online resources, cloud-based services and instructional software meet the Department of Defense (DoD) and DoDEA Information Assurance requirements as defined below. Note: Software, cloud services and associated websites will be rigorously tested to ensure that they pose no security risk to the DoDEA infrastructure.

4.1.2 Comply with the Cloud Services questionnaire that was submitted as part of proposal submission and provide copies of or access to any software in the proposed solution.

4.1.3 Ensure on-premises software resources support post-installation integration of the DoD Application, System and Database Security Technical Implementation Guides (STIGs) for applicable systems and applications, including Microsoft Windows Server 2016, Microsoft Windows 10, Microsoft SQL Server 2014 Database, Microsoft SQL Server 2014 Instance, and Microsoft IIS 8.5 Server, and Microsoft IIS

8.5 Site. SQL Server 2015 and IIS 8.5 guides are used for SQL 2016 and IIS 10, respectively, as outlined in section 1.1.1. STIGs may be downloaded from http://iase.disa.mil/stigs/Pages/a-z.aspx and may be viewed at http://iasecontent.disa.mil/stigs/zip/U_STIGViewer-2.6.1.zip.

4.1.4 Ensure that the on-premises software—which will be subject to static and dynamic analysis testing— pose no risk to DoDEA systems and users. Note: This testing may include reverse engineering analysis. Also, software products will be assessed for compatibility with existing system configurations and software.

4.1.5 Submit a completed copy of the Cloud Services Questionnaire, which includes details of the proposed cloud service environment and addresses the following seven areas:

1. Vendor Data Collection and Distribution Controls

2. Vendor System Management and Security Controls

3. Vendor Data Storage and Data Access Controls

4. Vendor Data and Metadata Retention Controls

5. Vendor Development and Change Management Processes

6. Vendor Test and Development Environment Security Controls

7. Vendor Data Breach, Incident Investigation and Response Mechanisms

Note: Per DoD policy, cloud-based services shall undergo a supplemental series of validations, which closely mirror the Federal Risk and Authorization Management Program (FedRAMP) Internet Cloud vetting processes and include interviews and deep system architecture inspections with the Contractor.

4.2 System Requirements: – The Contractor shall:

4.2.1 Ensure software installed and/or accessed in a DoDEA system—network, stand-alone or web-based—is compatible with the standards cited herein.

4.2.2 Ensure, per Section 4.1 (above), any software installed and/or accessed in a DoDEA system—network, stand-alone or web-based—is compatible with standards cited herein. All software shall be completely functional on a standard DoDEA desktop without the need/requirement for administrative-level user rights or a requirement to insert media (CD/DVD) to execute the software. Software shall not require modifications to folder permissions while executing.

4.2.3 Ensure all software is compatible with the following hardware baseline:

Specifications Minimum Memory 4 GB

Hard Drive 100 GB Processor Intel-based 2.4 GHz

Operating System Windows 7 Enterprise; Windows 10

Browser Environment Chrome; Edge; IE 10 or higher

4.2.4 Provide the minimum desktop/server system technical specifications, available reference architectures, networking specifications and diagrams, and applicable systems configuration documentation for the proposed product solution.

4.2.5 Ensure all software is completely functional without requiring administrative-level user permissions or external media to execute the software.

4.2.6 Ensure all software packages support unattended installation methods used by enterprise software packaging and deployment systems. Note: Older 16-bit software will be automatically denied, per this requirement.

4.3 Data Management Requirements—The Contractor shall:

4.3.1 Provide a mechanism for batch administration and automation of routine data management tasks via flat file import, or representational state transfer (REST) based web service application programming interfaces (APIs). The mechanism shall provision and manage data objects within the Contractor’s system, including but not limited to organizational structures, student accounts, staff accounts, courses, and class rosters.

4.3.2 Provide all necessary documentation and assets to facilitate batch administration and automation of routine data management tasks, including but not limited to roster template files (i.e., comma separated value templates); data element/field definitions documentation; data interchange formats and schemas (XML/JSON); and/or data dictionaries for the purpose of mapping organizational Student Information System (SIS) data to the Contractor’s required input formats.

4.3.3 Provide a single point of contact to support DoDEA in performing the required data integration activities within the Contractor’s system.

4.3.4 Configure DoDEA enterprise within its system and/or databases as the appropriate organizational entity (i.e., state, district, school) upon a request in writing from the Contracting Officer’s Representative (COR). Note: DoDEA’s organization hierarchy consists of the following: one system, three regions, eight districts, 62 communities, and 164 schools, which includes the Virtual High School.

4.3.5 Participate in a technical meeting with DoDEA within ten business days after award for the purposes of preparing for onboarding of new services and initial configuration of administrator-level accounts.

4.4 DoDEA Software License Keys—The Contractor shall:

4.4.1 Provide license keys and electronic downloads for software required under this Contract to the COR.

4.4.2 Provide software directly to DoDEA schools, districts, or regions only if explicitly required to do so in the contract or in writing by the COR.

4.5 DoDEA Information Assurance Supporting Elements / Requirements—The Contractor shall:

4.5.1 Comply with the same Federal law and DoD policy and guidance to which DoDEA is subject. These requirements include but are not limited to the information assurance requirements defined in:

DoD Directive (DoDD) 8500.01E, Information Assurance, which may be found at http://dodcio.defense.gov/Portals/0/Documents/DIEA/850001p.pdf DoD Security Technical Implementation Guidance (STIG), which may be found at http://iase.disa.mil/stigs/Pages/index.aspx DoD Risk Management Framework (DODRMF) per DoD Instruction 8510.01 at http://www.dtic.mil/whs/directives/corres/pdf/851001_2014.pdf

4.5.2 Provide security patches/upgrades to include third-party applications in response to public-released security vulnerabilities associated with its software solution. Software upgrades/patches shall be included in the licensing cost and be performed at the least disruptive times as determined by DoDEA. Note: Any exception to this requirement must be approved in advance and in writing by DoDEA’s Chief Technology Officer.

4.5.3 Ensure software packages support unattended installation methods used by enterprise software packaging and deployment systems. Note: DoDEA currently distributes software packages via Microsoft System Center Configuration Manager (SCCM). Also, older 16-bit software will be automatically denied per this requirement.

4.5.4 Ensure any portion of the Contractor's solution that involves Internet access by DoDEA students complies with the relevant requirements of the Children's Internet Protection Act, Pub.L. 106-554, § 1(a)(4) [Div.

B, Title XVII, § 1701], Dec. 21, 2000, 114 Stat. 2763, 2763A-335.

4.5.5 Ensure that its solution shall be robust enough to serve the needs of a large community of learners dispersed across the world using a variety of bandwidths and scalable to meet future growth, both in terms of instruction and the number of users.

4.5.6 Ensure Contractor staff who have access to DoDEA student and/or teacher personally identifiable information take the DoD Privacy Act/ Personally Identifiable Information (PA and PPI/PII) training before gaining access to the data and yearly thereafter.

4.6 Scalability: The Contractor’s solution shall be scalable to meet future growth requirements, both in terms of instruction and the number of users.

TECHNICAL EXHIBIT #3 – Voltage Requirements Base Year 1 Proposed Schools & Offices Highlighted in Gray

District School Voltage/Plug Type

DoDEA HQ DoDEA HQ 120V /

NEMA5-15

Americas - Mid-Atlantic Antilles High School 120V /

NEMA5-15

Americas -

Mid-Atlantic Lejeune High School 120V /

NEMA5-15

Americas - Mid-Atlantic Quantico Middle/High School 120V /

NEMA5-15

Americas - Mid-Atlantic Ramey School 120V /

NEMA5-15

Americas - Mid-Atlantic

WT Sampson Elementary/High School

120V /

NEMA5-15

Americas - Southeast Fort Campbell High School 120V /

NEMA5-15

Americas - Southeast Fort Knox High School 120V /

NEMA5-15

Europe -

East Ansbach High School 220V/ Schuko

Europe - East Baumholder High School 220V/

Schuko

Europe - East Hohenfels High School 220V/

Schuko

Europe - East Kaiserslautern High School 220V/

Schuko Europe -

East Ramstein High School 220V / Schuko

Europe - East Stuttgart High School 220V/

Schuko

Europe - East Vilseck High School 220V/

Schuko

Europe - East Wiesbaden High School 220V/

Schuko Europe -

East Europe East District Office 220V/ Schuko

Europe - South Aviano High School

220V /

CEI23-16 /

VII,10-Amp

Europe - South

Bahrain Elementary/High School

220V / British

Standard

BS1363

Europe - South Naples High School

220V /

CEI23-16 /

VII,10-Amp

Europe - South Rota High School

110V /

USNEMA5–

Europe - South Sigonella Middle/High School

220V /

CEI23-16 /

VII,10-Amp

Europe - South Vicenza High School

220V /

CEI23-16 /

VII,10-Amp

Europe - West AFNorth Middle/High School 220V /

Schuko

Europe - West Alconbury High School

220V / British

Standard

BS1363

Europe - West Spangdahlem High School 220V /

Schuko

Europe - West

Brussels Elementary/High School

220V / Schuko

Europe - West Lakenheath High School

120V / British

Standard

BS1363

Europe - West SHAPE High School 220V /

Schuko

Pacific - East Ernest J. King High School 120V /

NEMA5-15

Pacific - East Matthew C Perry High School 120V /

NEMA5-15

Pacific -

East Nile C Kinnick High School 120V /

NEMA5-15

Pacific - East Robert D Edgren High School 120V /

NEMA5-15

Pacific -

East Yokota High School 120V /

NEMA5-15

Pacific - East Zama American High School 120V /

NEMA5-15

Pacific -

South Guam High School 120V /

NEMA5-15

Pacific - South Kadena High School 120V /

NEMA5-15

Pacific - South Kubasaki High School 120V /

NEMA5-15

Pacific -

West Daegu Middle High School 120V /

NEMA5-15

Pacific - West Humphreys High School 120V /

NEMA5-15

Pacific -

West Osan Middle High School 120V /

NEMA5-15

(End of Summary of Changes)

File details come from the government source that posted it.