H125420Q0021 DRAFT Art Portfolio-PWS Source of Sought.pdf

PERFORMANCE WORK STATEMENT

17 Jan 20 Page 1

Digital K-5 Art Portfolio

1 General Information

1.1 Agency

1.1.1 The Department of Defense Education Activity (DoDEA) serves dependents of military and civilian employees by providing PK-12 instruction to approximately 70,000 students in 160 brick-and-mortar schools. Student enrollment is based primarily on deployment of military troops worldwide. In the Americas, DoDEA operates 51 schools located in seven states, Puerto Rico, and Cuba. In Europe and the Middle East, DoDEA operates 64 schools located in Germany, Italy, England, Netherlands, Belgium, Spain, Turkey and Bahrain. In the Pacific, DoDEA operates 45 schools located in Korea, Japan (mainland and Okinawa), and Guam. DoDEA's curriculum, resources, and student achievement scores on standardized assessments compare favorably to those of high-performing US public school systems.

DoDEA’s fully accredited Virtual High School has teaching hubs in each DoDEA region: US, Europe, and Pacific.

1.1.2 DoDEA schools have various grade configurations, with the most common being K-5, 6-8, 9-12, and K-12. Of DoDEA’s 160 brick-and-mortar schools, 103 schools have students in at least three of the grades K-5; 62 schools with at least one grade 6-8; and 40 schools with grades 9-12. Of the 6-8 schools, ten are part of an elementary school and five have only grades 7-8.

Table 1: Student Enrollment – SY 2019-20 (rounded to nearest 50 students)

Grade Students Grade Students Grade Students Grade Students

PK 3,800 3 6,550 7 5,100 11 3,050

K 7,000 4 5,950 8 4,500 12 2,800 1 6,900 5 5,800 9 3,700 K-12

Total 70,400 2 6,550 6 5,400 10 3,300

1.1.3 Military-connected students experience high mobility rates in and out of school systems across the nation and the world; thus, DoDEA makes a concerted effort to mitigate transitional barriers to military-connected students’ success, working toward a worldwide systemic education network.

1.1.4 DoDEA has adopted College and Career Ready Standards (CCRS) in mathematics, literacy, the arts, social studies, and science, which are rigorous, research-based, and reflect the knowledge, skills and dispositions students need for success in college and/or careers and are aligned with the Common Core State Standards (CCSS), National Core Art Standards (NCAS), Next Generation Science Standards (NGSS) and the C3 Framework for Social Studies State Standards (C3).

17 Jan 20 Page 2

1.2 Background

Traditionally DoDEA art teachers have collected and housed student art in their original, tangible form exclusively. This approach requires a significant amount of space and the loss of information once students leave the classroom. A digital art portfolio captures and preserves student art in a database, providing a history of the students’ art progress/development—potentially from grades K-5. DoDEA has never contracted for a digital art portfolio system.

1.3 Scope of Work

DoDEA requires a cloud-based digital art portfolio to capture K-5 student art work in elementary art classes systemwide. The tool will allow students and teachers to collect, store, share, and assess student artwork. DoDEA requires virtual professional learning for art teachers.

DoDEA has approximately 38,515 students in grades K-5 and 185 elementary art teachers. That number may vary slightly throughout the life of the contract. DoDEA expects to award one contract for a 12-month base year and four 12-month option years.

2 Requirement (Objectives)

2.1 Objective 1, Subscriptions

Provide subscriptions for the cloud-based digital art portfolio for K-5 students in elementary art classes.

2.1.1 Task 1, Art Portfolio Requirements - The Contractor shall provide a cloud-based solution that includes the features listed below.

1) Possesses an interface that is easy to use and navigate for K-5 students.

2) Is accessible on laptops, personal computers, and tablet devices.

3) Is scalable, holding a large amount of data as students matriculate through the system.

4) Allows teachers to make comments/notes, organize content, and search materials.

5) Allows K-5 students and/or parents/sponsors to make comments/notes and share their portfolios with family members.

6) Captures and stores art work in pictures, files, video, links, and audio for every student.

7) Includes a backup system, i.e., a redundant system to protect the digital student artwork in case the main system is hacked, compromised, damaged or destroyed.

2.1.2 Task 2, Virtual Professional Learning—The Contractor shall:

2.1.2.1 Provide digital modules or synchronous or asynchronous webinars that will show teachers how to use the digital art portfolio system effectively. Note: If synchronous webinars are required, each

17 Jan 20 Page 3 webinar shall be delivered three times—during the normal working hours for each DoDEA region (Americas, Europe, and Pacific).

Synchronous webinars shall be recorded by the Contractor and placed on DoDEA’s learning management system (LMS, currently Schoology).

2.1.2.2 Provide access to the professional learning throughout the life of the contract. Note: DoDEA expects virtual professional learning to be not separately priced (NSP).

Performance Standards and Acceptable Quality Levels (AQL) Objective 1, Subscriptions and Professional Learning

Performance Standard and Related Task AQL Inspection Method Incentives*

* Unless specified otherwise, possible ratings are as follows: exceptional, very good, satisfactory, marginal, or unsatisfactory, per FAR 42.1503, Table 42-1, “Evaluation Ratings Definitions”.

Task 1, Subscriptions, PWS 2.1.1

Zero deviation from the PWS.

Ongoing three days after receipt of delivery order

99% diagnostic tool availability.

Customer complaints and COR periodic inspection.

Past Performance Assessment.

Task 2, Virtual Professional Learning, PWS 2.1.2

Zero deviation from the PWS.

Ongoing after receipt of delivery order

100% compliance Customer complaints and COR periodic inspection.

Past Performance Assessment.

2.2 Objective 2, General Requirements

Meet with DoDEA as required. Ship materials as specified. Provide industry-standard technical support.

2.2.1 Task 3, Meetings—The Contractor shall:

2.2.1.1 Medium and Minutes: Provide the medium through which each conference/meeting occurs, record each meeting’s minutes, and submit them to the COR within two business days of the event.

2.2.1.2 Post-Award Conference: Participate in a video- or teleconference with the COR five business days after award in accordance with FAR Subpart 42.5.

2.2.1.3 IT Meeting: Convene a video- or teleconference with DoDEA Information Technology staff ten business days after award. (See Technical Exhibit #4.)

2.2.1.4 Other Post-Award Meetings: Meet with the Contracting Officer, COR, and/or other Agency personnel, as appropriate to review Contractor performance, as required by DoDEA. At these meetings the Contracting Officer may discuss the Government’s

17 Jan 20 Page 4 view of Contractor performance, and the Contractor shall apprise the Government of problems, if any, being experienced. The Contractor shall take appropriate action to resolve any outstanding issues raised by the Government.

2.2.1.5 Attendance: Attend virtual meetings at no additional cost to the Government. Note: Costs associated with attendance at face-to-face meetings, if any, shall be handled/paid for as stated in the contract.

2.2.2 Task 4, Technical Support: Provide industry-standard technical support for its digital resources for the life of the contract via telephone or by email within one business day or less from the initial contact to include but not limited to assisting with service problems, product setup, upgrades, and troubleshooting.

Performance Standards and Acceptable Quality Levels (AQL) Objective 2, General Requirements

Performance Standard and Related Task AQL Inspection Method Incentives*

* Unless specified otherwise, possible ratings are as follows: exceptional, very good, satisfactory, marginal, or unsatisfactory, per FAR 42.1503, Table 42-1, “Evaluation Ratings Definitions”.

Task 3, Meetings, PWS 2.2.1

Zero deviation from the PWS.

As stated in the PWS

No more than one meeting per year will need to be rescheduled

COR inspection Past

Performance Assessment.

Task 4, Technical Support, PWS 2.2.2

95% of requests shall be handled in the time limit specified in the PWS.

COR inspection and stakeholder feedback

Past Performance Assessment

2.3 Objective 3, Contractor Manpower Requirement Application (eCMRA) Complete/submit reporting requirements annually, per the eCMRA website.

2.3.1 Task 5, eCMRA: The Contractor shall report all labor hours (including subcontractor labor hours) required to perform the services provided under this contract via a secure data collection site. The Contractor shall complete all required data fields. Reporting inputs shall be for labor executed during each fiscal year’s period of performance (Oct 01 - Sep 30). While inputs may be reported any time during the fiscal year, all data shall be reported no later than October 31 of each calendar year. Contractors shall use the following URL both to fill out the abovementioned data fields and to contact the help desk for assistance: https://www.ecmra.mil.

Performance Standards and Acceptable Quality Levels Objective 3, eCMRA

Performance Standard and Related Task AQL Inspection Method Incentives

17 Jan 20 Page 5

Task 5, eCMRA, PWS 2.3.1

Zero deviation from the PWS.

During the required timeframe, per the eCMRA website.

Information entered into eCMRA shall be 100% accurate

The COR shall query eCMRA to ensure information is entered and review a copy of the eCMRA information entered provided by the Contractor.

Past

Assessment.

rating pass/fail.

Requirements / Objectives The tasks listed above are to help the Contractor gain a better understanding of the requirements and are not all-inclusive. The Contractor is expected to develop a total solution in accordance with a performance-based approach.

3 Constraints

3.1 Period and Place of Performance

Base period of one year and four option periods, all of which are twelve months in length. Work performed at the Contractor’s facilities.

3.2 Holidays and Hours of Operation

Contractor personnel shall be available during the hours of 9AM to 3PM Eastern Standard Time (EST), except for Federal holidays and Federal government closures/shutdowns. The following list shows all recognized Federal holidays:

New Year’s Day Labor Day Martin Luther King Jr.’s Birthday Columbus Day President’s Day Veteran’s Day Memorial Day Thanksgiving Day Independence Day Christmas Day

3.3 Key Functions—The Contractor shall provide the following: Project Manager/ Alternate Project Manager, Technology Manager; and Program Specialists. They shall be available, between the hours of 9:00 AM and 3:00 PM EST, Monday - Friday, except for Federal holidays or when the Government facility is closed for administrative reasons.

3.3.1 Program Manager/Alternate: Provide a program manager to be responsible for the performance of work. The name of this person and an alternate who shall act for the Contractor when the program manager is absent shall be designated in writing to the Contracting Officer. The program manager or alternate shall have full authority to act for the Contractor on all contract matters relating to the daily operation of this contract.

3.3.2 Technology Manager: Provide a technology manager to be responsible for

(1) maintaining the web-based diagnostic tool and (2) assisting DoDEA personnel with the use of the Contractor’s websites and functionality.

3.3.3 Program Specialists: Provide program specialists to include, but not necessarily limited to information related to art specific product features and systems, as it

17 Jan 20 Page 6 relates to the digital art portfolio solution. These inquiries will be requested by DoDEA Headquarters and Regional Instructional Systems Specialists.

3.3.4 Qualifications: Provide program manager/alternate and technology manager with at least one year of experience in a similar role and program specialists who have been K-12 school administrators or who have worked extensively with K-12 school administrators in the area of leadership development.

3.3.5 Changes: Personnel provided as replacements to key functions after contract award shall meet or exceed the qualifications and experience of those provided upon award of the contract. Notify the COR in writing regarding all personnel changes ten business days in advance of the change.

3.4 Availability: The Contractor shall make all resources available for the life of the contract.

3.5 Anti-Bias: The Contractor shall provide resources free of racial, color, national origin, age, disabling conditions, sexual, gender, religious, and ethnic bias and present balanced coverage of multi-cultural contributions and representation, where appropriate.

3.6 Privacy—The Contractor shall:

3.6.1 User Accounts: Require, wherever applicable, that individual accounts possess unique usernames and passwords that do not require personally identifiable information (PII) to access online content, i.e., first & last name and any other unique personal information—.

3.6.2 Contractor Personnel: Ensure personnel assigned to this contract take proper precautions to protect information from disclosure. All agency-owned or agency-controlled personally identifiable information shall be collected and/or stored in accordance with the relevant requirements of the Privacy Act, 5 U.S.C—http://www.archives.gov/about/laws/privacy-act-1974.html.

3.7 Section 508 Compliance—Ensure Contractor resources, wherever applicable, meet the following requirements:

3.7.1 IT Requirement: Provide technical support during the testing window. DoDEA requires instant response from Contractor technical support staff during that brief period. Ensure all electronic hardware and soft-ware procured under this contract/purchase order comply with Section 508 of the Rehabilitation Act of 1973, as amended, (29 U.S.C. 794d) and the Architectural and Transportation Barriers Compliance Board Electronic Information Technology (EIT) Accessibility Standards (36 CFR part 1194). Further information may be found at the following URL: http://www.section508.gov. .

3.7.2 Deliverable Requirement: Ensure the following occur:

Outputs/deliverables do not adversely affect accessibility features of existing

EIT technologies.

17 Jan 20 Page 7

EIT related to the requirements of the contract are accessible to people with disabilities, per 29 U.S.C 794(d).

Outputs/deliverables to include the functional performance, information, documentation, and support requirements are considered. Standards from 36 CFR Part 1194 Subpart B, C, and D apply to this acquisition.

3.8 Optical Character Resolution (OCR) Requirement: The Contractor shall provide, upon request, two digital OCR copies of print materials in one or more of the following formats:

Digital Accessible Information System/National Instructional Materials Accessibility Standard (NIMAS) with cascading style sheet HyperText Markup Language (HTML) Portable Document Format (PDF), (unlocked, embedded fonts, single page) Rich Text Format (RTF)/Word document

3.9 Data: The Contractor shall ensure that all data developed as a result of any work awarded under this contract is and shall remain the property of the Government.

3.10 Organizational Conflict of Interest (OCI): Contractor (including subcontractor) personnel performing work under this contract may receive, have access to, or participate in the development of, proprietary or Privacy Act information (e.g., personal information, education, etc.) may create a current or subsequent OCI as defined in FAR Subpart 9.5. Whenever the Contractor becomes aware that such access or participation may result in any actual or potential OCI, the Contractor shall (1) immediately notify the Contracting Officer (KO) in writing and (2) promptly submit a plan to the KO to avoid or mitigate any such OCI. Note: The KO will unilaterally determine if the Contractor’s plan is acceptable. If the KO determines the plan cannot satisfactorily avoid or mitigate an OCI, s/he may implement other remedies to include prohibiting the Contractor’s further participation in contracted requirements.

4 Government-Furnished Resources

4.1 Quality Assurance Surveillance Plan (QASP): The Government will utilize a QASP to monitor Contractor performance on the contract, which can change at any time during the life of the contract. As such, the Government reserves the right to unilaterally edit the QASP at its discretion. The QASP primarily (1) focuses on what the Government will do to ensure the Contractor has performed IAW the performance standards and (2) defines how the performance standards will be applied, frequency of surveillance, and minimum acceptable quality/performance.

TECHNCIAL EXHIBITS

Technical Exhibit 1 – Performance Requirements Summary Technical Exhibit 2 – Deliverables

17 Jan 20 Page 8

Technical Exhibit 3 – Acronyms and Definitions Technical Exhibit 4 – Technical Requirements

TECHNICAL EXHIBIT 1 - Performance Requirements Summary

Performance Standards and Acceptable Quality Levels (AQL) Objective 1, Subscriptions and Professional Learning

Performance Standard and Related Task AQL Inspection Method Incentives*

* Unless specified otherwise, possible ratings are as follows: exceptional, very good, satisfactory, marginal, or unsatisfactory, per FAR 42.1503, Table 42-1, “Evaluation Ratings Definitions”.

Task 1, Subscriptions, PWS 2.1.1

Zero deviation from the PWS.

Ongoing three days after receipt of delivery order

99% diagnostic tool availability.

Customer complaints and COR periodic inspection.

Past Performance Assessment.

Task 2, Virtual Professional Learning, PWS 2.1.2

Zero deviation from the PWS.

Ongoing after receipt of delivery order

100% compliance

Customer complaints and COR periodic inspection.

Past Performance Assessment.

Performance Standards and Acceptable Quality Levels (AQL) Objective 2, General Requirements

Task 3, Meetings, PWS 2.2.1

Zero deviation from the PWS.

As stated in the PWS

No more than one meeting per year will need to be rescheduled COR inspection Past Performance

Assessment.

Task 4, Technical Support, PWS 2.2.2

95% of requests shall be handled in the time limit specified in the

PWS.

COR inspection and stakeholder feedback

Past Performance Assessment

Performance Standards and Acceptable Quality Levels Objective 3, eCMRA

Task 5, eCMRA, PWS 2.3.1

Zero deviation from the PWS.

During the required timeframe, per the eCMRA website.

Information entered into eCMRA shall be 100% accurate

The COR shall query eCMRA to ensure information is entered and review a copy of the eCMRA information entered provided by the Contractor.

Past Performance Assessment.

rating pass/fail.

TECHNICAL EXHIBIT 2 – Deliverables

Deliverables Frequency Medium/Format Submit To

Task 3, Meetings, PWS 2.2.1.2, Post-Award Conference: Email as MS COR

17 Jan 20 Page 9

Deliverables Frequency Medium/Format Submit To

PWS 2.2.1 Participate in a post-award video- or teleconference within five business days after award. Provide minutes in writing in a format acceptable to the COR within two business days after the conference.

PWS 2.2.1.3, IT Meeting: Convene ten business days after award. Provide minutes and medium as stated above.

PWS 2.2.1.4, Other Meetings: As required by the COR. Provide minutes and medium as stated above.

Word/Excel attachment.

Task 1, Subscriptions, PWS 2.1.1

Provide access three days after receipt of the initial delivery order

Email as MS Word/ Excel attachment. COR

Task 2, Virtual Professional Learning, PWS 2.1.2

Digital Modules and Asynchronous Webinars: Provide access three days after receipt of initial delivery order

Synchronous Webinars: Scheduled post-award, if required.

Email as MS Word/ Excel attachment. COR

Task 4, Technical Support, PWS 2.2.2

Ongoing after receipt of initial delivery order N/A N/A

Task 5, eCMRA, PWS 2.3.1 Annually as required by the Government CMRA website COR notification

TECHNICAL EXHIBIT 3 - Acronyms & Definitions.

Acceptance of Services – Acceptance” means the act of an authorized representative of the Government by which the Government for itself or as agent of another (1) assumes ownership of existing identified supplies tendered or (2) approves specific services rendered as partial or complete performance of the contract. The term, conditional acceptance, means acceptance of supplies or services that do not conform to contract quality requirements or are otherwise incomplete, that the contractor is required to correct or otherwise complete by a specified date.

Contract Line Item Number (CLIN) – Basic structural element in a procurement instrument describing and organizing the required product or service for pricing, delivery, inspection, acceptance, invoicing, and payment. The use of the term “line item” includes “subcontract line number”, (SLIN), as applicable.

Contract Discrepancy Report (CDR) – The Government’s formal process/format, normally tied into the Government’s QASP (definition below), that notifies the contractor of and tracks any observed quality or performance discrepancy between the contractor’s performance and the quality/performance objectives of this PWS. CDRs are formally written and tracked on any number of official documents/forms (e.g., DD Form 1772, DA Form 5479, etc.), and require timely responses from both the contractor and Government personnel to address/resolve.

Contracting Officer (KO) – The only individual with expressed authority to obligate (bind) the Government by means of entering, administering, and terminating contracts within the limits of authority delegated via a Contracting Officer’s warrant.

Contracting Officer’s Representative (COR) – Qualified and trained Government employee, nominated by the requiring activity (RA) and appointed in writing by a KO primarily to perform specific technical or

17 Jan 20 Page 10 administrative functions on a specific contract(s); serves as the ‘eyes and ears’ of a KO to assure the Government’s best interests are protected via the terms and conditions of the contract(s) appointed. COR’s do not have authority to obligate (i.e., bind) the Government.

Contract Specialist (CS) – Contracting career field professionals without the authority (i.e. not warranted) to enter into contracts on behalf the Government.

Contractor - Supplier or vendor having a contract to provide specific supplies or service to the Government.

The term used in this contract refers to the prime.

Defense Federal Acquisition Regulation (DFAR)

Defense Federal Acquisition Regulation Supplement (DFARS)

Department of Defense (DoD / DOD)

Defective Service - A service output that does not meet the standard of performance associated with the Performance Work Statement.

Deliverable - Anything that can be physically delivered but may include non-physical things such as digital reports.

Eastern Standard Time (EST)

Federal Acquisition Regulation (FAR)

In Accordance With (IAW)

Performance Requirements Summary (PRS) – Tabular listing of performance objectives and standards that provides the basis for a meaningful QASP.

Performance Work Statement (PWS) - A statement of work for performance-based acquisitions describing the required results in clear, specific and objective terms with measurable outcomes.

Quality Assurance Surveillance Plan (QASP) – Government’s plan to monitor contractor’s performance, by method and frequency; all those critical areas performance required on the service contract to monitor the contractor’s performance on the contract

Requiring Activity (or Agency) (RA) – Office, agency, or activity that has the mission requirement for an interagency acquisition.

Subcontractor - One that enters into a contract with a prime contractor. Note: The Government is not privy to the contract(s) with the subcontractor.

Technical Exhibit (TE)

TECHNICAL EXHIBIT 4 - Technical Requirements

4.1 Software and Cloud Security Requirements – The Contractor shall:

4.1.1 Ensure all online resources, cloud-based services and instructional software meet the Department of Defense (DoD) and DoDEA Information Assurance requirements as defined below. Note: Software, cloud services and associated websites will be rigorously tested to ensure that they pose no security risk to the DoDEA infrastructure.

4.1.2 Comply with the Cloud Services questionnaire that was submitted as part of proposal submission and provide copies of or access to any software in the proposed solution.

4.1.3 Ensure on-premises software resources support post-installation integration of the DoD Application, System and Database Security Technical Implementation Guides (STIGs)

17 Jan 20 Page 11 for applicable systems and applications, including Microsoft Windows Server 2016, Microsoft Windows 10, Microsoft SQL Server 2014 Database, Microsoft SQL Server 2014 Instance, and Microsoft IIS 8.5 Server, and Microsoft IIS 8.5 Site. SQL Server 2015 and IIS 8.5 guides are used for SQL 2016 and IIS 10, respectively, as outlined in section 1.1.1. STIGs may be downloaded from http://iase.disa.mil/stigs/Pages/a-z.aspx and viewed at http://iasecontent.disa.mil/stigs/zip/U_STIGViewer-2.6.1.zip.

4.1.4 Ensure that the on-premises software—which will be subject to static and dynamic analysis testing—pose no risk to DoDEA systems and users. Note: This testing may include reverse engineering analysis. Also, software products will be assessed for compatibility with existing system configurations and software.

4.1.5 Submit a completed copy of the Cloud Services Questionnaire, which includes details of the proposed cloud service environment and addresses the following seven areas:

1. Vendor Data Collection and Distribution Controls

2. Vendor System Management and Security Controls

3. Vendor Data Storage and Data Access Controls

4. Vendor Data and Metadata Retention Controls

5. Vendor Development and Change Management Processes

6. Vendor Test and Development Environment Security Controls

7. Vendor Data Breach, Incident Investigation and Response Mechanisms

Note: Per DoD policy, cloud-based services shall undergo a supplemental series of validations, which closely mirror the Federal Risk and Authorization Management Program (FedRAMP) Internet Cloud vetting processes and include interviews and deep system architecture inspections with the Contractor.

4.2 System Requirements: – The Contractor shall:

4.2.1 Ensure software installed and/or accessed in a DoDEA system—network, stand-alone or web-based—is compatible with the standards cited herein.

4.2.2 Ensure, per Section 4.1 (above), any software installed and/or accessed in a DoDEA system—network, stand-alone or web-based—is compatible with standards cited herein. All software shall be completely functional on a standard DoDEA desktop without the need/requirement for administrative-level user rights or a requirement to insert media (CD/DVD) to execute the software. Software shall not require modifications to folder permissions while executing.

4.2.3 Ensure all software is compatible with the following hardware baseline:

Specifications Minimum

Memory 4 GB Hard Drive 100 GB

Processor Intel-based 2.4 GHz Operating System Windows 7 Enterprise; Windows 10

Browser Environment Chrome; Edge; IE 10 or higher

4.2.4 Provide the minimum desktop/server system technical specifications, available reference architectures, networking specifications and diagrams, and applicable systems configuration documentation for the proposed product solution.

17 Jan 20 Page 12

4.2.5 Ensure all software is completely functional without requiring administrative-level user permissions or external media to execute the software.

4.2.6 Ensure all software packages support unattended installation methods used by enterprise software packaging and deployment systems. Note: Older 16-bit software will be automatically denied, per this requirement.

4.3 Data Management Requirements—The Contractor shall:

4.3.1 Provide a mechanism for batch administration and automation of routine data manage-ment tasks via flat file import, or representational state transfer (REST) based web service application programming interfaces (APIs). The mechanism shall provision and manage data objects within the Contractor’s system, including but not limited to organizational structures, student accounts, staff accounts, courses, and class rosters.

4.3.2 Provide all necessary documentation and assets to facilitate batch administration and automation of routine data management tasks, including but not limited to roster template files (i.e., comma separated value templates); data element/field definitions documentation; data interchange formats and schemas (XML/JSON); and/or data dictionaries for the purpose of mapping organizational Student Information System (SIS) data to the Contractor’s required input formats.

4.3.3 Provide a single point of contact to support DoDEA in performing the required data integration activities within the Contractor’s system.

4.3.4 Configure DoDEA enterprise within its system and/or databases as the appropriate organizational entity (i.e., state, district, school) upon a request in writing from the Contracting Officer’s Representative (COR). Note: DoDEA’s organization hierarchy consists of the following: one system, three regions, eight districts, 62 communities, and 164 schools, which includes the Virtual High School.

4.3.5 Participate in a technical meeting with DoDEA within ten business days after award for the purposes of preparing for onboarding of new services and initial configuration of administrator-level accounts.

4.4 DoDEA Software License Keys—The Contractor shall:

4.4.1 Provide license keys and electronic downloads for software required under this Contract to the COR.

4.4.2 Provide software directly to DoDEA schools, districts, or regions only if explicitly required to do so in the contract or in writing by the COR.

4.5 DoDEA Information Assurance Supporting Elements / Requirements—The Contractor shall:

4.5.1 Comply with the same Federal law and DoD policy and guidance to which DoDEA is subject. These requirements include but are not limited to the information assurance requirements defined in:

DoD Directive (DoDD) 8500.01E, Information Assurance, which may be found at http://dodcio.defense.gov/Portals/0/Documents/DIEA/850001p.pdf

DoD Security Technical Implementation Guidance (STIG), which may be found at http://iase.disa.mil/stigs/Pages/index.aspx

DoD Risk Management Framework (DODRMF) per DoD Instruction 8510.01 at http://www.dtic.mil/whs/directives/corres/pdf/851001_2014.pdf

17 Jan 20 Page 13

4.5.2 Provide security patches/upgrades to include third-party applications in response to public-released security vulnerabilities associated with its software solution. Software upgrades/patches shall be included in the licensing cost and be performed at the least disruptive times as determined by DoDEA. Note: Any exception to this requirement must be approved in advance and in writing by DoDEA’s Chief Technology Officer.

4.5.3 Ensure software packages support unattended installation methods used by enterprise software packaging and deployment systems. Note: DoDEA currently distributes software packages via Microsoft System Center Configuration Manager (SCCM).

Also, older 16-bit software will be automatically denied per this requirement.

4.5.4 Ensure any portion of the Contractor's solution that involves Internet access by DoDEA students complies with the relevant requirements of the Children's Internet Protection Act, Pub.L. 106-554, § 1(a)(4) [Div. B, Title XVII, § 1701], Dec. 21, 2000, 114 Stat.

2763, 2763A-335.

4.5.5 Ensure that its solution shall be robust enough to serve the needs of a large community of learners dispersed across the world using a variety of bandwidths and scalable to meet future growth, both in terms of instruction and the number of users.

4.5.6 Ensure Contractor staff who have access to DoDEA student and/or teacher personally identifiable information take the DoD Privacy Act/ Personally Identifiable Information (PA and PPI/PII) training before gaining access to the data and yearly thereafter.

4.6 Scalability: The Contractor’s solution shall be scalable to meet future growth requirements, both in terms of instruction and the number of users.