Historical Data - COMIT Section C - Statement of Work.pdf

B-1

COMIT

Statement of Work

Section C

B-1

Table of Contents

SECTION C - DESCRIPTION/SPECIFICATIONS/STATEMENT OF WORK 1

1.0 GOALS AND OBJECTIVES 1

2.0 STRUCTURE FOR ORDERING WORK 1

3.0 CONTRACT MANAGEMENT AND ADMINISTRATION 1

3.1 SAFETY AND HEALTH 2

3.2 RESOURCES MANAGEMENT 3

3.3 OPERATIONS, PROJECT, AND FUNCTION MANAGEMENT 3

3.3.1 Management Integration and Project/System Integration 4

3.3.2 Technology, Innovations, and Process Improvements 5

3.3.3 Business Agility 5

3.4 RISK MANAGEMENT 5

3.5 PROPERTY MANAGEMENT 6

3.6 RECORDS MANAGEMENT 6

3.7 PROCUREMENT 7

3.8 CONFIGURATION MANAGEMENT (CM) 7

3.9 WORK AUTHORIZATION 8

3.9.1 Work Authorization System 8

3.9.2 Standard/Non-Standard Business Hours 8

3.10 QUALITY MANAGEMENT AND CONTROL 8

3.10.1 Metrics 8

3.10.2 Training and Certifications 8

3.11 CONTINUITY OF OPERATIONS PLAN (COOP) AND CONTINGENCY PLAN 8

3.12 IT SECURITY MANAGEMENT PROGRAM COMPLIANCE 9

3.12.1 IT Security Program Management Plan 9

3.12.2 IT Security Plan 9

3.12.3 Employee IT Security Awareness Training 9

3.12.4 IT Security Role Based Training 9

3.12.5 Information on Employees in Sensitive Positions/Assignments Reports 9

3.12.6 Internal IT Security Plan audits 10

3.12.7 IT Security Point-of-Contact 10

3.13 CPIC REPORTING 10

3.14 CATALOG FOR PRODUCTS AND SERVICES PROVIDED BY COMIT 10

4.0 BUSINESS MANAGEMENT AND INTEGRATION 10

4.1 BUSINESS MANAGEMENT 10

4.1.1 JSC Records Management Services 10

4.1.2 Federal Records Center Processing 11

4.1.3 Cost Modeling Services 11

4.1.4 Governance and CM Support 11

4.1.4.3 Change Processing and Meeting Support 12

4.1.5 CPIC Support 13

4.2 ENTERPRISE ARCHITECTURE (EA) 13

4.3 PROJECT MANAGEMENT 14

4.3.1 Planning and Integration 14

4.3.2 Deliverables and Metrics 14

4.3.3 Project Performance Monitoring and Status Reporting 14

4.3.4 Technical Expertise Assistance 14

B-2

4.4 SOLUTIONS ARCHITECT SERVICES 14

4.5 INTEGRATED SERVICE MANAGEMENT (ISM) 15

4.6 INTEGRATED SERVICE CATALOG 15

4.7 CIO POLICY COMPLIANCE SUPPORT 15

4.7.1 Web Site and Application Registration Process Support 15

4.7.2 Privacy Compliance Support 15

4.7.3 Section 508 Compliance Support 16

4.8 BUSINESS DEVELOPMENT SUPPORT 16

5.0 END-USER SERVICES SUPPORT 16

5.1 HELP DESK SUPPORT CENTER 16

5.1.1 Tiered Customer Support 17

5.2 SPECIALIZED SUPPORT SERVICES 18

5.2.1 Senior Management Support 18

5.2.2 Customer and Client Relationship Management Support 18

5.2.3 Product and Service Testing Support 18

5.2.4 User Training 19

5.2.5 JSC Postmaster Support 19

6.0 INFORMATION AND DATA MANAGEMENT SERVICES 19

6.1 DOCUMENT AND DATA MANAGEMENT 19

6.1.1 Electronic Document Management Systems (EDMS) 19

6.1.2 Taxonomy 20

6.1.3 Forms Support 20

6.1.4 Document and Data Scanning 20

6.2 CONTENT MANAGEMENT 20

6.3 LIBRARY AND MULTIMEDIA REPOSITORY MANAGEMENT 21

6.3.1 Library Operations 21

6.3.2 Repository Management 22

6.3.3 Cataloging STI, Still and Motion Imagery (Ground and Mission) 22

6.3.4 Preservation and Migration 22

6.4 ENGINEERING DRAWING CONTROL CENTER (EDCC) 23

6.5 JSC SEMANTIC DISCOVERY AND FORMULATION 23

6.6 HISTORY SUPPORT 24

6.7 WRITING, EDITING, AND GRAPHICS 24

6.7.1 Writing and Editing 24

6.7.2 Graphics 25

7.0 SYSTEMS ENGINEERING AND OPERATIONS 27

7.1 SYSTEMS ENGINEERING 28

7.1.1 Systems Engineering: Development 29

7.1.2 Systems Engineering: Testing 30

7.1.3 Systems Engineering: Integration 30

7.1.4 Multimedia Engineering and Installation 30

7.2 SYSTEMS OPERATIONS AND MAINTENANCE 31

7.2.1 Patching and Updates 33

7.2.2 Security 33

7.2.3 Health Management 34

7.2.4 Database Operations and Maintenance 35

7.2.5 Storage Operations and Maintenance 35

7.2.6 Server Operations and Maintenance 36

7.2.7 Network Performance Monitoring 37

7.2.8 Multimedia Operations and Maintenance 38

7.3 IT FACILITY AND EQUIPMENT MANAGEMENT 39

B-3

7.3.1 Facility Planning and Operations of the JSC Data Center 39

7.3.2 Data Center Management and Data Center Hosting 40

7.3.3 IT Asset Management 40

7.3.4 Loan Pool Services 41

B.1 8.0 MULTIMEDIA SERVICES 41

8.1 IMAGERY ACQUISITION 41

8.1.1 Specialized Imagery Acquisition 42

8.1.2 JSC Institutional and Mission Support 42

8.2 HUMAN SPACE FLIGHT MULTIMEDIA SERVICES 43

8.2.1 Real-Time/Mission Processing, Recording, and Distribution 44

8.2.2 Post-Mission Processing, Recording, and Distribution 44

8.3 GENERAL PHOTOGRAPHIC SERVICES 44

8.3.1 Scanning Support 44

8.3.2 Digital Imaging Services 44

8.3.3 Photographic Processing 45

8.3.4 Photographic Quality Control 46

8.4 GENERAL VIDEO OPERATIONS AND SERVICES 46

8.4.1 Video Processing, Recording, and Distribution Services 47

8.4.2 Video Products and Services 47

8.5 MULTIMEDIA PRESENTATION LOGISTICS SERVICES 48

B.2 9.0 SPECIALIZED COMMUNICATIONS AND OUTREACH SERVICES 49

9.1 PUBLIC AFFAIRS MULTIMEDIA SERVICES 49

9.1.1 Television Production 49

9.1.2 Audio Program Control, Recording, and Products Services 51

9.1.3 Mission Commentary 52

9.1.4 Video and Multimedia Production 52

9.1.5 ERO Internet Content and Social Media Operations 53

9.1.6. General Media Support Services 53

9.1.7. Still and Motion Imagery Distribution 54

9.2 COMMUNICATIONS, INFORMATION, AND OUTREACH 54

9.2.1 General Project Planning and Coordination 54

9.2.2 Outreach Programs 56

9.2.3 Strategic Communications Support 58

C-1

SECTION C - DESCRIPTION/SPECIFICATIONS/STATEMENT OF WORK

1.0 GOALS AND OBJECTIVES

The primary goal of the Communications, Outreach, Multimedia and Information Technology (COMIT) contract is to provide quality products and services for information technology (IT), information management (IM), communications and multimedia services to the NASA Lyndon B.

Johnson Space Center (JSC), Houston, TX, and its associated sites and facilities:

(a) White Sands Test Facility (WSTF) – Las Cruces, NM;

(b) El Paso Forward Operating Location (EPFOL) – El Paso, TX;

(c) Wallops Flight Facility (NASA Sounding Rocket Program [NSROC]) – remote support to

Goddard Space Flight Center provided by WSTF from Las Cruces, NM;

(d) Ellington Field (EFD) – Houston, TX;

(e) Sonny Carter Training Facility (SCTF) – Houston TX, or

(f) Other external customers (which may include other NASA Centers, or other Government

Agencies) as defined by task order.

The requirements described in this SOW apply to JSC-associated sites and facilities listed above.

Under this contract, work locations and travel requirements will be defined in task orders.

Policy and procedure documents referenced throughout the SOW are listed in Attachment J-4, Applicable Documents List.

2.0 STRUCTURE FOR ORDERING WORK

The paragraphs within this document describe the products and services required on this contract.

Work will be ordered in accordance with clause H.3, Task Ordering Procedure and the following:

(a) Contract Number

(b) Contract Year

(c) Task Order Number

(d) Unique Work Item

3.0 CONTRACT MANAGEMENT AND ADMINISTRATION

(a) The Contractor shall continually evaluate and implement fiscally responsible, cost effective, innovative and efficient processes or disciplines for implementing the requirements outlined in this SOW. This process will be referenced as the term “best value” throughout the SOW.

(b) The Contractor shall provide the management and administrative functions to satisfy the requirements of this contract (Data Requirements Document [DRD]-1, Contract Management Plan).

(c) The Contractor shall comply with all policies and procedures included in Attachment J, Applicable Documents.

(1) The Contractor shall follow the most current approved version wherever reference is made in this SOW and in task orders to specific policies, procedures, directives, work instructions, and other Government documents.

C-2

(d) The Contractor shall maintain the ability to obtain security clearances, up to the Secret level, as appropriate for work on this contract. Where required, specific employee security clearance requirements will be defined along with the technical content in task orders.

(e) The Contractor shall provide all resources (labor, materials, and property) required to perform this contract. The exceptions to this are the items (materials and property) listed in:

(1) Attachment J-1, List of Government-Furnished Property (GFP)

(2) Attachment J-7, Installation-Provided Facilities and Services

(3) Attachment J-3, Systems Inventory;

(f) The Contractor shall comply with all applicable Mission Focus Reviews (MFRs).

(g) The Contractor shall provide to the Government all deliverables listed in the Attachment J-2, JSC Data Requirements List (DRL) in electronic form as specified in the individual DRD, unless otherwise directed.

(h) The Contractor shall, at least once per contract year, conduct a “kick-off” meeting with their contractor team to communicate the following:

(1) JSC’s Mission & Objectives as they relate to COMIT

(2) JSC Safety

(3) JSC Expected Behaviors

(4) Guidelines for Contractor/Civil Servant Relationships (information that may be used for this item is found at:

http://jlt.jsc.nasa.gov/Toolkits.aspx/Relationships)

(5) Responsibilities of the JSC Ombudsman and the Ombuds role in resolving Contractor/Civil Servant issues

(6) Information Technology Infrastructure Integration Program (I3P) as it relates to COMIT

(7) Contract-specific policies on:

(i) Telework

(ii) Environmental contingencies

(iii) Emergency Operations

(8) Other topics as defined by the CO and COR

3.1 SAFETY AND HEALTH

(a) The Contractor shall perform work in accordance with DRD-2, Safety and Health Plan.

(b) The Contractor shall complete Government-provided hazardous materials training in accordance with Center policy. Training will be provided by the Government, and compliance with JSC Procedural Requirements (JPR) 1700.1, JSC Safety and Health Handbook, is mandatory, where applicable.

(c) Contract personnel supporting onsite tours shall complete Government-provided Cardiopulmonary Resuscitation (CPR) and first aid training unless they possess credentials demonstrating that training has been completed through another source prior to employment (as approved by the COR). Training must be completed within 90 days of employment. A lapse greater than 30 days in the renewal of credentials will result in non-compliance for the Contractor unless approval is received from the Contracting Officer’s Representative (COR) and the Contracting Officer (CO) in advance of the expiration of credentials via a plan outlining when the Contractor will again be in compliance.

C-3

(d) The Contractor shall establish guidelines for contract personnel regarding emergency medical services and evaluation while they are on international travel in accordance with NASA FAR Supplement 1852.242-78.

(e) The proper handling of chemical waste produced in the photographic laboratory is a principal concern on this contract. As a result, the Contractor shall be required to report any waste generated by the photographic chemical processing system (JPR 8621.1, JSC Mishap Response Plan; and JPR 5322.1, Contamination Control Requirements Manual).

3.2 RESOURCES MANAGEMENT

(a) The Contractor shall provide accurate and timely financial reports in accordance with NASA

Policy Directive (NPD) 9501.1, NASA Contractor Financial Management Reporting System, NASA Program Requirement (NPR) 9501.2, NASA Contractor Financial Management Reporting, and NPR 9060.1, Cost Accruals. The Contractor shall deliver:

(1) DRD-4, Financial Management Report;

(2) DRD-5, Resource Management Supplemental Report;

(b) The Contractor shall provide ongoing business analysis and respond to Government requests for financial information. In performing these functions, the Contractor shall:

(1) Maintain detail order and invoice records that support Government-performed invoicing

(to customer organizations) and allow Government-performed invoice reconciliation.

(2) Maintain customer order information as directed by the Government.

(3) Provide financial information maintained by the Contractor for use by the Government for budgeting purposes and business case analyses.

(4) The Contractor shall provide financial planning data to support the Government budget process including but not limited to: Planning, Programming, Budgeting, and Execution [PPBE] budget calls, Operating plan budget calls, and special requests for budget impacts.

(c) The Contractor’s internal accounting system shall fully accommodate Government reporting requirements as defined in the DRD-4, Financial Management Report and DRD-5, Resource Management Supplemental Report.

(d) The Contractor shall conduct quarterly accounting reconciliations (planned expenditures versus actual expenditures).

(e) The Contractor shall support a contract-wide requirements/budget review meeting with the Government as defined in DRD-6, Contract Management Review.

This internal review shall be completed prior to the annual Capital Planning and Investment Control Process (CPIC) (DRD-7, IT CPIC) and the Information Resources Directorate (IRD) Internal Task Agreements (ITA) process.

3.3 OPERATIONS, PROJECT, AND FUNCTION MANAGEMENT

The Contractor shall operate and manage designated production systems, ongoing and new projects, and functions and activities required to provide products and services to the JSC customer community in accordance with the DRD-1, Contract Management Plan. The Contractor shall:

(a) Create and maintain project plans (DRD-8, Project Plans).

C-4

(1) The Contractor shall be knowledgeable of industry standard project management tools.

The Contractor management shall demonstrate project management expertise by executing operational and development projects and activities per negotiated schedules and within project, task order, and contractual budgets.

(2) Costs associated with projects shall include labor, materials, travel, training and other direct and indirect costs.

(3) The Contractor shall report this information monthly.

(b) Create and maintain an IT CPIC Plan (DRD-7, IT CPIC).

(c) Create and report metric performance.

(d) The Contractor shall provide Rough Order of Magnitude (ROM) estimations, in accordance with DRD-26, for work when requested by the Government.

(e) Create and maintain IT Security plans which are consistent with NPR 2810.1, Security of

Information Technology in the provisioning of products and services under this contract.

(f) Document Standard Operating Procedures (DRD-10, Standard Operating Procedures).

(g) Document Lessons Learned and Corrective Action Reports as directed by the CO or COR; or as deemed internally appropriate by Contractor management shall be delivered in accordance with DRD-25, Lessons Learned and Corrective Action Reports.

(h) Create and maintain the deliverables required to support the NASA Continuous Monitoring process in accordance with NPR 2810.1.

(i) Attend and support key Government-sponsored meetings and forums as defined by the task order.

(j) Provide an overall Integrated Service Management (ISM) strategy that outlines the customer relationship management approach utilized in the delivery of products and services ordered on this contract.

3.3.1 Management Integration and Project/System Integration

(a) The Contractor shall perform management and technical integration across the products and services required within the SOW. While this contract is specifically awarded with the IRD and External Relations Office (ERO), the services and products provided will extend to a much broader population.

The Contractor shall perform contract-level data management and data analysis to document and maintain the following:

(1) A general understanding of the types and tiers of data managed by the Contract (and associated relationships within the JSC Taxonomy)

(2) Dependencies of Contractor managed data and data repositories on the types of services and infrastructure in existence at JSC (includes the associated sites and facilities listed in Section 1.0 of this SOW)

(3) A data management approach and plan (as part of DRD-1, Contract Management Plan)

(4) A COMIT taxonomy

(b) The Contractor shall execute a management integration approach that ensures all elements (technical, business, management information analysis and data analysis) of the contract, including subordinate contracts, are well-integrated and focused on overall mission success.

(c) The Contractor’s integration approach shall be transparent to the Government, in terms of the integration between Prime and subcontractors.

C-5

3.3.2 Technology, Innovations, and Process Improvements

(a) The Contractor shall take the initiative, seek creative solutions and infuse technology and innovations from other industries.

(b) The Contractor shall initiate and participate in benchmarking activities as appropriate and propose process efficiencies, innovative process changes, and potential cost reductions to NASA while maintaining technical capabilities. The Contractor shall participate in reviews of proposed changes; however the Government will decide on implementation of any changes.

(c) The Contractor shall investigate best practices from contracts or facilities similar to COMIT and JSC, and shall identify potential improvements to the operations of this contract. The Contractor should consider the SOW in its approach, but should not limit the proposed changes to processes currently used or described only in the SOW.

(d) The Contractor shall define overall strategies for approaching innovation, its plan for implementing those strategies, and shall incorporate them into DRD-1, Contract Management Plan. Contractor proposed innovation approaches shall result in improved products or services while maintaining or reducing costs to the Government. An increase in costs to the Government or change in scope must have concurrence from the CO or COR before implementation.

(e) The Contractor shall report proposed individual innovations accepted by the Government, as well as internal innovations implemented by the Contractor, per DRD-14, Technology, Innovations, and Process Improvement Report.

3.3.3 Business Agility

Business Agility is defined herein as the capability of an entity to rapidly change or adapt in response to changes in the business environment, and enables that entity to successfully react to the emergence of new industry-changing technologies or sudden shifts in business environment conditions (dynamic requirements, schedule demands, financial constraints, and technical considerations).

(a) The Contractor shall include strategies and approaches for maintaining business agility as part of the DRD-1, Contract Management Plan for the contract.

(b) Strategies for improving business agility shall not result in overall increase of costs to Government (materials or labor), without CO approval, prior to implementation.

3.4 RISK MANAGEMENT

The Contractor shall assess, evaluate, document and manage all identified risks associated with the performance of contract requirements.

(a) The Contractor shall create, implement, modify, and maintain, a contract-wide Risk Management Plan as defined in DRD-1, Contract Management Plan, and in compliance with NPR 7120.7, NASA Information Technology and Institutional Infrastructure Program and Project Management Requirements, and NPR 2810.1, Security of Information Technology.

(b) The Contractor shall develop and utilize a Risk Management Program that is complimentary to the JSC Risk Management Plan (JPR 8000.4) process and document its methodology for managing risk in DRD-1, Contract Management Plan.

C-6

3.5 PROPERTY MANAGEMENT

(a) The Contractor shall comply with Government-defined requirements for property management (DRD-12, Government Property Management Plan and Required Property Reporting, DRD-30, Financial Reporting Contractor-Held Property, and RFP Sections G and H), to include the use of Government specified applications, and perform property custodian functions for GFP (Attachment J-1, List of Government Furnished Property including Pursuant to FAR 52.245-2) in accordance with NPR 4200.1, NASA Equipment Management Procedural Requirements, and NPR 4200.2, Equipment Management Manual for Property Custodians.

(b) Vacancy permitting, the Contractor shall first consider utilizing facilities furnished by the Government. The Contractor shall be responsible for ensuring that all Contractor and Subcontractor staff complies with the operational policies and procedures for all contract specified facilities (reference J-7). Compliance also applies to Contractor-leased facilities for the purpose of performance on this contract.

3.6 RECORDS MANAGEMENT

(a) The Contractor shall electronically maintain accurate and complete records (including legacy, electronic, paper, and vital records) and administer the disposition of these records and non-records in accordance with NPR 1441.1, NASA Records Retention Schedules, which has been approved by NASA and the National Archives and Records Administration (NARA).

(b) The Contractor shall segregate NASA records from company-owned records and from non-record materials, and shall provide NASA or authorized representatives’ access to all Government records in accordance with FAR Subpart 4.7. The Government reserves the right to inspect, audit, and copy record holdings.

(1) At the completion or termination of this Contract, the Contractor shall leave all

Government-owned data with the appropriate Government entity.

(i) The Contractor shall ensure that Government-owned data is in a format that is accessible, readable, and usable by the Government.

(ii) The Contractor shall deliver Government-owned records to the appropriate Center records manager for dissemination to the Offices of Primary Responsibility (OPRs).

(2) The Contractor shall provide the Government (or authorized representatives as designated by the COR) with access to all Government records.

(c) The Contractor shall maintain a records management program for all data/records produced as part of this contract and electronically submit a records management plan in accordance with JPR 1440.3C, JSC Records Management Procedural Requirements (shall be submitted as part of DRD-1, Contract Management Plan). The Contractor shall utilize specific contract and account record management systems when such systems are provided by the Government.

(d) The Contractor shall deliver records to the Center Records Manager in accordance with NPR

1441.1 at the completion or termination of this contract or as record retention schedule expires. When in doubt of the ownership of records, the Contractor shall submit electronically to the CO a request for a determination from the Center Records Manager as to which records are subject to this direction.

C-7

3.7 PROCUREMENT

(a) The Contractor shall procure and deliver equipment, materials, IT hardware, and license renewals (software, production music, etc.) and media that it deems necessary to support the requirements set forth in this SOW.

(1) The Contractor shall be responsible for the renewal of maintenance for equipment, software licenses, and software support contracts purchased under the contract.

(2) The Contractor shall track, and make available to the Government upon request by the

CO, the proof of purchase for all hardware warranties, software licenses, and software support contracts managed through this contract.

(b) The Contractor shall first consider Agency available licenses from vendors that have Enterprise License Agreements (ELA) already established with NASA. The Contractor shall coordinate with the CO or their designee to determine feasibility of use of the license(s) as GFE-provided resource(s).

(c) As part of the procurement activity, the Contractor shall ensure that its equipment, hardware and software inventory is current.

(d) The Contractor shall ensure that maintenance and obsolescence schedules are updated as changes occur.

(e) The Contractor shall maintain complete purchasing documentation for all articles purchased under this contract including purchase request, purchase order, contact information, purchasing organization, Internal Task Agreements (ITA), Memorandums of Understanding (MOU), other agreements and invoices.

(1) The Contractor shall ensure that all purchases of hardware, software, and equipment to be used in support of this contract (or satellite site[s]) are consistent with dynamic Federal, NASA, and JSC regulations and policies.

(2) All purchase records shall be tracked as part of the Contractor’s Record management system (in accordance with DRD -1, Contract Management Plan) and deliverable to the Government upon request and upon the expiration/termination of the contract.

3.8 CONFIGURATION MANAGEMENT (CM)

(a) The Contractor shall provide, utilize, and maintain a CM process (to include change management and discrepancy reporting) in accordance with DRD-1, Contract Management Plan.

(b) The Contractor shall not change, modify, or relocate equipment, services or systems affecting Government assets, processes, or procedures without prior approval, unless otherwise stated in the approved Management Plan (DRD-1, Contract Management Plan).

(c) For Contractor-owned and managed repositories containing NASA data, the Contractor shall provide, revise, and maintain an up-to-date, complete set of design information (to include any drawings and schematics), hardware and software configurations, specifications, and associated change documentation for those repositories.

(1) Baseline configuration descriptions and drawings shall be maintained for all systems.

(2) These configuration descriptions and drawings shall be updated to reflect the results of approved changes to the configurations.

C-8

(3) These documents shall be numbered such that it is possible to determine the historical evolution of baseline configurations to the current configurations. Changes from the previous version of the documents shall be clearly noted.

(4) For drawings, the information shall be provided to reflect the connectivity represented by network drawings.

(5) The Contractor shall review and develop an annual report on the status of baseline configurations.

(6) The Contractor CM approach shall include the provision of a searchable online taxonomy for Contractor-owned and managed repositories containing NASA data.

The Contractor shall ensure that Government-owned, Contractor-managed data (and subsequent repositories) are incorporated into the JSC Taxonomy prior to the termination of the contract.

3.9 WORK AUTHORIZATION

The Government will use task orders to authorize work under this contract.

3.9.1 Work Authorization System

The Contractor shall utilize a Government-provided system for processing task orders.

3.9.2 Standard/Non-Standard Business Hours

The JSC standard business hours are 6 a.m. to 6 p.m., Monday through Friday; with core hours of 9 a.m. to 3 p.m., Monday through Friday. The Contractor shall work outside of standard business hours when directed by task order or work authorization as provided by the CO.

3.10 QUALITY MANAGEMENT AND CONTROL

The Contractor shall align with the JSC/WSTF Quality Management System (QMS), complying with American National Standards Institute (ANSI)/ISO/American Society for Quality Control (ASQC) Q9001-2008, AS9100 (WSTF). The Contractor shall document key processes and procedures using JSC-approved ISO formats where required.

3.10.1 Metrics

The Contractor shall provide metrics (DRD-6, Contract Management Review) to be made continuously available in an electronic system accessible by the Government. (Metrics shall include a measurement of innovation and business agility.)

3.10.2 Training and Certifications

The Contractor shall be responsible for obtaining and maintaining the skills and certifications required on this contract.

3.11 CONTINUITY OF OPERATIONS PLAN (COOP) AND CONTINGENCY PLAN

The Contractor shall provide and maintain a COOP (DRD-15, Continuity of Operations Plan).

The COOP shall establish Contractor policy and guidance to ensure the execution of the mission essential functions for this contract. The plan shall cover the situation/event when an emergency in a facility threatens or incapacitates operations. The plan shall address the relocation of selected personnel and functions of any service provided by this contract. The Contractor plan shall be designed to respond to emergencies, recover from them, and mitigate against their

C-9 impacts. In addition, the plan shall address a contract status of threatened, diminished, or incapacitated, as well as an associated timeline.

3.12 IT SECURITY MANAGEMENT PROGRAM COMPLIANCE

Contractors who purchase, lease, network to, or otherwise utilize Government-funded IT (Clinger-Cohen Act of 1996 and referenced by Office of Management and Budget (OMB) Circular A-130) shall comply with NPR 2810.1, Security of Information Technology.

3.12.1 IT Security Program Management Plan

The Contractor shall submit an IT Security Management Program Plan (per DRD-16, IT Security Plan) for its unclassified IT resources. This program plan shall describe the policy, processes, and procedures that will be followed to ensure appropriate security of IT resources that are developed, processed, or used under this contract. The Contractor’s IT Security Management Program Plan shall be compliant with Federal and NASA policies as referenced in OMB Circular A-130 and NPR 2810.1.

3.12.2 IT Security Plan

The Contractor shall have an Information Systems Security Officer (ISSO) who is responsible for the Contractor’s system(s) in accordance with the definitions set forth in NPR 2810.1. The Contractor’s ISSO shall be responsible for ensuring the development of IT security plans for resources owned and managed by the Contractor to perform work on this contract. The IT security plan (DRD-16, IT Security Plan) shall be kept up to date as changes to the baseline configuration of the system occur and shall be documented in the IT Security Plan. (Note: An IT Security Plan is specific to a system or group of systems, while an IT Security Management Program Plan is defined as the elements a contractor has outlined to meet the IT Security requirements for interfacing with other contractors and NASA, training requirements, and meeting the requirements in NPR 2810.1).

3.12.3 Employee IT Security Awareness Training

Contractor employees performing work under this contract shall complete the NASA-provided IT Security Awareness Training annually. The Contractor shall provide evidence that periodic IT security awareness training has been met for all employees subject to this contract. The Contractor shall submit periodic reports (as required by CO) detailing the overall status of the annual training program. The annual training program is defined as the period from October 1 through September 30. The IT Security Awareness Training is delivered via desktop workstation and takes approximately 1 hour to complete.

3.12.4 IT Security Role Based Training

Contractor employees performing work under this contract shall complete NASA-approved IT Security Training annually consistent with the following role-based functions: IT Security Manager, ISO, ISSO, and Organizational Computer Security Official (OCSO) Representative.

3.12.5 Information on Employees in Sensitive Positions/Assignments Reports Employee information is sensitive. IT security positions/assignments shall provide information reporting annually for personnel screening as required by NPR 2810.1 and NPR 1600.1 on position risk.

C-10

3.12.6 Internal IT Security Plan audits

The Contractor shall proactively protect sensitive data as defined by system IT Security Plans.

System log reviews are essential in the detection of cyber incidents (e.g., unauthorized accesses).

3.12.7 IT Security Point-of-Contact

The Contractor shall identify a point-of-contact that NASA may reach in its attempt to address IT and IT security issues. The point-of-contact shall have the authority to ensure appropriate actions occur.

3.13 CPIC REPORTING

The Contractor shall provide, in February and August of each calendar year, a comprehensive and detailed report of all Contractor-planned and actual contract IT expenditures (labor and materials) in support of an annual OMB data call. Details of reporting requirements for this task may be found in DRD-7, IT CPIC. The Contractor shall provide CPIC data which is consistent with the Financial Reporting as defined in Section 3.2.

3.14 CATALOG FOR PRODUCTS AND SERVICES PROVIDED BY COMIT

The Contractor shall provide a comprehensive and current list reflecting products and services provided by the COMIT contract in accordance with DRD-17, COMIT Products and Services Catalog.

4.0 BUSINESS MANAGEMENT AND INTEGRATION

IRD and ERO provide a broad range of services and support in Business Management and Technical Integration.

4.1 BUSINESS MANAGEMENT

The Contractor shall support a variety of tasks that allow organizations to manage requirements, assets, and cost modeling.

4.1.1 JSC Records Management Services

IRD is responsible for providing leadership and policy development for Records Management at JSC. In addition, IRD is responsible for helping JSC customers with the organization and disposition of record materials including submitting and retrieving record materials to and from the Federal Records Center (FRC), (36 Code of Federal Regulations [CFR), XII, Subchapter B) and coordination of location changes and disposal notices. Government-provided records management tools are listed in J-3, Systems Inventory.

(a) The Contractor shall provide records management briefings as required to JSC civil service or contractor employees for educational purposes (NPD 1440.6, NASA Records Management).

(b) The Contractor shall respond to employee requests for records management services or guidance on records management.

The Contractor shall log and status customer service requests in accordance with Section 5.1 unless otherwise stated in task orders.

(c) The Contractor shall provide Special Collection Archival Support which encompasses managing the STS-107 Archives data base including maintaining a comprehensive inventory of records collected in support of the STS-107 Investigation and subsequent accident investigations.

C-11

(d) The Contractor shall coordinate and maintain document records inventory lists in accordance with Directorate and Center policies.

(e) The Contractor shall work closely with the JSC Records Manager, the NASA Technical Management Representative (TMR) and Multimedia Operations, when necessary to accession collections to NARA.

(f) The Contractor shall maintain audio, motion, and still imagery records according to records management guidelines.

4.1.2 Federal Records Center Processing

As part of coordinating the movement of records shipments to and from the FRC and the JSC Onsite Storage Facility, and coordinating the location and disposition of records at the FRC, the Contractor shall:

(a) Complete necessary shipping paperwork to obtain accession numbers; ship records to and from their destination; request retrievals; and notify custodians of accession numbers, and arrival of retrieved records.

(b) Coordinate with JSC shipping, the FRC, records custodians, and JSC records management staff to accomplish proper records traffic.

(c) Track records accessions, entering information at each stage of movement into the JSC records management data base.

(d) Query the JSC records management data base for unreturned retrievals JSC has made and issue calls to custodians for the records to be returned.

(e) Coordinate with the FRC, records custodians, and JSC records management staff to accomplish approval of records disposals and transfers.

4.1.3 Cost Modeling Services

For products and services that the Contractor develops, implements, or maintains, the Contractor shall develop a cost model and present it to the Government for review and approval. The Contractor shall follow the process outlined below or as modified by the task order:

(a) Define service levels

(b) Calculate service costs (costs to provision the product or service – may include costs outside

Contractor control)

(c) Identify cost saving opportunities

(d) Present the cost model to the appropriate organizational forum or designated representative as defined in the task order.

4.1.4 Governance and CM Support

The Contractor shall support the Government, as defined by task order, in planning, implementing, and operating a comprehensive Governance structure for requirements baseline management in accordance with NASA-Standard (STD)-0005, NASA Configuration Management Standard.

(a) The Contractor shall implement the policy/documentation processes defined by task order.

(b) The Contractor shall implement the policy/documentation waiver processes defined by task order.

C-12

(c) The Contractor shall provide executive CM secretariat support for boards. The secretariat shall provide CM guidance to the board chairs and assure CM requirements are being followed.

(d) The Contractor shall assess CM control products (plans, procedures, work instructions, standard operating procedures, policies, document repositories, and CM tools) to ensure that the CM requirements to support the Governance processes are met.

4.1.4.1 Policy/Document Management Support

(a) The Contractor shall assign document numbers, distribute published documents, ensure compliance to document control procedures and standards, and maintain objective evidence of document approval by proper authority.

(b) The Contractor shall manage and maintain the centralized repository for documents.

(c) The Contractor shall serve as primary point-of-contact for quality systems master list matters, administer the Master List, and conduct training classes for ISO master list custodians.

(d) The Contractor shall ensure that requested information is provided within schedule guidelines and establish, document, and maintain a process to control all ISO System Level Procedures.

(e) The Contractor shall coordinate periodic document reviews as requested by task order.

4.1.4.2 Policy/Documentation Analysis Support

(a) The Contractor shall review new or revised NASA policy, JSC policy, OMB policy, and other policies as appropriate.

(b) The Contractor shall facilitate the drafting of revisions to existing policy and the creation of new policies.

(c) The Contractor shall provide technical assistance in the development of the policy/documentation waivers.

(d) The Contractor shall provide assistance in processing policy and waivers through the Agency and JSC processes.

(e) The Contractor shall review, evaluate, and recommend the disposition of

Policy/Documentation change requests (CRs).

(f) The Contractor shall facilitate the development and revision of the policy waiver forms and policy waiver requirements.

(g) The Contractor shall provide weekly management reports of policies and associated actions and CRs.

(h) The Contractor shall maintain a log that includes the status of IT waivers.

(i) The Contractor shall facilitate the auditing of waivers by identifying expired waivers and ensuring the appropriate action is taken to assist the appropriate organization bringing configurations into compliance.

4.1.4.3 Change Processing and Meeting Support

(a) The Contractor shall prepare/distribute meeting agendas electronically, schedule meeting rooms and related facilities including video and telecommunications services, security processing of meeting visitors, and provide electronic minutes and related meeting materials, C-13 provide real time meeting support, and tracking of action items for meetings defined by task order.

(b) The Contractor shall operate the CR, Change Evaluation (CE), Directive, and Action processes.

This includes a closed-loop process for electronic distribution, logging, tracking, and archiving for those products.

(c) The Contractor shall assist the Government by consolidating organizational change evaluations.

4.1.4.4 CM Status Accounting Support

The Contractor shall utilize electronic data management tools and processes to provide CM status accounting for control and tracking of processes, requirements, assets, and hardware and software design products.

4.1.5 CPIC Support

The Contractor shall support CPIC for organizations within JSC. The specific support to be provided in this area will be defined by task orders.

(a) The Contractor shall support the JSC IT planning process by assisting organizations in developing their yearly IT plans in conjunction with their CPIC inputs. The Contractor shall build and populate the organization’s IT planning data base with IT planned expenditures for the upcoming fiscal year.

(b) The Contractor shall support organizations in generating their annual Summary Investment Business Cases (SIBCs). The Contractor shall support the Center’s annual data call for SIBCs and any required analysis to support deltas from previous year’s submittals.

(c) The Contractor shall assist organizations in completing requests for data/information from NASA Headquarters or other Federal Government entities.

4.2 ENTERPRISE ARCHITECTURE (EA)

The Contractor shall support the development of JSC’s EA in accordance with NPR 2830.1, NASA Enterprise Architecture Procedures. JSC’s EA will support the specific goals and objectives of the Center and integrate with Agency Enterprise Architecture goals. The Contractor shall support development of EAs for organizations within JSC. The specific support to be provided in this area will be defined by task orders.

(a) The Contractor shall provide expertise in EA Development, IT Portfolio Management Integration, EA Review Support, Response to Agency Actions and Business Architecture Services.

(b) The Contactor shall collect baseline information on an organization’s business activities, data, and supporting applications and technologies and will document the current business and IT environments in the organization’s repository. The Contractor shall document the relationships between the business processes and the technology assets.

(c) The Contactor shall assist an organization in developing a “desired” business and IT environment by documenting, modeling, and analyzing the broad range of artifacts and relationships to identify opportunities for streamlining, collaboration, and consolidation. The Contractor shall document the desired business and IT environments.

C-14

(d) The Contactor shall maintain the artifacts of the current business and IT environments in the organization’s repository.

(e) The Contactor shall complete a gap analysis between the current and desired business and IT environments. The Contractor shall develop transition plans as a result of the gap analysis.

4.3 PROJECT MANAGEMENT

(a) The Contractor shall provide project management support, expertise, and leadership consistent with industry standard (Project Management Professional or “PMP”) certification requirements; however, PMP certification is not required.

(b) The Contractor shall follow NPR 7120.7, NASA Information Technology and Institutional Infrastructure Program and Project Management Requirements, JSC 66562, IRD Project Management Procedure, and NPR 7123.1, NASA Systems Engineering Processes and Requirements where applicable or as directed by task order.

(c) The Contractor shall use the NASA Software Estimation Process for Class A, B, or C software (per NPR 7150.2, NASA Software Engineering Requirements). The Contractor shall tailor the process as guidelines allow to minimize costs.

4.3.1 Planning and Integration

The Contractor shall perform integration across contractual and intra-organizational functional areas. Planning and Integration shall involve all disciplines of the contract.

4.3.2 Deliverables and Metrics

The Contractor shall deliver project plans and metrics to the Government in accordance with DRD-8 Project Plans, unless otherwise defined by task order.

(a) For ERO sections, the Contractor shall develop a metrics plan to evaluate implementation and success of projects, activities and events implemented to reach the goals defined in the ERO Strategic Approach or as specified by task order. NASA will review and approve plans prior to implementation and as needed.

(b) Metrics to support ERO’s Monthly Metrics shall be provided on a weekly basis in the Government-provided format.

4.3.3 Project Performance Monitoring and Status Reporting

The Contractor shall report to the Government the status of requirement changes, implementation progress, schedule variations and cost projections for all projects as defined in the task order.

4.3.4 Technical Expertise Assistance

The Contractor shall be responsible for providing recommendations for improvements and efficiencies in the areas of solution and systems-based engineering, infrastructure, multimedia, custom workstations, applications, data management, and others as defined by task order. This service will be provided based on financial, analytical, and business process acumen and best practices.

4.4 SOLUTIONS ARCHITECT SERVICES

The Contractor shall recommend solutions that span across business strategies, technologies, architecture, and platforms (e.g., mobile, physical, and cloud).

C-15

The Contractor shall have a strong understanding of the business processes supported, products and services offered and implemented across the contract and shall recommend solutions that span across those products and services.

4.5 INTEGRATED SERVICE MANAGEMENT (ISM)

The Contractor shall develop overall Integrated Service Management (ISM) strategies for the Government, and both facilitate and support the implementation and operation of these strategies, once approved by the Government, as defined by task order. ISM ensures that services provided under this SOW are aligned with the needs of the Government and its customers. This includes recommending approaches:

(a) by which groups of services can be bundled;

(b) for end to end service delivery; and

(c) that integrate quality assurance with service delivery.

4.6 INTEGRATED SERVICE CATALOG

The Contractor shall provide assistant services for the creation, integration, and maintenance of a service catalog as directed by task order. This function may incorporate the COMIT service catalog as well as additional products and services.

4.7 CIO POLICY COMPLIANCE SUPPORT

The Contractor shall assist the Government with implementation and enforcement of both Center and Agency IT policy as defined by task order.

4.7.1 Web Site and Application Registration Process Support

(a) The Contractor shall facilitate or assist in the completion of Web registration processes through the System for Tracking and Registering Applications and Web sites (STRAW).

(b) The Contractor shall complete the STRAW registration form and obtain the necessary signatures.

(c) The Contractor shall generate reports from STRAW as requested.

4.7.2 Privacy Compliance Support

Under the oversight and guidance of the Center Privacy Act Manager (PAM) and in accordance with NPR 1382.1A, NASA Privacy Procedural Requirements, the Contractor shall support the enforcement of compliance with the Privacy Act of 1974, the privacy provisions of the Electronic Government Act of 2002, the Children’s Online Privacy Protection Act (COPPA), and the OMB guidance on privacy.

(a) The Contractor shall complete JSC responses to privacy related data calls and audits to assist the Government in meeting all requests from NASA Headquarters and other federal Government entities (OMB, Office of the Inspector General (OIG), Office of Personnel Management (OPM), etc.).

(b) The Contractor shall support the completion of Information and Privacy Threshold Analyses (IPTA) and Privacy Impact Assessments (PIAs) as described in NPR 1382.1A for Center organization IT systems and applications.

(c) The Contractor shall support the completion and publication of System of Records Notices (SORNs) as described in NPR 1382.1A for identified Privacy Act Systems of Records.

C-16

(d) The Contractor shall support activities related to reducing JSC’s use of personally identifiable information (PII) and eliminating its use of social security numbers (SSNs) as described in NPR 1382.1A.

(e) In the event of a suspected or actual security breach affecting PII, the Contractor shall support activities associated with the Center’s Breach Response Team (BRT) related to matters associated with privacy.

4.7.3 Section 508 Compliance Support

Section 508 of the Rehabilitation Act of 1973, as amended (36 CFR Part 1194, Electronic and Information Technology Accessibility Standards) requires access to Federal employees and the public to electronic and information technology provided by the Federal agencies. Federal agencies must ensure that technology is in compliance with Section 508 to the extent that it does not pose an “undue burden”.

(a) The Contractor shall support activities associated with Section 508 of the Rehabilitation Act at the JSC. This includes working with JSC organizations to complete a periodic Section 508 self-evaluation survey from the Department of Justice (DOJ) and assuring that these organizations fully comply with Section 508 when developing, maintaining, and procuring new electronic and information technology (E&IT) products and services.

(b) The Contractor shall provide guidance to and assist JSC organizations in determining whether an E&IT product or service under review complies with the technical standards of Section 508.

4.8 BUSINESS DEVELOPMENT SUPPORT

(a) The Contractor shall coordinate with the senior level leaders of the requiring organization to provide business development support which demonstrates significant understanding and knowledge of technical and business strategies as well as the requiring organizations’ products and services. In this role, the Contractor shall represent the requiring organizations’ products and services.

(b) The Contractor shall serve in a key opportunity role by collaborating with the Government and its customer organizations to identify new business prospects, new partnerships, new ways to reach existing customers and clients, new product or service offerings to better meet the needs of existing customers and clients, and promote those opportunities to gain more business for the requiring organization.

(c) The Contractor shall design and draft proposals, on behalf of the Government, for potential customers and clients that demonstrate understanding of current events and trends within NASA and at JSC and that incorporate industry best practices for similar type work in order to…