J-01 FS3i_Base_PWS_v9_01022026.docx

Performance Work Statement (PWS)

For

Foundation Sustainment Support, Software and Integration (FS3i)

May 22, 2025Version 4.0

Version 1.0

Initial release

Table of Contents

Purpose This Performance Work Statement (PWS) describes the technical services required to support the National Geospatial-Intelligence Agency (NGA) Foundation Geospatial Intelligence (GEOINT) (FG) Information Technology (IT) systems. The Foundation Sustainment Support, Services and Integration (FS3i) contract vehicle will establish the acquisition framework for delivering the full scope of information technology capabilities to support the IT operations of the Mapping, Charting Geodesy (MC&G) for the Foundation Integrated Program Office (IPF) and the FG capabilities in support of the NGA’s Source Operations & Management Directorate's Foundation GEOINT Group (SF) and the Source Information (ST) Group. SF’s FG mission areas include Aeronautical, Maritime, Topographic, Geopolitical Geography (to include Human Geography (HG), Political Geography, and Names, Places and Boundaries), Elevation, Geodesy (e.g. Global Positioning System (GPS), Soils, Surveys, and Gravity), and Controlled Imagery. ST mission areas include but not limited to content management and dissemination of the source data and products to users across the NGA enterprise.

MC&G mission IT capabilities are defined throughout FS3i documentation as Systems, Subsystems, Applications, Features, Services, and Data management.

This contract is designed to be flexible in satisfying total SF and ST IT requirements, work within existing NGA IT infrastructure, complement and support other NGA efforts, and adapt to new and emerging requirements as new MC&G missions evolve, and cutting-edge technologies become available.

Background The mission of NGA is to provide timely, relevant, and accurate GEOINT to policy makers, the Intelligence Community (IC), Department of War (DoW), and other federal agencies, academia and partners in support of national security goals. The collection, analysis and interpretation of FG data support intelligence, defense, and commercial needs. Current Source FG production methods were developed over many years and are unique to each specific FG mission area. Current and future demands for FG mission modernization necessitates continual iterative improvement to NGA’s operational production and dissemination environments.

GEOINT encompasses imagery, imagery intelligence, and geospatial information, which is also known as Foundation GEOINT (FG). FG exists mainly in the forms of attributed vectors and surface models, data applications and services.

Scope The FS3i Contractor provides the services in the six IT categories listed below. Additional detailed information is described in Section 6 of this PWS. FS3i will issue multiple Task Orders, each representing their unique FG domain requirements in support of NGA mission and consumers worldwide.

This contract has six service categories:

· Software Development: Software development services to deliver new capabilities supporting the Foundation GEOINT (FG) baseline.

· Integration: Integrate solutions delivered by the individual system development teams (i.e. by other vendors or entities outside of the FS3i program) into the (FG) enterprise production environment. These may include both Government-Off-The Shelf (GOTS) and Commercial Off-the-Shelf (COTS) capabilities / services.

· Software Maintenance: Corrective, Adaptive, Preventative, and Perfective maintenance in support of FG capabilities in operations.

· Operations Support: Services supporting the (FG) operational baselines and daily-production activities.

· Foundation GEOINT Information Technology Procurement: Acquisition, engineering, integration, maintenance and warranty support of select IT hardware in the FG enterprise.

· Foundation GEOINT COTS Software Procurement: Acquisition, engineering, integration, maintenance and warranty support of select software in the FG enterprise.

Current Environment and Constraints The FG environment consists of services and systems used by Government, military, academia, international partners and Contractor customers. These customers are primarily located at NGA’s NCE and NCW facilities but are also deployed throughout the world. The capabilities are provisioned on TOP SECRET, SECRET, and UNCLASSIFIED security domains, as well as the World Wide Web. While the FS3i contract work is spread across all security domains, individual task orders will identify baseline capability requirements by environment, networks, and security domains.

The FS3i Contractor will be the primary Integrator for multiple Government and contract capability development teams for the various discrete FG capabilities and systems. To do this, the FS3i Contractor is required to use a Scaled Agile Framework (SAFe) technical approach to Sustainment services. This approach is detailed in the Government provided IPF Capability Delivery SOP. The SOP is authoritative across all IPF modular contracts and the FS3i Contractor reviews, comments, and complies with all Government policies.

The FS3i will be dependent upon multiple NGA Infrastructure Service Providers and enterprise service providers, including but not limited to: the NGA Cloud Program Management Office (PMO), NGA NCE and NCW data centers and their contract support teams, NGA cloud service providers, NGA Identity Management GeoAXIS service, Open Data Store (ODS), GEOINT Search and Retrieval (GSR), GEOINT Visualization Services (GVS), Common Operations Release Environment (CORE), and Enterprise Cross-Domain Services (ECDS). The FS3i Contractor will also leverage existing NGA IT management providers including, but not limited to, Software Asset Management (SAM), Enterprise Service Management / Help Desk (ESM), Enterprise Audit, and Enterprise Certification & Accreditation (C&A).

The FS3i Contractor will provide capabilities and services for Foundation GEOINT in compliance with the NGA Software Way, IPF Capability Delivery SOP, IPF Software Solution Stack Standard, NGA Technology Strategy, and the NGA Acquisition Design Elements (ADEs). To the greatest degree feasible, given considerations for cost, schedule, and performance, the Contractor will use the NGA CORE services and capabilities. This includes the NGA's enterprise-managed DevSecOps environment. The preference is to use techniques or methodologies such as Agile, API-first, and/or adaptive maintenance on each of the available security domains. When not specified, the data shall be provided in a mutually agreed upon format. Additional enterprise-managed elements have been listed for consideration when applicable.

The Contractor will also follow The NGA Software Way to deliver software products designed and built with users, are able to be automatically updated in production, and use product-specific metrics for actions / decisions, including, but not limited to:

1. Version Control: The team shall provide all service, application, software source code (new, modified, or sustained), and metadata in NGA approved format, as specified. The data shall be stored in NGA's enterprise-managed version control (e.g. GitLab).

2. Continuous Integration / Continuous Delivery (i.e. Automated test, build, and deployment): The team shall automatically test, build, and deploy all service, application, software code, and metadata in NGA approved format, as specified. The data shall be stored in NGA's enterprise-managed automated deployment service (e.g. GitLab CI) and NGA's enterprise-managed work tracking tools (e.g. Jira, Confluence).

3. API Registry: The team shall document APIs using machine-readable documentation, and document related API metadata in an NGA approved format, as specified. This data shall be stored in NGA's enterprise-managed Registry (e.g. Kong).

4. Work tracking: The team shall document code changes and product decisions, as specified. This data shall be stored in NGA's enterprise-managed work tracking tools (e.g. Confluence, Jira). The team shall structure work in a consistent, actionable format. Product decisions are justified and documented within NGA's enterprise-managed collaboration and work tracking tools (e.g. Confluence, Jira).

5. API Gateway: The team shall register API endpoints in the manner specified. This data shall be stored in NGA's enterprise-managed API gateway (e.g. Kong). Note: Registration of endpoints is different from Registry documentation. Registration excludes internal, team-only endpoints.

6. Platform-as-a-service (PaaS): The team shall deploy their application(s) to the desired environment(s) using NGA's enterprise-managed Platform-as-a-Service (e.g. OpenShift).

7. Continuous Monitoring (CORE Continuous Monitoring; Enterprise Operations): For teams using NGA's enterprise-managed version control and automated deployment service, the team shall utilize NGA CORE's Continuous Monitoring service to monitor their product-specific lead time for changes and deployment frequency in production environments. The team shall use Enterprise Operations (TO) services to monitor their product-specific availability in production environments.

8. Workflow Orchestration: The team shall utilize NGA's enterprise-managed workflow orchestration (e.g. Argo) to automate task, workflow, and job creation, as well as binding workflows to event sensors to trigger workflows based on asynchronous message traffic or ad-hoc API calls.

9. Messaging and streaming: The team shall utilize NGA's enterprise-managed messaging (e.g. Pulsar) to asynchronously communicate between services and facilitate producers to publish messages to a queue and one or more consumers to subscribe to message traffic on the queue.

10. Deeply understand user needs: The product manager, designer, and software team shall engage with real and/or expected users to identify and understand users’ underlying needs, as well as learn how the software product or service will fit into users’ work. That information must be recorded in NGA's enterprise-managed collaboration and work tracking tools (e.g. Confluence, Jira).

11. Prioritize rapidly delivering value to users: The team shall define and share a minimum viable product (MVP) in NGA's enterprise-managed collaboration and work tracking tools (e.g. Confluence, Jira). The team must break down the MVP into actionable work items that are easily understood by the entire team. The team must gather feedback from real users as early as possible using mockups or interactive prototypes.

12. Provide support mechanisms: The team shall provide ways to respond to user reports. Support issues should be tracked and follow a tiered model, making it back to the development team for further assessment and prioritization by the product manager in the backlog. Defect or issue status in the team’s work tracker must be available to other NGA teams, users, and customers for transparency.

13. Automate monitoring: The team shall grant visibility into how a product is working through application performance monitoring (APM). White-box (internal telemetry — metrics, logs, traces) and black-box (external behavior) monitoring shall be automated and continuously running.

14. Automate Alerting and Incident Response: The team shall have automatic alerts to notify an on-call engineer and Enterprise Service Center as well as integrate with NGA's enterprise monitoring tools.

15. Use data to drive decisions: The team shall incorporate tools and continuous ways to measure how a product is performing for users and meeting their mission needs (e.g. NGA's enterprise-managed feedback collection tool and analytics platform).

16. Iterate and improve continually: The team shall document and respond to changes in user needs, technology, or Government policy throughout the lifetime of the product to make substantial improvements within term limit of the contract.

The FS3i Contractor must assess and validate all systems, hardware, software, software engineering, and information technology associated with this effort to comply with all the relevant Federal Government, DOW, and NGA policies and standards to include, but not limited to, those listed in Appendix C.

The FS3i Contractor will report labor in the WBS Structure as outlined in Appendix B. Note that Program Management is embedded within each service category and is not a separate category to itself. The WBS aligns to the service categories as follows:

Figure 3.1: Top Level FS3i WBS Structure The Contractor will ensure that all systems, hardware, software, software engineering, and information technology associated with this effort is made in a manner that is accessible for people with the standards for people with disabilities as directed in NGA Instruction 8400.4 and Section 508 of the Rehabilitation Act of 1973 as amended in 1998 (Section 508). Specifically, all Electronic and Information Technology (EIT) associated with Foundation GEOINT Services, may use the Web Content Accessibility Guidelines (WCAG) 2.0 to comply with Section 508 or use alternative designs or technologies which result in substantially equivalent or greater access to and use of the product for people with disabilities. Furthermore, the Contractor will pursue human centered design and usability guidelines to ensure that all services associated with this PWS are accessible by as many users as possible and as a means to drive modernization, innovation, and enhance mission support.

Services Categories FS3i base contract level requirements provide general services that can be used across Task Orders (TOs). A TO would require one or many of the services listed below based on its specific requirements. Common activities and services will be combined to maximize efficiencies, drive process improvements, eliminate service overlaps, and realize cost efficiencies to the Government. The Contractor effectively manages and transforms these core functional areas and the associated services to deliver IT strategic advantage and best-value to the Government.

The FS3i Contractor will assume responsibility in the sustainment of FG COTS, Free and Open-Source Software (FOSS), Contractor/Government developed code, and GOTS environments and software baselines as defined in each individual task order that will be developed under this base contract. The FS3i Contractor provides, Software Development, Integration, Software Maintenance, and Operations Support services including both cloud/non-cloud and classified/unclassified capabilities.

The FS3i Contractor will also provide Foundation GEOINT IT Procurement and Foundation GEOINT Software Procurement services to support the acquisition of IT that supports FG capabilities. The Government may have the FS3i vendor procure software and hardware in lieu of the NGA SAM or other enterprise common IT services, not limited to cybersecurity management, configuration management, and architecture management, in the event they are unable to support the FS3i requirement. Collectively, these requirements will be referred to as “Software COTS Procurement and Common Services”.

Services The services listed in this section may be added a la carte to the individual task orders and may be applicable to any of the six service categories. They are contracted for, and managed, at the task order level. Reporting and traceability of the services is done via the WBS structure described in Appendix B. Contract deliverables associated with the service are defined and managed in the individual task orders.

System Performance Optimization Services to coordinate with developers and enterprise service providers to analyze system metrics and develop recommendations to improve performance. Example areas include, but are not limited to, modifications to provisioning environments, selection of computer processors, choice of memory size and type, selection of data storage solutions, transport connection modifications, choice of database solutions, and software architecture modifications. These recommendations are delivered to the Government for assessment and implementation by supporting Contractors, development teams, or external service providers as appropriate.

Software Library Management Services to manage and maintain a master Software Library for the installed FG baseline. The Software Library contains the gold copy source code, or COTS licensing information and installation packages (as appropriate) for all software in the production baseline. It includes coordination with the Government Project Management Office to provide advance notice on impacts to COTS licenses, upcoming releases, and system/application impacts that may require changes in license management.

Configuration Management Services to provide configuration management control of the hardware and software provided in each release for the IT systems supported by the Contractor and could include those delivered by the discrete development teams. The processes and procedures must be consistent with the NGA Configuration Management Plan (NCMP) and industry best practices.

Automation Services to implement automated solutions where relevant. It includes collaboration with developers to automate continuous integration/continuous deployment (CI/CD) in the FS3i environments on each security domain. Additionally, it includes evaluation of solutions and services for automation opportunities and making recommendations to the Government. The Contractor creates and implements methods to automatically deploy existing or newly identified capabilities where the FS3i Contractor has direct control and responsibility. Coordinate and collaborate with the development teams to produce solutions that are fully automated from a provisioning and deployment standpoint. Produce deployment instructions for all baselines.

Release Management Services to manage the FS3i release activities in accordance with the Government provided Capability Delivery SOP. The Contractor functions as the lead to collaborate with the individual development team Release Trains to plan, integrate, stage and release new/updated capabilities from the FG development efforts into the test and operational baseline. Release Management includes facilitation of the FS3i release train processes and execution to include risk management ensuring value delivery and driving continuous improvement to the FG services. The Contractor facilitates and coordinates release planning with all Government and Contractor stakeholders, to include developers. The Contractor also manages, produces, updates and delivers the Release Calendar.

Backlog Management Services to manage and maintain the overall master Backlog. The Contractor must follow the Agile Continuous Planning Model (CPM) to update and maintain the prioritized backlog for all existing FS3i capabilities and services. The preferred solution for this is the Atlassian JIRA software. The service provides Atlassian JIRA as the common requirements system for all supported Developers/Release Trains. The backlog is accessible in real time and shared with the Government, the FG development Contractors, and the FS3i Contractors. Provide Backlog Grooming to maintain and update the prioritized backlogs.

Government Readiness Reviews Services to report the technical assessment and status of FS3i readiness of a supported development efforts for the Government’s Test Readiness Reviews (TRR), Operational Readiness Reviews (ORR), and other Readiness reviews as needed.

Continual Service Improvement (CSI) / Business Process Reengineering (BPR) Services to define and implement standard CSI processes and continuously collect data related to the services process streamlining, quality of the user experience, system performance, and or cost savings. CSI approaches, methodologies and techniques are documented to allow evaluation and assessment of effectiveness of the approach chosen. BPR may also be needed to streamline business processes. The Contractor applies the selected CSI approach to Agile processes emphasizing periodic “stop, inspect, improve” as a process with the following goals:

· Improve customer experience

· Improve system performance

· Decrease deployment cycle time

· Reduce system and cloud costs

· Improve time to market delivery

Value Engineering Change Proposal (VECP) Services to provide a business case with supporting data that details a proposed value engineering change to the MC&G enterprise. The focuses of this effort are to:

· Identify opportunities for system / subsystem consolidation and streamlining.

· Introducing automation to eliminate manual processes or improve efficiency in MC&G production via improvements in the various MC&G applications and services under this contract.

· Introducing automation to eliminate manual processes or improve efficiency in the Contractor’s workflows to support the requirements of this contract.

· Introducing AI/ML technologies to improve the mission value obtained from the various MC&G applications and services under this contract.

· Introducing AI/ML technologies to improve the value obtained from the Contractor’s efforts to support the requirements of this contract.

· Identifying focused technology improvements in the legacy solutions to increase the mission value obtained from the various MC&G applications and services under this contract.

The Contractor defines processes and continuously collects data related to the service categories in this IDIQ, and the systems / subsystems / capabilities supported therein. The Contractor presents the business case with analysis and proposes efforts in a change proposal to the Government Program Management Office (GPMO).

Request for Change (RFC) Management Services to review and prepare responses to RFCs. The Contractor provides system impact assessment with a summary of technical and cost information that impact the backlog and software baseline in accordance with NGA’s RFC process.

DevSecOps Management Services to execute all the processes required for delivery of new/updated software baselines from one environment to the next to expose the capabilities/services to the users for testing and deployment into operations. The Contractor procures, provides or enables, as appropriate, DevSecOps services and capabilities to the individual development teams where applicable and feasible.

Demonstration Support Services to support, provide or participate as appropriate, in demonstrations of FS3i provided capabilities and services.

Test Support Services to support, provide or participate as appropriate in test to evaluate functional and non-functional requirements. Support integration, developer, and user testing in test environments in support of DevSecOps processes. These processes support developer’s testing, FS3i integration testing, and Government user’s testing to support NGA’s Readiness processes such as Independent Verification and Validation (IV&V). Provide supporting documentation for the Government’s Cert to Field process for newly delivered capabilities. Provide test support to users for the Government’s NGA’s Testing Organization (NTO) assisted-service process and execution of the Government’s User Acceptance Testing. The Contractor coordinates with the developer and Government Product Owner to produce test plans and supports testing to assess reliability, availability, maintainability (RAM) sustainment requirements and other non-functional requirements for IT platforms and IT enterprise services architecture integration.

Training Services to develop and provide training to support end user familiarization and proficiency with FS3i capabilities and services.

Knowledge Management Services to manage an unclassified or classified, or both Atlassian JIRA / Confluence and Microsoft SharePoint capabilities and manage accounts to support collaboration and information sharing between FS3i, GPMO, and development teams. This repository is available to all development teams to capture information and lessons learned related to development of any FG-related system, service or capability. The Contractor maintains an Intellipedia site on classified and unclassified networks where the FG services and capabilities information will be made available and can be shared. Services to perform content curation.

Corrective Maintenance Software Maintenance services to correct deficiencies in the software code baseline. This includes the delivery of a new software code baseline, and is not limited to:

· Fixing minor application bugs, including system restarts

· Reconfiguring COTS for specific user / use case errors

· Working with ISP, Cloud Service Provider (CSP) and other system admins to resolve Discrepancy Report (DR) causes by external factors that arise in non-FS3i capabilities

· Fast, one-time fixes that do not involve agile software development, backlog creation, or using the more formal development and sustainment processes described in other service definitions.

· Analysis of Software License status, renewal and terms, and identification of risks/issues arising thereto with current or future use.

Adaptive Maintenance Software Maintenance services to adapt existing solutions to a change in the provisioned environment. It is primarily where a development or software maintenance team no longer exists, but the capability must continue to be provided by FS3i. This includes the delivery of a new software code baseline, and is not limited to:

· Changes to infrastructure or middleware on which the capability is provisioned

· Changes in software dependencies or supporting software (e.g. Net framework, JAVA versioning, supported web browsers)

· Identify Software License issues and provide change recommendations

Preventive Maintenance Software Maintenance services to proactively prevent future capability deficiencies that are known to be pending. It is primarily where a development or software maintenance team no longer exists, but the capability must continue to be provided by FS3i. This includes the delivery of a new software code baseline, and is not limited to:

· Preparing for Operating System deprecations

· Removing obsolete functions from the capability baseline

· Recoding and recompiling legacy source code from deprecated languages

· Removing unsupported dependencies that no longer have current vendor / developer maintenance

· Prepare and record any Software Licenses risk or issues

Perfective Maintenance Software maintenance services to perfect the installed baseline for optimal operations and performance, and to comply with relevant policies and directives. It is primarily where a development or software maintenance team no longer exists, but the capability must continue to be provided by FS3i. This includes the delivery of a new software code baseline, and is not limited to:

· Security patches and hot fixes

· Operating System and support software updating

· Fixing source code to prevent outage or triggering incidents (e.g. malformed error handling in the source code, logic flaws in error management, substandard code documentation, suboptimal deployment packaging)

· Determining the required amount of Software Licenses and the replacement requirement

Help Desk and Desk Side Support: Tier I Support Services to provide Comprehensive Tier I Help Desk support for all development and production environments. The Contractor’s approach must meet NGA’s Enterprise Management’s requirements for monitoring policy. It must also integrate with, and not be duplicative of functions of, the NGA Enterprise Service Center’s (ESC) Tier 1 solution for incident support and reporting of continuity of operations and operational inter-dependencies across the NSG. It must also utilize, and not be duplicative of the functions of, the NGA Service Management Solution (Service+) to support FS3i providing Service Request Management, Change Management, Incident Management, Knowledge Management, Configuration Management and IT Asset Management to the level of implementation as directed by the Government. The solution must enable all the relevant ESC/Service+ features to provide a comprehensive implementation that supports all stakeholders for all development and production environments.

Help Desk and Desk Side Support: Tier 2 Support Services to provide Tier 2 Help Desk support to monitor and administer the FS3i operational baseline to include, but not limited to, the software baseline, load balancer configurations, firewall configurations, and database configurations.

The Contractor provides a Tier 2 support structure that leverages Enterprise Management and FS3i provided monitoring to support response efforts to cover the sustainment of all aspects of FS3i in operations. This support ensures the FS3i services are available to mission customers and can execute to their designed functionality and performance levels at the availability and reliability per the performance specifications. Tier 2 operations support covers custom code, COTS, and database configurations (e.g. tables, indexes, views) specifically developed and tailored for accessibility of FS3i services. Tier 2 operations support includes activities such as:

· FS3i services monitoring

· Initial issue response

· Metrics analysis and discrepancy resolution

· Database administration

· Application startup/shutdown

· Application software deployment and other mission application oriented preventative maintenance necessary to meet availability/reliability requirements

· Tier 1 ESC (Enterprise Service Center) and Enterprise Management Office support to resolve user generated questions/problems and operational incidents

· Incident and DR/Problem Investigation (PBI) management

· Coordination with FS3i service consumers

Tier 2 operations support also includes support to NGA operational management forums external to the program to support operation and problems status reporting and outage request management (e.g., coordinating outages through NGA operational outage boards). Tier 2 provides standing notifications as needed, during and after normal business hours, when Priority 1 or other urgent Priority incidents/problems arise with monitored system applications. The Contractor’s approach must integrate relevant services with NGA’s Service+ modules and provide operational dashboards with metrics on the operational support actions and system activity.

Help Desk and Desk Side Support: Tier 3 Support Services to provide Tier 3 Help Desk support to operations for Priority 1 and 2 DRs and other DRs as prioritized by the Government.

Incident Tracking Services to submit and track incidents (INCs), PBIs, and DRs in accordance with NGA’s Incident Response process for Incident management workflow and response time SLAs as minimal requirements needed for Incident management support required. The Contractor’s approach must utilize the NGA Service+ support tool for initiating and tracking the status of INCs and PBIs, lead Root Cause analysis investigations for repeating pattern of Priority 1 and 2 Incidents or emergency/urgent PBI/DRs. The Contractor provides a cross reference for every INC in the supporting tasks documented in JIRA.

Discrepancy Report Investigation Services to implement a process for Discrepancy Report investigation and tracking at assumption of control of Operations. The process must be in compliance with applicable Contractor and NGA configuration management plans. The Contractor provides discrepancy investigation and evaluation for outages/degradations of any FS3i managed services IAW NGA policy.

0. System Performance Services to operate and maintain the FS3i capabilities and services to meet the individual operational performance requirements defined in the individual task orders.

0. Services Status / Status Tracking Services to provide continuous monitoring of the health and status of the FS3i test and operational environments during their designated operating hours, and report on operational status to include availability and quality of services required to make the FS3i capabilities/ services operate. The Contractor’s approach must comply with relevant NGA Operations guidelines. The Contractor’s approach must provide automated, dynamic Operational Status dashboards that shows all capabilities, services, and database/data storage status currently provided or consumed by FG production development efforts or operational capabilities. Technical issues related to any system capability Recoverability, Availability, and Maintainability (RAM) are documented on an industry standard Root Cause Analysis form, kept in the Software library, documented in the Service + system, and the proper messaging and notifications must be made from the FS3i Contractor leadership.

0. Metric Collection and Analysis Services to collect, conduct and report on system and capability performance and operational status metrics (system performance dashboards and system operational status dashboards) in accordance with the Capability Delivery SOP and other relevant processes and principles. The Contractor provides continual analysis of all environments to identify ways to optimize performance and manage cloud costs. This includes providing periodic reports to the sustainment GPMO on status of data storage and cost, processing optimization and cost, and availability, usage, and cost reports for every system, service, or capability. The Contractor may also provide other additional ad-hoc cloud usage reports to the sustainment GPMO as required.

Services to collect, analyze, and report on web usage data in accordance with NGA Instruction 8955.6 and OMB Memorandum M-17-06. The Contractor provides continual analysis of web data on all environments to measure web traffic and identify ways to optimize web usage. This includes providing periodic reports to the sustainment GPMO on status of web traffic / usage. The Contractor provides other additional ad-hoc web traffic/usage reports to the sustainment GPMO as required.

0. Cyber Security Services for all environments and domains to ensure compliance and support all necessary Assessment and Authorization work for the delivered FS3i services, to include software scans. The Contractor’s approach must follow NGAM 8010.1, Information Management Systems (IS) Risk Management Framework (RMF) Guide and adhere to ICD 503 for the Assessment and Authorization of the newly delivered FS3i services.

Additionally, services to support the NGA Information Assurance Vulnerability Assessment (IAVA) process to ensure FS3i sustained components stay compliant with A&A standards, while continuing to meet stated availability/reliability requirements. The Contractor’s approach must adhere to NGA vulnerability response timelines, in concert with Government priority direction and to the extent practical to not unduly jeopardize mission system availability/reliability.

Additionally, services to provide cybersecurity and information assurance services that enforce, comply with and support the DoW, NGA and IC cybersecurity and IA security directives for individual operational deployments of existing and new capabilities.

Additionally, services to monitor and improve DevSecOps processes, developed in collaboration with the development teams and NGA Security.

Additionally, services to generate and maintain the required documents in accordance with Federal Information Security Management Act (FISMA) and ICD 503 series regulations and instructions. The Contractor supports inspection requests and activities as necessary and mitigates/remediates FISMA findings within the specified period provided.

Authorized Outage Coordination Services to support coordination with the Government’s Outages Control Board to schedule the authorized outage necessary to deploy the integrated capability. The Contractor ensures all Operations Readiness Checklist pre-requisite activities have been completed in accordance with (IAW) NGAI 8500.2, Authorized Outages and Maintenance Activities. The Contractor supports coordination with the Government’s Outages Control Board to schedule the authorized outage necessary to deploy the integrated capability.

Decommissioning Services to prepare and execute Decommissioning Plan(s) in accordance with the Government’s decommissioning readiness checklist. Decommissioning includes, but is not limited to, all activities required to archive the system data, documentation and records; all work needed to remove the system software from its hosted hardware; all tasks required to turn in unneeded hardware and software licenses and the schedule required to execute the work within the required timeframe.

Provisioning Services Services to provision and maintain the environments required by the task order. The Contractor coordinates with FG development teams for changes and outages as required by NGA configuration and change management processes.

Information Technology Disaster Recovery Support (ITDR) Services to provide ITDR (also known as the Information System Contingency Plan (ISCP)) for all supported environments. The Contractor conducts and maintains an end-to-end comprehensive ITDR program to include but not limited to:

(1) Conduct end-to-end reviews of architecture, cloud engineering, RAM engineering, backups, fail-overs and process/policy to determine ITDR options for Government selection.

(2) Implement Government-selected ITDR options in the architecture and process changes through the sprint and release process.

(3) Prepare and maintain ITDR plans

(4) Enter information into the ITDR Continuity Planning Tool (CPT)

(5) Conduct/participate in ITDR exercises for operational FS3i capabilities.

Database Management Services Services for administering the mission domain geodatabases. These are used by viewers, editors and analysts in the FG customer base. Activities include but are not limited to troubleshooting geodatabase issues, replication issues, versioning issues, performance issues and proactive monitoring of the health and overall enterprise database environment. The Contractor assists with implementing and administering distributed data workflows to support external/disconnected production staff. The Contractor facilitates and executes upgrading and/or migration of enterprise geodatabases.

Additionally, the Contractor provides database architecture design following database architecture best practices for relational, Triplestore, and other database types.

Additionally, the Contractor provides Data Modeling services following Data Modeling best practices and NGA’s Data Modeling process and guidelines.

System Administration Services Services to perform all necessary system administration tasks in support of the FS3i capabilities and services. Services include, but are not limited to, documenting, operating, maintaining, deploying, and sustaining the FS3i capability/service environments, required input services and databases.

Enterprise Services Services to coordinate with the GPMO to document agreements with relevant enterprise service providers to assure sustained mission readiness for its customers. Services to coordinate the FS3i-specific role and consumption of Government enterprise services. FS3i will be dependent upon NGA enterprise services as described in Section 4.0 above. FS3i Contactor identifies requirements, and capability gaps and develops solution recommendations to meet FG sustainment and operation needs. The FS3i Contractor must collaborate with necessary parties to define enterprise service requirements for the Government to provide to the service provider. The Contractor coordinates and participates in enterprise service testing as required.

Requirements Management and Analysis Services to conduct requirements analysis associated with DRs, IAVAs and Request for Changes (RFCs). The Contractor leads backlog grooming activities to determine required tasks, integration support, identify long lead activities, and identify any required engineering tasks.

The Contractor documents the Government’s non-functional and IT requirements and decomposes, manages, and configuration controls the solutions from Agile Features and User stories throughout the Agile development process. The Contractor must document IT infrastructure and IT Enterprise service requirements to be developed, integrated, demonstrated, tested, and validated to ensure system platforms meet sustainment RAM non-functional requirements. The Contractor updates documentation for capabilities in Operations as IT and non-functional requirements are updated.

Cloud Engineering, Integration, and Management Services to provide engineering, design, and management of baselines deployed in the cloud to build, maintain, optimize, and efficiently manage cloud resources. The Contractor supports modernization, migration, and deployment of FG capabilities to the cloud. The Contractor may leverage Government provided cloud engineering resources, as available. The Contractor obtains the required data storage from Government provided service providers, optimize processing and cost, manage availability and usage, and provide estimates of future cost.

Engineering Services to provide the necessary engineering expertise and resources to plan, execute studies, manage and implement FS3i technical requirements and activities covered by this PWS consistent with the NGA System Engineering Plan (SEP) and industry best practices. The Contractor performs engineering management tasks associated with release planning in accordance with best practices and the IPF Capability Delivery SOP. The Contractor develops and provides to the Government, architectural Service Views that document the physical architecture for the implemented technical solutions for the FG capabilities being sustained in formats compliant with the IPF Architecture guidelines. These views are required to sustain a service-centric implementation of FG capabilities.

The Contractor must actively engage with FG service developers and Government architects to support the process to identify and document linkages between the physical service architecture views and the Government’s higher-level (logical and/or conceptual) architectural service views, up to the NGA Enterprise Architecture and NSG Architecture level. Establishing linkages between physical solutions service architecture and higher-level logical or conceptual service views is required to ensure alignment of solutions architecture with the Government’s overall enterprise architecture.

Technical Writing and Documentation Support Services to provide support in development and dissemination of technical documents, including analysis of Government functional and non-functional requirements, to document baselines.

Technical Library Services to provide a document registry and inventory control function for storage of all required CM controlled contract materials list for all delivered FS3i capabilities after each operational release. Activities of this task include, but are not limited to, establishing a SharePoint site, Atlassian Confluence, or Jira on SBU and NGANet and collecting/storing all applicable CDRLs, and other contractually required documents.

Transition-In Services to transition capabilities into the FS3i control from a legacy Integration / Operations and Sustainment service provider. The Contractor delivers transition-in plans and associated artifacts that details the process of capturing and transitioning all necessary information, equipment and personnel relating to transitioning of operations and maintenance support from an incumbent service provider to the FS3i service provider. The Contractor then executes the transition-in of the capability, in coordination with the legacy service provider, in accordance with the transition plan.

Transition-Out Services to transition capabilities out of FS3i control to a new service provider. The Contractor delivers transition-out plans and associated artifacts that details the process of capturing and transitioning all necessary information, equipment and personnel relating to transitioning of all required services from FS3i to an alternate service provider. The Contractor then executes the transition-out of the capability, in coordination with the successor service provider, in accordance with the transition plan.

Software Development Services to develop new capabilities that did not previously exist. This does not extend, adapt or modify existing services, which is covered under Adaptive, Perfective, Preventive and Corrective Maintenance (sections 6.16 through 6.19 inclusive). New capabilities will be developed via the Agile process, mirroring to the greatest extent practicable the Agile processes used in the four Maintenance service categories. All new developed capabilities will be done in accordance with the policies and best practices set forth in Section 4.0 – Current Environment and Constraints.

IT Hardware Procurement Services to procure IT Hardware. This service is used in lieu of other NGA enterprise hardware purchasing avenues, when those options are unable to meet the component, schedule, or quantity needed.

Software Procurement Services to procure Commercial Off the Shelf (COTS) Software. This service is used in lieu of other NGA enterprise software purchasing avenues, when those options are unable to meet the component, schedule, or quantity needed.

Innovation and AI/ML Services to integrate and implement innovative solutions within the scope of this contract, specifically requiring the incorporation of advanced automation, machine learning, and artificial intelligence (AI) technologies. The Contractor is expected to explore and deploy cutting-edge methodologies that enhance operational efficiency, streamline processes, and improve decision-making capabilities. In doing so, the Contractor will leverage automation tools to reduce manual effort and increase accuracy in task execution, while employing machine learning algorithms to analyze data patterns, predict trends, and optimize performance outcomes. AI solutions must be utilized to create intelligent systems capable of adapting to evolving challenges and delivering actionable insights. The Contractor must remain at the forefront of technological advancements, continuously identifying and integrating innovative approaches that align with the specified goals and objectives, thus driving substantive improvements in overall program effectiveness. The Contractor will provide recommendations and proposals for Innovation and AI/ML to the government.

Cost and Technical Data Report (CTDR) CDRL The Contractor will complete the Cost and Technical Data Report (CTDR) Spreadsheet in attachment (2) on this PWS. Attachment 1 contains a spreadsheet and a document outlining the instruction about how to populate the spreadsheet.

Unless specified otherwise, the data provider will deliver data annually at a pre-determined time agreed to by NGA’ Corporate Assessment and Program Evaluation (CAPE) and the program offices.

Program Management…